Oct 2 19:41:52.809218 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 19:41:52.809239 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 19:41:52.809247 kernel: efi: EFI v2.70 by EDK II Oct 2 19:41:52.809253 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Oct 2 19:41:52.809258 kernel: random: crng init done Oct 2 19:41:52.809264 kernel: ACPI: Early table checksum verification disabled Oct 2 19:41:52.809271 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Oct 2 19:41:52.809278 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Oct 2 19:41:52.809284 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:41:52.809289 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:41:52.809295 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:41:52.809301 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:41:52.809306 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:41:52.809312 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:41:52.809320 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:41:52.809326 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:41:52.809332 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:41:52.809337 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Oct 2 19:41:52.809343 kernel: NUMA: Failed to initialise from firmware Oct 2 19:41:52.809349 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:41:52.809355 kernel: NUMA: NODE_DATA [mem 0xdcb09900-0xdcb0efff] Oct 2 19:41:52.809360 kernel: Zone ranges: Oct 2 19:41:52.809366 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:41:52.809373 kernel: DMA32 empty Oct 2 19:41:52.809379 kernel: Normal empty Oct 2 19:41:52.809385 kernel: Movable zone start for each node Oct 2 19:41:52.809390 kernel: Early memory node ranges Oct 2 19:41:52.809396 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Oct 2 19:41:52.809402 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Oct 2 19:41:52.809407 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Oct 2 19:41:52.809413 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Oct 2 19:41:52.809419 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Oct 2 19:41:52.809425 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Oct 2 19:41:52.809431 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Oct 2 19:41:52.809437 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:41:52.809444 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Oct 2 19:41:52.809450 kernel: psci: probing for conduit method from ACPI. Oct 2 19:41:52.809456 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 19:41:52.809461 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 19:41:52.809467 kernel: psci: Trusted OS migration not required Oct 2 19:41:52.809475 kernel: psci: SMC Calling Convention v1.1 Oct 2 19:41:52.809481 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Oct 2 19:41:52.809489 kernel: ACPI: SRAT not present Oct 2 19:41:52.809496 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 19:41:52.809502 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 19:41:52.809508 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Oct 2 19:41:52.809514 kernel: Detected PIPT I-cache on CPU0 Oct 2 19:41:52.809520 kernel: CPU features: detected: GIC system register CPU interface Oct 2 19:41:52.809526 kernel: CPU features: detected: Hardware dirty bit management Oct 2 19:41:52.809533 kernel: CPU features: detected: Spectre-v4 Oct 2 19:41:52.809539 kernel: CPU features: detected: Spectre-BHB Oct 2 19:41:52.809546 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 19:41:52.809553 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 19:41:52.809559 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 19:41:52.809565 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Oct 2 19:41:52.809572 kernel: Policy zone: DMA Oct 2 19:41:52.809579 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:41:52.809585 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:41:52.809592 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:41:52.809598 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:41:52.809604 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:41:52.809611 kernel: Memory: 2459272K/2572288K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 113016K reserved, 0K cma-reserved) Oct 2 19:41:52.809618 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 19:41:52.809625 kernel: trace event string verifier disabled Oct 2 19:41:52.809631 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 19:41:52.809637 kernel: rcu: RCU event tracing is enabled. Oct 2 19:41:52.809644 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 19:41:52.809650 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 19:41:52.809656 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:41:52.809663 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:41:52.809669 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 19:41:52.809675 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 19:41:52.809681 kernel: GICv3: 256 SPIs implemented Oct 2 19:41:52.809688 kernel: GICv3: 0 Extended SPIs implemented Oct 2 19:41:52.809695 kernel: GICv3: Distributor has no Range Selector support Oct 2 19:41:52.809701 kernel: Root IRQ handler: gic_handle_irq Oct 2 19:41:52.809707 kernel: GICv3: 16 PPIs implemented Oct 2 19:41:52.809713 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Oct 2 19:41:52.809719 kernel: ACPI: SRAT not present Oct 2 19:41:52.809725 kernel: ITS [mem 0x08080000-0x0809ffff] Oct 2 19:41:52.809732 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 19:41:52.809739 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Oct 2 19:41:52.809745 kernel: GICv3: using LPI property table @0x00000000400d0000 Oct 2 19:41:52.809751 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Oct 2 19:41:52.809757 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:41:52.809764 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 19:41:52.809771 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 19:41:52.809777 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 19:41:52.809784 kernel: arm-pv: using stolen time PV Oct 2 19:41:52.809790 kernel: Console: colour dummy device 80x25 Oct 2 19:41:52.809796 kernel: ACPI: Core revision 20210730 Oct 2 19:41:52.809803 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 19:41:52.809810 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:41:52.809816 kernel: LSM: Security Framework initializing Oct 2 19:41:52.809823 kernel: SELinux: Initializing. Oct 2 19:41:52.809837 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:41:52.809844 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:41:52.809850 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:41:52.809857 kernel: Platform MSI: ITS@0x8080000 domain created Oct 2 19:41:52.809863 kernel: PCI/MSI: ITS@0x8080000 domain created Oct 2 19:41:52.809870 kernel: Remapping and enabling EFI services. Oct 2 19:41:52.809876 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:41:52.809882 kernel: Detected PIPT I-cache on CPU1 Oct 2 19:41:52.809889 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Oct 2 19:41:52.809897 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Oct 2 19:41:52.809904 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:41:52.809910 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 19:41:52.809916 kernel: Detected PIPT I-cache on CPU2 Oct 2 19:41:52.809923 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Oct 2 19:41:52.809929 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Oct 2 19:41:52.809936 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:41:52.809942 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Oct 2 19:41:52.809949 kernel: Detected PIPT I-cache on CPU3 Oct 2 19:41:52.809955 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Oct 2 19:41:52.809972 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Oct 2 19:41:52.809992 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:41:52.809998 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Oct 2 19:41:52.810005 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 19:41:52.810016 kernel: SMP: Total of 4 processors activated. Oct 2 19:41:52.810024 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 19:41:52.810031 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 19:41:52.810038 kernel: CPU features: detected: Common not Private translations Oct 2 19:41:52.810045 kernel: CPU features: detected: CRC32 instructions Oct 2 19:41:52.810051 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 19:41:52.810058 kernel: CPU features: detected: LSE atomic instructions Oct 2 19:41:52.810067 kernel: CPU features: detected: Privileged Access Never Oct 2 19:41:52.810075 kernel: CPU features: detected: RAS Extension Support Oct 2 19:41:52.810082 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Oct 2 19:41:52.810089 kernel: CPU: All CPU(s) started at EL1 Oct 2 19:41:52.810096 kernel: alternatives: patching kernel code Oct 2 19:41:52.810104 kernel: devtmpfs: initialized Oct 2 19:41:52.810110 kernel: KASLR enabled Oct 2 19:41:52.810117 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:41:52.810124 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 19:41:52.810131 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:41:52.810138 kernel: SMBIOS 3.0.0 present. Oct 2 19:41:52.810144 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Oct 2 19:41:52.810151 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:41:52.810158 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 19:41:52.810165 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 19:41:52.810173 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 19:41:52.810180 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:41:52.810187 kernel: audit: type=2000 audit(0.033:1): state=initialized audit_enabled=0 res=1 Oct 2 19:41:52.810193 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:41:52.810200 kernel: cpuidle: using governor menu Oct 2 19:41:52.810207 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 19:41:52.810214 kernel: ASID allocator initialised with 32768 entries Oct 2 19:41:52.810221 kernel: ACPI: bus type PCI registered Oct 2 19:41:52.810227 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:41:52.810235 kernel: Serial: AMBA PL011 UART driver Oct 2 19:41:52.810242 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:41:52.810249 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 19:41:52.810255 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:41:52.810262 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 19:41:52.810269 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:41:52.810276 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 19:41:52.810283 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:41:52.810289 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:41:52.810298 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:41:52.810305 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:41:52.810312 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:41:52.810318 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:41:52.810325 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:41:52.810332 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:41:52.810339 kernel: ACPI: Interpreter enabled Oct 2 19:41:52.810346 kernel: ACPI: Using GIC for interrupt routing Oct 2 19:41:52.810352 kernel: ACPI: MCFG table detected, 1 entries Oct 2 19:41:52.810361 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Oct 2 19:41:52.810368 kernel: printk: console [ttyAMA0] enabled Oct 2 19:41:52.810374 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:41:52.810522 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:41:52.810602 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 19:41:52.810670 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 19:41:52.810732 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Oct 2 19:41:52.810796 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Oct 2 19:41:52.810806 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Oct 2 19:41:52.810813 kernel: PCI host bridge to bus 0000:00 Oct 2 19:41:52.810899 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Oct 2 19:41:52.810959 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 19:41:52.811038 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Oct 2 19:41:52.811092 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:41:52.811169 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Oct 2 19:41:52.811240 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:41:52.811306 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Oct 2 19:41:52.811368 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Oct 2 19:41:52.811429 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 19:41:52.811491 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 19:41:52.811553 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Oct 2 19:41:52.811628 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Oct 2 19:41:52.811684 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Oct 2 19:41:52.811740 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 19:41:52.811797 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Oct 2 19:41:52.811806 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 19:41:52.811813 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 19:41:52.811820 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 19:41:52.811834 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 19:41:52.811841 kernel: iommu: Default domain type: Translated Oct 2 19:41:52.811848 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 19:41:52.811855 kernel: vgaarb: loaded Oct 2 19:41:52.811862 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:41:52.811869 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:41:52.811876 kernel: PTP clock support registered Oct 2 19:41:52.811882 kernel: Registered efivars operations Oct 2 19:41:52.811889 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 19:41:52.811895 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:41:52.811904 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:41:52.811911 kernel: pnp: PnP ACPI init Oct 2 19:41:52.812005 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Oct 2 19:41:52.812017 kernel: pnp: PnP ACPI: found 1 devices Oct 2 19:41:52.812023 kernel: NET: Registered PF_INET protocol family Oct 2 19:41:52.812030 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:41:52.812037 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:41:52.812044 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:41:52.812053 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:41:52.812060 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:41:52.812067 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:41:52.812074 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:41:52.812081 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:41:52.812088 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:41:52.812094 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:41:52.812101 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Oct 2 19:41:52.812109 kernel: kvm [1]: HYP mode not available Oct 2 19:41:52.812116 kernel: Initialise system trusted keyrings Oct 2 19:41:52.812123 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:41:52.812129 kernel: Key type asymmetric registered Oct 2 19:41:52.812136 kernel: Asymmetric key parser 'x509' registered Oct 2 19:41:52.812143 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:41:52.812149 kernel: io scheduler mq-deadline registered Oct 2 19:41:52.812156 kernel: io scheduler kyber registered Oct 2 19:41:52.812163 kernel: io scheduler bfq registered Oct 2 19:41:52.812170 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 19:41:52.812178 kernel: ACPI: button: Power Button [PWRB] Oct 2 19:41:52.812186 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 19:41:52.812254 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Oct 2 19:41:52.812264 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:41:52.812270 kernel: thunder_xcv, ver 1.0 Oct 2 19:41:52.812277 kernel: thunder_bgx, ver 1.0 Oct 2 19:41:52.812284 kernel: nicpf, ver 1.0 Oct 2 19:41:52.812290 kernel: nicvf, ver 1.0 Oct 2 19:41:52.812366 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 19:41:52.812427 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T19:41:52 UTC (1696275712) Oct 2 19:41:52.812436 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:41:52.812444 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:41:52.812450 kernel: Segment Routing with IPv6 Oct 2 19:41:52.812457 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:41:52.812463 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:41:52.812470 kernel: Key type dns_resolver registered Oct 2 19:41:52.812477 kernel: registered taskstats version 1 Oct 2 19:41:52.812485 kernel: Loading compiled-in X.509 certificates Oct 2 19:41:52.812492 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 19:41:52.812498 kernel: Key type .fscrypt registered Oct 2 19:41:52.812505 kernel: Key type fscrypt-provisioning registered Oct 2 19:41:52.812512 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:41:52.812519 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:41:52.812526 kernel: ima: No architecture policies found Oct 2 19:41:52.812533 kernel: Freeing unused kernel memory: 34560K Oct 2 19:41:52.812539 kernel: Run /init as init process Oct 2 19:41:52.812547 kernel: with arguments: Oct 2 19:41:52.812554 kernel: /init Oct 2 19:41:52.812561 kernel: with environment: Oct 2 19:41:52.812567 kernel: HOME=/ Oct 2 19:41:52.812574 kernel: TERM=linux Oct 2 19:41:52.812581 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:41:52.812591 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:41:52.812600 systemd[1]: Detected virtualization kvm. Oct 2 19:41:52.812609 systemd[1]: Detected architecture arm64. Oct 2 19:41:52.812616 systemd[1]: Running in initrd. Oct 2 19:41:52.812623 systemd[1]: No hostname configured, using default hostname. Oct 2 19:41:52.812630 systemd[1]: Hostname set to . Oct 2 19:41:52.812637 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:41:52.812645 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:41:52.812652 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:41:52.812659 systemd[1]: Reached target cryptsetup.target. Oct 2 19:41:52.812671 systemd[1]: Reached target paths.target. Oct 2 19:41:52.812679 systemd[1]: Reached target slices.target. Oct 2 19:41:52.812686 systemd[1]: Reached target swap.target. Oct 2 19:41:52.812693 systemd[1]: Reached target timers.target. Oct 2 19:41:52.812700 systemd[1]: Listening on iscsid.socket. Oct 2 19:41:52.812707 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:41:52.812714 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:41:52.812723 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:41:52.812730 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:41:52.812738 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:41:52.812745 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:41:52.812752 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:41:52.812759 systemd[1]: Reached target sockets.target. Oct 2 19:41:52.812766 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:41:52.812774 systemd[1]: Finished network-cleanup.service. Oct 2 19:41:52.812781 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:41:52.812789 systemd[1]: Starting systemd-journald.service... Oct 2 19:41:52.812796 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:41:52.812803 systemd[1]: Starting systemd-resolved.service... Oct 2 19:41:52.812810 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:41:52.812820 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:41:52.812831 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:41:52.812839 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:41:52.812846 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:41:52.812854 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:41:52.812862 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:41:52.812870 kernel: audit: type=1130 audit(1696275712.808:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:52.812881 systemd-journald[291]: Journal started Oct 2 19:41:52.812924 systemd-journald[291]: Runtime Journal (/run/log/journal/c133507c04a14bb284f806d536e80acb) is 6.0M, max 48.7M, 42.6M free. Oct 2 19:41:52.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:52.802376 systemd-modules-load[292]: Inserted module 'overlay' Oct 2 19:41:52.814332 systemd[1]: Started systemd-journald.service. Oct 2 19:41:52.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:52.816978 kernel: audit: type=1130 audit(1696275712.813:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:52.820014 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:41:52.821863 systemd-modules-load[292]: Inserted module 'br_netfilter' Oct 2 19:41:52.823175 kernel: Bridge firewalling registered Oct 2 19:41:52.830764 systemd-resolved[293]: Positive Trust Anchors: Oct 2 19:41:52.832471 kernel: SCSI subsystem initialized Oct 2 19:41:52.830778 systemd-resolved[293]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:41:52.830807 systemd-resolved[293]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:41:52.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:52.832655 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:41:52.844112 kernel: audit: type=1130 audit(1696275712.834:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:52.844138 kernel: audit: type=1130 audit(1696275712.839:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:52.844148 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:41:52.844157 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:41:52.839000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:52.837055 systemd-resolved[293]: Defaulting to hostname 'linux'. Oct 2 19:41:52.846537 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:41:52.840003 systemd[1]: Started systemd-resolved.service. Oct 2 19:41:52.843016 systemd[1]: Reached target nss-lookup.target. Oct 2 19:41:52.846842 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:41:52.848937 systemd-modules-load[292]: Inserted module 'dm_multipath' Oct 2 19:41:52.849747 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:41:52.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:52.851240 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:41:52.854319 kernel: audit: type=1130 audit(1696275712.850:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:52.859970 dracut-cmdline[308]: dracut-dracut-053 Oct 2 19:41:52.860836 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:41:52.863989 kernel: audit: type=1130 audit(1696275712.860:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:52.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:52.864049 dracut-cmdline[308]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:41:52.942985 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:41:52.951001 kernel: iscsi: registered transport (tcp) Oct 2 19:41:52.964996 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:41:52.965058 kernel: QLogic iSCSI HBA Driver Oct 2 19:41:53.014064 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:41:53.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:53.015607 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:41:53.017901 kernel: audit: type=1130 audit(1696275713.013:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:53.073015 kernel: raid6: neonx8 gen() 13564 MB/s Oct 2 19:41:53.090008 kernel: raid6: neonx8 xor() 10377 MB/s Oct 2 19:41:53.106998 kernel: raid6: neonx4 gen() 13388 MB/s Oct 2 19:41:53.123990 kernel: raid6: neonx4 xor() 11268 MB/s Oct 2 19:41:53.140992 kernel: raid6: neonx2 gen() 12982 MB/s Oct 2 19:41:53.157985 kernel: raid6: neonx2 xor() 10250 MB/s Oct 2 19:41:53.174999 kernel: raid6: neonx1 gen() 10495 MB/s Oct 2 19:41:53.191984 kernel: raid6: neonx1 xor() 8767 MB/s Oct 2 19:41:53.208997 kernel: raid6: int64x8 gen() 6291 MB/s Oct 2 19:41:53.225989 kernel: raid6: int64x8 xor() 3549 MB/s Oct 2 19:41:53.242995 kernel: raid6: int64x4 gen() 7262 MB/s Oct 2 19:41:53.260000 kernel: raid6: int64x4 xor() 3856 MB/s Oct 2 19:41:53.276998 kernel: raid6: int64x2 gen() 6152 MB/s Oct 2 19:41:53.293985 kernel: raid6: int64x2 xor() 3322 MB/s Oct 2 19:41:53.310991 kernel: raid6: int64x1 gen() 5043 MB/s Oct 2 19:41:53.328196 kernel: raid6: int64x1 xor() 2633 MB/s Oct 2 19:41:53.328226 kernel: raid6: using algorithm neonx8 gen() 13564 MB/s Oct 2 19:41:53.328235 kernel: raid6: .... xor() 10377 MB/s, rmw enabled Oct 2 19:41:53.328244 kernel: raid6: using neon recovery algorithm Oct 2 19:41:53.338984 kernel: xor: measuring software checksum speed Oct 2 19:41:53.340338 kernel: 8regs : 17145 MB/sec Oct 2 19:41:53.340361 kernel: 32regs : 20760 MB/sec Oct 2 19:41:53.341050 kernel: arm64_neon : 27807 MB/sec Oct 2 19:41:53.341063 kernel: xor: using function: arm64_neon (27807 MB/sec) Oct 2 19:41:53.401003 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 19:41:53.414382 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:41:53.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:53.417000 audit: BPF prog-id=7 op=LOAD Oct 2 19:41:53.417000 audit: BPF prog-id=8 op=LOAD Oct 2 19:41:53.417983 kernel: audit: type=1130 audit(1696275713.414:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:53.418006 kernel: audit: type=1334 audit(1696275713.417:10): prog-id=7 op=LOAD Oct 2 19:41:53.418365 systemd[1]: Starting systemd-udevd.service... Oct 2 19:41:53.432890 systemd-udevd[492]: Using default interface naming scheme 'v252'. Oct 2 19:41:53.436294 systemd[1]: Started systemd-udevd.service. Oct 2 19:41:53.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:53.438316 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:41:53.451427 dracut-pre-trigger[498]: rd.md=0: removing MD RAID activation Oct 2 19:41:53.486267 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:41:53.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:53.487763 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:41:53.523509 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:41:53.523000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:53.555907 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 19:41:53.563168 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:41:53.582000 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (542) Oct 2 19:41:53.584530 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:41:53.585357 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:41:53.589862 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:41:53.595697 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:41:53.601637 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:41:53.603167 systemd[1]: Starting disk-uuid.service... Oct 2 19:41:53.613005 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:41:54.629989 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:41:54.630046 disk-uuid[564]: The operation has completed successfully. Oct 2 19:41:54.662693 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:41:54.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:54.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:54.662788 systemd[1]: Finished disk-uuid.service. Oct 2 19:41:54.667323 systemd[1]: Starting verity-setup.service... Oct 2 19:41:54.686986 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 19:41:54.710113 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:41:54.712399 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:41:54.715177 systemd[1]: Finished verity-setup.service. Oct 2 19:41:54.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:54.764631 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:41:54.765611 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:41:54.765294 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:41:54.766061 systemd[1]: Starting ignition-setup.service... Oct 2 19:41:54.767665 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:41:54.777087 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:41:54.777131 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:41:54.777148 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:41:54.788718 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:41:54.799170 systemd[1]: Finished ignition-setup.service. Oct 2 19:41:54.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:54.800786 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:41:54.891071 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:41:54.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:54.891000 audit: BPF prog-id=9 op=LOAD Oct 2 19:41:54.893161 systemd[1]: Starting systemd-networkd.service... Oct 2 19:41:54.897674 ignition[650]: Ignition 2.14.0 Oct 2 19:41:54.897685 ignition[650]: Stage: fetch-offline Oct 2 19:41:54.897723 ignition[650]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:41:54.897732 ignition[650]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:41:54.897900 ignition[650]: parsed url from cmdline: "" Oct 2 19:41:54.897904 ignition[650]: no config URL provided Oct 2 19:41:54.897909 ignition[650]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:41:54.897918 ignition[650]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:41:54.897936 ignition[650]: op(1): [started] loading QEMU firmware config module Oct 2 19:41:54.897941 ignition[650]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 19:41:54.907562 ignition[650]: op(1): [finished] loading QEMU firmware config module Oct 2 19:41:54.926153 systemd-networkd[739]: lo: Link UP Oct 2 19:41:54.926165 systemd-networkd[739]: lo: Gained carrier Oct 2 19:41:54.927000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:54.926774 systemd-networkd[739]: Enumeration completed Oct 2 19:41:54.926896 systemd[1]: Started systemd-networkd.service. Oct 2 19:41:54.927172 systemd-networkd[739]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:41:54.927773 systemd[1]: Reached target network.target. Oct 2 19:41:54.929074 systemd-networkd[739]: eth0: Link UP Oct 2 19:41:54.929078 systemd-networkd[739]: eth0: Gained carrier Oct 2 19:41:54.930279 systemd[1]: Starting iscsiuio.service... Oct 2 19:41:54.946046 systemd[1]: Started iscsiuio.service. Oct 2 19:41:54.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:54.947742 systemd[1]: Starting iscsid.service... Oct 2 19:41:54.953948 iscsid[746]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:41:54.953948 iscsid[746]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:41:54.953948 iscsid[746]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:41:54.953948 iscsid[746]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:41:54.953948 iscsid[746]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:41:54.953948 iscsid[746]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:41:54.960000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:54.953929 ignition[650]: parsing config with SHA512: 64d8ab322a8b1c6e294cab66431b831d4a292cdcad6355d7e9181db9e71e0c24fcdd4a3ff4e50710fb0596d2404d13fc30affbdb287e0be7e251ce6f08d5f7b5 Oct 2 19:41:54.959240 systemd[1]: Started iscsid.service. Oct 2 19:41:54.959241 systemd-networkd[739]: eth0: DHCPv4 address 10.0.0.6/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:41:54.962265 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:41:54.979718 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:41:54.980463 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:41:54.981665 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:41:54.982874 systemd[1]: Reached target remote-fs.target. Oct 2 19:41:54.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:54.984896 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:41:54.996840 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:41:54.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:55.002236 unknown[650]: fetched base config from "system" Oct 2 19:41:55.002251 unknown[650]: fetched user config from "qemu" Oct 2 19:41:55.002867 ignition[650]: fetch-offline: fetch-offline passed Oct 2 19:41:55.002934 ignition[650]: Ignition finished successfully Oct 2 19:41:55.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:55.004040 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:41:55.005192 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 19:41:55.006129 systemd[1]: Starting ignition-kargs.service... Oct 2 19:41:55.018721 ignition[760]: Ignition 2.14.0 Oct 2 19:41:55.018732 ignition[760]: Stage: kargs Oct 2 19:41:55.018850 ignition[760]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:41:55.018860 ignition[760]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:41:55.019846 ignition[760]: kargs: kargs passed Oct 2 19:41:55.019894 ignition[760]: Ignition finished successfully Oct 2 19:41:55.022755 systemd[1]: Finished ignition-kargs.service. Oct 2 19:41:55.022000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:55.024714 systemd[1]: Starting ignition-disks.service... Oct 2 19:41:55.033932 ignition[766]: Ignition 2.14.0 Oct 2 19:41:55.033941 ignition[766]: Stage: disks Oct 2 19:41:55.034061 ignition[766]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:41:55.034072 ignition[766]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:41:55.035380 ignition[766]: disks: disks passed Oct 2 19:41:55.035426 ignition[766]: Ignition finished successfully Oct 2 19:41:55.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:55.037148 systemd[1]: Finished ignition-disks.service. Oct 2 19:41:55.038155 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:41:55.039418 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:41:55.040500 systemd[1]: Reached target local-fs.target. Oct 2 19:41:55.041614 systemd[1]: Reached target sysinit.target. Oct 2 19:41:55.042553 systemd[1]: Reached target basic.target. Oct 2 19:41:55.044481 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:41:55.059286 systemd-fsck[774]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 19:41:55.064234 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:41:55.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:55.065739 systemd[1]: Mounting sysroot.mount... Oct 2 19:41:55.073986 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:41:55.074050 systemd[1]: Mounted sysroot.mount. Oct 2 19:41:55.074636 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:41:55.080167 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:41:55.081077 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:41:55.081119 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:41:55.081143 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:41:55.085388 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:41:55.086776 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:41:55.093565 initrd-setup-root[784]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:41:55.099809 initrd-setup-root[792]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:41:55.105095 initrd-setup-root[800]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:41:55.109334 initrd-setup-root[808]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:41:55.144663 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:41:55.144000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:55.146307 systemd[1]: Starting ignition-mount.service... Oct 2 19:41:55.147713 systemd[1]: Starting sysroot-boot.service... Oct 2 19:41:55.153951 bash[825]: umount: /sysroot/usr/share/oem: not mounted. Oct 2 19:41:55.165972 ignition[827]: INFO : Ignition 2.14.0 Oct 2 19:41:55.165972 ignition[827]: INFO : Stage: mount Oct 2 19:41:55.167465 ignition[827]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:41:55.167465 ignition[827]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:41:55.167465 ignition[827]: INFO : mount: mount passed Oct 2 19:41:55.167465 ignition[827]: INFO : Ignition finished successfully Oct 2 19:41:55.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:55.168392 systemd[1]: Finished ignition-mount.service. Oct 2 19:41:55.176891 systemd[1]: Finished sysroot-boot.service. Oct 2 19:41:55.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:55.724436 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:41:55.730977 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (835) Oct 2 19:41:55.733263 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:41:55.733282 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:41:55.733292 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:41:55.736326 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:41:55.737702 systemd[1]: Starting ignition-files.service... Oct 2 19:41:55.754806 ignition[855]: INFO : Ignition 2.14.0 Oct 2 19:41:55.755845 ignition[855]: INFO : Stage: files Oct 2 19:41:55.756680 ignition[855]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:41:55.757692 ignition[855]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:41:55.759980 ignition[855]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:41:55.763662 ignition[855]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:41:55.763662 ignition[855]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:41:55.766628 ignition[855]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:41:55.766628 ignition[855]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:41:55.766628 ignition[855]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:41:55.766488 unknown[855]: wrote ssh authorized keys file for user: core Oct 2 19:41:55.771563 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 19:41:55.771563 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Oct 2 19:41:56.011943 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:41:56.271021 ignition[855]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Oct 2 19:41:56.271021 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 19:41:56.271021 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 19:41:56.275655 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Oct 2 19:41:56.425395 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:41:56.550345 ignition[855]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Oct 2 19:41:56.550345 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 19:41:56.554124 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:41:56.554124 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubeadm: attempt #1 Oct 2 19:41:56.634658 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:41:56.936019 systemd-networkd[739]: eth0: Gained IPv6LL Oct 2 19:41:56.945193 ignition[855]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 5a08b81f9cc82d3cce21130856ca63b8dafca9149d9775dd25b376eb0f18209aa0e4a47c0a6d7e6fb1316aacd5d59dec770f26c09120c866949d70bc415518b3 Oct 2 19:41:56.947494 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:41:56.947494 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:41:56.947494 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubelet: attempt #1 Oct 2 19:41:56.986245 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:41:57.625929 ignition[855]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 5a898ef543a6482895101ea58e33602e3c0a7682d322aaf08ac3dc8a5a3c8da8f09600d577024549288f8cebb1a86f9c79927796b69a3d8fe989ca8f12b147d6 Oct 2 19:41:57.627929 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:41:57.627929 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:41:57.627929 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubectl: attempt #1 Oct 2 19:41:57.670494 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:41:57.999117 ignition[855]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 6a5c9c02a29126949f096415bb1761a0c0ad44168e2ab3d0409982701da58f96223bec354828ddf958e945ef1ce63c0ad41e77cbcbcce0756163e71b4fbae432 Oct 2 19:41:57.999117 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:41:58.002625 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:41:58.002625 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:41:58.002625 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:41:58.002625 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 19:41:58.152502 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 19:41:58.222615 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:41:58.222615 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:41:58.225323 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:41:58.225323 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:41:58.225323 ignition[855]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:41:58.225323 ignition[855]: INFO : files: op(c): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:41:58.225323 ignition[855]: INFO : files: op(c): op(d): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:41:58.225323 ignition[855]: INFO : files: op(c): op(d): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:41:58.225323 ignition[855]: INFO : files: op(c): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:41:58.225323 ignition[855]: INFO : files: op(e): [started] processing unit "prepare-critools.service" Oct 2 19:41:58.225323 ignition[855]: INFO : files: op(e): op(f): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:41:58.225323 ignition[855]: INFO : files: op(e): op(f): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:41:58.225323 ignition[855]: INFO : files: op(e): [finished] processing unit "prepare-critools.service" Oct 2 19:41:58.225323 ignition[855]: INFO : files: op(10): [started] processing unit "coreos-metadata.service" Oct 2 19:41:58.225323 ignition[855]: INFO : files: op(10): op(11): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:41:58.225323 ignition[855]: INFO : files: op(10): op(11): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:41:58.225323 ignition[855]: INFO : files: op(10): [finished] processing unit "coreos-metadata.service" Oct 2 19:41:58.225323 ignition[855]: INFO : files: op(12): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:41:58.225323 ignition[855]: INFO : files: op(12): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:41:58.225323 ignition[855]: INFO : files: op(13): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 19:41:58.251635 ignition[855]: INFO : files: op(13): op(14): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:41:58.279350 ignition[855]: INFO : files: op(13): op(14): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:41:58.280473 ignition[855]: INFO : files: op(13): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 19:41:58.280473 ignition[855]: INFO : files: op(15): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:41:58.280473 ignition[855]: INFO : files: op(15): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:41:58.280473 ignition[855]: INFO : files: createResultFile: createFiles: op(16): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:41:58.280473 ignition[855]: INFO : files: createResultFile: createFiles: op(16): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:41:58.280473 ignition[855]: INFO : files: files passed Oct 2 19:41:58.280473 ignition[855]: INFO : Ignition finished successfully Oct 2 19:41:58.291314 kernel: kauditd_printk_skb: 22 callbacks suppressed Oct 2 19:41:58.291336 kernel: audit: type=1130 audit(1696275718.281:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.280755 systemd[1]: Finished ignition-files.service. Oct 2 19:41:58.282825 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:41:58.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.291000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.283486 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:41:58.298107 kernel: audit: type=1130 audit(1696275718.291:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.298125 kernel: audit: type=1131 audit(1696275718.291:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.298198 initrd-setup-root-after-ignition[879]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 19:41:58.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.284123 systemd[1]: Starting ignition-quench.service... Oct 2 19:41:58.302170 kernel: audit: type=1130 audit(1696275718.295:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.302225 initrd-setup-root-after-ignition[882]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:41:58.291461 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:41:58.291543 systemd[1]: Finished ignition-quench.service. Oct 2 19:41:58.292707 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:41:58.297056 systemd[1]: Reached target ignition-complete.target. Oct 2 19:41:58.301116 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:41:58.315410 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:41:58.320049 kernel: audit: type=1130 audit(1696275718.315:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.320071 kernel: audit: type=1131 audit(1696275718.315:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.315000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.315506 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:41:58.316231 systemd[1]: Reached target initrd-fs.target. Oct 2 19:41:58.320517 systemd[1]: Reached target initrd.target. Oct 2 19:41:58.321512 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:41:58.322339 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:41:58.334771 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:41:58.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.336303 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:41:58.338477 kernel: audit: type=1130 audit(1696275718.334:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.345695 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:41:58.346395 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:41:58.347380 systemd[1]: Stopped target timers.target. Oct 2 19:41:58.348390 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:41:58.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.348516 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:41:58.352674 kernel: audit: type=1131 audit(1696275718.348:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.349629 systemd[1]: Stopped target initrd.target. Oct 2 19:41:58.352338 systemd[1]: Stopped target basic.target. Oct 2 19:41:58.353200 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:41:58.354172 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:41:58.355091 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:41:58.356096 systemd[1]: Stopped target remote-fs.target. Oct 2 19:41:58.358852 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:41:58.359886 systemd[1]: Stopped target sysinit.target. Oct 2 19:41:58.360796 systemd[1]: Stopped target local-fs.target. Oct 2 19:41:58.361706 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:41:58.362598 systemd[1]: Stopped target swap.target. Oct 2 19:41:58.364000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.363448 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:41:58.367778 kernel: audit: type=1131 audit(1696275718.364:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.363579 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:41:58.368000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.364659 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:41:58.371408 kernel: audit: type=1131 audit(1696275718.368:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.370000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.367265 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:41:58.367382 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:41:58.368450 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:41:58.368558 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:41:58.371079 systemd[1]: Stopped target paths.target. Oct 2 19:41:58.371908 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:41:58.376004 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:41:58.376689 systemd[1]: Stopped target slices.target. Oct 2 19:41:58.377665 systemd[1]: Stopped target sockets.target. Oct 2 19:41:58.378560 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:41:58.379000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.378688 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:41:58.380000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.379631 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:41:58.379728 systemd[1]: Stopped ignition-files.service. Oct 2 19:41:58.383067 iscsid[746]: iscsid shutting down. Oct 2 19:41:58.381688 systemd[1]: Stopping ignition-mount.service... Oct 2 19:41:58.384826 systemd[1]: Stopping iscsid.service... Oct 2 19:41:58.386116 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:41:58.386644 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:41:58.387000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.391063 ignition[895]: INFO : Ignition 2.14.0 Oct 2 19:41:58.391063 ignition[895]: INFO : Stage: umount Oct 2 19:41:58.391063 ignition[895]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:41:58.391063 ignition[895]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:41:58.388000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.391000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.386799 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:41:58.395198 ignition[895]: INFO : umount: umount passed Oct 2 19:41:58.395198 ignition[895]: INFO : Ignition finished successfully Oct 2 19:41:58.387837 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:41:58.387931 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:41:58.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.397000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.390620 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:41:58.390727 systemd[1]: Stopped iscsid.service. Oct 2 19:41:58.391717 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:41:58.391790 systemd[1]: Closed iscsid.socket. Oct 2 19:41:58.392718 systemd[1]: Stopping iscsiuio.service... Oct 2 19:41:58.395825 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:41:58.395930 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:41:58.402000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.403000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.397049 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:41:58.397130 systemd[1]: Stopped ignition-mount.service. Oct 2 19:41:58.398015 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:41:58.398105 systemd[1]: Stopped iscsiuio.service. Oct 2 19:41:58.399696 systemd[1]: Stopped target network.target. Oct 2 19:41:58.400802 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:41:58.400846 systemd[1]: Closed iscsiuio.socket. Oct 2 19:41:58.401669 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:41:58.401709 systemd[1]: Stopped ignition-disks.service. Oct 2 19:41:58.412000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.402722 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:41:58.413000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.402757 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:41:58.403664 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:41:58.403700 systemd[1]: Stopped ignition-setup.service. Oct 2 19:41:58.404949 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:41:58.406082 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:41:58.408143 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:41:58.411445 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:41:58.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.411526 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:41:58.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.412753 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:41:58.412790 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:41:58.413187 systemd-networkd[739]: eth0: DHCPv6 lease lost Oct 2 19:41:58.420197 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:41:58.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.420295 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:41:58.427000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:41:58.427000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:41:58.427000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.421418 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:41:58.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.421504 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:41:58.422868 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:41:58.422900 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:41:58.424386 systemd[1]: Stopping network-cleanup.service... Oct 2 19:41:58.425377 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:41:58.425438 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:41:58.426576 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:41:58.426619 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:41:58.428580 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:41:58.428627 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:41:58.429494 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:41:58.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.434221 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:41:58.437952 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:41:58.438114 systemd[1]: Stopped network-cleanup.service. Oct 2 19:41:58.441468 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:41:58.441595 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:41:58.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.443034 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:41:58.443074 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:41:58.443761 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:41:58.445000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.443795 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:41:58.446000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.444953 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:41:58.447000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.445011 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:41:58.446076 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:41:58.446111 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:41:58.447174 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:41:58.447209 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:41:58.449281 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:41:58.450397 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:41:58.450000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.453000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.450454 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:41:58.455000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.455000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.452185 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:41:58.452226 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:41:58.452855 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:41:58.452892 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:41:58.454882 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 19:41:58.455764 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:41:58.455854 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:41:58.456720 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:41:58.458559 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:41:58.466862 systemd[1]: Switching root. Oct 2 19:41:58.484461 systemd-journald[291]: Journal stopped Oct 2 19:42:00.808269 systemd-journald[291]: Received SIGTERM from PID 1 (systemd). Oct 2 19:42:00.808390 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:42:00.808403 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:42:00.808423 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:42:00.808439 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:42:00.808452 kernel: SELinux: policy capability open_perms=1 Oct 2 19:42:00.808462 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:42:00.808481 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:42:00.808491 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:42:00.808500 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:42:00.808510 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:42:00.808519 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:42:00.808530 systemd[1]: Successfully loaded SELinux policy in 34.019ms. Oct 2 19:42:00.808552 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.516ms. Oct 2 19:42:00.808565 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:42:00.808576 systemd[1]: Detected virtualization kvm. Oct 2 19:42:00.808587 systemd[1]: Detected architecture arm64. Oct 2 19:42:00.808597 systemd[1]: Detected first boot. Oct 2 19:42:00.808607 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:42:00.808617 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:42:00.808628 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:42:00.808641 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:42:00.808653 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:42:00.808665 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:42:00.808675 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:42:00.808685 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:42:00.808696 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:42:00.808706 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:42:00.808718 systemd[1]: Created slice system-getty.slice. Oct 2 19:42:00.808728 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:42:00.808738 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:42:00.808748 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:42:00.808759 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:42:00.808769 systemd[1]: Created slice user.slice. Oct 2 19:42:00.808780 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:42:00.808790 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:42:00.808809 systemd[1]: Set up automount boot.automount. Oct 2 19:42:00.808824 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:42:00.808835 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:42:00.808845 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:42:00.808865 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:42:00.808876 systemd[1]: Reached target integritysetup.target. Oct 2 19:42:00.808886 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:42:00.808897 systemd[1]: Reached target remote-fs.target. Oct 2 19:42:00.808907 systemd[1]: Reached target slices.target. Oct 2 19:42:00.808928 systemd[1]: Reached target swap.target. Oct 2 19:42:00.808938 systemd[1]: Reached target torcx.target. Oct 2 19:42:00.808949 systemd[1]: Reached target veritysetup.target. Oct 2 19:42:00.808959 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:42:00.809002 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:42:00.809015 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:42:00.809025 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:42:00.809036 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:42:00.809047 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:42:00.809059 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:42:00.809069 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:42:00.809080 systemd[1]: Mounting media.mount... Oct 2 19:42:00.809089 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:42:00.809099 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:42:00.809110 systemd[1]: Mounting tmp.mount... Oct 2 19:42:00.809120 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:42:00.809131 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:42:00.809142 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:42:00.809153 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:42:00.809164 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:42:00.809174 systemd[1]: Starting modprobe@drm.service... Oct 2 19:42:00.809184 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:42:00.809193 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:42:00.809203 systemd[1]: Starting modprobe@loop.service... Oct 2 19:42:00.809214 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:42:00.809224 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:42:00.809234 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:42:00.809246 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:42:00.809257 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:42:00.809267 systemd[1]: Stopped systemd-journald.service. Oct 2 19:42:00.809277 kernel: fuse: init (API version 7.34) Oct 2 19:42:00.809287 systemd[1]: Starting systemd-journald.service... Oct 2 19:42:00.809297 kernel: loop: module loaded Oct 2 19:42:00.809307 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:42:00.809318 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:42:00.809328 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:42:00.809340 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:42:00.809350 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:42:00.809360 systemd[1]: Stopped verity-setup.service. Oct 2 19:42:00.809370 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:42:00.809380 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:42:00.809390 systemd[1]: Mounted media.mount. Oct 2 19:42:00.809400 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:42:00.809410 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:42:00.809420 systemd[1]: Mounted tmp.mount. Oct 2 19:42:00.809431 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:42:00.809444 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:42:00.809454 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:42:00.809464 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:42:00.809474 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:42:00.809485 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:42:00.809496 systemd[1]: Finished modprobe@drm.service. Oct 2 19:42:00.809506 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:42:00.809520 systemd-journald[992]: Journal started Oct 2 19:42:00.809571 systemd-journald[992]: Runtime Journal (/run/log/journal/c133507c04a14bb284f806d536e80acb) is 6.0M, max 48.7M, 42.6M free. Oct 2 19:41:58.556000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:41:58.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:41:58.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:41:58.864000 audit: BPF prog-id=10 op=LOAD Oct 2 19:41:58.864000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:41:58.864000 audit: BPF prog-id=11 op=LOAD Oct 2 19:41:58.864000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:42:00.698000 audit: BPF prog-id=12 op=LOAD Oct 2 19:42:00.698000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:42:00.698000 audit: BPF prog-id=13 op=LOAD Oct 2 19:42:00.698000 audit: BPF prog-id=14 op=LOAD Oct 2 19:42:00.698000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:42:00.698000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:42:00.700000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.703000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.711000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:42:00.772000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.775000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.776000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.776000 audit: BPF prog-id=15 op=LOAD Oct 2 19:42:00.776000 audit: BPF prog-id=16 op=LOAD Oct 2 19:42:00.776000 audit: BPF prog-id=17 op=LOAD Oct 2 19:42:00.776000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:42:00.776000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:42:00.790000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.803000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.803000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:42:00.803000 audit[992]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=ffffe61eb960 a2=4000 a3=1 items=0 ppid=1 pid=992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:00.803000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:42:00.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.805000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.697905 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:42:00.810576 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:41:58.932693 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:41:58Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:42:00.697918 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:41:58.933375 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:41:58Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:42:00.700615 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:41:58.933395 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:41:58Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:41:58.933426 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:41:58Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:42:00.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.933436 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:41:58Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:41:58.933467 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:41:58Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:41:58.933479 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:41:58Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:41:58.933676 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:41:58Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:41:58.933715 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:41:58Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:41:58.933727 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:41:58Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:41:58.934200 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:41:58Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:41:58.934234 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:41:58Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:41:58.934253 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:41:58Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:41:58.934266 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:41:58Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:41:58.934283 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:41:58Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:41:58.934296 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:41:58Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:42:00.426882 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:42:00Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:42:00.427205 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:42:00Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:42:00.812217 systemd[1]: Started systemd-journald.service. Oct 2 19:42:00.427311 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:42:00Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:42:00.427479 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:42:00Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:42:00.427538 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:42:00Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:42:00.427606 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2023-10-02T19:42:00Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:42:00.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.812922 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:42:00.813170 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:42:00.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.814015 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:42:00.814174 systemd[1]: Finished modprobe@loop.service. Oct 2 19:42:00.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.813000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.815088 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:42:00.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.816123 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:42:00.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.817140 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:42:00.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.818221 systemd[1]: Reached target network-pre.target. Oct 2 19:42:00.820080 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:42:00.821989 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:42:00.822537 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:42:00.824881 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:42:00.826724 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:42:00.828551 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:42:00.830159 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:42:00.831098 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:42:00.834892 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:42:00.835944 systemd-journald[992]: Time spent on flushing to /var/log/journal/c133507c04a14bb284f806d536e80acb is 19.589ms for 988 entries. Oct 2 19:42:00.835944 systemd-journald[992]: System Journal (/var/log/journal/c133507c04a14bb284f806d536e80acb) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:42:00.872951 systemd-journald[992]: Received client request to flush runtime journal. Oct 2 19:42:00.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.849000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.837791 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:42:00.839077 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:42:00.873751 udevadm[1029]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:42:00.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.840778 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:42:00.841693 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:42:00.849363 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:42:00.851138 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:42:00.852951 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:42:00.853846 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:42:00.855741 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:42:00.874199 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:42:00.879415 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:42:00.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.881524 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:42:00.901474 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:42:00.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.226205 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:42:01.225000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.226000 audit: BPF prog-id=18 op=LOAD Oct 2 19:42:01.226000 audit: BPF prog-id=19 op=LOAD Oct 2 19:42:01.226000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:42:01.226000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:42:01.228160 systemd[1]: Starting systemd-udevd.service... Oct 2 19:42:01.251840 systemd-udevd[1035]: Using default interface naming scheme 'v252'. Oct 2 19:42:01.276515 systemd[1]: Started systemd-udevd.service. Oct 2 19:42:01.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.277000 audit: BPF prog-id=20 op=LOAD Oct 2 19:42:01.278917 systemd[1]: Starting systemd-networkd.service... Oct 2 19:42:01.297000 audit: BPF prog-id=21 op=LOAD Oct 2 19:42:01.297000 audit: BPF prog-id=22 op=LOAD Oct 2 19:42:01.297000 audit: BPF prog-id=23 op=LOAD Oct 2 19:42:01.299343 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:42:01.318284 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 19:42:01.340688 systemd[1]: Started systemd-userdbd.service. Oct 2 19:42:01.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.368263 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:42:01.391201 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:42:01.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.393191 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:42:01.398834 systemd-networkd[1037]: lo: Link UP Oct 2 19:42:01.399229 systemd-networkd[1037]: lo: Gained carrier Oct 2 19:42:01.399711 systemd-networkd[1037]: Enumeration completed Oct 2 19:42:01.399906 systemd[1]: Started systemd-networkd.service. Oct 2 19:42:01.400311 systemd-networkd[1037]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:42:01.399000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.404288 systemd-networkd[1037]: eth0: Link UP Oct 2 19:42:01.404384 systemd-networkd[1037]: eth0: Gained carrier Oct 2 19:42:01.414334 lvm[1068]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:42:01.431138 systemd-networkd[1037]: eth0: DHCPv4 address 10.0.0.6/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:42:01.445939 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:42:01.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.446714 systemd[1]: Reached target cryptsetup.target. Oct 2 19:42:01.448514 systemd[1]: Starting lvm2-activation.service... Oct 2 19:42:01.452815 lvm[1069]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:42:01.479913 systemd[1]: Finished lvm2-activation.service. Oct 2 19:42:01.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.480695 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:42:01.481396 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:42:01.481438 systemd[1]: Reached target local-fs.target. Oct 2 19:42:01.481999 systemd[1]: Reached target machines.target. Oct 2 19:42:01.484077 systemd[1]: Starting ldconfig.service... Oct 2 19:42:01.484952 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:42:01.485033 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:42:01.486138 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:42:01.487908 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:42:01.490187 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:42:01.491813 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:42:01.491876 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:42:01.493312 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:42:01.496856 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1071 (bootctl) Oct 2 19:42:01.498014 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:42:01.506008 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:42:01.506000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.510065 systemd-tmpfiles[1074]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:42:01.512265 systemd-tmpfiles[1074]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:42:01.513790 systemd-tmpfiles[1074]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:42:01.608736 systemd-fsck[1080]: fsck.fat 4.2 (2021-01-31) Oct 2 19:42:01.608736 systemd-fsck[1080]: /dev/vda1: 236 files, 113463/258078 clusters Oct 2 19:42:01.611231 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:42:01.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.684691 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:42:01.721067 ldconfig[1070]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:42:01.730717 systemd[1]: Finished ldconfig.service. Oct 2 19:42:01.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.793139 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:42:01.794564 systemd[1]: Mounting boot.mount... Oct 2 19:42:01.802578 systemd[1]: Mounted boot.mount. Oct 2 19:42:01.812657 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:42:01.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.894770 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:42:01.894000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.896778 systemd[1]: Starting audit-rules.service... Oct 2 19:42:01.898558 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:42:01.900807 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:42:01.901000 audit: BPF prog-id=24 op=LOAD Oct 2 19:42:01.903372 systemd[1]: Starting systemd-resolved.service... Oct 2 19:42:01.905000 audit: BPF prog-id=25 op=LOAD Oct 2 19:42:01.907446 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:42:01.910233 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:42:01.912397 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:42:01.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.914364 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:42:01.915000 audit[1095]: SYSTEM_BOOT pid=1095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.919430 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:42:01.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.926275 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:42:01.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.928664 systemd[1]: Starting systemd-update-done.service... Oct 2 19:42:01.931000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:42:01.931000 audit[1103]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdf52b0c0 a2=420 a3=0 items=0 ppid=1083 pid=1103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:01.931000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:42:01.932944 augenrules[1103]: No rules Oct 2 19:42:01.935158 systemd[1]: Finished audit-rules.service. Oct 2 19:42:01.936017 systemd[1]: Finished systemd-update-done.service. Oct 2 19:42:01.967804 systemd-resolved[1087]: Positive Trust Anchors: Oct 2 19:42:01.967816 systemd-resolved[1087]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:42:01.967843 systemd-resolved[1087]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:42:01.967977 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:42:01.968798 systemd-timesyncd[1093]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 19:42:01.968870 systemd-timesyncd[1093]: Initial clock synchronization to Mon 2023-10-02 19:42:02.302646 UTC. Oct 2 19:42:01.969336 systemd[1]: Reached target time-set.target. Oct 2 19:42:01.978116 systemd-resolved[1087]: Defaulting to hostname 'linux'. Oct 2 19:42:01.981313 systemd[1]: Started systemd-resolved.service. Oct 2 19:42:01.981975 systemd[1]: Reached target network.target. Oct 2 19:42:01.982511 systemd[1]: Reached target nss-lookup.target. Oct 2 19:42:01.983076 systemd[1]: Reached target sysinit.target. Oct 2 19:42:01.983688 systemd[1]: Started motdgen.path. Oct 2 19:42:01.984223 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:42:01.985132 systemd[1]: Started logrotate.timer. Oct 2 19:42:01.985733 systemd[1]: Started mdadm.timer. Oct 2 19:42:01.986241 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:42:01.986828 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:42:01.986862 systemd[1]: Reached target paths.target. Oct 2 19:42:01.987402 systemd[1]: Reached target timers.target. Oct 2 19:42:01.988326 systemd[1]: Listening on dbus.socket. Oct 2 19:42:01.989947 systemd[1]: Starting docker.socket... Oct 2 19:42:01.993176 systemd[1]: Listening on sshd.socket. Oct 2 19:42:01.993852 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:42:01.994350 systemd[1]: Listening on docker.socket. Oct 2 19:42:01.995026 systemd[1]: Reached target sockets.target. Oct 2 19:42:01.995562 systemd[1]: Reached target basic.target. Oct 2 19:42:01.996128 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:42:01.996157 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:42:01.997304 systemd[1]: Starting containerd.service... Oct 2 19:42:01.999029 systemd[1]: Starting dbus.service... Oct 2 19:42:02.000866 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:42:02.003162 systemd[1]: Starting extend-filesystems.service... Oct 2 19:42:02.003919 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:42:02.005344 systemd[1]: Starting motdgen.service... Oct 2 19:42:02.007266 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:42:02.011488 systemd[1]: Starting prepare-critools.service... Oct 2 19:42:02.012027 jq[1114]: false Oct 2 19:42:02.013964 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:42:02.016868 systemd[1]: Starting sshd-keygen.service... Oct 2 19:42:02.021000 systemd[1]: Starting systemd-logind.service... Oct 2 19:42:02.022207 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:42:02.022291 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:42:02.024275 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:42:02.025051 systemd[1]: Starting update-engine.service... Oct 2 19:42:02.029447 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:42:02.032171 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:42:02.032383 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:42:02.033289 jq[1132]: true Oct 2 19:42:02.034598 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:42:02.034778 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:42:02.036152 extend-filesystems[1115]: Found vda Oct 2 19:42:02.039527 extend-filesystems[1115]: Found vda1 Oct 2 19:42:02.043310 extend-filesystems[1115]: Found vda2 Oct 2 19:42:02.044296 extend-filesystems[1115]: Found vda3 Oct 2 19:42:02.045329 extend-filesystems[1115]: Found usr Oct 2 19:42:02.045329 extend-filesystems[1115]: Found vda4 Oct 2 19:42:02.045329 extend-filesystems[1115]: Found vda6 Oct 2 19:42:02.045329 extend-filesystems[1115]: Found vda7 Oct 2 19:42:02.045329 extend-filesystems[1115]: Found vda9 Oct 2 19:42:02.045329 extend-filesystems[1115]: Checking size of /dev/vda9 Oct 2 19:42:02.056578 jq[1136]: true Oct 2 19:42:02.056679 tar[1135]: crictl Oct 2 19:42:02.056945 tar[1134]: ./ Oct 2 19:42:02.056945 tar[1134]: ./loopback Oct 2 19:42:02.049084 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:42:02.049269 systemd[1]: Finished motdgen.service. Oct 2 19:42:02.067084 dbus-daemon[1113]: [system] SELinux support is enabled Oct 2 19:42:02.067376 systemd[1]: Started dbus.service. Oct 2 19:42:02.070624 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:42:02.070655 systemd[1]: Reached target system-config.target. Oct 2 19:42:02.071374 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:42:02.071391 systemd[1]: Reached target user-config.target. Oct 2 19:42:02.075469 extend-filesystems[1115]: Old size kept for /dev/vda9 Oct 2 19:42:02.078471 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:42:02.078715 systemd[1]: Finished extend-filesystems.service. Oct 2 19:42:02.095434 tar[1134]: ./bandwidth Oct 2 19:42:02.105088 systemd-logind[1129]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 19:42:02.110407 systemd-logind[1129]: New seat seat0. Oct 2 19:42:02.115549 systemd[1]: Started systemd-logind.service. Oct 2 19:42:02.140941 bash[1162]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:42:02.141828 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:42:02.148256 tar[1134]: ./ptp Oct 2 19:42:02.156256 update_engine[1130]: I1002 19:42:02.154484 1130 main.cc:92] Flatcar Update Engine starting Oct 2 19:42:02.165358 systemd[1]: Started update-engine.service. Oct 2 19:42:02.165522 update_engine[1130]: I1002 19:42:02.165375 1130 update_check_scheduler.cc:74] Next update check in 6m21s Oct 2 19:42:02.168247 systemd[1]: Started locksmithd.service. Oct 2 19:42:02.216614 tar[1134]: ./vlan Oct 2 19:42:02.272043 tar[1134]: ./host-device Oct 2 19:42:02.281429 env[1137]: time="2023-10-02T19:42:02.281369079Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:42:02.322945 env[1137]: time="2023-10-02T19:42:02.322891522Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:42:02.323357 env[1137]: time="2023-10-02T19:42:02.323334263Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:42:02.326381 env[1137]: time="2023-10-02T19:42:02.325163271Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:42:02.326381 env[1137]: time="2023-10-02T19:42:02.325197190Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:42:02.326381 env[1137]: time="2023-10-02T19:42:02.325437958Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:42:02.326381 env[1137]: time="2023-10-02T19:42:02.325456709Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:42:02.326381 env[1137]: time="2023-10-02T19:42:02.325470294Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:42:02.326381 env[1137]: time="2023-10-02T19:42:02.325481044Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:42:02.326381 env[1137]: time="2023-10-02T19:42:02.325564425Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:42:02.326381 env[1137]: time="2023-10-02T19:42:02.325969538Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:42:02.326381 env[1137]: time="2023-10-02T19:42:02.326143259Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:42:02.326381 env[1137]: time="2023-10-02T19:42:02.326161386Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:42:02.326689 env[1137]: time="2023-10-02T19:42:02.326225474Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:42:02.326689 env[1137]: time="2023-10-02T19:42:02.326238683Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:42:02.334547 tar[1134]: ./tuning Oct 2 19:42:02.338321 env[1137]: time="2023-10-02T19:42:02.336845581Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:42:02.338321 env[1137]: time="2023-10-02T19:42:02.336890168Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:42:02.338321 env[1137]: time="2023-10-02T19:42:02.336904127Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:42:02.338321 env[1137]: time="2023-10-02T19:42:02.336963506Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:42:02.338321 env[1137]: time="2023-10-02T19:42:02.336984883Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:42:02.338321 env[1137]: time="2023-10-02T19:42:02.337000176Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:42:02.338321 env[1137]: time="2023-10-02T19:42:02.337038137Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:42:02.338321 env[1137]: time="2023-10-02T19:42:02.337421331Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:42:02.338321 env[1137]: time="2023-10-02T19:42:02.337444625Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:42:02.338321 env[1137]: time="2023-10-02T19:42:02.337458334Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:42:02.338321 env[1137]: time="2023-10-02T19:42:02.337471418Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:42:02.338321 env[1137]: time="2023-10-02T19:42:02.337487378Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:42:02.338321 env[1137]: time="2023-10-02T19:42:02.337631888Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:42:02.338321 env[1137]: time="2023-10-02T19:42:02.337710936Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:42:02.338657 env[1137]: time="2023-10-02T19:42:02.337963329Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:42:02.338657 env[1137]: time="2023-10-02T19:42:02.337990789Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:42:02.338657 env[1137]: time="2023-10-02T19:42:02.338040543Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:42:02.338657 env[1137]: time="2023-10-02T19:42:02.338235057Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:42:02.338657 env[1137]: time="2023-10-02T19:42:02.338252017Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:42:02.338657 env[1137]: time="2023-10-02T19:42:02.338264851Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:42:02.338657 env[1137]: time="2023-10-02T19:42:02.338276769Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:42:02.338657 env[1137]: time="2023-10-02T19:42:02.338289311Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:42:02.340022 env[1137]: time="2023-10-02T19:42:02.338828684Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:42:02.340022 env[1137]: time="2023-10-02T19:42:02.338855894Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:42:02.340022 env[1137]: time="2023-10-02T19:42:02.338869103Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:42:02.340022 env[1137]: time="2023-10-02T19:42:02.338883771Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:42:02.340022 env[1137]: time="2023-10-02T19:42:02.339060909Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:42:02.340022 env[1137]: time="2023-10-02T19:42:02.339084827Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:42:02.340022 env[1137]: time="2023-10-02T19:42:02.339099412Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:42:02.340022 env[1137]: time="2023-10-02T19:42:02.339113746Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:42:02.340022 env[1137]: time="2023-10-02T19:42:02.339128539Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:42:02.340022 env[1137]: time="2023-10-02T19:42:02.339139456Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:42:02.340022 env[1137]: time="2023-10-02T19:42:02.339157333Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:42:02.340022 env[1137]: time="2023-10-02T19:42:02.339191294Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:42:02.340323 env[1137]: time="2023-10-02T19:42:02.339436520Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:42:02.340323 env[1137]: time="2023-10-02T19:42:02.339494149Z" level=info msg="Connect containerd service" Oct 2 19:42:02.340323 env[1137]: time="2023-10-02T19:42:02.339531527Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:42:02.347199 env[1137]: time="2023-10-02T19:42:02.345445708Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:42:02.347199 env[1137]: time="2023-10-02T19:42:02.345800775Z" level=info msg="Start subscribing containerd event" Oct 2 19:42:02.347199 env[1137]: time="2023-10-02T19:42:02.345864238Z" level=info msg="Start recovering state" Oct 2 19:42:02.347199 env[1137]: time="2023-10-02T19:42:02.345940369Z" level=info msg="Start event monitor" Oct 2 19:42:02.347199 env[1137]: time="2023-10-02T19:42:02.345958037Z" level=info msg="Start snapshots syncer" Oct 2 19:42:02.347199 env[1137]: time="2023-10-02T19:42:02.345972996Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:42:02.347199 env[1137]: time="2023-10-02T19:42:02.345994831Z" level=info msg="Start streaming server" Oct 2 19:42:02.347199 env[1137]: time="2023-10-02T19:42:02.345992956Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:42:02.347199 env[1137]: time="2023-10-02T19:42:02.346138175Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:42:02.347199 env[1137]: time="2023-10-02T19:42:02.346190470Z" level=info msg="containerd successfully booted in 0.078899s" Oct 2 19:42:02.346281 systemd[1]: Started containerd.service. Oct 2 19:42:02.366385 tar[1134]: ./vrf Oct 2 19:42:02.402382 tar[1134]: ./sbr Oct 2 19:42:02.414192 locksmithd[1166]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:42:02.433535 tar[1134]: ./tap Oct 2 19:42:02.435296 systemd-networkd[1037]: eth0: Gained IPv6LL Oct 2 19:42:02.472551 tar[1134]: ./dhcp Oct 2 19:42:02.562071 tar[1134]: ./static Oct 2 19:42:02.567763 systemd[1]: Finished prepare-critools.service. Oct 2 19:42:02.587789 tar[1134]: ./firewall Oct 2 19:42:02.626233 tar[1134]: ./macvlan Oct 2 19:42:02.659503 tar[1134]: ./dummy Oct 2 19:42:02.689295 tar[1134]: ./bridge Oct 2 19:42:02.722027 tar[1134]: ./ipvlan Oct 2 19:42:02.751912 tar[1134]: ./portmap Oct 2 19:42:02.780420 tar[1134]: ./host-local Oct 2 19:42:02.818618 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:42:05.407649 sshd_keygen[1139]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:42:05.429313 systemd[1]: Finished sshd-keygen.service. Oct 2 19:42:05.431469 systemd[1]: Starting issuegen.service... Oct 2 19:42:05.437512 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:42:05.437690 systemd[1]: Finished issuegen.service. Oct 2 19:42:05.439875 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:42:05.450268 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:42:05.452686 systemd[1]: Started getty@tty1.service. Oct 2 19:42:05.454813 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 19:42:05.455722 systemd[1]: Reached target getty.target. Oct 2 19:42:05.456408 systemd[1]: Reached target multi-user.target. Oct 2 19:42:05.458350 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:42:05.466053 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:42:05.466220 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:42:05.467055 systemd[1]: Startup finished in 615ms (kernel) + 5.933s (initrd) + 6.947s (userspace) = 13.496s. Oct 2 19:42:05.889524 systemd[1]: Created slice system-sshd.slice. Oct 2 19:42:05.890796 systemd[1]: Started sshd@0-10.0.0.6:22-10.0.0.1:58898.service. Oct 2 19:42:05.945545 sshd[1195]: Accepted publickey for core from 10.0.0.1 port 58898 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:42:05.947754 sshd[1195]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:05.957891 systemd-logind[1129]: New session 1 of user core. Oct 2 19:42:05.959898 systemd[1]: Created slice user-500.slice. Oct 2 19:42:05.961478 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:42:05.972294 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:42:05.974228 systemd[1]: Starting user@500.service... Oct 2 19:42:05.978054 (systemd)[1198]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:06.045212 systemd[1198]: Queued start job for default target default.target. Oct 2 19:42:06.045744 systemd[1198]: Reached target paths.target. Oct 2 19:42:06.045766 systemd[1198]: Reached target sockets.target. Oct 2 19:42:06.045778 systemd[1198]: Reached target timers.target. Oct 2 19:42:06.045789 systemd[1198]: Reached target basic.target. Oct 2 19:42:06.045842 systemd[1198]: Reached target default.target. Oct 2 19:42:06.045868 systemd[1198]: Startup finished in 60ms. Oct 2 19:42:06.046131 systemd[1]: Started user@500.service. Oct 2 19:42:06.047263 systemd[1]: Started session-1.scope. Oct 2 19:42:06.100810 systemd[1]: Started sshd@1-10.0.0.6:22-10.0.0.1:58906.service. Oct 2 19:42:06.140216 sshd[1207]: Accepted publickey for core from 10.0.0.1 port 58906 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:42:06.141579 sshd[1207]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:06.149410 systemd-logind[1129]: New session 2 of user core. Oct 2 19:42:06.150273 systemd[1]: Started session-2.scope. Oct 2 19:42:06.207990 sshd[1207]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:06.211620 systemd[1]: sshd@1-10.0.0.6:22-10.0.0.1:58906.service: Deactivated successfully. Oct 2 19:42:06.212233 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:42:06.212754 systemd-logind[1129]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:42:06.214286 systemd[1]: Started sshd@2-10.0.0.6:22-10.0.0.1:58908.service. Oct 2 19:42:06.215059 systemd-logind[1129]: Removed session 2. Oct 2 19:42:06.254229 sshd[1213]: Accepted publickey for core from 10.0.0.1 port 58908 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:42:06.255832 sshd[1213]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:06.259125 systemd-logind[1129]: New session 3 of user core. Oct 2 19:42:06.259962 systemd[1]: Started session-3.scope. Oct 2 19:42:06.312313 sshd[1213]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:06.315140 systemd[1]: sshd@2-10.0.0.6:22-10.0.0.1:58908.service: Deactivated successfully. Oct 2 19:42:06.315740 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:42:06.316283 systemd-logind[1129]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:42:06.317533 systemd[1]: Started sshd@3-10.0.0.6:22-10.0.0.1:58920.service. Oct 2 19:42:06.318115 systemd-logind[1129]: Removed session 3. Oct 2 19:42:06.359859 sshd[1220]: Accepted publickey for core from 10.0.0.1 port 58920 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:42:06.361166 sshd[1220]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:06.364600 systemd-logind[1129]: New session 4 of user core. Oct 2 19:42:06.365451 systemd[1]: Started session-4.scope. Oct 2 19:42:06.422002 sshd[1220]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:06.424810 systemd[1]: sshd@3-10.0.0.6:22-10.0.0.1:58920.service: Deactivated successfully. Oct 2 19:42:06.425412 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:42:06.425902 systemd-logind[1129]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:42:06.426921 systemd[1]: Started sshd@4-10.0.0.6:22-10.0.0.1:58926.service. Oct 2 19:42:06.427763 systemd-logind[1129]: Removed session 4. Oct 2 19:42:06.466690 sshd[1226]: Accepted publickey for core from 10.0.0.1 port 58926 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:42:06.468128 sshd[1226]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:06.471414 systemd-logind[1129]: New session 5 of user core. Oct 2 19:42:06.472310 systemd[1]: Started session-5.scope. Oct 2 19:42:06.534517 sudo[1229]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:42:06.535110 sudo[1229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:42:06.550230 dbus-daemon[1113]: avc: received setenforce notice (enforcing=1) Oct 2 19:42:06.552024 sudo[1229]: pam_unix(sudo:session): session closed for user root Oct 2 19:42:06.554541 sshd[1226]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:06.558915 systemd[1]: Started sshd@5-10.0.0.6:22-10.0.0.1:58940.service. Oct 2 19:42:06.559608 systemd[1]: sshd@4-10.0.0.6:22-10.0.0.1:58926.service: Deactivated successfully. Oct 2 19:42:06.560405 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:42:06.561092 systemd-logind[1129]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:42:06.562200 systemd-logind[1129]: Removed session 5. Oct 2 19:42:06.598618 sshd[1232]: Accepted publickey for core from 10.0.0.1 port 58940 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:42:06.600099 sshd[1232]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:06.603733 systemd-logind[1129]: New session 6 of user core. Oct 2 19:42:06.604566 systemd[1]: Started session-6.scope. Oct 2 19:42:06.660467 sudo[1238]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:42:06.660715 sudo[1238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:42:06.663772 sudo[1238]: pam_unix(sudo:session): session closed for user root Oct 2 19:42:06.668700 sudo[1237]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:42:06.668903 sudo[1237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:42:06.677828 systemd[1]: Stopping audit-rules.service... Oct 2 19:42:06.678000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:42:06.680130 kernel: kauditd_printk_skb: 116 callbacks suppressed Oct 2 19:42:06.680188 kernel: audit: type=1305 audit(1696275726.678:155): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:42:06.680420 auditctl[1241]: No rules Oct 2 19:42:06.680716 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:42:06.680885 systemd[1]: Stopped audit-rules.service. Oct 2 19:42:06.678000 audit[1241]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc67e3140 a2=420 a3=0 items=0 ppid=1 pid=1241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:06.682552 systemd[1]: Starting audit-rules.service... Oct 2 19:42:06.684160 kernel: audit: type=1300 audit(1696275726.678:155): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc67e3140 a2=420 a3=0 items=0 ppid=1 pid=1241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:06.684205 kernel: audit: type=1327 audit(1696275726.678:155): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:42:06.678000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:42:06.679000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:06.686763 kernel: audit: type=1131 audit(1696275726.679:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:06.702506 augenrules[1258]: No rules Oct 2 19:42:06.703263 systemd[1]: Finished audit-rules.service. Oct 2 19:42:06.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:06.704227 sudo[1237]: pam_unix(sudo:session): session closed for user root Oct 2 19:42:06.703000 audit[1237]: USER_END pid=1237 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:06.706346 sshd[1232]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:06.707861 kernel: audit: type=1130 audit(1696275726.702:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:06.707940 kernel: audit: type=1106 audit(1696275726.703:158): pid=1237 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:06.707961 kernel: audit: type=1104 audit(1696275726.703:159): pid=1237 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:06.703000 audit[1237]: CRED_DISP pid=1237 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:06.710034 kernel: audit: type=1106 audit(1696275726.707:160): pid=1232 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.707000 audit[1232]: USER_END pid=1232 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.709918 systemd[1]: sshd@5-10.0.0.6:22-10.0.0.1:58940.service: Deactivated successfully. Oct 2 19:42:06.710509 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:42:06.711090 systemd-logind[1129]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:42:06.712090 systemd[1]: Started sshd@6-10.0.0.6:22-10.0.0.1:58952.service. Oct 2 19:42:06.712352 kernel: audit: type=1104 audit(1696275726.707:161): pid=1232 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.707000 audit[1232]: CRED_DISP pid=1232 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.712837 systemd-logind[1129]: Removed session 6. Oct 2 19:42:06.714298 kernel: audit: type=1131 audit(1696275726.709:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.6:22-10.0.0.1:58940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:06.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.6:22-10.0.0.1:58940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:06.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.6:22-10.0.0.1:58952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:06.750000 audit[1264]: USER_ACCT pid=1264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.751509 sshd[1264]: Accepted publickey for core from 10.0.0.1 port 58952 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:42:06.751000 audit[1264]: CRED_ACQ pid=1264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.751000 audit[1264]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa296660 a2=3 a3=1 items=0 ppid=1 pid=1264 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:06.751000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:06.753284 sshd[1264]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:06.757040 systemd-logind[1129]: New session 7 of user core. Oct 2 19:42:06.757702 systemd[1]: Started session-7.scope. Oct 2 19:42:06.760000 audit[1264]: USER_START pid=1264 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.761000 audit[1266]: CRED_ACQ pid=1266 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:06.810000 audit[1267]: USER_ACCT pid=1267 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:06.811958 sudo[1267]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:42:06.811000 audit[1267]: CRED_REFR pid=1267 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:06.812423 sudo[1267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:42:06.813000 audit[1267]: USER_START pid=1267 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:07.540808 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:42:07.548967 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:42:07.548000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:07.549308 systemd[1]: Reached target network-online.target. Oct 2 19:42:07.550977 systemd[1]: Starting docker.service... Oct 2 19:42:07.687227 env[1286]: time="2023-10-02T19:42:07.687171578Z" level=info msg="Starting up" Oct 2 19:42:07.690218 env[1286]: time="2023-10-02T19:42:07.689111604Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:42:07.690218 env[1286]: time="2023-10-02T19:42:07.689137589Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:42:07.690218 env[1286]: time="2023-10-02T19:42:07.689158017Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:42:07.690218 env[1286]: time="2023-10-02T19:42:07.689169211Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:42:07.691343 env[1286]: time="2023-10-02T19:42:07.691315439Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:42:07.691427 env[1286]: time="2023-10-02T19:42:07.691412678Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:42:07.691487 env[1286]: time="2023-10-02T19:42:07.691471592Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:42:07.691555 env[1286]: time="2023-10-02T19:42:07.691541293Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:42:07.802547 env[1286]: time="2023-10-02T19:42:07.802451196Z" level=info msg="Loading containers: start." Oct 2 19:42:07.850000 audit[1320]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1320 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.850000 audit[1320]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffd5c46f20 a2=0 a3=1 items=0 ppid=1286 pid=1320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.850000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:42:07.852000 audit[1322]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1322 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.852000 audit[1322]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe343fe30 a2=0 a3=1 items=0 ppid=1286 pid=1322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.852000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:42:07.854000 audit[1324]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1324 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.854000 audit[1324]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc4d91c50 a2=0 a3=1 items=0 ppid=1286 pid=1324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.854000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:42:07.857000 audit[1326]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.857000 audit[1326]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd1e95830 a2=0 a3=1 items=0 ppid=1286 pid=1326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.857000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:42:07.859000 audit[1328]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1328 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.859000 audit[1328]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd72e2840 a2=0 a3=1 items=0 ppid=1286 pid=1328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.859000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:42:07.876000 audit[1333]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1333 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.876000 audit[1333]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc431efe0 a2=0 a3=1 items=0 ppid=1286 pid=1333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.876000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:42:07.883000 audit[1335]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1335 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.883000 audit[1335]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe9132b60 a2=0 a3=1 items=0 ppid=1286 pid=1335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.883000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:42:07.885000 audit[1337]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1337 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.885000 audit[1337]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffcede28e0 a2=0 a3=1 items=0 ppid=1286 pid=1337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.885000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:42:07.886000 audit[1339]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1339 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.886000 audit[1339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffdc245ca0 a2=0 a3=1 items=0 ppid=1286 pid=1339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.886000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:42:07.898000 audit[1343]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1343 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.898000 audit[1343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffde863d30 a2=0 a3=1 items=0 ppid=1286 pid=1343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.898000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:42:07.899000 audit[1344]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1344 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.899000 audit[1344]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd6fcb150 a2=0 a3=1 items=0 ppid=1286 pid=1344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.899000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:42:07.906013 kernel: Initializing XFRM netlink socket Oct 2 19:42:07.929454 env[1286]: time="2023-10-02T19:42:07.929411089Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:42:07.943000 audit[1352]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1352 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.943000 audit[1352]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffedbe89a0 a2=0 a3=1 items=0 ppid=1286 pid=1352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.943000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:42:07.958000 audit[1355]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1355 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.958000 audit[1355]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=fffff7d8b2a0 a2=0 a3=1 items=0 ppid=1286 pid=1355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.958000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:42:07.961000 audit[1358]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1358 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.961000 audit[1358]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffe48def10 a2=0 a3=1 items=0 ppid=1286 pid=1358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.961000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:42:07.963000 audit[1360]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1360 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.963000 audit[1360]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff8889340 a2=0 a3=1 items=0 ppid=1286 pid=1360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.963000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:42:07.966000 audit[1362]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1362 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.966000 audit[1362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=fffffd7f6d20 a2=0 a3=1 items=0 ppid=1286 pid=1362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.966000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:42:07.968000 audit[1364]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1364 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.968000 audit[1364]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffffbf2a1c0 a2=0 a3=1 items=0 ppid=1286 pid=1364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.968000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:42:07.970000 audit[1366]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1366 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.970000 audit[1366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffffee15f20 a2=0 a3=1 items=0 ppid=1286 pid=1366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.970000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:42:07.977000 audit[1369]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1369 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.977000 audit[1369]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=fffff1ff90e0 a2=0 a3=1 items=0 ppid=1286 pid=1369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.977000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:42:07.979000 audit[1371]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1371 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.979000 audit[1371]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffe6138ab0 a2=0 a3=1 items=0 ppid=1286 pid=1371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.979000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:42:07.981000 audit[1373]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1373 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.981000 audit[1373]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffe7587350 a2=0 a3=1 items=0 ppid=1286 pid=1373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.981000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:42:07.982000 audit[1375]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1375 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.982000 audit[1375]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffcb534370 a2=0 a3=1 items=0 ppid=1286 pid=1375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.982000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:42:07.984461 systemd-networkd[1037]: docker0: Link UP Oct 2 19:42:07.990000 audit[1379]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1379 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.990000 audit[1379]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe615cb50 a2=0 a3=1 items=0 ppid=1286 pid=1379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.990000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:42:07.991000 audit[1380]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1380 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:07.991000 audit[1380]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff939dbd0 a2=0 a3=1 items=0 ppid=1286 pid=1380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.991000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:42:07.992522 env[1286]: time="2023-10-02T19:42:07.992481735Z" level=info msg="Loading containers: done." Oct 2 19:42:08.018930 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck813432500-merged.mount: Deactivated successfully. Oct 2 19:42:08.022309 env[1286]: time="2023-10-02T19:42:08.022268825Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:42:08.022607 env[1286]: time="2023-10-02T19:42:08.022584266Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:42:08.022780 env[1286]: time="2023-10-02T19:42:08.022760589Z" level=info msg="Daemon has completed initialization" Oct 2 19:42:08.039476 systemd[1]: Started docker.service. Oct 2 19:42:08.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:08.046143 env[1286]: time="2023-10-02T19:42:08.045881243Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:42:08.065112 systemd[1]: Reloading. Oct 2 19:42:08.126504 /usr/lib/systemd/system-generators/torcx-generator[1428]: time="2023-10-02T19:42:08Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:42:08.126533 /usr/lib/systemd/system-generators/torcx-generator[1428]: time="2023-10-02T19:42:08Z" level=info msg="torcx already run" Oct 2 19:42:08.196202 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:42:08.196224 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:42:08.214138 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:42:08.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.260000 audit: BPF prog-id=31 op=LOAD Oct 2 19:42:08.261000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit: BPF prog-id=32 op=LOAD Oct 2 19:42:08.261000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit: BPF prog-id=33 op=LOAD Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.261000 audit: BPF prog-id=34 op=LOAD Oct 2 19:42:08.261000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:42:08.262000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:42:08.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.262000 audit: BPF prog-id=35 op=LOAD Oct 2 19:42:08.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.262000 audit: BPF prog-id=36 op=LOAD Oct 2 19:42:08.262000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:42:08.262000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:42:08.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.263000 audit: BPF prog-id=37 op=LOAD Oct 2 19:42:08.263000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:42:08.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit: BPF prog-id=38 op=LOAD Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit: BPF prog-id=39 op=LOAD Oct 2 19:42:08.264000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:42:08.264000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.264000 audit: BPF prog-id=40 op=LOAD Oct 2 19:42:08.264000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:42:08.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.265000 audit: BPF prog-id=41 op=LOAD Oct 2 19:42:08.265000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:42:08.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.266000 audit: BPF prog-id=42 op=LOAD Oct 2 19:42:08.266000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:42:08.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit: BPF prog-id=43 op=LOAD Oct 2 19:42:08.268000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit: BPF prog-id=44 op=LOAD Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:08.268000 audit: BPF prog-id=45 op=LOAD Oct 2 19:42:08.268000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:42:08.268000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:42:08.276793 systemd[1]: Started kubelet.service. Oct 2 19:42:08.275000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:08.521021 kubelet[1465]: E1002 19:42:08.519826 1465 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:42:08.522268 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:42:08.522396 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:42:08.521000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:42:08.690376 env[1137]: time="2023-10-02T19:42:08.690326142Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\"" Oct 2 19:42:09.720212 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3499355319.mount: Deactivated successfully. Oct 2 19:42:13.165787 env[1137]: time="2023-10-02T19:42:13.165729796Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:13.166879 env[1137]: time="2023-10-02T19:42:13.166838872Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:30bb499447fe1bc655853e2e8ac386cdeb28c80263536259cb54f290f9a58d6c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:13.168253 env[1137]: time="2023-10-02T19:42:13.168224499Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:13.169870 env[1137]: time="2023-10-02T19:42:13.169837248Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6beea2e5531a0606613594fd3ed92d71bbdcef99dd3237522049a0b32cad736c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:13.170679 env[1137]: time="2023-10-02T19:42:13.170645582Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\" returns image reference \"sha256:30bb499447fe1bc655853e2e8ac386cdeb28c80263536259cb54f290f9a58d6c\"" Oct 2 19:42:13.181636 env[1137]: time="2023-10-02T19:42:13.181599837Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\"" Oct 2 19:42:16.187986 env[1137]: time="2023-10-02T19:42:16.187932216Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:16.189190 env[1137]: time="2023-10-02T19:42:16.189166671Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:89d57b83c17862d0ca2dd214e9e5ad425f8d67ecba32d10b846f8d22d3b5597c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:16.191076 env[1137]: time="2023-10-02T19:42:16.191049031Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:16.193236 env[1137]: time="2023-10-02T19:42:16.193202323Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6a42ce14d716205a99763f3c732c0a8f0ea041bdbbea7d2dfffcc53dafd7cac4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:16.193883 env[1137]: time="2023-10-02T19:42:16.193855783Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\" returns image reference \"sha256:89d57b83c17862d0ca2dd214e9e5ad425f8d67ecba32d10b846f8d22d3b5597c\"" Oct 2 19:42:16.205026 env[1137]: time="2023-10-02T19:42:16.204988990Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\"" Oct 2 19:42:18.108346 env[1137]: time="2023-10-02T19:42:18.108296071Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:18.109870 env[1137]: time="2023-10-02T19:42:18.109840164Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:64fc40cee3716a4596d219b360ce536adb7998eaeae3f5dbb774d6503f5039d7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:18.112710 env[1137]: time="2023-10-02T19:42:18.112680976Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:18.114520 env[1137]: time="2023-10-02T19:42:18.114482813Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:6511193f8114a2f011790619698efe12a8119ed9a17e2e36f4c1c759ccf173ab,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:18.115311 env[1137]: time="2023-10-02T19:42:18.115280766Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\" returns image reference \"sha256:64fc40cee3716a4596d219b360ce536adb7998eaeae3f5dbb774d6503f5039d7\"" Oct 2 19:42:18.126163 env[1137]: time="2023-10-02T19:42:18.126116990Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\"" Oct 2 19:42:18.773708 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:42:18.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.773883 systemd[1]: Stopped kubelet.service. Oct 2 19:42:18.775368 systemd[1]: Started kubelet.service. Oct 2 19:42:18.776175 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 19:42:18.776235 kernel: audit: type=1130 audit(1696275738.772:372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.776265 kernel: audit: type=1131 audit(1696275738.772:373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.772000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.777823 kernel: audit: type=1130 audit(1696275738.774:374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.829166 kubelet[1507]: E1002 19:42:18.829115 1507 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:42:18.832190 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:42:18.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:42:18.832309 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:42:18.835001 kernel: audit: type=1131 audit(1696275738.831:375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:42:19.633275 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3222384434.mount: Deactivated successfully. Oct 2 19:42:20.063059 env[1137]: time="2023-10-02T19:42:20.062684634Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:20.063821 env[1137]: time="2023-10-02T19:42:20.063793844Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7da62c127fc0f2c3473babe4dd0fe1da874278c4e524a490b1781e3e0e6dddfa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:20.064820 env[1137]: time="2023-10-02T19:42:20.064797015Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:20.066091 env[1137]: time="2023-10-02T19:42:20.066066668Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:41c8f92d1cd571e0e36af431f35c78379f84f5daf5b85d43014a9940d697afcf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:20.066474 env[1137]: time="2023-10-02T19:42:20.066453040Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\" returns image reference \"sha256:7da62c127fc0f2c3473babe4dd0fe1da874278c4e524a490b1781e3e0e6dddfa\"" Oct 2 19:42:20.076524 env[1137]: time="2023-10-02T19:42:20.076405533Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:42:20.629903 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2565951577.mount: Deactivated successfully. Oct 2 19:42:20.633480 env[1137]: time="2023-10-02T19:42:20.633439422Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:20.634559 env[1137]: time="2023-10-02T19:42:20.634531327Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:20.638692 env[1137]: time="2023-10-02T19:42:20.638652057Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:20.640567 env[1137]: time="2023-10-02T19:42:20.640529354Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:20.641129 env[1137]: time="2023-10-02T19:42:20.641098936Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 19:42:20.651993 env[1137]: time="2023-10-02T19:42:20.651945630Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Oct 2 19:42:25.074024 env[1137]: time="2023-10-02T19:42:25.073962270Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:25.075541 env[1137]: time="2023-10-02T19:42:25.075498037Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:25.077838 env[1137]: time="2023-10-02T19:42:25.077803370Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:25.079678 env[1137]: time="2023-10-02T19:42:25.079634226Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:25.081193 env[1137]: time="2023-10-02T19:42:25.081154082Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace\"" Oct 2 19:42:25.095101 env[1137]: time="2023-10-02T19:42:25.095049403Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:42:25.625013 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount85573183.mount: Deactivated successfully. Oct 2 19:42:26.314734 env[1137]: time="2023-10-02T19:42:26.314630260Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:26.315943 env[1137]: time="2023-10-02T19:42:26.315913269Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:26.317458 env[1137]: time="2023-10-02T19:42:26.317421539Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:26.318650 env[1137]: time="2023-10-02T19:42:26.318619284Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:26.319242 env[1137]: time="2023-10-02T19:42:26.319212327Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 19:42:29.017062 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:42:29.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:29.017237 systemd[1]: Stopped kubelet.service. Oct 2 19:42:29.018646 systemd[1]: Started kubelet.service. Oct 2 19:42:29.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:29.020847 kernel: audit: type=1130 audit(1696275749.016:376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:29.020922 kernel: audit: type=1131 audit(1696275749.016:377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:29.020944 kernel: audit: type=1130 audit(1696275749.017:378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:29.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:29.070161 kubelet[1607]: E1002 19:42:29.070115 1607 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:42:29.072235 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:42:29.072357 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:42:29.071000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:42:29.074980 kernel: audit: type=1131 audit(1696275749.071:379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:42:32.316270 systemd[1]: Stopped kubelet.service. Oct 2 19:42:32.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:32.315000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:32.319905 kernel: audit: type=1130 audit(1696275752.315:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:32.320007 kernel: audit: type=1131 audit(1696275752.315:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:32.335187 systemd[1]: Reloading. Oct 2 19:42:32.380029 /usr/lib/systemd/system-generators/torcx-generator[1639]: time="2023-10-02T19:42:32Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:42:32.380056 /usr/lib/systemd/system-generators/torcx-generator[1639]: time="2023-10-02T19:42:32Z" level=info msg="torcx already run" Oct 2 19:42:32.452160 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:42:32.452182 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:42:32.471117 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:42:32.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.521812 kernel: audit: type=1400 audit(1696275752.517:382): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.521861 kernel: audit: type=1400 audit(1696275752.517:383): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.521882 kernel: audit: type=1400 audit(1696275752.517:384): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.523573 kernel: audit: type=1400 audit(1696275752.517:385): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.519000 audit: BPF prog-id=46 op=LOAD Oct 2 19:42:32.519000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:42:32.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.520000 audit: BPF prog-id=47 op=LOAD Oct 2 19:42:32.520000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:42:32.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.522000 audit: BPF prog-id=48 op=LOAD Oct 2 19:42:32.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit: BPF prog-id=49 op=LOAD Oct 2 19:42:32.524000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:42:32.524000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit: BPF prog-id=50 op=LOAD Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.524000 audit: BPF prog-id=51 op=LOAD Oct 2 19:42:32.524000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:42:32.524000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:42:32.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit: BPF prog-id=52 op=LOAD Oct 2 19:42:32.526000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit: BPF prog-id=53 op=LOAD Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit: BPF prog-id=54 op=LOAD Oct 2 19:42:32.526000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:42:32.526000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.526000 audit: BPF prog-id=55 op=LOAD Oct 2 19:42:32.526000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:42:32.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.527000 audit: BPF prog-id=56 op=LOAD Oct 2 19:42:32.527000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:42:32.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.528000 audit: BPF prog-id=57 op=LOAD Oct 2 19:42:32.528000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:42:32.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit: BPF prog-id=58 op=LOAD Oct 2 19:42:32.530000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit: BPF prog-id=59 op=LOAD Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:32.530000 audit: BPF prog-id=60 op=LOAD Oct 2 19:42:32.530000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:42:32.530000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:42:32.542000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:32.542985 systemd[1]: Started kubelet.service. Oct 2 19:42:32.604379 kubelet[1676]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:42:32.604379 kubelet[1676]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:42:32.604379 kubelet[1676]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:42:32.604379 kubelet[1676]: I1002 19:42:32.600181 1676 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:42:33.954758 kubelet[1676]: I1002 19:42:33.954723 1676 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 19:42:33.955140 kubelet[1676]: I1002 19:42:33.955124 1676 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:42:33.955452 kubelet[1676]: I1002 19:42:33.955435 1676 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 19:42:33.960542 kubelet[1676]: I1002 19:42:33.960503 1676 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:42:33.960673 kubelet[1676]: E1002 19:42:33.960652 1676 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.6:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.6:6443: connect: connection refused Oct 2 19:42:33.965226 kubelet[1676]: W1002 19:42:33.965200 1676 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:42:33.965874 kubelet[1676]: I1002 19:42:33.965850 1676 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:42:33.966114 kubelet[1676]: I1002 19:42:33.966096 1676 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:42:33.966263 kubelet[1676]: I1002 19:42:33.966245 1676 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 19:42:33.966343 kubelet[1676]: I1002 19:42:33.966272 1676 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 19:42:33.966343 kubelet[1676]: I1002 19:42:33.966280 1676 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 19:42:33.966392 kubelet[1676]: I1002 19:42:33.966379 1676 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:42:33.966651 kubelet[1676]: I1002 19:42:33.966632 1676 kubelet.go:393] "Attempting to sync node with API server" Oct 2 19:42:33.966651 kubelet[1676]: I1002 19:42:33.966648 1676 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:42:33.966704 kubelet[1676]: I1002 19:42:33.966665 1676 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:42:33.966824 kubelet[1676]: I1002 19:42:33.966803 1676 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:42:33.967565 kubelet[1676]: W1002 19:42:33.967504 1676 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.6:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.6:6443: connect: connection refused Oct 2 19:42:33.967625 kubelet[1676]: E1002 19:42:33.967618 1676 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.6:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.6:6443: connect: connection refused Oct 2 19:42:33.968843 kubelet[1676]: I1002 19:42:33.968817 1676 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:42:33.969834 kubelet[1676]: W1002 19:42:33.969620 1676 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:42:33.970103 kubelet[1676]: W1002 19:42:33.969947 1676 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.6:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.6:6443: connect: connection refused Oct 2 19:42:33.970888 kubelet[1676]: E1002 19:42:33.970792 1676 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.6:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.6:6443: connect: connection refused Oct 2 19:42:33.971039 kubelet[1676]: I1002 19:42:33.971021 1676 server.go:1232] "Started kubelet" Oct 2 19:42:33.971150 kubelet[1676]: I1002 19:42:33.971135 1676 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:42:33.971796 kubelet[1676]: I1002 19:42:33.971775 1676 server.go:462] "Adding debug handlers to kubelet server" Oct 2 19:42:33.970000 audit[1676]: AVC avc: denied { mac_admin } for pid=1676 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.970000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:42:33.970000 audit[1676]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c713e0 a1=4000d88e28 a2=4000c713b0 a3=25 items=0 ppid=1 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.970000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:42:33.971000 audit[1676]: AVC avc: denied { mac_admin } for pid=1676 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.971000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:42:33.971000 audit[1676]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40003e5ac0 a1=4000d88e40 a2=4000c71470 a3=25 items=0 ppid=1 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.971000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:42:33.972283 kubelet[1676]: I1002 19:42:33.972006 1676 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:42:33.972283 kubelet[1676]: I1002 19:42:33.972041 1676 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:42:33.972283 kubelet[1676]: I1002 19:42:33.972105 1676 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:42:33.972283 kubelet[1676]: I1002 19:42:33.972275 1676 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:42:33.972566 kubelet[1676]: I1002 19:42:33.972535 1676 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 19:42:33.973470 kubelet[1676]: E1002 19:42:33.973383 1676 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a61cf9c8c9061", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 42, 33, 970995297, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 42, 33, 970995297, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"localhost"}': 'Post "https://10.0.0.6:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.6:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:42:33.974385 kubelet[1676]: I1002 19:42:33.974356 1676 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 19:42:33.974459 kubelet[1676]: I1002 19:42:33.974445 1676 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:42:33.974527 kubelet[1676]: I1002 19:42:33.974514 1676 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 19:42:33.974882 kubelet[1676]: W1002 19:42:33.974818 1676 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.6:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.6:6443: connect: connection refused Oct 2 19:42:33.974882 kubelet[1676]: E1002 19:42:33.974863 1676 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.6:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.6:6443: connect: connection refused Oct 2 19:42:33.975040 kubelet[1676]: E1002 19:42:33.974896 1676 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:42:33.975040 kubelet[1676]: E1002 19:42:33.974973 1676 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:42:33.975263 kubelet[1676]: E1002 19:42:33.975236 1676 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.6:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.6:6443: connect: connection refused" interval="200ms" Oct 2 19:42:33.975000 audit[1688]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1688 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:33.975000 audit[1688]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcb181d50 a2=0 a3=1 items=0 ppid=1676 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.975000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:42:33.976000 audit[1689]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1689 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:33.976000 audit[1689]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe1ad7540 a2=0 a3=1 items=0 ppid=1676 pid=1689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.976000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:42:33.979000 audit[1691]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1691 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:33.979000 audit[1691]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd7075310 a2=0 a3=1 items=0 ppid=1676 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.979000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:42:33.981000 audit[1693]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1693 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:33.981000 audit[1693]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffffeb302e0 a2=0 a3=1 items=0 ppid=1676 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.981000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:42:33.989000 audit[1696]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1696 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:33.989000 audit[1696]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffe8bd8f90 a2=0 a3=1 items=0 ppid=1676 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.989000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:42:33.990903 kubelet[1676]: I1002 19:42:33.990566 1676 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 19:42:33.990000 audit[1698]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1698 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:33.990000 audit[1698]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe5606a20 a2=0 a3=1 items=0 ppid=1676 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.990000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:42:33.991938 kubelet[1676]: I1002 19:42:33.991723 1676 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 19:42:33.991938 kubelet[1676]: I1002 19:42:33.991757 1676 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 19:42:33.991938 kubelet[1676]: I1002 19:42:33.991777 1676 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 19:42:33.991938 kubelet[1676]: E1002 19:42:33.991831 1676 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:42:33.991000 audit[1699]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1699 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:33.991000 audit[1699]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdd32ad10 a2=0 a3=1 items=0 ppid=1676 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.991000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:42:33.992000 audit[1700]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1700 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:33.992000 audit[1700]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc0bcf220 a2=0 a3=1 items=0 ppid=1676 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.992000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:42:33.994000 audit[1701]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=1701 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:33.994000 audit[1701]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdb64f540 a2=0 a3=1 items=0 ppid=1676 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.994000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:42:33.997000 audit[1702]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=1702 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:33.997000 audit[1702]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe42e3860 a2=0 a3=1 items=0 ppid=1676 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.997000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:42:33.998681 kubelet[1676]: W1002 19:42:33.998556 1676 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.6:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.6:6443: connect: connection refused Oct 2 19:42:33.998993 kubelet[1676]: E1002 19:42:33.998921 1676 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.6:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.6:6443: connect: connection refused Oct 2 19:42:33.998000 audit[1706]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1706 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:33.998000 audit[1706]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffd94e60f0 a2=0 a3=1 items=0 ppid=1676 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.998000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:42:33.999000 audit[1707]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1707 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:33.999000 audit[1707]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdca44b00 a2=0 a3=1 items=0 ppid=1676 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.999000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:42:34.008198 kubelet[1676]: I1002 19:42:34.008141 1676 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:42:34.008198 kubelet[1676]: I1002 19:42:34.008164 1676 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:42:34.008198 kubelet[1676]: I1002 19:42:34.008183 1676 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:42:34.009905 kubelet[1676]: I1002 19:42:34.009882 1676 policy_none.go:49] "None policy: Start" Oct 2 19:42:34.010807 kubelet[1676]: I1002 19:42:34.010788 1676 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:42:34.011016 kubelet[1676]: I1002 19:42:34.011000 1676 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:42:34.017346 systemd[1]: Created slice kubepods.slice. Oct 2 19:42:34.021531 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:42:34.030282 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:42:34.031598 kubelet[1676]: I1002 19:42:34.031571 1676 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:42:34.033467 kernel: kauditd_printk_skb: 213 callbacks suppressed Oct 2 19:42:34.033496 kernel: audit: type=1400 audit(1696275754.030:569): avc: denied { mac_admin } for pid=1676 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:34.030000 audit[1676]: AVC avc: denied { mac_admin } for pid=1676 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:34.033579 kubelet[1676]: I1002 19:42:34.031640 1676 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:42:34.033579 kubelet[1676]: I1002 19:42:34.031832 1676 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:42:34.033579 kubelet[1676]: E1002 19:42:34.033330 1676 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 2 19:42:34.030000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:42:34.034614 kernel: audit: type=1401 audit(1696275754.030:569): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:42:34.034678 kernel: audit: type=1300 audit(1696275754.030:569): arch=c00000b7 syscall=5 success=no exit=-22 a0=400099ecf0 a1=40009cc828 a2=400099ecc0 a3=25 items=0 ppid=1 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:34.030000 audit[1676]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400099ecf0 a1=40009cc828 a2=400099ecc0 a3=25 items=0 ppid=1 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:34.037093 kernel: audit: type=1327 audit(1696275754.030:569): proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:42:34.030000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:42:34.076055 kubelet[1676]: I1002 19:42:34.076012 1676 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:42:34.076436 kubelet[1676]: E1002 19:42:34.076416 1676 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.6:6443/api/v1/nodes\": dial tcp 10.0.0.6:6443: connect: connection refused" node="localhost" Oct 2 19:42:34.092813 kubelet[1676]: I1002 19:42:34.092784 1676 topology_manager.go:215] "Topology Admit Handler" podUID="b619222ebfcfd1a0c9478200f0921497" podNamespace="kube-system" podName="kube-scheduler-localhost" Oct 2 19:42:34.093991 kubelet[1676]: I1002 19:42:34.093952 1676 topology_manager.go:215] "Topology Admit Handler" podUID="1c25755513686167712254348be54904" podNamespace="kube-system" podName="kube-apiserver-localhost" Oct 2 19:42:34.094863 kubelet[1676]: I1002 19:42:34.094838 1676 topology_manager.go:215] "Topology Admit Handler" podUID="6961ff1365464b1e2d286a48d6c5e40f" podNamespace="kube-system" podName="kube-controller-manager-localhost" Oct 2 19:42:34.099744 systemd[1]: Created slice kubepods-burstable-pod1c25755513686167712254348be54904.slice. Oct 2 19:42:34.116549 systemd[1]: Created slice kubepods-burstable-podb619222ebfcfd1a0c9478200f0921497.slice. Oct 2 19:42:34.120244 systemd[1]: Created slice kubepods-burstable-pod6961ff1365464b1e2d286a48d6c5e40f.slice. Oct 2 19:42:34.175173 kubelet[1676]: I1002 19:42:34.175135 1676 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:42:34.175173 kubelet[1676]: I1002 19:42:34.175177 1676 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/1c25755513686167712254348be54904-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"1c25755513686167712254348be54904\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:42:34.175317 kubelet[1676]: I1002 19:42:34.175198 1676 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/1c25755513686167712254348be54904-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"1c25755513686167712254348be54904\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:42:34.175317 kubelet[1676]: I1002 19:42:34.175215 1676 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:42:34.175317 kubelet[1676]: I1002 19:42:34.175234 1676 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:42:34.175317 kubelet[1676]: I1002 19:42:34.175251 1676 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:42:34.175317 kubelet[1676]: I1002 19:42:34.175270 1676 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:42:34.175438 kubelet[1676]: I1002 19:42:34.175290 1676 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b619222ebfcfd1a0c9478200f0921497-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b619222ebfcfd1a0c9478200f0921497\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:42:34.175438 kubelet[1676]: I1002 19:42:34.175309 1676 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/1c25755513686167712254348be54904-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"1c25755513686167712254348be54904\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:42:34.175704 kubelet[1676]: E1002 19:42:34.175683 1676 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.6:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.6:6443: connect: connection refused" interval="400ms" Oct 2 19:42:34.278384 kubelet[1676]: I1002 19:42:34.278341 1676 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:42:34.278698 kubelet[1676]: E1002 19:42:34.278669 1676 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.6:6443/api/v1/nodes\": dial tcp 10.0.0.6:6443: connect: connection refused" node="localhost" Oct 2 19:42:34.416001 kubelet[1676]: E1002 19:42:34.415949 1676 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:34.417031 env[1137]: time="2023-10-02T19:42:34.416768903Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:1c25755513686167712254348be54904,Namespace:kube-system,Attempt:0,}" Oct 2 19:42:34.419587 kubelet[1676]: E1002 19:42:34.419562 1676 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:34.420196 env[1137]: time="2023-10-02T19:42:34.419975983Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b619222ebfcfd1a0c9478200f0921497,Namespace:kube-system,Attempt:0,}" Oct 2 19:42:34.422580 kubelet[1676]: E1002 19:42:34.422551 1676 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:34.422912 env[1137]: time="2023-10-02T19:42:34.422882021Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:6961ff1365464b1e2d286a48d6c5e40f,Namespace:kube-system,Attempt:0,}" Oct 2 19:42:34.576412 kubelet[1676]: E1002 19:42:34.576311 1676 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.6:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.6:6443: connect: connection refused" interval="800ms" Oct 2 19:42:34.680036 kubelet[1676]: I1002 19:42:34.680009 1676 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:42:34.680326 kubelet[1676]: E1002 19:42:34.680309 1676 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.6:6443/api/v1/nodes\": dial tcp 10.0.0.6:6443: connect: connection refused" node="localhost" Oct 2 19:42:34.820647 kubelet[1676]: W1002 19:42:34.820570 1676 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.6:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.6:6443: connect: connection refused Oct 2 19:42:34.820647 kubelet[1676]: E1002 19:42:34.820646 1676 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.6:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.6:6443: connect: connection refused Oct 2 19:42:34.845542 kubelet[1676]: W1002 19:42:34.845430 1676 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.6:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.6:6443: connect: connection refused Oct 2 19:42:34.845670 kubelet[1676]: E1002 19:42:34.845655 1676 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.6:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.6:6443: connect: connection refused Oct 2 19:42:34.920063 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount134415421.mount: Deactivated successfully. Oct 2 19:42:34.923445 env[1137]: time="2023-10-02T19:42:34.923405804Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:34.924762 env[1137]: time="2023-10-02T19:42:34.924731577Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:34.926805 env[1137]: time="2023-10-02T19:42:34.926773993Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:34.927634 env[1137]: time="2023-10-02T19:42:34.927608915Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:34.930185 env[1137]: time="2023-10-02T19:42:34.930154190Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:34.933047 env[1137]: time="2023-10-02T19:42:34.933013316Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:34.938185 env[1137]: time="2023-10-02T19:42:34.938148615Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:34.939766 env[1137]: time="2023-10-02T19:42:34.939722715Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:34.941415 env[1137]: time="2023-10-02T19:42:34.941387516Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:34.942219 env[1137]: time="2023-10-02T19:42:34.942195901Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:34.942997 env[1137]: time="2023-10-02T19:42:34.942958094Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:34.943944 env[1137]: time="2023-10-02T19:42:34.943917661Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:34.970454 env[1137]: time="2023-10-02T19:42:34.970371039Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:42:34.970454 env[1137]: time="2023-10-02T19:42:34.970415429Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:42:34.970454 env[1137]: time="2023-10-02T19:42:34.970426477Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:42:34.970725 env[1137]: time="2023-10-02T19:42:34.970687813Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0baa88b6211a21645900e5d119470ddc11d4f5e2007efdf2f4ca60c291b17251 pid=1736 runtime=io.containerd.runc.v2 Oct 2 19:42:34.973191 env[1137]: time="2023-10-02T19:42:34.973115808Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:42:34.973191 env[1137]: time="2023-10-02T19:42:34.973152793Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:42:34.973191 env[1137]: time="2023-10-02T19:42:34.973164161Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:42:34.973191 env[1137]: time="2023-10-02T19:42:34.973165001Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:42:34.973381 env[1137]: time="2023-10-02T19:42:34.973197943Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:42:34.973381 env[1137]: time="2023-10-02T19:42:34.973210472Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:42:34.973628 env[1137]: time="2023-10-02T19:42:34.973580441Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d8dbb3930f9ba2eba348df1bd80033c8f8ede32e31f972f667fdba5706cf98aa pid=1735 runtime=io.containerd.runc.v2 Oct 2 19:42:34.973861 env[1137]: time="2023-10-02T19:42:34.973817801Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/daf18cb362a9c3702afea2506eaa44369c63e0e9fae976b2a74e138cc417928c pid=1731 runtime=io.containerd.runc.v2 Oct 2 19:42:34.982736 kubelet[1676]: W1002 19:42:34.982648 1676 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.6:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.6:6443: connect: connection refused Oct 2 19:42:34.982736 kubelet[1676]: E1002 19:42:34.982714 1676 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.6:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.6:6443: connect: connection refused Oct 2 19:42:34.986164 systemd[1]: Started cri-containerd-0baa88b6211a21645900e5d119470ddc11d4f5e2007efdf2f4ca60c291b17251.scope. Oct 2 19:42:34.989295 systemd[1]: Started cri-containerd-daf18cb362a9c3702afea2506eaa44369c63e0e9fae976b2a74e138cc417928c.scope. Oct 2 19:42:35.006662 systemd[1]: Started cri-containerd-d8dbb3930f9ba2eba348df1bd80033c8f8ede32e31f972f667fdba5706cf98aa.scope. Oct 2 19:42:35.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.045476 kernel: audit: type=1400 audit(1696275755.039:570): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.045567 kernel: audit: type=1400 audit(1696275755.039:571): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.045611 kernel: audit: type=1400 audit(1696275755.039:572): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.045636 kernel: audit: type=1400 audit(1696275755.039:573): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.048681 kernel: audit: type=1400 audit(1696275755.039:574): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.048751 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:42:35.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.041000 audit: BPF prog-id=61 op=LOAD Oct 2 19:42:35.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.044000 audit: BPF prog-id=62 op=LOAD Oct 2 19:42:35.044000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.044000 audit[1766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000149b38 a2=10 a3=0 items=0 ppid=1731 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461663138636233363261396333373032616665613235303665616134 Oct 2 19:42:35.044000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.044000 audit[1766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001495a0 a2=3c a3=0 items=0 ppid=1731 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461663138636233363261396333373032616665613235303665616134 Oct 2 19:42:35.044000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.044000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.044000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.044000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.044000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.044000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.044000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.044000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.044000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.044000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.044000 audit: BPF prog-id=63 op=LOAD Oct 2 19:42:35.044000 audit[1766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001498e0 a2=78 a3=0 items=0 ppid=1731 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461663138636233363261396333373032616665613235303665616134 Oct 2 19:42:35.046000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1736 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062616138386236323131613231363435393030653564313139343730 Oct 2 19:42:35.046000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1736 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062616138386236323131613231363435393030653564313139343730 Oct 2 19:42:35.046000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.046000 audit[1766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000149670 a2=78 a3=0 items=0 ppid=1731 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461663138636233363261396333373032616665613235303665616134 Oct 2 19:42:35.048000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:42:35.048000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:42:35.048000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.048000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.048000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.048000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.048000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.048000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.048000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.048000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.048000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.048000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.048000 audit: BPF prog-id=66 op=LOAD Oct 2 19:42:35.048000 audit[1766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000149b40 a2=78 a3=0 items=0 ppid=1731 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.048000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461663138636233363261396333373032616665613235303665616134 Oct 2 19:42:35.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit: BPF prog-id=67 op=LOAD Oct 2 19:42:35.049000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=1735 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438646262333933306639626132656261333438646631626438303033 Oct 2 19:42:35.049000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=1735 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438646262333933306639626132656261333438646631626438303033 Oct 2 19:42:35.049000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.049000 audit: BPF prog-id=68 op=LOAD Oct 2 19:42:35.049000 audit[1772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=1735 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438646262333933306639626132656261333438646631626438303033 Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit: BPF prog-id=69 op=LOAD Oct 2 19:42:35.050000 audit[1772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=1735 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.050000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438646262333933306639626132656261333438646631626438303033 Oct 2 19:42:35.050000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:42:35.050000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.050000 audit: BPF prog-id=70 op=LOAD Oct 2 19:42:35.050000 audit[1772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=1735 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.050000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438646262333933306639626132656261333438646631626438303033 Oct 2 19:42:35.046000 audit[1755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1736 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062616138386236323131613231363435393030653564313139343730 Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit: BPF prog-id=71 op=LOAD Oct 2 19:42:35.051000 audit[1755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1736 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.051000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062616138386236323131613231363435393030653564313139343730 Oct 2 19:42:35.051000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:42:35.051000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { perfmon } for pid=1755 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit[1755]: AVC avc: denied { bpf } for pid=1755 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.051000 audit: BPF prog-id=72 op=LOAD Oct 2 19:42:35.051000 audit[1755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1736 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.051000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062616138386236323131613231363435393030653564313139343730 Oct 2 19:42:35.085672 env[1137]: time="2023-10-02T19:42:35.085629365Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b619222ebfcfd1a0c9478200f0921497,Namespace:kube-system,Attempt:0,} returns sandbox id \"d8dbb3930f9ba2eba348df1bd80033c8f8ede32e31f972f667fdba5706cf98aa\"" Oct 2 19:42:35.086085 env[1137]: time="2023-10-02T19:42:35.085920407Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:1c25755513686167712254348be54904,Namespace:kube-system,Attempt:0,} returns sandbox id \"0baa88b6211a21645900e5d119470ddc11d4f5e2007efdf2f4ca60c291b17251\"" Oct 2 19:42:35.086746 kubelet[1676]: E1002 19:42:35.086719 1676 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:35.086839 kubelet[1676]: E1002 19:42:35.086818 1676 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:35.087550 env[1137]: time="2023-10-02T19:42:35.087523135Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:6961ff1365464b1e2d286a48d6c5e40f,Namespace:kube-system,Attempt:0,} returns sandbox id \"daf18cb362a9c3702afea2506eaa44369c63e0e9fae976b2a74e138cc417928c\"" Oct 2 19:42:35.088620 kubelet[1676]: E1002 19:42:35.088588 1676 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:35.089933 env[1137]: time="2023-10-02T19:42:35.089899264Z" level=info msg="CreateContainer within sandbox \"0baa88b6211a21645900e5d119470ddc11d4f5e2007efdf2f4ca60c291b17251\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:42:35.091117 env[1137]: time="2023-10-02T19:42:35.091082364Z" level=info msg="CreateContainer within sandbox \"daf18cb362a9c3702afea2506eaa44369c63e0e9fae976b2a74e138cc417928c\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:42:35.091541 env[1137]: time="2023-10-02T19:42:35.091507516Z" level=info msg="CreateContainer within sandbox \"d8dbb3930f9ba2eba348df1bd80033c8f8ede32e31f972f667fdba5706cf98aa\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:42:35.106447 env[1137]: time="2023-10-02T19:42:35.106351898Z" level=info msg="CreateContainer within sandbox \"0baa88b6211a21645900e5d119470ddc11d4f5e2007efdf2f4ca60c291b17251\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"8ce1ce387c0c99c32821a61a4c6bd618ffdc2d73c38b25f13ee66911e2fc601f\"" Oct 2 19:42:35.107310 env[1137]: time="2023-10-02T19:42:35.107283830Z" level=info msg="StartContainer for \"8ce1ce387c0c99c32821a61a4c6bd618ffdc2d73c38b25f13ee66911e2fc601f\"" Oct 2 19:42:35.108230 env[1137]: time="2023-10-02T19:42:35.108196746Z" level=info msg="CreateContainer within sandbox \"d8dbb3930f9ba2eba348df1bd80033c8f8ede32e31f972f667fdba5706cf98aa\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"e76f85223e2e02ed05066f5fab095b074eddb4e681143af663040d6d07b2fb29\"" Oct 2 19:42:35.108557 env[1137]: time="2023-10-02T19:42:35.108524498Z" level=info msg="StartContainer for \"e76f85223e2e02ed05066f5fab095b074eddb4e681143af663040d6d07b2fb29\"" Oct 2 19:42:35.109883 env[1137]: time="2023-10-02T19:42:35.109845152Z" level=info msg="CreateContainer within sandbox \"daf18cb362a9c3702afea2506eaa44369c63e0e9fae976b2a74e138cc417928c\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"c856883ca346a25f13daa17d100f05fd2603e5b7be8505ea26b5a14bb28f8320\"" Oct 2 19:42:35.110304 env[1137]: time="2023-10-02T19:42:35.110248647Z" level=info msg="StartContainer for \"c856883ca346a25f13daa17d100f05fd2603e5b7be8505ea26b5a14bb28f8320\"" Oct 2 19:42:35.129336 systemd[1]: Started cri-containerd-c856883ca346a25f13daa17d100f05fd2603e5b7be8505ea26b5a14bb28f8320.scope. Oct 2 19:42:35.130187 systemd[1]: Started cri-containerd-e76f85223e2e02ed05066f5fab095b074eddb4e681143af663040d6d07b2fb29.scope. Oct 2 19:42:35.137514 systemd[1]: Started cri-containerd-8ce1ce387c0c99c32821a61a4c6bd618ffdc2d73c38b25f13ee66911e2fc601f.scope. Oct 2 19:42:35.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit: BPF prog-id=73 op=LOAD Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=1735 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537366638353232336532653032656430353036366635666162303935 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1735 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537366638353232336532653032656430353036366635666162303935 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit: BPF prog-id=74 op=LOAD Oct 2 19:42:35.170000 audit[1859]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1735 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537366638353232336532653032656430353036366635666162303935 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit: BPF prog-id=75 op=LOAD Oct 2 19:42:35.170000 audit[1859]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1735 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537366638353232336532653032656430353036366635666162303935 Oct 2 19:42:35.170000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:42:35.170000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.170000 audit: BPF prog-id=76 op=LOAD Oct 2 19:42:35.170000 audit[1859]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1735 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537366638353232336532653032656430353036366635666162303935 Oct 2 19:42:35.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit: BPF prog-id=77 op=LOAD Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1736 pid=1861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863653163653338376330633939633332383231613631613463366264 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1736 pid=1861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863653163653338376330633939633332383231613631613463366264 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit: BPF prog-id=78 op=LOAD Oct 2 19:42:35.177000 audit[1861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1736 pid=1861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863653163653338376330633939633332383231613631613463366264 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.177000 audit: BPF prog-id=79 op=LOAD Oct 2 19:42:35.177000 audit[1861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1736 pid=1861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863653163653338376330633939633332383231613631613463366264 Oct 2 19:42:35.177000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:42:35.178000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:42:35.178000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.178000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.178000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.178000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.178000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.178000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.178000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.178000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.178000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.178000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.178000 audit: BPF prog-id=80 op=LOAD Oct 2 19:42:35.178000 audit[1861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1736 pid=1861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863653163653338376330633939633332383231613631613463366264 Oct 2 19:42:35.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.180000 audit: BPF prog-id=81 op=LOAD Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=1731 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.181000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338353638383363613334366132356631336461613137643130306630 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=1731 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.181000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338353638383363613334366132356631336461613137643130306630 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit: BPF prog-id=82 op=LOAD Oct 2 19:42:35.181000 audit[1860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=1731 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.181000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338353638383363613334366132356631336461613137643130306630 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit: BPF prog-id=83 op=LOAD Oct 2 19:42:35.181000 audit[1860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=1731 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.181000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338353638383363613334366132356631336461613137643130306630 Oct 2 19:42:35.181000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:42:35.181000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.181000 audit: BPF prog-id=84 op=LOAD Oct 2 19:42:35.181000 audit[1860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=1731 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.181000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338353638383363613334366132356631336461613137643130306630 Oct 2 19:42:35.203248 env[1137]: time="2023-10-02T19:42:35.203205477Z" level=info msg="StartContainer for \"e76f85223e2e02ed05066f5fab095b074eddb4e681143af663040d6d07b2fb29\" returns successfully" Oct 2 19:42:35.213877 env[1137]: time="2023-10-02T19:42:35.213830842Z" level=info msg="StartContainer for \"8ce1ce387c0c99c32821a61a4c6bd618ffdc2d73c38b25f13ee66911e2fc601f\" returns successfully" Oct 2 19:42:35.241360 env[1137]: time="2023-10-02T19:42:35.241311694Z" level=info msg="StartContainer for \"c856883ca346a25f13daa17d100f05fd2603e5b7be8505ea26b5a14bb28f8320\" returns successfully" Oct 2 19:42:35.372583 kubelet[1676]: W1002 19:42:35.372455 1676 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.6:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.6:6443: connect: connection refused Oct 2 19:42:35.372583 kubelet[1676]: E1002 19:42:35.372516 1676 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.6:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.6:6443: connect: connection refused Oct 2 19:42:35.376890 kubelet[1676]: E1002 19:42:35.376862 1676 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.6:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.6:6443: connect: connection refused" interval="1.6s" Oct 2 19:42:35.481619 kubelet[1676]: I1002 19:42:35.481566 1676 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:42:36.011713 kubelet[1676]: E1002 19:42:36.011686 1676 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:36.013217 kubelet[1676]: E1002 19:42:36.013197 1676 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:36.015008 kubelet[1676]: E1002 19:42:36.014987 1676 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:36.971000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:36.971000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40002945d0 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:42:36.971000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:36.971000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:36.971000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40000eeac0 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:42:36.971000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:37.016510 kubelet[1676]: E1002 19:42:37.016481 1676 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:37.187000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:37.187000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3e a1=40053a4420 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:42:37.187000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:42:37.187000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:37.187000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3e a1=40053a4480 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:42:37.187000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:42:37.202000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:37.202000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=44 a1=40053a45d0 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:42:37.202000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:42:37.202000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:37.202000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=44 a1=40066c5a80 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:42:37.202000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:42:37.203000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=4790 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:37.203000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=48 a1=40053a4810 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:42:37.203000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:42:37.209000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:37.209000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=4005bae460 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:42:37.209000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:42:37.260856 kubelet[1676]: E1002 19:42:37.260761 1676 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Oct 2 19:42:37.346371 kubelet[1676]: I1002 19:42:37.346338 1676 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:42:37.972922 kubelet[1676]: I1002 19:42:37.971447 1676 apiserver.go:52] "Watching apiserver" Oct 2 19:42:37.978135 kubelet[1676]: I1002 19:42:37.977109 1676 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:42:40.177697 systemd[1]: Reloading. Oct 2 19:42:40.241959 /usr/lib/systemd/system-generators/torcx-generator[1973]: time="2023-10-02T19:42:40Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:42:40.242003 /usr/lib/systemd/system-generators/torcx-generator[1973]: time="2023-10-02T19:42:40Z" level=info msg="torcx already run" Oct 2 19:42:40.305683 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:42:40.305705 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:42:40.326786 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:42:40.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.403384 kernel: kauditd_printk_skb: 366 callbacks suppressed Oct 2 19:42:40.403431 kernel: audit: type=1400 audit(1696275760.401:686): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.407205 kernel: audit: type=1400 audit(1696275760.402:687): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.407283 kernel: audit: type=1400 audit(1696275760.402:688): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.413182 kernel: audit: type=1400 audit(1696275760.402:689): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.413247 kernel: audit: type=1400 audit(1696275760.402:690): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.413265 kernel: audit: type=1400 audit(1696275760.402:691): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.415866 kernel: audit: type=1400 audit(1696275760.402:692): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.419316 kernel: audit: type=1400 audit(1696275760.402:693): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.419372 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:42:40.420546 kernel: audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:42:40.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.404000 audit: BPF prog-id=85 op=LOAD Oct 2 19:42:40.404000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:42:40.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.406000 audit: BPF prog-id=86 op=LOAD Oct 2 19:42:40.406000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:42:40.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.408000 audit: BPF prog-id=87 op=LOAD Oct 2 19:42:40.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.410000 audit: BPF prog-id=88 op=LOAD Oct 2 19:42:40.410000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:42:40.410000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:42:40.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.412000 audit: BPF prog-id=89 op=LOAD Oct 2 19:42:40.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.414000 audit: BPF prog-id=90 op=LOAD Oct 2 19:42:40.414000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:42:40.414000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:42:40.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit: BPF prog-id=91 op=LOAD Oct 2 19:42:40.420000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit: BPF prog-id=92 op=LOAD Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.420000 audit: BPF prog-id=93 op=LOAD Oct 2 19:42:40.420000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:42:40.420000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:42:40.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.421000 audit: BPF prog-id=94 op=LOAD Oct 2 19:42:40.422000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.422000 audit: BPF prog-id=95 op=LOAD Oct 2 19:42:40.422000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.423000 audit: BPF prog-id=96 op=LOAD Oct 2 19:42:40.423000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:42:40.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.423000 audit: BPF prog-id=97 op=LOAD Oct 2 19:42:40.423000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:42:40.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.426000 audit: BPF prog-id=98 op=LOAD Oct 2 19:42:40.426000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:42:40.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.427000 audit: BPF prog-id=99 op=LOAD Oct 2 19:42:40.427000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit: BPF prog-id=100 op=LOAD Oct 2 19:42:40.428000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit: BPF prog-id=101 op=LOAD Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit: BPF prog-id=102 op=LOAD Oct 2 19:42:40.428000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:42:40.428000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.429000 audit: BPF prog-id=103 op=LOAD Oct 2 19:42:40.429000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:42:40.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.429000 audit: BPF prog-id=104 op=LOAD Oct 2 19:42:40.429000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:42:40.431000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.431000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.431000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.431000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.431000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.431000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.431000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.431000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.431000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.431000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.431000 audit: BPF prog-id=105 op=LOAD Oct 2 19:42:40.431000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:42:40.452634 systemd[1]: Stopping kubelet.service... Oct 2 19:42:40.476379 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:42:40.476633 systemd[1]: Stopped kubelet.service. Oct 2 19:42:40.475000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:40.476735 systemd[1]: kubelet.service: Consumed 1.726s CPU time. Oct 2 19:42:40.479739 systemd[1]: Started kubelet.service. Oct 2 19:42:40.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:40.563104 kubelet[2011]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:42:40.563104 kubelet[2011]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:42:40.563104 kubelet[2011]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:42:40.563104 kubelet[2011]: I1002 19:42:40.561837 2011 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:42:40.568893 kubelet[2011]: I1002 19:42:40.567176 2011 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 19:42:40.568893 kubelet[2011]: I1002 19:42:40.567208 2011 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:42:40.568893 kubelet[2011]: I1002 19:42:40.567391 2011 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 19:42:40.570793 kubelet[2011]: I1002 19:42:40.569344 2011 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:42:40.570793 kubelet[2011]: I1002 19:42:40.570779 2011 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:42:40.578189 kubelet[2011]: W1002 19:42:40.578151 2011 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:42:40.579103 kubelet[2011]: I1002 19:42:40.578993 2011 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:42:40.579258 kubelet[2011]: I1002 19:42:40.579240 2011 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:42:40.578000 audit[2025]: USER_ACCT pid=2025 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:40.579399 kubelet[2011]: I1002 19:42:40.579388 2011 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 19:42:40.579469 kubelet[2011]: I1002 19:42:40.579415 2011 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 19:42:40.579469 kubelet[2011]: I1002 19:42:40.579463 2011 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 19:42:40.579516 kubelet[2011]: I1002 19:42:40.579493 2011 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:42:40.579637 kubelet[2011]: I1002 19:42:40.579617 2011 kubelet.go:393] "Attempting to sync node with API server" Oct 2 19:42:40.579637 kubelet[2011]: I1002 19:42:40.579636 2011 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:42:40.579700 kubelet[2011]: I1002 19:42:40.579652 2011 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:42:40.579700 kubelet[2011]: I1002 19:42:40.579678 2011 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:42:40.579796 sudo[2025]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:42:40.579000 audit[2025]: CRED_REFR pid=2025 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:40.580482 sudo[2025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:42:40.581372 kubelet[2011]: I1002 19:42:40.580878 2011 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:42:40.581447 kubelet[2011]: I1002 19:42:40.581424 2011 server.go:1232] "Started kubelet" Oct 2 19:42:40.587795 kubelet[2011]: I1002 19:42:40.582223 2011 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:42:40.587795 kubelet[2011]: I1002 19:42:40.582852 2011 server.go:462] "Adding debug handlers to kubelet server" Oct 2 19:42:40.587795 kubelet[2011]: I1002 19:42:40.587563 2011 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:42:40.587795 kubelet[2011]: I1002 19:42:40.587757 2011 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 19:42:40.589000 audit[2011]: AVC avc: denied { mac_admin } for pid=2011 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.589000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:42:40.589000 audit[2011]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d43020 a1=4000b7c8e8 a2=4000d42ff0 a3=25 items=0 ppid=1 pid=2011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:40.589000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:42:40.589000 audit[2011]: AVC avc: denied { mac_admin } for pid=2011 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.589000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:42:40.589000 audit[2011]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000723f80 a1=4000b7c900 a2=4000d430b0 a3=25 items=0 ppid=1 pid=2011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:40.589000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:42:40.592517 kubelet[2011]: I1002 19:42:40.590529 2011 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:42:40.592517 kubelet[2011]: I1002 19:42:40.590560 2011 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:42:40.592517 kubelet[2011]: I1002 19:42:40.590588 2011 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:42:40.591000 audit[2025]: USER_START pid=2025 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:40.601176 kubelet[2011]: E1002 19:42:40.601149 2011 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:42:40.601176 kubelet[2011]: E1002 19:42:40.601180 2011 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:42:40.602205 kubelet[2011]: I1002 19:42:40.602189 2011 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 19:42:40.602317 kubelet[2011]: I1002 19:42:40.602299 2011 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:42:40.602445 kubelet[2011]: I1002 19:42:40.602434 2011 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 19:42:40.628450 kubelet[2011]: I1002 19:42:40.628406 2011 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 19:42:40.630091 kubelet[2011]: I1002 19:42:40.630062 2011 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 19:42:40.630134 kubelet[2011]: I1002 19:42:40.630112 2011 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 19:42:40.630134 kubelet[2011]: I1002 19:42:40.630133 2011 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 19:42:40.630202 kubelet[2011]: E1002 19:42:40.630191 2011 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:42:40.657433 kubelet[2011]: I1002 19:42:40.657404 2011 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:42:40.657433 kubelet[2011]: I1002 19:42:40.657428 2011 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:42:40.657592 kubelet[2011]: I1002 19:42:40.657447 2011 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:42:40.657650 kubelet[2011]: I1002 19:42:40.657628 2011 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:42:40.657681 kubelet[2011]: I1002 19:42:40.657666 2011 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 2 19:42:40.657681 kubelet[2011]: I1002 19:42:40.657674 2011 policy_none.go:49] "None policy: Start" Oct 2 19:42:40.658201 kubelet[2011]: I1002 19:42:40.658171 2011 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:42:40.658265 kubelet[2011]: I1002 19:42:40.658207 2011 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:42:40.658368 kubelet[2011]: I1002 19:42:40.658351 2011 state_mem.go:75] "Updated machine memory state" Oct 2 19:42:40.662377 kubelet[2011]: I1002 19:42:40.662349 2011 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:42:40.660000 audit[2011]: AVC avc: denied { mac_admin } for pid=2011 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:40.660000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:42:40.660000 audit[2011]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000f73380 a1=4001172c78 a2=4000f73350 a3=25 items=0 ppid=1 pid=2011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:40.660000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:42:40.662631 kubelet[2011]: I1002 19:42:40.662419 2011 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:42:40.663411 kubelet[2011]: I1002 19:42:40.663386 2011 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:42:40.730726 kubelet[2011]: I1002 19:42:40.730622 2011 topology_manager.go:215] "Topology Admit Handler" podUID="1c25755513686167712254348be54904" podNamespace="kube-system" podName="kube-apiserver-localhost" Oct 2 19:42:40.735657 kubelet[2011]: I1002 19:42:40.735625 2011 topology_manager.go:215] "Topology Admit Handler" podUID="6961ff1365464b1e2d286a48d6c5e40f" podNamespace="kube-system" podName="kube-controller-manager-localhost" Oct 2 19:42:40.735897 kubelet[2011]: I1002 19:42:40.735878 2011 topology_manager.go:215] "Topology Admit Handler" podUID="b619222ebfcfd1a0c9478200f0921497" podNamespace="kube-system" podName="kube-scheduler-localhost" Oct 2 19:42:40.772241 kubelet[2011]: I1002 19:42:40.772202 2011 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:42:40.796682 kubelet[2011]: I1002 19:42:40.796616 2011 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Oct 2 19:42:40.796814 kubelet[2011]: I1002 19:42:40.796736 2011 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:42:40.804219 kubelet[2011]: I1002 19:42:40.804180 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:42:40.804408 kubelet[2011]: I1002 19:42:40.804393 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:42:40.804519 kubelet[2011]: I1002 19:42:40.804507 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b619222ebfcfd1a0c9478200f0921497-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b619222ebfcfd1a0c9478200f0921497\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:42:40.804599 kubelet[2011]: I1002 19:42:40.804589 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:42:40.804672 kubelet[2011]: I1002 19:42:40.804662 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/1c25755513686167712254348be54904-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"1c25755513686167712254348be54904\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:42:40.804752 kubelet[2011]: I1002 19:42:40.804741 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/1c25755513686167712254348be54904-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"1c25755513686167712254348be54904\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:42:40.804945 kubelet[2011]: I1002 19:42:40.804927 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:42:40.805255 kubelet[2011]: I1002 19:42:40.805189 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:42:40.805371 kubelet[2011]: I1002 19:42:40.805358 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/1c25755513686167712254348be54904-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"1c25755513686167712254348be54904\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:42:41.041309 kubelet[2011]: E1002 19:42:41.041278 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:41.041433 kubelet[2011]: E1002 19:42:41.041390 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:41.043176 kubelet[2011]: E1002 19:42:41.043154 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:41.123029 sudo[2025]: pam_unix(sudo:session): session closed for user root Oct 2 19:42:41.122000 audit[2025]: USER_END pid=2025 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:41.122000 audit[2025]: CRED_DISP pid=2025 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:41.581185 kubelet[2011]: I1002 19:42:41.581138 2011 apiserver.go:52] "Watching apiserver" Oct 2 19:42:41.602888 kubelet[2011]: I1002 19:42:41.602845 2011 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:42:41.648201 kubelet[2011]: E1002 19:42:41.648161 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:41.661922 kubelet[2011]: E1002 19:42:41.661890 2011 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 19:42:41.662060 kubelet[2011]: E1002 19:42:41.661931 2011 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:42:41.662376 kubelet[2011]: E1002 19:42:41.662352 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:41.662444 kubelet[2011]: E1002 19:42:41.662378 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:41.669220 kubelet[2011]: I1002 19:42:41.669185 2011 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.6691317319999999 podCreationTimestamp="2023-10-02 19:42:40 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:42:41.669085064 +0000 UTC m=+1.182626393" watchObservedRunningTime="2023-10-02 19:42:41.669131732 +0000 UTC m=+1.182673061" Oct 2 19:42:41.676146 kubelet[2011]: I1002 19:42:41.676096 2011 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.676064558 podCreationTimestamp="2023-10-02 19:42:40 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:42:41.675824336 +0000 UTC m=+1.189365625" watchObservedRunningTime="2023-10-02 19:42:41.676064558 +0000 UTC m=+1.189605887" Oct 2 19:42:42.653577 kubelet[2011]: E1002 19:42:42.653545 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:42.654009 kubelet[2011]: E1002 19:42:42.653706 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:42.793114 sudo[1267]: pam_unix(sudo:session): session closed for user root Oct 2 19:42:42.792000 audit[1267]: USER_END pid=1267 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:42.792000 audit[1267]: CRED_DISP pid=1267 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:42.795185 sshd[1264]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:42.796000 audit[1264]: USER_END pid=1264 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:42.796000 audit[1264]: CRED_DISP pid=1264 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:42:42.798284 systemd[1]: sshd@6-10.0.0.6:22-10.0.0.1:58952.service: Deactivated successfully. Oct 2 19:42:42.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.6:22-10.0.0.1:58952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:42.799053 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:42:42.799243 systemd[1]: session-7.scope: Consumed 8.300s CPU time. Oct 2 19:42:42.800430 systemd-logind[1129]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:42:42.802384 systemd-logind[1129]: Removed session 7. Oct 2 19:42:45.644651 kubelet[2011]: E1002 19:42:45.644454 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:45.661205 kubelet[2011]: E1002 19:42:45.661180 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:45.668093 kubelet[2011]: I1002 19:42:45.668048 2011 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=5.668012251 podCreationTimestamp="2023-10-02 19:42:40 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:42:41.683885511 +0000 UTC m=+1.197426840" watchObservedRunningTime="2023-10-02 19:42:45.668012251 +0000 UTC m=+5.181553580" Oct 2 19:42:46.972297 update_engine[1130]: I1002 19:42:46.972230 1130 update_attempter.cc:505] Updating boot flags... Oct 2 19:42:48.718990 kubelet[2011]: E1002 19:42:48.718932 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:48.969595 kubelet[2011]: E1002 19:42:48.969496 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:49.671092 kubelet[2011]: E1002 19:42:49.669273 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:49.671092 kubelet[2011]: E1002 19:42:49.669312 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:52.108000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32572 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:42:52.112288 kernel: kauditd_printk_skb: 266 callbacks suppressed Oct 2 19:42:52.112405 kernel: audit: type=1400 audit(1696275772.108:941): avc: denied { watch } for pid=1887 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32572 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:42:52.112431 kernel: audit: type=1300 audit(1696275772.108:941): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000dfa640 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:42:52.108000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000dfa640 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:42:52.108000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:52.117941 kernel: audit: type=1327 audit(1696275772.108:941): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:52.683000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:52.683000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012d67a0 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:42:52.690115 kernel: audit: type=1400 audit(1696275772.683:942): avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:52.690207 kernel: audit: type=1300 audit(1696275772.683:942): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012d67a0 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:42:52.690234 kernel: audit: type=1400 audit(1696275772.686:943): avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:52.686000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:52.686000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000df51e0 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:42:52.695426 kernel: audit: type=1300 audit(1696275772.686:943): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000df51e0 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:42:52.695504 kernel: audit: type=1327 audit(1696275772.686:943): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:52.686000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:52.697743 kernel: audit: type=1400 audit(1696275772.686:944): avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:52.686000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:52.686000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000f1d720 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:42:52.702741 kernel: audit: type=1300 audit(1696275772.686:944): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000f1d720 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:42:52.686000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:52.688000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:52.688000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f1d760 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:42:52.688000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:52.683000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:53.349208 kubelet[2011]: I1002 19:42:53.349163 2011 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:42:53.350130 env[1137]: time="2023-10-02T19:42:53.349907181Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:42:53.350387 kubelet[2011]: I1002 19:42:53.350120 2011 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:42:53.953511 kubelet[2011]: I1002 19:42:53.953460 2011 topology_manager.go:215] "Topology Admit Handler" podUID="6f0f608e-4dee-4670-b27a-3d9775027039" podNamespace="kube-system" podName="kube-proxy-5zdjt" Oct 2 19:42:53.960154 systemd[1]: Created slice kubepods-besteffort-pod6f0f608e_4dee_4670_b27a_3d9775027039.slice. Oct 2 19:42:53.968450 kubelet[2011]: I1002 19:42:53.968409 2011 topology_manager.go:215] "Topology Admit Handler" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" podNamespace="kube-system" podName="cilium-rgkrh" Oct 2 19:42:53.976409 systemd[1]: Created slice kubepods-burstable-podbc4ee64d_b13a_4d5d_ba2f_78aa6088f2bf.slice. Oct 2 19:42:53.998051 kubelet[2011]: I1002 19:42:53.998015 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-hubble-tls\") pod \"cilium-rgkrh\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " pod="kube-system/cilium-rgkrh" Oct 2 19:42:53.998273 kubelet[2011]: I1002 19:42:53.998259 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/6f0f608e-4dee-4670-b27a-3d9775027039-kube-proxy\") pod \"kube-proxy-5zdjt\" (UID: \"6f0f608e-4dee-4670-b27a-3d9775027039\") " pod="kube-system/kube-proxy-5zdjt" Oct 2 19:42:53.998421 kubelet[2011]: I1002 19:42:53.998409 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-db4n7\" (UniqueName: \"kubernetes.io/projected/6f0f608e-4dee-4670-b27a-3d9775027039-kube-api-access-db4n7\") pod \"kube-proxy-5zdjt\" (UID: \"6f0f608e-4dee-4670-b27a-3d9775027039\") " pod="kube-system/kube-proxy-5zdjt" Oct 2 19:42:53.998520 kubelet[2011]: I1002 19:42:53.998509 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-xtables-lock\") pod \"cilium-rgkrh\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " pod="kube-system/cilium-rgkrh" Oct 2 19:42:53.998631 kubelet[2011]: I1002 19:42:53.998620 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-clustermesh-secrets\") pod \"cilium-rgkrh\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " pod="kube-system/cilium-rgkrh" Oct 2 19:42:53.998750 kubelet[2011]: I1002 19:42:53.998740 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-host-proc-sys-net\") pod \"cilium-rgkrh\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " pod="kube-system/cilium-rgkrh" Oct 2 19:42:53.999035 kubelet[2011]: I1002 19:42:53.999013 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/6f0f608e-4dee-4670-b27a-3d9775027039-lib-modules\") pod \"kube-proxy-5zdjt\" (UID: \"6f0f608e-4dee-4670-b27a-3d9775027039\") " pod="kube-system/kube-proxy-5zdjt" Oct 2 19:42:53.999199 kubelet[2011]: I1002 19:42:53.999187 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-bpf-maps\") pod \"cilium-rgkrh\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " pod="kube-system/cilium-rgkrh" Oct 2 19:42:53.999300 kubelet[2011]: I1002 19:42:53.999290 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-hostproc\") pod \"cilium-rgkrh\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " pod="kube-system/cilium-rgkrh" Oct 2 19:42:53.999404 kubelet[2011]: I1002 19:42:53.999394 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-cni-path\") pod \"cilium-rgkrh\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " pod="kube-system/cilium-rgkrh" Oct 2 19:42:53.999525 kubelet[2011]: I1002 19:42:53.999513 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-host-proc-sys-kernel\") pod \"cilium-rgkrh\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " pod="kube-system/cilium-rgkrh" Oct 2 19:42:53.999644 kubelet[2011]: I1002 19:42:53.999633 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-cilium-run\") pod \"cilium-rgkrh\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " pod="kube-system/cilium-rgkrh" Oct 2 19:42:53.999753 kubelet[2011]: I1002 19:42:53.999743 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-cilium-cgroup\") pod \"cilium-rgkrh\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " pod="kube-system/cilium-rgkrh" Oct 2 19:42:53.999855 kubelet[2011]: I1002 19:42:53.999845 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-lib-modules\") pod \"cilium-rgkrh\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " pod="kube-system/cilium-rgkrh" Oct 2 19:42:54.000001 kubelet[2011]: I1002 19:42:53.999986 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zpjhg\" (UniqueName: \"kubernetes.io/projected/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-kube-api-access-zpjhg\") pod \"cilium-rgkrh\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " pod="kube-system/cilium-rgkrh" Oct 2 19:42:54.000102 kubelet[2011]: I1002 19:42:54.000092 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/6f0f608e-4dee-4670-b27a-3d9775027039-xtables-lock\") pod \"kube-proxy-5zdjt\" (UID: \"6f0f608e-4dee-4670-b27a-3d9775027039\") " pod="kube-system/kube-proxy-5zdjt" Oct 2 19:42:54.000218 kubelet[2011]: I1002 19:42:54.000206 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-etc-cni-netd\") pod \"cilium-rgkrh\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " pod="kube-system/cilium-rgkrh" Oct 2 19:42:54.000335 kubelet[2011]: I1002 19:42:54.000325 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-cilium-config-path\") pod \"cilium-rgkrh\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " pod="kube-system/cilium-rgkrh" Oct 2 19:42:54.123035 kubelet[2011]: E1002 19:42:54.118070 2011 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 19:42:54.123035 kubelet[2011]: E1002 19:42:54.118109 2011 projected.go:198] Error preparing data for projected volume kube-api-access-zpjhg for pod kube-system/cilium-rgkrh: configmap "kube-root-ca.crt" not found Oct 2 19:42:54.123035 kubelet[2011]: E1002 19:42:54.118254 2011 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-kube-api-access-zpjhg podName:bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf nodeName:}" failed. No retries permitted until 2023-10-02 19:42:54.618221271 +0000 UTC m=+14.131762600 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-zpjhg" (UniqueName: "kubernetes.io/projected/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-kube-api-access-zpjhg") pod "cilium-rgkrh" (UID: "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf") : configmap "kube-root-ca.crt" not found Oct 2 19:42:54.123960 kubelet[2011]: E1002 19:42:54.123936 2011 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 19:42:54.124100 kubelet[2011]: E1002 19:42:54.124087 2011 projected.go:198] Error preparing data for projected volume kube-api-access-db4n7 for pod kube-system/kube-proxy-5zdjt: configmap "kube-root-ca.crt" not found Oct 2 19:42:54.124208 kubelet[2011]: E1002 19:42:54.124195 2011 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/6f0f608e-4dee-4670-b27a-3d9775027039-kube-api-access-db4n7 podName:6f0f608e-4dee-4670-b27a-3d9775027039 nodeName:}" failed. No retries permitted until 2023-10-02 19:42:54.624175027 +0000 UTC m=+14.137716356 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-db4n7" (UniqueName: "kubernetes.io/projected/6f0f608e-4dee-4670-b27a-3d9775027039-kube-api-access-db4n7") pod "kube-proxy-5zdjt" (UID: "6f0f608e-4dee-4670-b27a-3d9775027039") : configmap "kube-root-ca.crt" not found Oct 2 19:42:54.410801 kubelet[2011]: I1002 19:42:54.410760 2011 topology_manager.go:215] "Topology Admit Handler" podUID="bb5ba8c9-a28f-4da4-9905-86dcb8b915d0" podNamespace="kube-system" podName="cilium-operator-6bc8ccdb58-64hz6" Oct 2 19:42:54.417663 systemd[1]: Created slice kubepods-besteffort-podbb5ba8c9_a28f_4da4_9905_86dcb8b915d0.slice. Oct 2 19:42:54.508363 kubelet[2011]: I1002 19:42:54.508316 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jlmlc\" (UniqueName: \"kubernetes.io/projected/bb5ba8c9-a28f-4da4-9905-86dcb8b915d0-kube-api-access-jlmlc\") pod \"cilium-operator-6bc8ccdb58-64hz6\" (UID: \"bb5ba8c9-a28f-4da4-9905-86dcb8b915d0\") " pod="kube-system/cilium-operator-6bc8ccdb58-64hz6" Oct 2 19:42:54.508363 kubelet[2011]: I1002 19:42:54.508362 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bb5ba8c9-a28f-4da4-9905-86dcb8b915d0-cilium-config-path\") pod \"cilium-operator-6bc8ccdb58-64hz6\" (UID: \"bb5ba8c9-a28f-4da4-9905-86dcb8b915d0\") " pod="kube-system/cilium-operator-6bc8ccdb58-64hz6" Oct 2 19:42:54.724688 kubelet[2011]: E1002 19:42:54.724560 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:54.727603 env[1137]: time="2023-10-02T19:42:54.727227338Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-64hz6,Uid:bb5ba8c9-a28f-4da4-9905-86dcb8b915d0,Namespace:kube-system,Attempt:0,}" Oct 2 19:42:54.778678 env[1137]: time="2023-10-02T19:42:54.778428645Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:42:54.778678 env[1137]: time="2023-10-02T19:42:54.778479661Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:42:54.778678 env[1137]: time="2023-10-02T19:42:54.778490384Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:42:54.778887 env[1137]: time="2023-10-02T19:42:54.778679003Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9 pid=2111 runtime=io.containerd.runc.v2 Oct 2 19:42:54.791675 systemd[1]: Started cri-containerd-ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9.scope. Oct 2 19:42:54.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit: BPF prog-id=106 op=LOAD Oct 2 19:42:54.815000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[2121]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2111 pid=2121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:54.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566323662623533643764363134623961386131353063303030316464 Oct 2 19:42:54.815000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[2121]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2111 pid=2121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:54.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566323662623533643764363134623961386131353063303030316464 Oct 2 19:42:54.815000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.815000 audit: BPF prog-id=107 op=LOAD Oct 2 19:42:54.815000 audit[2121]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2111 pid=2121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:54.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566323662623533643764363134623961386131353063303030316464 Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit: BPF prog-id=108 op=LOAD Oct 2 19:42:54.816000 audit[2121]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2111 pid=2121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:54.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566323662623533643764363134623961386131353063303030316464 Oct 2 19:42:54.816000 audit: BPF prog-id=108 op=UNLOAD Oct 2 19:42:54.816000 audit: BPF prog-id=107 op=UNLOAD Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.816000 audit: BPF prog-id=109 op=LOAD Oct 2 19:42:54.816000 audit[2121]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2111 pid=2121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:54.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566323662623533643764363134623961386131353063303030316464 Oct 2 19:42:54.838497 env[1137]: time="2023-10-02T19:42:54.838442631Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-64hz6,Uid:bb5ba8c9-a28f-4da4-9905-86dcb8b915d0,Namespace:kube-system,Attempt:0,} returns sandbox id \"ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9\"" Oct 2 19:42:54.839264 kubelet[2011]: E1002 19:42:54.839235 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:54.841521 env[1137]: time="2023-10-02T19:42:54.841483928Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:42:54.873389 kubelet[2011]: E1002 19:42:54.873052 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:54.873785 env[1137]: time="2023-10-02T19:42:54.873608474Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-5zdjt,Uid:6f0f608e-4dee-4670-b27a-3d9775027039,Namespace:kube-system,Attempt:0,}" Oct 2 19:42:54.881046 kubelet[2011]: E1002 19:42:54.881006 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:54.881461 env[1137]: time="2023-10-02T19:42:54.881424324Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-rgkrh,Uid:bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf,Namespace:kube-system,Attempt:0,}" Oct 2 19:42:54.897766 env[1137]: time="2023-10-02T19:42:54.897693060Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:42:54.897766 env[1137]: time="2023-10-02T19:42:54.897732392Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:42:54.897766 env[1137]: time="2023-10-02T19:42:54.897742596Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:42:54.898287 env[1137]: time="2023-10-02T19:42:54.898167687Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8958a3d132c990b1f3d9e87e9031c89165915913cb58b2bb882976a24af4ff04 pid=2151 runtime=io.containerd.runc.v2 Oct 2 19:42:54.903799 env[1137]: time="2023-10-02T19:42:54.903723440Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:42:54.903799 env[1137]: time="2023-10-02T19:42:54.903765973Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:42:54.904050 env[1137]: time="2023-10-02T19:42:54.903784819Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:42:54.904118 env[1137]: time="2023-10-02T19:42:54.904079109Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab pid=2169 runtime=io.containerd.runc.v2 Oct 2 19:42:54.916313 systemd[1]: Started cri-containerd-d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab.scope. Oct 2 19:42:54.919617 systemd[1]: Started cri-containerd-8958a3d132c990b1f3d9e87e9031c89165915913cb58b2bb882976a24af4ff04.scope. Oct 2 19:42:54.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit: BPF prog-id=110 op=LOAD Oct 2 19:42:54.946000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[2181]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2169 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:54.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430373666383663636230366333643937626332353962653431653165 Oct 2 19:42:54.946000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[2181]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2169 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:54.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430373666383663636230366333643937626332353962653431653165 Oct 2 19:42:54.946000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.946000 audit: BPF prog-id=111 op=LOAD Oct 2 19:42:54.946000 audit[2181]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2169 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:54.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430373666383663636230366333643937626332353962653431653165 Oct 2 19:42:54.947000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.947000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.947000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.947000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.947000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.947000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.947000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.947000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.947000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.947000 audit: BPF prog-id=112 op=LOAD Oct 2 19:42:54.947000 audit[2181]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2169 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:54.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430373666383663636230366333643937626332353962653431653165 Oct 2 19:42:54.948000 audit: BPF prog-id=112 op=UNLOAD Oct 2 19:42:54.948000 audit: BPF prog-id=111 op=UNLOAD Oct 2 19:42:54.948000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.948000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.948000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.948000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.948000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.948000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.948000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.948000 audit[2181]: AVC avc: denied { perfmon } for pid=2181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.948000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.948000 audit[2181]: AVC avc: denied { bpf } for pid=2181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.948000 audit: BPF prog-id=113 op=LOAD Oct 2 19:42:54.948000 audit[2181]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2169 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:54.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430373666383663636230366333643937626332353962653431653165 Oct 2 19:42:54.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.949000 audit: BPF prog-id=114 op=LOAD Oct 2 19:42:54.949000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.949000 audit[2168]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2151 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:54.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839353861336431333263393930623166336439653837653930333163 Oct 2 19:42:54.949000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.949000 audit[2168]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2151 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:54.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839353861336431333263393930623166336439653837653930333163 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit: BPF prog-id=115 op=LOAD Oct 2 19:42:54.950000 audit[2168]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2151 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:54.950000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839353861336431333263393930623166336439653837653930333163 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit: BPF prog-id=116 op=LOAD Oct 2 19:42:54.950000 audit[2168]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2151 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:54.950000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839353861336431333263393930623166336439653837653930333163 Oct 2 19:42:54.950000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:42:54.950000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:54.950000 audit: BPF prog-id=117 op=LOAD Oct 2 19:42:54.950000 audit[2168]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2151 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:54.950000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839353861336431333263393930623166336439653837653930333163 Oct 2 19:42:54.967092 env[1137]: time="2023-10-02T19:42:54.967043645Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-rgkrh,Uid:bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf,Namespace:kube-system,Attempt:0,} returns sandbox id \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\"" Oct 2 19:42:54.968083 kubelet[2011]: E1002 19:42:54.968051 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:54.968348 env[1137]: time="2023-10-02T19:42:54.968309795Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-5zdjt,Uid:6f0f608e-4dee-4670-b27a-3d9775027039,Namespace:kube-system,Attempt:0,} returns sandbox id \"8958a3d132c990b1f3d9e87e9031c89165915913cb58b2bb882976a24af4ff04\"" Oct 2 19:42:54.969860 kubelet[2011]: E1002 19:42:54.969640 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:54.971938 env[1137]: time="2023-10-02T19:42:54.971897381Z" level=info msg="CreateContainer within sandbox \"8958a3d132c990b1f3d9e87e9031c89165915913cb58b2bb882976a24af4ff04\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:42:54.991336 env[1137]: time="2023-10-02T19:42:54.991202894Z" level=info msg="CreateContainer within sandbox \"8958a3d132c990b1f3d9e87e9031c89165915913cb58b2bb882976a24af4ff04\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"0b3f63920360aa2b5963ca07c40d12c6120a4061e3afbd901821370e2786a8fb\"" Oct 2 19:42:54.993006 env[1137]: time="2023-10-02T19:42:54.992285388Z" level=info msg="StartContainer for \"0b3f63920360aa2b5963ca07c40d12c6120a4061e3afbd901821370e2786a8fb\"" Oct 2 19:42:55.011877 systemd[1]: Started cri-containerd-0b3f63920360aa2b5963ca07c40d12c6120a4061e3afbd901821370e2786a8fb.scope. Oct 2 19:42:55.048000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.048000 audit[2232]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2151 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.048000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062336636333932303336306161326235393633636130376334306431 Oct 2 19:42:55.048000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.048000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.048000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.048000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.048000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.048000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.048000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.048000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.048000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.048000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.048000 audit: BPF prog-id=118 op=LOAD Oct 2 19:42:55.048000 audit[2232]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2151 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.048000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062336636333932303336306161326235393633636130376334306431 Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit: BPF prog-id=119 op=LOAD Oct 2 19:42:55.049000 audit[2232]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2151 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062336636333932303336306161326235393633636130376334306431 Oct 2 19:42:55.049000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:42:55.049000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:55.049000 audit: BPF prog-id=120 op=LOAD Oct 2 19:42:55.049000 audit[2232]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2151 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062336636333932303336306161326235393633636130376334306431 Oct 2 19:42:55.067362 env[1137]: time="2023-10-02T19:42:55.067313626Z" level=info msg="StartContainer for \"0b3f63920360aa2b5963ca07c40d12c6120a4061e3afbd901821370e2786a8fb\" returns successfully" Oct 2 19:42:55.184000 audit[2286]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2286 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.184000 audit[2286]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdd6d2e00 a2=0 a3=ffffb888d6c0 items=0 ppid=2243 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.184000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:42:55.185000 audit[2285]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2285 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.185000 audit[2285]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdafd82d0 a2=0 a3=ffff98d8b6c0 items=0 ppid=2243 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.185000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:42:55.185000 audit[2287]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2287 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.185000 audit[2287]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffccf1c420 a2=0 a3=ffff834b96c0 items=0 ppid=2243 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.185000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:42:55.186000 audit[2288]: NETFILTER_CFG table=filter:41 family=10 entries=1 op=nft_register_chain pid=2288 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.186000 audit[2288]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcc4a3b80 a2=0 a3=ffffab6eb6c0 items=0 ppid=2243 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.186000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:42:55.187000 audit[2289]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=2289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.187000 audit[2289]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc3c052a0 a2=0 a3=ffffa62066c0 items=0 ppid=2243 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.187000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:42:55.189000 audit[2290]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.189000 audit[2290]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd0846290 a2=0 a3=ffff8c74e6c0 items=0 ppid=2243 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.189000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:42:55.284000 audit[2291]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2291 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.284000 audit[2291]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe439dbb0 a2=0 a3=ffff838d16c0 items=0 ppid=2243 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.284000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:42:55.288000 audit[2293]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2293 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.288000 audit[2293]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe1bda350 a2=0 a3=ffffbb79c6c0 items=0 ppid=2243 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.288000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:42:55.294000 audit[2296]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2296 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.294000 audit[2296]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe4358540 a2=0 a3=ffffb76c26c0 items=0 ppid=2243 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.294000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:42:55.296000 audit[2297]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2297 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.296000 audit[2297]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdc18c220 a2=0 a3=ffffaec106c0 items=0 ppid=2243 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.296000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:42:55.298000 audit[2299]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2299 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.298000 audit[2299]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff52112b0 a2=0 a3=ffffa143f6c0 items=0 ppid=2243 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.298000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:42:55.300000 audit[2300]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2300 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.300000 audit[2300]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdac15c30 a2=0 a3=ffff9b5186c0 items=0 ppid=2243 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.300000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:42:55.303000 audit[2302]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2302 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.303000 audit[2302]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe919d440 a2=0 a3=ffff941616c0 items=0 ppid=2243 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.303000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:42:55.307000 audit[2305]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2305 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.307000 audit[2305]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd8b2aa10 a2=0 a3=ffffb0e936c0 items=0 ppid=2243 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.307000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:42:55.308000 audit[2306]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2306 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.308000 audit[2306]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe3a88f80 a2=0 a3=ffffa28c36c0 items=0 ppid=2243 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.308000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:42:55.310000 audit[2309]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2309 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.310000 audit[2309]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc1d6eee0 a2=0 a3=ffffb79686c0 items=0 ppid=2243 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.310000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:42:55.311000 audit[2310]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2310 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.311000 audit[2310]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdf92fa50 a2=0 a3=ffff869fd6c0 items=0 ppid=2243 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.311000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:42:55.314000 audit[2312]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2312 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.314000 audit[2312]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd60f89d0 a2=0 a3=ffff854216c0 items=0 ppid=2243 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.314000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:42:55.318000 audit[2315]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2315 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.318000 audit[2315]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc38a60b0 a2=0 a3=ffffaf0cd6c0 items=0 ppid=2243 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.318000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:42:55.323000 audit[2318]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.323000 audit[2318]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd80fdf60 a2=0 a3=ffffb9c6d6c0 items=0 ppid=2243 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.323000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:42:55.325000 audit[2319]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.325000 audit[2319]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffecb84e00 a2=0 a3=ffff833436c0 items=0 ppid=2243 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.325000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:42:55.328000 audit[2321]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.328000 audit[2321]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffd6823b70 a2=0 a3=ffffa6e366c0 items=0 ppid=2243 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.328000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:42:55.334000 audit[2324]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2324 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.334000 audit[2324]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd9d63770 a2=0 a3=ffffaeb056c0 items=0 ppid=2243 pid=2324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.334000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:42:55.336000 audit[2325]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.336000 audit[2325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc110c920 a2=0 a3=ffff85c1f6c0 items=0 ppid=2243 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.336000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:42:55.339000 audit[2327]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:55.339000 audit[2327]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffce8dcdb0 a2=0 a3=ffff9706a6c0 items=0 ppid=2243 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.339000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:42:55.355000 audit[2333]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:42:55.355000 audit[2333]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffef8c32a0 a2=0 a3=ffffa4b0c6c0 items=0 ppid=2243 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.355000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:42:55.368000 audit[2333]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:42:55.368000 audit[2333]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffef8c32a0 a2=0 a3=ffffa4b0c6c0 items=0 ppid=2243 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.368000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:42:55.371000 audit[2339]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2339 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.371000 audit[2339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffffdfd0340 a2=0 a3=ffffb324d6c0 items=0 ppid=2243 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.371000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:42:55.374000 audit[2341]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2341 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.374000 audit[2341]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc0289890 a2=0 a3=ffffb3f7d6c0 items=0 ppid=2243 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.374000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:42:55.378000 audit[2344]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2344 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.378000 audit[2344]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffcfaeb4f0 a2=0 a3=ffff801a26c0 items=0 ppid=2243 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.378000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:42:55.379000 audit[2345]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2345 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.379000 audit[2345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe2a6fb50 a2=0 a3=ffffbb6e36c0 items=0 ppid=2243 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.379000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:42:55.382000 audit[2347]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2347 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.382000 audit[2347]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc6f8e2e0 a2=0 a3=ffffac0d86c0 items=0 ppid=2243 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.382000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:42:55.383000 audit[2348]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2348 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.383000 audit[2348]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe8628b70 a2=0 a3=ffffa7d636c0 items=0 ppid=2243 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.383000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:42:55.386000 audit[2350]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2350 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.386000 audit[2350]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffcde1d180 a2=0 a3=ffff8b9e16c0 items=0 ppid=2243 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.386000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:42:55.390000 audit[2353]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2353 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.390000 audit[2353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffe2dca160 a2=0 a3=ffffa36516c0 items=0 ppid=2243 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.390000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:42:55.391000 audit[2354]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2354 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.391000 audit[2354]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff1e2b4a0 a2=0 a3=ffffa9ace6c0 items=0 ppid=2243 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.391000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:42:55.395000 audit[2356]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2356 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.395000 audit[2356]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff895ad00 a2=0 a3=ffff84bfa6c0 items=0 ppid=2243 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.395000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:42:55.396000 audit[2357]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2357 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.396000 audit[2357]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff1b110c0 a2=0 a3=ffffb03d66c0 items=0 ppid=2243 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.396000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:42:55.399000 audit[2359]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2359 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.399000 audit[2359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe1701a90 a2=0 a3=ffffaee466c0 items=0 ppid=2243 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.399000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:42:55.412000 audit[2362]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.412000 audit[2362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc82b8e00 a2=0 a3=ffff90e316c0 items=0 ppid=2243 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.412000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:42:55.416000 audit[2365]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2365 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.416000 audit[2365]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffea4afec0 a2=0 a3=ffffa9ee96c0 items=0 ppid=2243 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.416000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:42:55.417000 audit[2366]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2366 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.417000 audit[2366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd3a1e440 a2=0 a3=ffffae85c6c0 items=0 ppid=2243 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.417000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:42:55.420000 audit[2368]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2368 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.420000 audit[2368]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffffabd6b20 a2=0 a3=ffffb42256c0 items=0 ppid=2243 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.420000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:42:55.424000 audit[2371]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2371 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.424000 audit[2371]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd77edbe0 a2=0 a3=ffffbb3c86c0 items=0 ppid=2243 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.424000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:42:55.426000 audit[2372]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2372 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.426000 audit[2372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff94cbdd0 a2=0 a3=ffff8acda6c0 items=0 ppid=2243 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.426000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:42:55.429000 audit[2374]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2374 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.429000 audit[2374]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=fffffc780750 a2=0 a3=ffffa01bb6c0 items=0 ppid=2243 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.429000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:42:55.431000 audit[2375]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2375 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.431000 audit[2375]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd1c38800 a2=0 a3=ffff9a72c6c0 items=0 ppid=2243 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.431000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:42:55.435000 audit[2377]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2377 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.435000 audit[2377]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffebc124f0 a2=0 a3=ffffad3076c0 items=0 ppid=2243 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.435000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:42:55.438000 audit[2380]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2380 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:42:55.438000 audit[2380]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcd4a56e0 a2=0 a3=ffffbe4016c0 items=0 ppid=2243 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.438000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:42:55.442000 audit[2382]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2382 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:42:55.442000 audit[2382]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=fffff8adf410 a2=0 a3=ffff9b3c16c0 items=0 ppid=2243 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.442000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:42:55.443000 audit[2382]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2382 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:42:55.443000 audit[2382]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=fffff8adf410 a2=0 a3=ffff9b3c16c0 items=0 ppid=2243 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:55.443000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:42:55.652019 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1192218735.mount: Deactivated successfully. Oct 2 19:42:55.684363 kubelet[2011]: E1002 19:42:55.683078 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:55.796072 kubelet[2011]: I1002 19:42:55.795792 2011 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-5zdjt" podStartSLOduration=2.795754159 podCreationTimestamp="2023-10-02 19:42:53 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:42:55.795687219 +0000 UTC m=+15.309228548" watchObservedRunningTime="2023-10-02 19:42:55.795754159 +0000 UTC m=+15.309295488" Oct 2 19:42:56.301560 env[1137]: time="2023-10-02T19:42:56.301510308Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:56.303155 env[1137]: time="2023-10-02T19:42:56.303116361Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:56.304726 env[1137]: time="2023-10-02T19:42:56.304686404Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:56.304896 env[1137]: time="2023-10-02T19:42:56.304869216Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 19:42:56.305919 env[1137]: time="2023-10-02T19:42:56.305884422Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:42:56.307822 env[1137]: time="2023-10-02T19:42:56.307785879Z" level=info msg="CreateContainer within sandbox \"ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:42:56.323145 env[1137]: time="2023-10-02T19:42:56.323087076Z" level=info msg="CreateContainer within sandbox \"ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e\"" Oct 2 19:42:56.323803 env[1137]: time="2023-10-02T19:42:56.323774030Z" level=info msg="StartContainer for \"6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e\"" Oct 2 19:42:56.348870 systemd[1]: Started cri-containerd-6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e.scope. Oct 2 19:42:56.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.373000 audit: BPF prog-id=121 op=LOAD Oct 2 19:42:56.374000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.374000 audit[2392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2111 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:56.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639353137343532353663666435643235313038383535656130656664 Oct 2 19:42:56.374000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.374000 audit[2392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2111 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:56.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639353137343532353663666435643235313038383535656130656664 Oct 2 19:42:56.374000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.374000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.374000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.374000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.374000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.374000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.374000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.374000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.374000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.374000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.374000 audit: BPF prog-id=122 op=LOAD Oct 2 19:42:56.374000 audit[2392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2111 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:56.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639353137343532353663666435643235313038383535656130656664 Oct 2 19:42:56.375000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.375000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.375000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.375000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.375000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.375000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.375000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.375000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.375000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.375000 audit: BPF prog-id=123 op=LOAD Oct 2 19:42:56.375000 audit[2392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2111 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:56.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639353137343532353663666435643235313038383535656130656664 Oct 2 19:42:56.376000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:42:56.376000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:42:56.376000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.376000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.376000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.376000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.376000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.376000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.376000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.376000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.376000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.376000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:56.376000 audit: BPF prog-id=124 op=LOAD Oct 2 19:42:56.376000 audit[2392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2111 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:56.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639353137343532353663666435643235313038383535656130656664 Oct 2 19:42:56.411409 env[1137]: time="2023-10-02T19:42:56.411351582Z" level=info msg="StartContainer for \"6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e\" returns successfully" Oct 2 19:42:56.460000 audit[2403]: AVC avc: denied { map_create } for pid=2403 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c44,c115 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c44,c115 tclass=bpf permissive=0 Oct 2 19:42:56.460000 audit[2403]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=400070f768 a2=48 a3=0 items=0 ppid=2111 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c44,c115 key=(null) Oct 2 19:42:56.460000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:42:56.685843 kubelet[2011]: E1002 19:42:56.685740 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:42:57.321520 systemd[1]: run-containerd-runc-k8s.io-6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e-runc.jXaKbv.mount: Deactivated successfully. Oct 2 19:42:57.691180 kubelet[2011]: E1002 19:42:57.691072 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:00.652041 kubelet[2011]: I1002 19:43:00.651999 2011 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-6bc8ccdb58-64hz6" podStartSLOduration=5.187738711 podCreationTimestamp="2023-10-02 19:42:54 +0000 UTC" firstStartedPulling="2023-10-02 19:42:54.841025027 +0000 UTC m=+14.354566356" lastFinishedPulling="2023-10-02 19:42:56.3052372 +0000 UTC m=+15.818778529" observedRunningTime="2023-10-02 19:42:56.696943288 +0000 UTC m=+16.210484617" watchObservedRunningTime="2023-10-02 19:43:00.651950884 +0000 UTC m=+20.165492213" Oct 2 19:43:00.708225 kubelet[2011]: I1002 19:43:00.708190 2011 eviction_manager.go:342] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:43:00.708470 kubelet[2011]: I1002 19:43:00.708441 2011 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:43:00.713055 kubelet[2011]: I1002 19:43:00.713006 2011 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:43:00.714766 kubelet[2011]: I1002 19:43:00.714737 2011 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108" size=14557471 Oct 2 19:43:00.716379 env[1137]: time="2023-10-02T19:43:00.716324226Z" level=info msg="RemoveImage \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 19:43:00.804052 env[1137]: time="2023-10-02T19:43:00.803994934Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns:v1.10.1,XXX_unrecognized:[],}" Oct 2 19:43:00.806028 env[1137]: time="2023-10-02T19:43:00.805987450Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,XXX_unrecognized:[],}" Oct 2 19:43:00.809170 env[1137]: time="2023-10-02T19:43:00.809129641Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,XXX_unrecognized:[],}" Oct 2 19:43:00.818833 env[1137]: time="2023-10-02T19:43:00.818773585Z" level=info msg="RemoveImage \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\" returns successfully" Oct 2 19:43:00.819453 kubelet[2011]: I1002 19:43:00.819413 2011 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e" size=253553 Oct 2 19:43:00.820119 env[1137]: time="2023-10-02T19:43:00.820057572Z" level=info msg="RemoveImage \"sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e\"" Oct 2 19:43:00.821362 env[1137]: time="2023-10-02T19:43:00.821324675Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause:3.6,XXX_unrecognized:[],}" Oct 2 19:43:00.823124 env[1137]: time="2023-10-02T19:43:00.823089336Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,XXX_unrecognized:[],}" Oct 2 19:43:00.825660 env[1137]: time="2023-10-02T19:43:00.825150829Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,XXX_unrecognized:[],}" Oct 2 19:43:00.827462 env[1137]: time="2023-10-02T19:43:00.827345153Z" level=info msg="RemoveImage \"sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e\" returns successfully" Oct 2 19:43:00.827823 kubelet[2011]: I1002 19:43:00.827700 2011 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace" size=86464836 Oct 2 19:43:00.828002 env[1137]: time="2023-10-02T19:43:00.827939695Z" level=info msg="RemoveImage \"sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace\"" Oct 2 19:43:00.829028 env[1137]: time="2023-10-02T19:43:00.829000749Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd:3.5.9-0,XXX_unrecognized:[],}" Oct 2 19:43:00.830200 env[1137]: time="2023-10-02T19:43:00.830168628Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,XXX_unrecognized:[],}" Oct 2 19:43:00.831070 env[1137]: time="2023-10-02T19:43:00.831032954Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace,XXX_unrecognized:[],}" Oct 2 19:43:00.858579 env[1137]: time="2023-10-02T19:43:00.858314313Z" level=info msg="RemoveImage \"sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace\" returns successfully" Oct 2 19:43:00.871527 kubelet[2011]: I1002 19:43:00.871480 2011 eviction_manager.go:349] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:43:00.928269 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1428570429.mount: Deactivated successfully. Oct 2 19:43:03.239828 env[1137]: time="2023-10-02T19:43:03.239767345Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:03.242027 env[1137]: time="2023-10-02T19:43:03.241990499Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:03.243871 env[1137]: time="2023-10-02T19:43:03.243826810Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:03.244533 env[1137]: time="2023-10-02T19:43:03.244501594Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 19:43:03.247141 env[1137]: time="2023-10-02T19:43:03.247085104Z" level=info msg="CreateContainer within sandbox \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:43:03.255819 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3058828580.mount: Deactivated successfully. Oct 2 19:43:03.260247 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3675963995.mount: Deactivated successfully. Oct 2 19:43:03.264766 env[1137]: time="2023-10-02T19:43:03.264707340Z" level=info msg="CreateContainer within sandbox \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70\"" Oct 2 19:43:03.265319 env[1137]: time="2023-10-02T19:43:03.265288504Z" level=info msg="StartContainer for \"ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70\"" Oct 2 19:43:03.283026 systemd[1]: Started cri-containerd-ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70.scope. Oct 2 19:43:03.307407 systemd[1]: cri-containerd-ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70.scope: Deactivated successfully. Oct 2 19:43:03.483749 env[1137]: time="2023-10-02T19:43:03.483699968Z" level=info msg="shim disconnected" id=ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70 Oct 2 19:43:03.483749 env[1137]: time="2023-10-02T19:43:03.483747938Z" level=warning msg="cleaning up after shim disconnected" id=ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70 namespace=k8s.io Oct 2 19:43:03.483749 env[1137]: time="2023-10-02T19:43:03.483757420Z" level=info msg="cleaning up dead shim" Oct 2 19:43:03.492343 env[1137]: time="2023-10-02T19:43:03.492228385Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2451 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:03Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:03.493407 env[1137]: time="2023-10-02T19:43:03.493176508Z" level=error msg="copy shim log" error="read /proc/self/fd/108: file already closed" Oct 2 19:43:03.493463 env[1137]: time="2023-10-02T19:43:03.493401355Z" level=error msg="Failed to pipe stdout of container \"ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70\"" error="reading from a closed fifo" Oct 2 19:43:03.493577 env[1137]: time="2023-10-02T19:43:03.493532663Z" level=error msg="Failed to pipe stderr of container \"ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70\"" error="reading from a closed fifo" Oct 2 19:43:03.495568 env[1137]: time="2023-10-02T19:43:03.495510605Z" level=error msg="StartContainer for \"ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:03.495945 kubelet[2011]: E1002 19:43:03.495800 2011 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70" Oct 2 19:43:03.499793 kubelet[2011]: E1002 19:43:03.499759 2011 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:03.499793 kubelet[2011]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:03.499793 kubelet[2011]: rm /hostbin/cilium-mount Oct 2 19:43:03.499932 kubelet[2011]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-zpjhg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:03.499932 kubelet[2011]: E1002 19:43:03.499827 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:43:03.705528 kubelet[2011]: E1002 19:43:03.704832 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:03.706894 env[1137]: time="2023-10-02T19:43:03.706841881Z" level=info msg="CreateContainer within sandbox \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:43:03.719667 env[1137]: time="2023-10-02T19:43:03.719600320Z" level=info msg="CreateContainer within sandbox \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0\"" Oct 2 19:43:03.721536 env[1137]: time="2023-10-02T19:43:03.721493683Z" level=info msg="StartContainer for \"832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0\"" Oct 2 19:43:03.737835 systemd[1]: Started cri-containerd-832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0.scope. Oct 2 19:43:03.768357 systemd[1]: cri-containerd-832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0.scope: Deactivated successfully. Oct 2 19:43:03.776315 env[1137]: time="2023-10-02T19:43:03.776252632Z" level=info msg="shim disconnected" id=832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0 Oct 2 19:43:03.776315 env[1137]: time="2023-10-02T19:43:03.776309605Z" level=warning msg="cleaning up after shim disconnected" id=832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0 namespace=k8s.io Oct 2 19:43:03.776315 env[1137]: time="2023-10-02T19:43:03.776321247Z" level=info msg="cleaning up dead shim" Oct 2 19:43:03.785084 env[1137]: time="2023-10-02T19:43:03.785028223Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2488 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:03Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:03.785341 env[1137]: time="2023-10-02T19:43:03.785286838Z" level=error msg="copy shim log" error="read /proc/self/fd/108: file already closed" Oct 2 19:43:03.785691 env[1137]: time="2023-10-02T19:43:03.785470797Z" level=error msg="Failed to pipe stdout of container \"832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0\"" error="reading from a closed fifo" Oct 2 19:43:03.785691 env[1137]: time="2023-10-02T19:43:03.785560816Z" level=error msg="Failed to pipe stderr of container \"832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0\"" error="reading from a closed fifo" Oct 2 19:43:03.787002 env[1137]: time="2023-10-02T19:43:03.786946151Z" level=error msg="StartContainer for \"832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:03.787184 kubelet[2011]: E1002 19:43:03.787155 2011 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0" Oct 2 19:43:03.787273 kubelet[2011]: E1002 19:43:03.787266 2011 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:03.787273 kubelet[2011]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:03.787273 kubelet[2011]: rm /hostbin/cilium-mount Oct 2 19:43:03.787273 kubelet[2011]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-zpjhg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:03.787618 kubelet[2011]: E1002 19:43:03.787391 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:43:04.253524 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70-rootfs.mount: Deactivated successfully. Oct 2 19:43:04.708242 kubelet[2011]: I1002 19:43:04.708199 2011 scope.go:117] "RemoveContainer" containerID="ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70" Oct 2 19:43:04.708577 kubelet[2011]: I1002 19:43:04.708520 2011 scope.go:117] "RemoveContainer" containerID="ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70" Oct 2 19:43:04.709647 env[1137]: time="2023-10-02T19:43:04.709605258Z" level=info msg="RemoveContainer for \"ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70\"" Oct 2 19:43:04.709841 env[1137]: time="2023-10-02T19:43:04.709745167Z" level=info msg="RemoveContainer for \"ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70\"" Oct 2 19:43:04.709872 env[1137]: time="2023-10-02T19:43:04.709832665Z" level=error msg="RemoveContainer for \"ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70\" failed" error="failed to set removing state for container \"ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70\": container is already in removing state" Oct 2 19:43:04.710005 kubelet[2011]: E1002 19:43:04.709986 2011 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70\": container is already in removing state" containerID="ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70" Oct 2 19:43:04.710061 kubelet[2011]: E1002 19:43:04.710028 2011 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70": container is already in removing state; Skipping pod "cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)" Oct 2 19:43:04.710106 kubelet[2011]: E1002 19:43:04.710092 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:04.710354 kubelet[2011]: E1002 19:43:04.710332 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:43:04.718109 env[1137]: time="2023-10-02T19:43:04.717534168Z" level=info msg="RemoveContainer for \"ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70\" returns successfully" Oct 2 19:43:05.710899 kubelet[2011]: E1002 19:43:05.710860 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:05.711247 kubelet[2011]: E1002 19:43:05.711179 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:43:06.588860 kubelet[2011]: W1002 19:43:06.588799 2011 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podbc4ee64d_b13a_4d5d_ba2f_78aa6088f2bf.slice/cri-containerd-ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70.scope WatchSource:0}: container "ec4287b55cc7251bdd02997002ad78e5597365ce60f5b14a695e52e9df303c70" in namespace "k8s.io": not found Oct 2 19:43:09.696777 kubelet[2011]: W1002 19:43:09.696699 2011 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podbc4ee64d_b13a_4d5d_ba2f_78aa6088f2bf.slice/cri-containerd-832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0.scope WatchSource:0}: task 832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0 not found: not found Oct 2 19:43:16.631671 kubelet[2011]: E1002 19:43:16.631641 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:16.640532 env[1137]: time="2023-10-02T19:43:16.640481109Z" level=info msg="CreateContainer within sandbox \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:43:16.649726 env[1137]: time="2023-10-02T19:43:16.649671316Z" level=info msg="CreateContainer within sandbox \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39\"" Oct 2 19:43:16.651367 env[1137]: time="2023-10-02T19:43:16.650490235Z" level=info msg="StartContainer for \"5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39\"" Oct 2 19:43:16.671719 systemd[1]: run-containerd-runc-k8s.io-5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39-runc.SaMVNj.mount: Deactivated successfully. Oct 2 19:43:16.673128 systemd[1]: Started cri-containerd-5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39.scope. Oct 2 19:43:16.694960 systemd[1]: cri-containerd-5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39.scope: Deactivated successfully. Oct 2 19:43:16.723188 env[1137]: time="2023-10-02T19:43:16.723123324Z" level=info msg="shim disconnected" id=5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39 Oct 2 19:43:16.723392 env[1137]: time="2023-10-02T19:43:16.723231100Z" level=warning msg="cleaning up after shim disconnected" id=5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39 namespace=k8s.io Oct 2 19:43:16.723392 env[1137]: time="2023-10-02T19:43:16.723246342Z" level=info msg="cleaning up dead shim" Oct 2 19:43:16.731502 env[1137]: time="2023-10-02T19:43:16.731462168Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2526 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:16Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:16.731826 env[1137]: time="2023-10-02T19:43:16.731775534Z" level=error msg="copy shim log" error="read /proc/self/fd/63: file already closed" Oct 2 19:43:16.732053 env[1137]: time="2023-10-02T19:43:16.732021169Z" level=error msg="Failed to pipe stderr of container \"5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39\"" error="reading from a closed fifo" Oct 2 19:43:16.732082 env[1137]: time="2023-10-02T19:43:16.732025170Z" level=error msg="Failed to pipe stdout of container \"5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39\"" error="reading from a closed fifo" Oct 2 19:43:16.734105 env[1137]: time="2023-10-02T19:43:16.734051782Z" level=error msg="StartContainer for \"5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:16.734298 kubelet[2011]: E1002 19:43:16.734265 2011 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39" Oct 2 19:43:16.734388 kubelet[2011]: E1002 19:43:16.734375 2011 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:16.734388 kubelet[2011]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:16.734388 kubelet[2011]: rm /hostbin/cilium-mount Oct 2 19:43:16.734388 kubelet[2011]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-zpjhg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:16.734621 kubelet[2011]: E1002 19:43:16.734425 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:43:17.647613 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39-rootfs.mount: Deactivated successfully. Oct 2 19:43:17.735592 kubelet[2011]: I1002 19:43:17.735567 2011 scope.go:117] "RemoveContainer" containerID="832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0" Oct 2 19:43:17.735909 kubelet[2011]: I1002 19:43:17.735876 2011 scope.go:117] "RemoveContainer" containerID="832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0" Oct 2 19:43:17.739044 env[1137]: time="2023-10-02T19:43:17.739000392Z" level=info msg="RemoveContainer for \"832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0\"" Oct 2 19:43:17.741660 env[1137]: time="2023-10-02T19:43:17.741624842Z" level=info msg="RemoveContainer for \"832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0\" returns successfully" Oct 2 19:43:17.742019 env[1137]: time="2023-10-02T19:43:17.739830989Z" level=info msg="RemoveContainer for \"832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0\"" Oct 2 19:43:17.742061 env[1137]: time="2023-10-02T19:43:17.742046222Z" level=info msg="RemoveContainer for \"832a48e9f3d4b5e9b55d5c42b7e75b209738f9b6c7c9fe493816b63bc03d9ab0\" returns successfully" Oct 2 19:43:17.742293 kubelet[2011]: E1002 19:43:17.742275 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:17.742866 kubelet[2011]: E1002 19:43:17.742848 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:43:19.829448 kubelet[2011]: W1002 19:43:19.829407 2011 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podbc4ee64d_b13a_4d5d_ba2f_78aa6088f2bf.slice/cri-containerd-5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39.scope WatchSource:0}: task 5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39 not found: not found Oct 2 19:43:30.632638 kubelet[2011]: E1002 19:43:30.632601 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:30.633611 kubelet[2011]: E1002 19:43:30.633588 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:43:30.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.6:22-10.0.0.1:45246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:30.794295 systemd[1]: Started sshd@7-10.0.0.6:22-10.0.0.1:45246.service. Oct 2 19:43:30.795434 kernel: kauditd_printk_skb: 432 callbacks suppressed Oct 2 19:43:30.795499 kernel: audit: type=1130 audit(1696275810.793:1076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.6:22-10.0.0.1:45246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:30.838000 audit[2542]: USER_ACCT pid=2542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:30.842179 sshd[2542]: Accepted publickey for core from 10.0.0.1 port 45246 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:43:30.842995 kernel: audit: type=1101 audit(1696275810.838:1077): pid=2542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:30.842000 audit[2542]: CRED_ACQ pid=2542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:30.844086 sshd[2542]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:43:30.847536 kernel: audit: type=1103 audit(1696275810.842:1078): pid=2542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:30.847597 kernel: audit: type=1006 audit(1696275810.842:1079): pid=2542 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:43:30.847629 kernel: audit: type=1300 audit(1696275810.842:1079): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2f59b70 a2=3 a3=1 items=0 ppid=1 pid=2542 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:30.842000 audit[2542]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2f59b70 a2=3 a3=1 items=0 ppid=1 pid=2542 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:30.849109 kernel: audit: type=1327 audit(1696275810.842:1079): proctitle=737368643A20636F7265205B707269765D Oct 2 19:43:30.842000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:43:30.850036 systemd-logind[1129]: New session 8 of user core. Oct 2 19:43:30.850323 systemd[1]: Started session-8.scope. Oct 2 19:43:30.855000 audit[2542]: USER_START pid=2542 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:30.859061 kernel: audit: type=1105 audit(1696275810.855:1080): pid=2542 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:30.858000 audit[2544]: CRED_ACQ pid=2544 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:30.861992 kernel: audit: type=1103 audit(1696275810.858:1081): pid=2544 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:30.994101 sshd[2542]: pam_unix(sshd:session): session closed for user core Oct 2 19:43:30.995000 audit[2542]: USER_END pid=2542 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:30.998441 systemd[1]: sshd@7-10.0.0.6:22-10.0.0.1:45246.service: Deactivated successfully. Oct 2 19:43:30.996000 audit[2542]: CRED_DISP pid=2542 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:30.999233 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:43:31.000532 systemd-logind[1129]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:43:31.000701 kernel: audit: type=1106 audit(1696275810.995:1082): pid=2542 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:31.000747 kernel: audit: type=1104 audit(1696275810.996:1083): pid=2542 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:30.997000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.6:22-10.0.0.1:45246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:31.001287 systemd-logind[1129]: Removed session 8. Oct 2 19:43:36.972000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:36.973994 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:43:36.974062 kernel: audit: type=1400 audit(1696275816.972:1085): avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:36.972000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012c80c0 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:43:36.978593 kernel: audit: type=1300 audit(1696275816.972:1085): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012c80c0 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:43:36.978655 kernel: audit: type=1327 audit(1696275816.972:1085): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:36.972000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:36.980774 kernel: audit: type=1400 audit(1696275816.972:1086): avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:36.972000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:36.982769 kernel: audit: type=1300 audit(1696275816.972:1086): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002799500 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:43:36.972000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002799500 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:43:36.985393 kernel: audit: type=1327 audit(1696275816.972:1086): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:36.972000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:37.188000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:37.188000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:37.194069 kernel: audit: type=1400 audit(1696275817.188:1087): avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:37.194126 kernel: audit: type=1400 audit(1696275817.188:1088): avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:37.194158 kernel: audit: type=1300 audit(1696275817.188:1088): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40089d5050 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:43:37.188000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40089d5050 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:43:37.196650 kernel: audit: type=1300 audit(1696275817.188:1087): arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=400857fe30 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:43:37.188000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=400857fe30 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:43:37.188000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:43:37.188000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:43:37.204000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=4790 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:37.204000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=4008a5a030 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:43:37.204000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:43:37.210000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:37.210000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=4008a5a060 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:43:37.210000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:43:37.210000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:37.210000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400b2fffe0 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:43:37.210000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:43:37.210000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:37.210000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=400bae1440 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:43:37.210000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:43:40.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.6:22-10.0.0.1:56146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:41.000538 systemd[1]: Started sshd@8-10.0.0.6:22-10.0.0.1:56146.service. Oct 2 19:43:41.041000 audit[2562]: USER_ACCT pid=2562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:41.042605 sshd[2562]: Accepted publickey for core from 10.0.0.1 port 56146 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:43:41.042000 audit[2562]: CRED_ACQ pid=2562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:41.042000 audit[2562]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4038230 a2=3 a3=1 items=0 ppid=1 pid=2562 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:41.042000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:43:41.044328 sshd[2562]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:43:41.049391 systemd[1]: Started session-9.scope. Oct 2 19:43:41.049739 systemd-logind[1129]: New session 9 of user core. Oct 2 19:43:41.052000 audit[2562]: USER_START pid=2562 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:41.054000 audit[2564]: CRED_ACQ pid=2564 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:41.168003 sshd[2562]: pam_unix(sshd:session): session closed for user core Oct 2 19:43:41.168000 audit[2562]: USER_END pid=2562 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:41.168000 audit[2562]: CRED_DISP pid=2562 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:41.171023 systemd[1]: sshd@8-10.0.0.6:22-10.0.0.1:56146.service: Deactivated successfully. Oct 2 19:43:41.170000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.6:22-10.0.0.1:56146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:41.171833 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:43:41.172389 systemd-logind[1129]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:43:41.173063 systemd-logind[1129]: Removed session 9. Oct 2 19:43:41.631175 kubelet[2011]: E1002 19:43:41.631148 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:41.633086 env[1137]: time="2023-10-02T19:43:41.633045168Z" level=info msg="CreateContainer within sandbox \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:43:41.711184 env[1137]: time="2023-10-02T19:43:41.711127080Z" level=info msg="CreateContainer within sandbox \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a\"" Oct 2 19:43:41.711768 env[1137]: time="2023-10-02T19:43:41.711744252Z" level=info msg="StartContainer for \"1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a\"" Oct 2 19:43:41.730364 systemd[1]: Started cri-containerd-1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a.scope. Oct 2 19:43:41.749336 systemd[1]: cri-containerd-1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a.scope: Deactivated successfully. Oct 2 19:43:41.753472 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a-rootfs.mount: Deactivated successfully. Oct 2 19:43:41.760523 env[1137]: time="2023-10-02T19:43:41.760470275Z" level=info msg="shim disconnected" id=1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a Oct 2 19:43:41.760523 env[1137]: time="2023-10-02T19:43:41.760521110Z" level=warning msg="cleaning up after shim disconnected" id=1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a namespace=k8s.io Oct 2 19:43:41.760701 env[1137]: time="2023-10-02T19:43:41.760530909Z" level=info msg="cleaning up dead shim" Oct 2 19:43:41.769190 env[1137]: time="2023-10-02T19:43:41.769140653Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2599 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:41Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:41.769514 env[1137]: time="2023-10-02T19:43:41.769458738Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:43:41.769696 env[1137]: time="2023-10-02T19:43:41.769650597Z" level=error msg="Failed to pipe stdout of container \"1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a\"" error="reading from a closed fifo" Oct 2 19:43:41.769772 env[1137]: time="2023-10-02T19:43:41.769675994Z" level=error msg="Failed to pipe stderr of container \"1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a\"" error="reading from a closed fifo" Oct 2 19:43:41.771288 env[1137]: time="2023-10-02T19:43:41.771245304Z" level=error msg="StartContainer for \"1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:41.771481 kubelet[2011]: E1002 19:43:41.771460 2011 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a" Oct 2 19:43:41.771723 kubelet[2011]: E1002 19:43:41.771709 2011 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:41.771723 kubelet[2011]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:41.771723 kubelet[2011]: rm /hostbin/cilium-mount Oct 2 19:43:41.771723 kubelet[2011]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-zpjhg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:41.771871 kubelet[2011]: E1002 19:43:41.771749 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:43:41.778090 kubelet[2011]: I1002 19:43:41.778070 2011 scope.go:117] "RemoveContainer" containerID="5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39" Oct 2 19:43:41.778421 kubelet[2011]: I1002 19:43:41.778407 2011 scope.go:117] "RemoveContainer" containerID="5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39" Oct 2 19:43:41.782656 env[1137]: time="2023-10-02T19:43:41.782626347Z" level=info msg="RemoveContainer for \"5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39\"" Oct 2 19:43:41.782998 env[1137]: time="2023-10-02T19:43:41.782866280Z" level=info msg="RemoveContainer for \"5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39\"" Oct 2 19:43:41.783414 env[1137]: time="2023-10-02T19:43:41.783368226Z" level=error msg="RemoveContainer for \"5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39\" failed" error="failed to set removing state for container \"5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39\": container is already in removing state" Oct 2 19:43:41.783707 kubelet[2011]: E1002 19:43:41.783686 2011 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39\": container is already in removing state" containerID="5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39" Oct 2 19:43:41.783785 kubelet[2011]: I1002 19:43:41.783742 2011 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39"} err="rpc error: code = Unknown desc = failed to set removing state for container \"5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39\": container is already in removing state" Oct 2 19:43:41.786091 env[1137]: time="2023-10-02T19:43:41.786063093Z" level=info msg="RemoveContainer for \"5f11379c20306f99ff0caf90976a112cddb3f765729121e2ff7cde348a333d39\" returns successfully" Oct 2 19:43:41.786395 kubelet[2011]: E1002 19:43:41.786378 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:41.786630 kubelet[2011]: E1002 19:43:41.786616 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:43:44.867034 kubelet[2011]: W1002 19:43:44.866995 2011 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podbc4ee64d_b13a_4d5d_ba2f_78aa6088f2bf.slice/cri-containerd-1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a.scope WatchSource:0}: task 1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a not found: not found Oct 2 19:43:47.631605 kubelet[2011]: E1002 19:43:47.631571 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:51.171000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.6:22-10.0.0.1:47162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:51.172168 systemd[1]: Started sshd@9-10.0.0.6:22-10.0.0.1:47162.service. Oct 2 19:43:51.174662 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:43:51.174773 kernel: audit: type=1130 audit(1696275831.171:1102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.6:22-10.0.0.1:47162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:51.212000 audit[2612]: USER_ACCT pid=2612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:51.213635 sshd[2612]: Accepted publickey for core from 10.0.0.1 port 47162 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:43:51.215987 kernel: audit: type=1101 audit(1696275831.212:1103): pid=2612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:51.215000 audit[2612]: CRED_ACQ pid=2612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:51.217077 sshd[2612]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:43:51.221133 kernel: audit: type=1103 audit(1696275831.215:1104): pid=2612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:51.222031 kernel: audit: type=1006 audit(1696275831.215:1105): pid=2612 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:43:51.222073 kernel: audit: type=1300 audit(1696275831.215:1105): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff87ce370 a2=3 a3=1 items=0 ppid=1 pid=2612 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:51.215000 audit[2612]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff87ce370 a2=3 a3=1 items=0 ppid=1 pid=2612 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:51.221341 systemd-logind[1129]: New session 10 of user core. Oct 2 19:43:51.222378 kernel: audit: type=1327 audit(1696275831.215:1105): proctitle=737368643A20636F7265205B707269765D Oct 2 19:43:51.215000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:43:51.222301 systemd[1]: Started session-10.scope. Oct 2 19:43:51.224000 audit[2612]: USER_START pid=2612 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:51.226000 audit[2614]: CRED_ACQ pid=2614 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:51.230382 kernel: audit: type=1105 audit(1696275831.224:1106): pid=2612 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:51.230445 kernel: audit: type=1103 audit(1696275831.226:1107): pid=2614 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:51.346484 sshd[2612]: pam_unix(sshd:session): session closed for user core Oct 2 19:43:51.346000 audit[2612]: USER_END pid=2612 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:51.349459 systemd-logind[1129]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:43:51.349646 systemd[1]: sshd@9-10.0.0.6:22-10.0.0.1:47162.service: Deactivated successfully. Oct 2 19:43:51.350491 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:43:51.351137 systemd-logind[1129]: Removed session 10. Oct 2 19:43:51.346000 audit[2612]: CRED_DISP pid=2612 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:51.354192 kernel: audit: type=1106 audit(1696275831.346:1108): pid=2612 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:51.354254 kernel: audit: type=1104 audit(1696275831.346:1109): pid=2612 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:43:51.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.6:22-10.0.0.1:47162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:52.687000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:52.687000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001f995e0 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:43:52.687000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:52.687000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:52.687000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400259dca0 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:43:52.687000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:52.690000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:52.690000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400112cbe0 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:43:52.690000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:52.690000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:52.690000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400112cc00 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:43:52.690000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:55.631161 kubelet[2011]: E1002 19:43:55.631124 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:43:55.631503 kubelet[2011]: E1002 19:43:55.631403 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:43:57.631590 kubelet[2011]: E1002 19:43:57.631561 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:44:01.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.6:22-10.0.0.1:40632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:01.351070 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:44:01.351119 kernel: audit: type=1130 audit(1696275841.349:1115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.6:22-10.0.0.1:40632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:01.350406 systemd[1]: Started sshd@10-10.0.0.6:22-10.0.0.1:40632.service. Oct 2 19:44:01.390000 audit[2628]: USER_ACCT pid=2628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:01.391246 sshd[2628]: Accepted publickey for core from 10.0.0.1 port 40632 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:44:01.392798 sshd[2628]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:44:01.391000 audit[2628]: CRED_ACQ pid=2628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:01.397825 kernel: audit: type=1101 audit(1696275841.390:1116): pid=2628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:01.397898 kernel: audit: type=1103 audit(1696275841.391:1117): pid=2628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:01.397919 kernel: audit: type=1006 audit(1696275841.391:1118): pid=2628 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:44:01.397936 kernel: audit: type=1300 audit(1696275841.391:1118): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe89f0770 a2=3 a3=1 items=0 ppid=1 pid=2628 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:01.391000 audit[2628]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe89f0770 a2=3 a3=1 items=0 ppid=1 pid=2628 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:01.397110 systemd[1]: Started session-11.scope. Oct 2 19:44:01.398133 systemd-logind[1129]: New session 11 of user core. Oct 2 19:44:01.399112 kernel: audit: type=1327 audit(1696275841.391:1118): proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:01.391000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:01.401000 audit[2628]: USER_START pid=2628 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:01.403000 audit[2630]: CRED_ACQ pid=2630 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:01.407591 kernel: audit: type=1105 audit(1696275841.401:1119): pid=2628 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:01.407650 kernel: audit: type=1103 audit(1696275841.403:1120): pid=2630 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:01.521009 sshd[2628]: pam_unix(sshd:session): session closed for user core Oct 2 19:44:01.521000 audit[2628]: USER_END pid=2628 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:01.523568 systemd[1]: sshd@10-10.0.0.6:22-10.0.0.1:40632.service: Deactivated successfully. Oct 2 19:44:01.524516 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:44:01.521000 audit[2628]: CRED_DISP pid=2628 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:01.525119 systemd-logind[1129]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:44:01.525820 systemd-logind[1129]: Removed session 11. Oct 2 19:44:01.526448 kernel: audit: type=1106 audit(1696275841.521:1121): pid=2628 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:01.526492 kernel: audit: type=1104 audit(1696275841.521:1122): pid=2628 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:01.523000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.6:22-10.0.0.1:40632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:03.630834 kubelet[2011]: E1002 19:44:03.630795 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:44:07.630894 kubelet[2011]: E1002 19:44:07.630867 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:44:08.631533 kubelet[2011]: E1002 19:44:08.631494 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:44:08.631852 kubelet[2011]: E1002 19:44:08.631712 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:44:11.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.6:22-10.0.0.1:33878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:11.526094 systemd[1]: Started sshd@11-10.0.0.6:22-10.0.0.1:33878.service. Oct 2 19:44:11.528627 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:44:11.528692 kernel: audit: type=1130 audit(1696275851.525:1124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.6:22-10.0.0.1:33878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:11.563000 audit[2642]: USER_ACCT pid=2642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:11.565167 sshd[2642]: Accepted publickey for core from 10.0.0.1 port 33878 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:44:11.566232 sshd[2642]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:44:11.564000 audit[2642]: CRED_ACQ pid=2642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:11.569184 kernel: audit: type=1101 audit(1696275851.563:1125): pid=2642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:11.570560 kernel: audit: type=1103 audit(1696275851.564:1126): pid=2642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:11.570653 kernel: audit: type=1006 audit(1696275851.564:1127): pid=2642 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:44:11.570678 kernel: audit: type=1300 audit(1696275851.564:1127): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcefd8e40 a2=3 a3=1 items=0 ppid=1 pid=2642 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:11.564000 audit[2642]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcefd8e40 a2=3 a3=1 items=0 ppid=1 pid=2642 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:11.569381 systemd-logind[1129]: New session 12 of user core. Oct 2 19:44:11.570240 systemd[1]: Started session-12.scope. Oct 2 19:44:11.564000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:11.573422 kernel: audit: type=1327 audit(1696275851.564:1127): proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:11.572000 audit[2642]: USER_START pid=2642 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:11.576086 kernel: audit: type=1105 audit(1696275851.572:1128): pid=2642 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:11.576170 kernel: audit: type=1103 audit(1696275851.574:1129): pid=2644 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:11.574000 audit[2644]: CRED_ACQ pid=2644 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:11.631681 kubelet[2011]: E1002 19:44:11.631655 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:44:11.699365 sshd[2642]: pam_unix(sshd:session): session closed for user core Oct 2 19:44:11.699000 audit[2642]: USER_END pid=2642 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:11.699000 audit[2642]: CRED_DISP pid=2642 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:11.701617 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:44:11.702188 systemd[1]: sshd@11-10.0.0.6:22-10.0.0.1:33878.service: Deactivated successfully. Oct 2 19:44:11.703056 systemd-logind[1129]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:44:11.703586 systemd-logind[1129]: Removed session 12. Oct 2 19:44:11.705164 kernel: audit: type=1106 audit(1696275851.699:1130): pid=2642 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:11.705224 kernel: audit: type=1104 audit(1696275851.699:1131): pid=2642 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:11.701000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.6:22-10.0.0.1:33878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:19.631626 kubelet[2011]: E1002 19:44:19.631579 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:44:19.632065 kubelet[2011]: E1002 19:44:19.631811 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:44:21.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.6:22-10.0.0.1:60666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:21.704086 systemd[1]: Started sshd@12-10.0.0.6:22-10.0.0.1:60666.service. Oct 2 19:44:21.706584 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:44:21.706658 kernel: audit: type=1130 audit(1696275861.703:1133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.6:22-10.0.0.1:60666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:21.744000 audit[2656]: USER_ACCT pid=2656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:21.745825 sshd[2656]: Accepted publickey for core from 10.0.0.1 port 60666 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:44:21.747054 sshd[2656]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:44:21.745000 audit[2656]: CRED_ACQ pid=2656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:21.750066 kernel: audit: type=1101 audit(1696275861.744:1134): pid=2656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:21.751449 kernel: audit: type=1103 audit(1696275861.745:1135): pid=2656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:21.751497 kernel: audit: type=1006 audit(1696275861.745:1136): pid=2656 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:44:21.751520 kernel: audit: type=1300 audit(1696275861.745:1136): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdcadf2a0 a2=3 a3=1 items=0 ppid=1 pid=2656 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:21.745000 audit[2656]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdcadf2a0 a2=3 a3=1 items=0 ppid=1 pid=2656 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:21.750296 systemd-logind[1129]: New session 13 of user core. Oct 2 19:44:21.751183 systemd[1]: Started session-13.scope. Oct 2 19:44:21.745000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:21.754231 kernel: audit: type=1327 audit(1696275861.745:1136): proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:21.754000 audit[2656]: USER_START pid=2656 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:21.756000 audit[2658]: CRED_ACQ pid=2658 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:21.760958 kernel: audit: type=1105 audit(1696275861.754:1137): pid=2656 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:21.760997 kernel: audit: type=1103 audit(1696275861.756:1138): pid=2658 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:21.875097 sshd[2656]: pam_unix(sshd:session): session closed for user core Oct 2 19:44:21.874000 audit[2656]: USER_END pid=2656 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:21.875000 audit[2656]: CRED_DISP pid=2656 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:21.878051 systemd[1]: sshd@12-10.0.0.6:22-10.0.0.1:60666.service: Deactivated successfully. Oct 2 19:44:21.878854 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:44:21.879585 systemd-logind[1129]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:44:21.880479 kernel: audit: type=1106 audit(1696275861.874:1139): pid=2656 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:21.880531 kernel: audit: type=1104 audit(1696275861.875:1140): pid=2656 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:21.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.6:22-10.0.0.1:60666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:21.884436 systemd-logind[1129]: Removed session 13. Oct 2 19:44:31.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.6:22-10.0.0.1:54076 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:31.880616 systemd[1]: Started sshd@13-10.0.0.6:22-10.0.0.1:54076.service. Oct 2 19:44:31.886783 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:44:31.886880 kernel: audit: type=1130 audit(1696275871.880:1142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.6:22-10.0.0.1:54076 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:31.930000 audit[2672]: USER_ACCT pid=2672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:31.931955 sshd[2672]: Accepted publickey for core from 10.0.0.1 port 54076 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:44:31.934021 sshd[2672]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:44:31.932000 audit[2672]: CRED_ACQ pid=2672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:31.936138 kernel: audit: type=1101 audit(1696275871.930:1143): pid=2672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:31.936211 kernel: audit: type=1103 audit(1696275871.932:1144): pid=2672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:31.936234 kernel: audit: type=1006 audit(1696275871.932:1145): pid=2672 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:44:31.932000 audit[2672]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee1c2840 a2=3 a3=1 items=0 ppid=1 pid=2672 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:31.937949 systemd-logind[1129]: New session 14 of user core. Oct 2 19:44:31.938847 systemd[1]: Started session-14.scope. Oct 2 19:44:31.939584 kernel: audit: type=1300 audit(1696275871.932:1145): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee1c2840 a2=3 a3=1 items=0 ppid=1 pid=2672 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:31.939651 kernel: audit: type=1327 audit(1696275871.932:1145): proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:31.932000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:31.942000 audit[2672]: USER_START pid=2672 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:31.943000 audit[2674]: CRED_ACQ pid=2674 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:31.947403 kernel: audit: type=1105 audit(1696275871.942:1146): pid=2672 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:31.947478 kernel: audit: type=1103 audit(1696275871.943:1147): pid=2674 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:32.055815 sshd[2672]: pam_unix(sshd:session): session closed for user core Oct 2 19:44:32.056000 audit[2672]: USER_END pid=2672 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:32.058361 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:44:32.058926 systemd-logind[1129]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:44:32.059084 systemd[1]: sshd@13-10.0.0.6:22-10.0.0.1:54076.service: Deactivated successfully. Oct 2 19:44:32.056000 audit[2672]: CRED_DISP pid=2672 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:32.060718 systemd-logind[1129]: Removed session 14. Oct 2 19:44:32.061504 kernel: audit: type=1106 audit(1696275872.056:1148): pid=2672 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:32.061561 kernel: audit: type=1104 audit(1696275872.056:1149): pid=2672 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:32.058000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.6:22-10.0.0.1:54076 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:33.631264 kubelet[2011]: E1002 19:44:33.631228 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:44:33.639189 env[1137]: time="2023-10-02T19:44:33.639142561Z" level=info msg="CreateContainer within sandbox \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:44:33.647654 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3000468343.mount: Deactivated successfully. Oct 2 19:44:33.652565 env[1137]: time="2023-10-02T19:44:33.652516743Z" level=info msg="CreateContainer within sandbox \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95\"" Oct 2 19:44:33.653152 env[1137]: time="2023-10-02T19:44:33.653121843Z" level=info msg="StartContainer for \"ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95\"" Oct 2 19:44:33.670767 systemd[1]: Started cri-containerd-ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95.scope. Oct 2 19:44:33.723697 systemd[1]: cri-containerd-ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95.scope: Deactivated successfully. Oct 2 19:44:33.735620 env[1137]: time="2023-10-02T19:44:33.735496048Z" level=info msg="shim disconnected" id=ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95 Oct 2 19:44:33.735620 env[1137]: time="2023-10-02T19:44:33.735614772Z" level=warning msg="cleaning up after shim disconnected" id=ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95 namespace=k8s.io Oct 2 19:44:33.735620 env[1137]: time="2023-10-02T19:44:33.735624933Z" level=info msg="cleaning up dead shim" Oct 2 19:44:33.743652 env[1137]: time="2023-10-02T19:44:33.743594488Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:44:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2709 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:44:33Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:44:33.743886 env[1137]: time="2023-10-02T19:44:33.743837216Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:44:33.744069 env[1137]: time="2023-10-02T19:44:33.744009782Z" level=error msg="Failed to pipe stdout of container \"ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95\"" error="reading from a closed fifo" Oct 2 19:44:33.744124 env[1137]: time="2023-10-02T19:44:33.744056184Z" level=error msg="Failed to pipe stderr of container \"ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95\"" error="reading from a closed fifo" Oct 2 19:44:33.748615 env[1137]: time="2023-10-02T19:44:33.748569180Z" level=error msg="StartContainer for \"ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:44:33.749248 kubelet[2011]: E1002 19:44:33.749203 2011 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95" Oct 2 19:44:33.749581 kubelet[2011]: E1002 19:44:33.749555 2011 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:44:33.749581 kubelet[2011]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:44:33.749581 kubelet[2011]: rm /hostbin/cilium-mount Oct 2 19:44:33.749581 kubelet[2011]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-zpjhg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:44:33.749832 kubelet[2011]: E1002 19:44:33.749603 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:44:33.884815 kubelet[2011]: I1002 19:44:33.884175 2011 scope.go:117] "RemoveContainer" containerID="1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a" Oct 2 19:44:33.884815 kubelet[2011]: I1002 19:44:33.884525 2011 scope.go:117] "RemoveContainer" containerID="1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a" Oct 2 19:44:33.886598 env[1137]: time="2023-10-02T19:44:33.886543064Z" level=info msg="RemoveContainer for \"1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a\"" Oct 2 19:44:33.887045 env[1137]: time="2023-10-02T19:44:33.887020761Z" level=info msg="RemoveContainer for \"1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a\"" Oct 2 19:44:33.887122 env[1137]: time="2023-10-02T19:44:33.887089563Z" level=error msg="RemoveContainer for \"1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a\" failed" error="failed to set removing state for container \"1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a\": container is already in removing state" Oct 2 19:44:33.887786 kubelet[2011]: E1002 19:44:33.887253 2011 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a\": container is already in removing state" containerID="1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a" Oct 2 19:44:33.887786 kubelet[2011]: E1002 19:44:33.887285 2011 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a": container is already in removing state; Skipping pod "cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)" Oct 2 19:44:33.887786 kubelet[2011]: E1002 19:44:33.887351 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:44:33.887786 kubelet[2011]: E1002 19:44:33.887576 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:44:33.892166 env[1137]: time="2023-10-02T19:44:33.892112417Z" level=info msg="RemoveContainer for \"1fc03b1ae9671f9fe927410aa359a9d2af9f706b8930853c9bc06de37c0db45a\" returns successfully" Oct 2 19:44:34.646865 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95-rootfs.mount: Deactivated successfully. Oct 2 19:44:36.841643 kubelet[2011]: W1002 19:44:36.841597 2011 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podbc4ee64d_b13a_4d5d_ba2f_78aa6088f2bf.slice/cri-containerd-ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95.scope WatchSource:0}: task ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95 not found: not found Oct 2 19:44:36.973000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:36.976633 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:44:36.976703 kernel: audit: type=1400 audit(1696275876.973:1151): avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:36.976738 kernel: audit: type=1300 audit(1696275876.973:1151): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40009f8510 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:44:36.973000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40009f8510 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:44:36.973000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:36.981855 kernel: audit: type=1327 audit(1696275876.973:1151): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:36.981905 kernel: audit: type=1400 audit(1696275876.973:1152): avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:36.973000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:36.983978 kernel: audit: type=1300 audit(1696275876.973:1152): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400098bd40 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:44:36.973000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400098bd40 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:44:36.973000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:36.989268 kernel: audit: type=1327 audit(1696275876.973:1152): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:37.189000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:37.193048 kernel: audit: type=1400 audit(1696275877.189:1153): avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:37.193141 kernel: audit: type=1300 audit(1696275877.189:1153): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40084c6e70 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:44:37.189000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40084c6e70 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:44:37.189000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:44:37.197945 kernel: audit: type=1327 audit(1696275877.189:1153): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:44:37.197997 kernel: audit: type=1400 audit(1696275877.189:1154): avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:37.189000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:37.189000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4007efdb90 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:44:37.189000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:44:37.204000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=4790 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:37.204000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4008284600 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:44:37.204000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:44:37.211000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:37.211000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:37.211000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400b102f80 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:44:37.211000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400a3a2f80 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:44:37.211000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:44:37.211000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:44:37.211000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:37.211000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4008284630 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:44:37.211000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:44:40.609047 kubelet[2011]: E1002 19:44:40.609013 2011 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:44:40.694835 kubelet[2011]: E1002 19:44:40.694779 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:44:42.061937 systemd[1]: Started sshd@14-10.0.0.6:22-10.0.0.1:60662.service. Oct 2 19:44:42.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.6:22-10.0.0.1:60662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:42.063319 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:44:42.063376 kernel: audit: type=1130 audit(1696275882.061:1159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.6:22-10.0.0.1:60662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:42.100000 audit[2725]: USER_ACCT pid=2725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:42.101493 sshd[2725]: Accepted publickey for core from 10.0.0.1 port 60662 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:44:42.103115 sshd[2725]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:44:42.101000 audit[2725]: CRED_ACQ pid=2725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:42.107400 systemd-logind[1129]: New session 15 of user core. Oct 2 19:44:42.107427 systemd[1]: Started session-15.scope. Oct 2 19:44:42.112005 kernel: audit: type=1101 audit(1696275882.100:1160): pid=2725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:42.112064 kernel: audit: type=1103 audit(1696275882.101:1161): pid=2725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:42.112095 kernel: audit: type=1006 audit(1696275882.101:1162): pid=2725 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:44:42.101000 audit[2725]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8926290 a2=3 a3=1 items=0 ppid=1 pid=2725 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:42.121407 kernel: audit: type=1300 audit(1696275882.101:1162): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8926290 a2=3 a3=1 items=0 ppid=1 pid=2725 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:42.121476 kernel: audit: type=1327 audit(1696275882.101:1162): proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:42.101000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:42.122552 kernel: audit: type=1105 audit(1696275882.111:1163): pid=2725 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:42.111000 audit[2725]: USER_START pid=2725 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:42.125092 kernel: audit: type=1103 audit(1696275882.117:1164): pid=2727 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:42.117000 audit[2727]: CRED_ACQ pid=2727 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:42.242958 sshd[2725]: pam_unix(sshd:session): session closed for user core Oct 2 19:44:42.242000 audit[2725]: USER_END pid=2725 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:42.242000 audit[2725]: CRED_DISP pid=2725 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:42.246750 systemd[1]: sshd@14-10.0.0.6:22-10.0.0.1:60662.service: Deactivated successfully. Oct 2 19:44:42.247540 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:44:42.248085 systemd-logind[1129]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:44:42.248903 systemd-logind[1129]: Removed session 15. Oct 2 19:44:42.250292 kernel: audit: type=1106 audit(1696275882.242:1165): pid=2725 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:42.250349 kernel: audit: type=1104 audit(1696275882.242:1166): pid=2725 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:42.245000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.6:22-10.0.0.1:60662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:45.631508 kubelet[2011]: E1002 19:44:45.631472 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:44:45.631832 kubelet[2011]: E1002 19:44:45.631686 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:44:45.696176 kubelet[2011]: E1002 19:44:45.696151 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:44:50.697912 kubelet[2011]: E1002 19:44:50.697879 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:44:52.248426 systemd[1]: Started sshd@15-10.0.0.6:22-10.0.0.1:44604.service. Oct 2 19:44:52.247000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.6:22-10.0.0.1:44604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:52.249198 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:44:52.249258 kernel: audit: type=1130 audit(1696275892.247:1168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.6:22-10.0.0.1:44604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:52.286000 audit[2739]: USER_ACCT pid=2739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:52.287506 sshd[2739]: Accepted publickey for core from 10.0.0.1 port 44604 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:44:52.289084 sshd[2739]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:44:52.287000 audit[2739]: CRED_ACQ pid=2739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:52.291615 kernel: audit: type=1101 audit(1696275892.286:1169): pid=2739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:52.291689 kernel: audit: type=1103 audit(1696275892.287:1170): pid=2739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:52.291725 kernel: audit: type=1006 audit(1696275892.287:1171): pid=2739 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:44:52.293120 kernel: audit: type=1300 audit(1696275892.287:1171): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0784300 a2=3 a3=1 items=0 ppid=1 pid=2739 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:52.287000 audit[2739]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0784300 a2=3 a3=1 items=0 ppid=1 pid=2739 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:52.287000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:52.295380 systemd[1]: Started session-16.scope. Oct 2 19:44:52.295722 systemd-logind[1129]: New session 16 of user core. Oct 2 19:44:52.295977 kernel: audit: type=1327 audit(1696275892.287:1171): proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:52.298000 audit[2739]: USER_START pid=2739 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:52.299000 audit[2741]: CRED_ACQ pid=2741 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:52.303748 kernel: audit: type=1105 audit(1696275892.298:1172): pid=2739 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:52.303791 kernel: audit: type=1103 audit(1696275892.299:1173): pid=2741 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:52.411519 sshd[2739]: pam_unix(sshd:session): session closed for user core Oct 2 19:44:52.411000 audit[2739]: USER_END pid=2739 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:52.414035 systemd[1]: sshd@15-10.0.0.6:22-10.0.0.1:44604.service: Deactivated successfully. Oct 2 19:44:52.414891 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:44:52.411000 audit[2739]: CRED_DISP pid=2739 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:52.415459 systemd-logind[1129]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:44:52.416083 systemd-logind[1129]: Removed session 16. Oct 2 19:44:52.417055 kernel: audit: type=1106 audit(1696275892.411:1174): pid=2739 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:52.417105 kernel: audit: type=1104 audit(1696275892.411:1175): pid=2739 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:44:52.411000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.6:22-10.0.0.1:44604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:52.687000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:52.687000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010be100 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:44:52.687000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:52.687000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:52.687000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000df5040 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:44:52.687000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:52.691000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:52.691000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f1d880 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:44:52.691000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:52.691000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:52.691000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001d516e0 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:44:52.691000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:55.699605 kubelet[2011]: E1002 19:44:55.699566 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:44:59.631256 kubelet[2011]: E1002 19:44:59.631223 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:44:59.631987 kubelet[2011]: E1002 19:44:59.631947 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:45:00.700914 kubelet[2011]: E1002 19:45:00.700886 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:01.631510 kubelet[2011]: E1002 19:45:01.631470 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:45:02.416000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.6:22-10.0.0.1:49174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:02.416847 systemd[1]: Started sshd@16-10.0.0.6:22-10.0.0.1:49174.service. Oct 2 19:45:02.419391 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:45:02.419461 kernel: audit: type=1130 audit(1696275902.416:1181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.6:22-10.0.0.1:49174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:02.454000 audit[2755]: USER_ACCT pid=2755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:02.455937 sshd[2755]: Accepted publickey for core from 10.0.0.1 port 49174 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:45:02.456906 sshd[2755]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:45:02.455000 audit[2755]: CRED_ACQ pid=2755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:02.461438 kernel: audit: type=1101 audit(1696275902.454:1182): pid=2755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:02.461513 kernel: audit: type=1103 audit(1696275902.455:1183): pid=2755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:02.461533 kernel: audit: type=1006 audit(1696275902.455:1184): pid=2755 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:45:02.461145 systemd-logind[1129]: New session 17 of user core. Oct 2 19:45:02.462881 kernel: audit: type=1300 audit(1696275902.455:1184): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc056ca40 a2=3 a3=1 items=0 ppid=1 pid=2755 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:02.455000 audit[2755]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc056ca40 a2=3 a3=1 items=0 ppid=1 pid=2755 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:02.461885 systemd[1]: Started session-17.scope. Oct 2 19:45:02.455000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:02.465304 kernel: audit: type=1327 audit(1696275902.455:1184): proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:02.469000 audit[2755]: USER_START pid=2755 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:02.473019 kernel: audit: type=1105 audit(1696275902.469:1185): pid=2755 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:02.473345 kernel: audit: type=1103 audit(1696275902.472:1186): pid=2757 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:02.472000 audit[2757]: CRED_ACQ pid=2757 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:02.584412 sshd[2755]: pam_unix(sshd:session): session closed for user core Oct 2 19:45:02.585000 audit[2755]: USER_END pid=2755 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:02.585000 audit[2755]: CRED_DISP pid=2755 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:02.591425 kernel: audit: type=1106 audit(1696275902.585:1187): pid=2755 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:02.591469 kernel: audit: type=1104 audit(1696275902.585:1188): pid=2755 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:02.593216 systemd[1]: sshd@16-10.0.0.6:22-10.0.0.1:49174.service: Deactivated successfully. Oct 2 19:45:02.593868 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:45:02.592000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.6:22-10.0.0.1:49174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:02.595157 systemd-logind[1129]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:45:02.596276 systemd[1]: Started sshd@17-10.0.0.6:22-10.0.0.1:49176.service. Oct 2 19:45:02.595000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.6:22-10.0.0.1:49176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:02.596983 systemd-logind[1129]: Removed session 17. Oct 2 19:45:02.634000 audit[2769]: USER_ACCT pid=2769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:02.635678 sshd[2769]: Accepted publickey for core from 10.0.0.1 port 49176 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:45:02.635000 audit[2769]: CRED_ACQ pid=2769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:02.635000 audit[2769]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffdf2a970 a2=3 a3=1 items=0 ppid=1 pid=2769 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:02.635000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:02.636994 sshd[2769]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:45:02.640256 systemd-logind[1129]: New session 18 of user core. Oct 2 19:45:02.641221 systemd[1]: Started session-18.scope. Oct 2 19:45:02.643000 audit[2769]: USER_START pid=2769 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:02.644000 audit[2771]: CRED_ACQ pid=2771 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:03.327064 sshd[2769]: pam_unix(sshd:session): session closed for user core Oct 2 19:45:03.326000 audit[2769]: USER_END pid=2769 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:03.327000 audit[2769]: CRED_DISP pid=2769 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:03.330761 systemd[1]: Started sshd@18-10.0.0.6:22-10.0.0.1:45802.service. Oct 2 19:45:03.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.6:22-10.0.0.1:45802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:03.332000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.6:22-10.0.0.1:49176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:03.333047 systemd[1]: sshd@17-10.0.0.6:22-10.0.0.1:49176.service: Deactivated successfully. Oct 2 19:45:03.333846 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:45:03.334474 systemd-logind[1129]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:45:03.335799 systemd-logind[1129]: Removed session 18. Oct 2 19:45:03.377000 audit[2780]: USER_ACCT pid=2780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:03.378675 sshd[2780]: Accepted publickey for core from 10.0.0.1 port 45802 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:45:03.378000 audit[2780]: CRED_ACQ pid=2780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:03.378000 audit[2780]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9b49260 a2=3 a3=1 items=0 ppid=1 pid=2780 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:03.378000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:03.380249 sshd[2780]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:45:03.384813 systemd[1]: Started session-19.scope. Oct 2 19:45:03.385004 systemd-logind[1129]: New session 19 of user core. Oct 2 19:45:03.387000 audit[2780]: USER_START pid=2780 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:03.389000 audit[2783]: CRED_ACQ pid=2783 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:03.502765 sshd[2780]: pam_unix(sshd:session): session closed for user core Oct 2 19:45:03.502000 audit[2780]: USER_END pid=2780 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:03.502000 audit[2780]: CRED_DISP pid=2780 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:03.505317 systemd[1]: sshd@18-10.0.0.6:22-10.0.0.1:45802.service: Deactivated successfully. Oct 2 19:45:03.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.6:22-10.0.0.1:45802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:03.506223 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:45:03.506770 systemd-logind[1129]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:45:03.507394 systemd-logind[1129]: Removed session 19. Oct 2 19:45:04.630906 kubelet[2011]: E1002 19:45:04.630871 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:45:05.702195 kubelet[2011]: E1002 19:45:05.702133 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:10.631237 kubelet[2011]: E1002 19:45:10.631201 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:45:10.631558 kubelet[2011]: E1002 19:45:10.631423 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:45:10.703159 kubelet[2011]: E1002 19:45:10.703124 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:13.508923 systemd[1]: Started sshd@19-10.0.0.6:22-10.0.0.1:58936.service. Oct 2 19:45:13.508000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.6:22-10.0.0.1:58936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:13.511735 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:45:13.511820 kernel: audit: type=1130 audit(1696275913.508:1208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.6:22-10.0.0.1:58936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:13.547000 audit[2794]: USER_ACCT pid=2794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:13.548266 sshd[2794]: Accepted publickey for core from 10.0.0.1 port 58936 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:45:13.549398 sshd[2794]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:45:13.548000 audit[2794]: CRED_ACQ pid=2794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:13.552909 kernel: audit: type=1101 audit(1696275913.547:1209): pid=2794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:13.553000 kernel: audit: type=1103 audit(1696275913.548:1210): pid=2794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:13.553031 kernel: audit: type=1006 audit(1696275913.548:1211): pid=2794 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:45:13.548000 audit[2794]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd075c770 a2=3 a3=1 items=0 ppid=1 pid=2794 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:13.557802 kernel: audit: type=1300 audit(1696275913.548:1211): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd075c770 a2=3 a3=1 items=0 ppid=1 pid=2794 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:13.557865 kernel: audit: type=1327 audit(1696275913.548:1211): proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:13.548000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:13.557312 systemd[1]: Started session-20.scope. Oct 2 19:45:13.557473 systemd-logind[1129]: New session 20 of user core. Oct 2 19:45:13.561000 audit[2794]: USER_START pid=2794 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:13.564000 audit[2796]: CRED_ACQ pid=2796 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:13.567901 kernel: audit: type=1105 audit(1696275913.561:1212): pid=2794 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:13.567941 kernel: audit: type=1103 audit(1696275913.564:1213): pid=2796 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:13.632005 kubelet[2011]: E1002 19:45:13.631847 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:45:13.685851 sshd[2794]: pam_unix(sshd:session): session closed for user core Oct 2 19:45:13.685000 audit[2794]: USER_END pid=2794 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:13.688927 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:45:13.689520 systemd[1]: sshd@19-10.0.0.6:22-10.0.0.1:58936.service: Deactivated successfully. Oct 2 19:45:13.686000 audit[2794]: CRED_DISP pid=2794 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:13.690484 systemd-logind[1129]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:45:13.691121 systemd-logind[1129]: Removed session 20. Oct 2 19:45:13.693988 kernel: audit: type=1106 audit(1696275913.685:1214): pid=2794 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:13.694044 kernel: audit: type=1104 audit(1696275913.686:1215): pid=2794 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:13.688000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.6:22-10.0.0.1:58936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:15.704691 kubelet[2011]: E1002 19:45:15.704661 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:20.706067 kubelet[2011]: E1002 19:45:20.706038 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:23.631351 kubelet[2011]: E1002 19:45:23.631308 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:45:23.632249 kubelet[2011]: E1002 19:45:23.631523 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:45:23.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.6:22-10.0.0.1:58698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:23.691356 systemd[1]: Started sshd@20-10.0.0.6:22-10.0.0.1:58698.service. Oct 2 19:45:23.692039 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:45:23.692074 kernel: audit: type=1130 audit(1696275923.690:1217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.6:22-10.0.0.1:58698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:23.729000 audit[2808]: USER_ACCT pid=2808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:23.730897 sshd[2808]: Accepted publickey for core from 10.0.0.1 port 58698 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:45:23.731921 sshd[2808]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:45:23.730000 audit[2808]: CRED_ACQ pid=2808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:23.735646 kernel: audit: type=1101 audit(1696275923.729:1218): pid=2808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:23.735717 kernel: audit: type=1103 audit(1696275923.730:1219): pid=2808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:23.737498 kernel: audit: type=1006 audit(1696275923.730:1220): pid=2808 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:45:23.737571 kernel: audit: type=1300 audit(1696275923.730:1220): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1a30e20 a2=3 a3=1 items=0 ppid=1 pid=2808 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:23.730000 audit[2808]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1a30e20 a2=3 a3=1 items=0 ppid=1 pid=2808 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:23.736946 systemd[1]: Started session-21.scope. Oct 2 19:45:23.737112 systemd-logind[1129]: New session 21 of user core. Oct 2 19:45:23.730000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:23.740379 kernel: audit: type=1327 audit(1696275923.730:1220): proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:23.741000 audit[2808]: USER_START pid=2808 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:23.743000 audit[2810]: CRED_ACQ pid=2810 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:23.747567 kernel: audit: type=1105 audit(1696275923.741:1221): pid=2808 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:23.747627 kernel: audit: type=1103 audit(1696275923.743:1222): pid=2810 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:23.856255 sshd[2808]: pam_unix(sshd:session): session closed for user core Oct 2 19:45:23.856000 audit[2808]: USER_END pid=2808 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:23.856000 audit[2808]: CRED_DISP pid=2808 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:23.859775 systemd[1]: sshd@20-10.0.0.6:22-10.0.0.1:58698.service: Deactivated successfully. Oct 2 19:45:23.860526 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:45:23.861395 systemd-logind[1129]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:45:23.861874 kernel: audit: type=1106 audit(1696275923.856:1223): pid=2808 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:23.861928 kernel: audit: type=1104 audit(1696275923.856:1224): pid=2808 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:23.859000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.6:22-10.0.0.1:58698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:23.862295 systemd-logind[1129]: Removed session 21. Oct 2 19:45:25.707622 kubelet[2011]: E1002 19:45:25.707586 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:26.631917 kubelet[2011]: E1002 19:45:26.631853 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:45:30.631577 kubelet[2011]: E1002 19:45:30.631543 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:45:30.708928 kubelet[2011]: E1002 19:45:30.708898 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:33.861903 systemd[1]: Started sshd@21-10.0.0.6:22-10.0.0.1:59984.service. Oct 2 19:45:33.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.6:22-10.0.0.1:59984 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:33.864370 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:45:33.864432 kernel: audit: type=1130 audit(1696275933.861:1226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.6:22-10.0.0.1:59984 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:33.899000 audit[2823]: USER_ACCT pid=2823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:33.901042 sshd[2823]: Accepted publickey for core from 10.0.0.1 port 59984 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:45:33.902615 sshd[2823]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:45:33.901000 audit[2823]: CRED_ACQ pid=2823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:33.905439 kernel: audit: type=1101 audit(1696275933.899:1227): pid=2823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:33.906410 kernel: audit: type=1103 audit(1696275933.901:1228): pid=2823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:33.906468 kernel: audit: type=1006 audit(1696275933.901:1229): pid=2823 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:45:33.907833 kernel: audit: type=1300 audit(1696275933.901:1229): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9679c10 a2=3 a3=1 items=0 ppid=1 pid=2823 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:33.901000 audit[2823]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9679c10 a2=3 a3=1 items=0 ppid=1 pid=2823 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:33.907027 systemd-logind[1129]: New session 22 of user core. Oct 2 19:45:33.907486 systemd[1]: Started session-22.scope. Oct 2 19:45:33.901000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:33.910059 kernel: audit: type=1327 audit(1696275933.901:1229): proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:33.910000 audit[2823]: USER_START pid=2823 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:33.912000 audit[2825]: CRED_ACQ pid=2825 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:33.916160 kernel: audit: type=1105 audit(1696275933.910:1230): pid=2823 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:33.916199 kernel: audit: type=1103 audit(1696275933.912:1231): pid=2825 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:34.029338 sshd[2823]: pam_unix(sshd:session): session closed for user core Oct 2 19:45:34.029000 audit[2823]: USER_END pid=2823 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:34.032159 systemd[1]: sshd@21-10.0.0.6:22-10.0.0.1:59984.service: Deactivated successfully. Oct 2 19:45:34.029000 audit[2823]: CRED_DISP pid=2823 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:34.032903 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:45:34.033497 systemd-logind[1129]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:45:34.034329 systemd-logind[1129]: Removed session 22. Oct 2 19:45:34.034674 kernel: audit: type=1106 audit(1696275934.029:1232): pid=2823 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:34.034737 kernel: audit: type=1104 audit(1696275934.029:1233): pid=2823 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:34.031000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.6:22-10.0.0.1:59984 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:35.630944 kubelet[2011]: E1002 19:45:35.630904 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:45:35.631360 kubelet[2011]: E1002 19:45:35.631294 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:45:35.709833 kubelet[2011]: E1002 19:45:35.709807 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:36.974000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:36.974000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:36.974000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40026cca80 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:45:36.974000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40022be570 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:45:36.974000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:36.974000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:37.189000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:37.189000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:37.189000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40074adc50 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:45:37.189000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:45:37.189000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4006286720 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:45:37.189000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:45:37.205000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=4790 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:37.205000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4004a393e0 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:45:37.205000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:45:37.212000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:37.212000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4007ef0120 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:45:37.212000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:45:37.212000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:37.212000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40080e3200 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:45:37.212000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:45:37.212000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:37.212000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4006286870 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:45:37.212000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:45:40.710768 kubelet[2011]: E1002 19:45:40.710728 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:44.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.6:22-10.0.0.1:50500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:44.035310 systemd[1]: Started sshd@22-10.0.0.6:22-10.0.0.1:50500.service. Oct 2 19:45:44.037918 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:45:44.038015 kernel: audit: type=1130 audit(1696275944.033:1243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.6:22-10.0.0.1:50500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:44.071000 audit[2840]: USER_ACCT pid=2840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:44.074180 sshd[2840]: Accepted publickey for core from 10.0.0.1 port 50500 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:45:44.075714 sshd[2840]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:45:44.073000 audit[2840]: CRED_ACQ pid=2840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:44.079567 kernel: audit: type=1101 audit(1696275944.071:1244): pid=2840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:44.079623 kernel: audit: type=1103 audit(1696275944.073:1245): pid=2840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:44.079653 kernel: audit: type=1006 audit(1696275944.073:1246): pid=2840 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:45:44.073000 audit[2840]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd90772a0 a2=3 a3=1 items=0 ppid=1 pid=2840 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:44.081025 systemd-logind[1129]: New session 23 of user core. Oct 2 19:45:44.081572 systemd[1]: Started session-23.scope. Oct 2 19:45:44.083296 kernel: audit: type=1300 audit(1696275944.073:1246): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd90772a0 a2=3 a3=1 items=0 ppid=1 pid=2840 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:44.083352 kernel: audit: type=1327 audit(1696275944.073:1246): proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:44.073000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:44.084000 audit[2840]: USER_START pid=2840 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:44.085000 audit[2842]: CRED_ACQ pid=2842 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:44.090599 kernel: audit: type=1105 audit(1696275944.084:1247): pid=2840 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:44.090666 kernel: audit: type=1103 audit(1696275944.085:1248): pid=2842 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:44.210182 sshd[2840]: pam_unix(sshd:session): session closed for user core Oct 2 19:45:44.210000 audit[2840]: USER_END pid=2840 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:44.213240 systemd[1]: sshd@22-10.0.0.6:22-10.0.0.1:50500.service: Deactivated successfully. Oct 2 19:45:44.210000 audit[2840]: CRED_DISP pid=2840 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:44.214365 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:45:44.215029 systemd-logind[1129]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:45:44.215679 kernel: audit: type=1106 audit(1696275944.210:1249): pid=2840 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:44.215737 kernel: audit: type=1104 audit(1696275944.210:1250): pid=2840 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:44.212000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.6:22-10.0.0.1:50500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:44.216073 systemd-logind[1129]: Removed session 23. Oct 2 19:45:45.711949 kubelet[2011]: E1002 19:45:45.711923 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:46.631347 kubelet[2011]: E1002 19:45:46.631313 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:45:46.631569 kubelet[2011]: E1002 19:45:46.631554 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:45:50.713401 kubelet[2011]: E1002 19:45:50.713375 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:52.688000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:52.691642 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:45:52.691724 kernel: audit: type=1400 audit(1696275952.688:1252): avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:52.691752 kernel: audit: type=1400 audit(1696275952.688:1253): avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:52.688000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:52.693710 kernel: audit: type=1300 audit(1696275952.688:1253): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002999660 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:45:52.688000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002999660 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:45:52.696428 kernel: audit: type=1327 audit(1696275952.688:1253): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:52.688000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:52.698620 kernel: audit: type=1300 audit(1696275952.688:1252): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002c555c0 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:45:52.688000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002c555c0 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:45:52.701274 kernel: audit: type=1327 audit(1696275952.688:1252): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:52.688000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:52.703592 kernel: audit: type=1400 audit(1696275952.692:1254): avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:52.692000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:52.705616 kernel: audit: type=1300 audit(1696275952.692:1254): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010997c0 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:45:52.692000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010997c0 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:45:52.692000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:52.710636 kernel: audit: type=1327 audit(1696275952.692:1254): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:52.710685 kernel: audit: type=1400 audit(1696275952.692:1255): avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:52.692000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:52.692000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002c555e0 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:45:52.692000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:54.214000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.6:22-10.0.0.1:43802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:54.215043 systemd[1]: Started sshd@23-10.0.0.6:22-10.0.0.1:43802.service. Oct 2 19:45:54.253000 audit[2854]: USER_ACCT pid=2854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:54.254434 sshd[2854]: Accepted publickey for core from 10.0.0.1 port 43802 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:45:54.254000 audit[2854]: CRED_ACQ pid=2854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:54.254000 audit[2854]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc021d10 a2=3 a3=1 items=0 ppid=1 pid=2854 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:54.254000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:54.255607 sshd[2854]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:45:54.259690 systemd-logind[1129]: New session 24 of user core. Oct 2 19:45:54.259738 systemd[1]: Started session-24.scope. Oct 2 19:45:54.264000 audit[2854]: USER_START pid=2854 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:54.265000 audit[2856]: CRED_ACQ pid=2856 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:54.376974 sshd[2854]: pam_unix(sshd:session): session closed for user core Oct 2 19:45:54.376000 audit[2854]: USER_END pid=2854 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:54.376000 audit[2854]: CRED_DISP pid=2854 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:45:54.379415 systemd[1]: sshd@23-10.0.0.6:22-10.0.0.1:43802.service: Deactivated successfully. Oct 2 19:45:54.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.6:22-10.0.0.1:43802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:54.380206 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:45:54.380757 systemd-logind[1129]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:45:54.381485 systemd-logind[1129]: Removed session 24. Oct 2 19:45:55.714620 kubelet[2011]: E1002 19:45:55.714582 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:00.715705 kubelet[2011]: E1002 19:46:00.715670 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:01.631047 kubelet[2011]: E1002 19:46:01.631009 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:46:01.633288 env[1137]: time="2023-10-02T19:46:01.633129532Z" level=info msg="CreateContainer within sandbox \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:46:01.643740 env[1137]: time="2023-10-02T19:46:01.643687777Z" level=info msg="CreateContainer within sandbox \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"ed254ce6b52867467aa1eb96b85783ef0ee2fe5350035a7b70b8b0d7042a4126\"" Oct 2 19:46:01.644142 env[1137]: time="2023-10-02T19:46:01.644117394Z" level=info msg="StartContainer for \"ed254ce6b52867467aa1eb96b85783ef0ee2fe5350035a7b70b8b0d7042a4126\"" Oct 2 19:46:01.661409 systemd[1]: Started cri-containerd-ed254ce6b52867467aa1eb96b85783ef0ee2fe5350035a7b70b8b0d7042a4126.scope. Oct 2 19:46:01.705608 systemd[1]: cri-containerd-ed254ce6b52867467aa1eb96b85783ef0ee2fe5350035a7b70b8b0d7042a4126.scope: Deactivated successfully. Oct 2 19:46:01.709378 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ed254ce6b52867467aa1eb96b85783ef0ee2fe5350035a7b70b8b0d7042a4126-rootfs.mount: Deactivated successfully. Oct 2 19:46:01.716363 env[1137]: time="2023-10-02T19:46:01.716313638Z" level=info msg="shim disconnected" id=ed254ce6b52867467aa1eb96b85783ef0ee2fe5350035a7b70b8b0d7042a4126 Oct 2 19:46:01.716562 env[1137]: time="2023-10-02T19:46:01.716543105Z" level=warning msg="cleaning up after shim disconnected" id=ed254ce6b52867467aa1eb96b85783ef0ee2fe5350035a7b70b8b0d7042a4126 namespace=k8s.io Oct 2 19:46:01.716621 env[1137]: time="2023-10-02T19:46:01.716609022Z" level=info msg="cleaning up dead shim" Oct 2 19:46:01.725586 env[1137]: time="2023-10-02T19:46:01.725535633Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:46:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2892 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:46:01Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ed254ce6b52867467aa1eb96b85783ef0ee2fe5350035a7b70b8b0d7042a4126/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:46:01.726129 env[1137]: time="2023-10-02T19:46:01.726054125Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:46:01.727187 env[1137]: time="2023-10-02T19:46:01.727022074Z" level=error msg="Failed to pipe stdout of container \"ed254ce6b52867467aa1eb96b85783ef0ee2fe5350035a7b70b8b0d7042a4126\"" error="reading from a closed fifo" Oct 2 19:46:01.727410 env[1137]: time="2023-10-02T19:46:01.727368576Z" level=error msg="Failed to pipe stderr of container \"ed254ce6b52867467aa1eb96b85783ef0ee2fe5350035a7b70b8b0d7042a4126\"" error="reading from a closed fifo" Oct 2 19:46:01.729492 env[1137]: time="2023-10-02T19:46:01.729442827Z" level=error msg="StartContainer for \"ed254ce6b52867467aa1eb96b85783ef0ee2fe5350035a7b70b8b0d7042a4126\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:46:01.730041 kubelet[2011]: E1002 19:46:01.729924 2011 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ed254ce6b52867467aa1eb96b85783ef0ee2fe5350035a7b70b8b0d7042a4126" Oct 2 19:46:01.730419 kubelet[2011]: E1002 19:46:01.730131 2011 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:46:01.730419 kubelet[2011]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:46:01.730419 kubelet[2011]: rm /hostbin/cilium-mount Oct 2 19:46:01.730419 kubelet[2011]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-zpjhg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:46:01.730419 kubelet[2011]: E1002 19:46:01.730171 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:46:02.043157 kubelet[2011]: I1002 19:46:02.043032 2011 scope.go:117] "RemoveContainer" containerID="ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95" Oct 2 19:46:02.044457 kubelet[2011]: I1002 19:46:02.043354 2011 scope.go:117] "RemoveContainer" containerID="ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95" Oct 2 19:46:02.044457 kubelet[2011]: E1002 19:46:02.044537 2011 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95\": container is already in removing state" containerID="ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95" Oct 2 19:46:02.044658 env[1137]: time="2023-10-02T19:46:02.044007473Z" level=info msg="RemoveContainer for \"ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95\"" Oct 2 19:46:02.044658 env[1137]: time="2023-10-02T19:46:02.044357256Z" level=info msg="RemoveContainer for \"ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95\"" Oct 2 19:46:02.044658 env[1137]: time="2023-10-02T19:46:02.044417932Z" level=error msg="RemoveContainer for \"ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95\" failed" error="failed to set removing state for container \"ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95\": container is already in removing state" Oct 2 19:46:02.044748 kubelet[2011]: E1002 19:46:02.044583 2011 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95": container is already in removing state; Skipping pod "cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)" Oct 2 19:46:02.044748 kubelet[2011]: E1002 19:46:02.044644 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:46:02.045074 kubelet[2011]: E1002 19:46:02.044869 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:46:02.046648 env[1137]: time="2023-10-02T19:46:02.046618860Z" level=info msg="RemoveContainer for \"ac334bd9f2b08d3b3290cdc1a0325ff8fb0d84793d70bcd16e2dad0485094e95\" returns successfully" Oct 2 19:46:02.631377 kubelet[2011]: E1002 19:46:02.631350 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:46:04.381553 systemd[1]: Started sshd@24-10.0.0.6:22-10.0.0.1:42840.service. Oct 2 19:46:04.382622 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:46:04.382662 kernel: audit: type=1130 audit(1696275964.380:1265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.6:22-10.0.0.1:42840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:04.380000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.6:22-10.0.0.1:42840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:04.423000 audit[2906]: USER_ACCT pid=2906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:04.424492 sshd[2906]: Accepted publickey for core from 10.0.0.1 port 42840 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:46:04.424000 audit[2906]: CRED_ACQ pid=2906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:04.426934 sshd[2906]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:46:04.429110 kernel: audit: type=1101 audit(1696275964.423:1266): pid=2906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:04.429185 kernel: audit: type=1103 audit(1696275964.424:1267): pid=2906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:04.429208 kernel: audit: type=1006 audit(1696275964.424:1268): pid=2906 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:46:04.430842 kernel: audit: type=1300 audit(1696275964.424:1268): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7453240 a2=3 a3=1 items=0 ppid=1 pid=2906 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:04.424000 audit[2906]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7453240 a2=3 a3=1 items=0 ppid=1 pid=2906 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:04.431640 systemd-logind[1129]: New session 25 of user core. Oct 2 19:46:04.432049 systemd[1]: Started session-25.scope. Oct 2 19:46:04.424000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:04.433435 kernel: audit: type=1327 audit(1696275964.424:1268): proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:04.435000 audit[2906]: USER_START pid=2906 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:04.436000 audit[2908]: CRED_ACQ pid=2908 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:04.441009 kernel: audit: type=1105 audit(1696275964.435:1269): pid=2906 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:04.441064 kernel: audit: type=1103 audit(1696275964.436:1270): pid=2908 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:04.551408 sshd[2906]: pam_unix(sshd:session): session closed for user core Oct 2 19:46:04.551000 audit[2906]: USER_END pid=2906 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:04.554612 systemd[1]: sshd@24-10.0.0.6:22-10.0.0.1:42840.service: Deactivated successfully. Oct 2 19:46:04.555370 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:46:04.556086 systemd-logind[1129]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:46:04.551000 audit[2906]: CRED_DISP pid=2906 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:04.556887 systemd-logind[1129]: Removed session 25. Oct 2 19:46:04.558263 kernel: audit: type=1106 audit(1696275964.551:1271): pid=2906 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:04.558316 kernel: audit: type=1104 audit(1696275964.551:1272): pid=2906 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:04.551000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.6:22-10.0.0.1:42840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:04.820868 kubelet[2011]: W1002 19:46:04.820821 2011 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podbc4ee64d_b13a_4d5d_ba2f_78aa6088f2bf.slice/cri-containerd-ed254ce6b52867467aa1eb96b85783ef0ee2fe5350035a7b70b8b0d7042a4126.scope WatchSource:0}: task ed254ce6b52867467aa1eb96b85783ef0ee2fe5350035a7b70b8b0d7042a4126 not found: not found Oct 2 19:46:05.716390 kubelet[2011]: E1002 19:46:05.716360 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:10.718022 kubelet[2011]: E1002 19:46:10.717996 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:12.631674 kubelet[2011]: E1002 19:46:12.631636 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:46:14.555499 systemd[1]: Started sshd@25-10.0.0.6:22-10.0.0.1:38312.service. Oct 2 19:46:14.554000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.6:22-10.0.0.1:38312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:14.556462 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:46:14.556531 kernel: audit: type=1130 audit(1696275974.554:1274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.6:22-10.0.0.1:38312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:14.596000 audit[2919]: USER_ACCT pid=2919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:14.597181 sshd[2919]: Accepted publickey for core from 10.0.0.1 port 38312 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:46:14.598370 sshd[2919]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:46:14.597000 audit[2919]: CRED_ACQ pid=2919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:14.601448 kernel: audit: type=1101 audit(1696275974.596:1275): pid=2919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:14.601515 kernel: audit: type=1103 audit(1696275974.597:1276): pid=2919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:14.602895 kernel: audit: type=1006 audit(1696275974.597:1277): pid=2919 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:46:14.597000 audit[2919]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe8c72c50 a2=3 a3=1 items=0 ppid=1 pid=2919 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:14.605373 kernel: audit: type=1300 audit(1696275974.597:1277): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe8c72c50 a2=3 a3=1 items=0 ppid=1 pid=2919 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:14.597000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:14.607148 kernel: audit: type=1327 audit(1696275974.597:1277): proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:14.606826 systemd-logind[1129]: New session 26 of user core. Oct 2 19:46:14.607380 systemd[1]: Started session-26.scope. Oct 2 19:46:14.609000 audit[2919]: USER_START pid=2919 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:14.611000 audit[2921]: CRED_ACQ pid=2921 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:14.615339 kernel: audit: type=1105 audit(1696275974.609:1278): pid=2919 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:14.615402 kernel: audit: type=1103 audit(1696275974.611:1279): pid=2921 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:14.733053 sshd[2919]: pam_unix(sshd:session): session closed for user core Oct 2 19:46:14.732000 audit[2919]: USER_END pid=2919 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:14.732000 audit[2919]: CRED_DISP pid=2919 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:14.738224 kernel: audit: type=1106 audit(1696275974.732:1280): pid=2919 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:14.738272 kernel: audit: type=1104 audit(1696275974.732:1281): pid=2919 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:14.738584 systemd[1]: sshd@25-10.0.0.6:22-10.0.0.1:38312.service: Deactivated successfully. Oct 2 19:46:14.737000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.6:22-10.0.0.1:38312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:14.739325 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:46:14.739836 systemd-logind[1129]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:46:14.740521 systemd-logind[1129]: Removed session 26. Oct 2 19:46:15.719318 kubelet[2011]: E1002 19:46:15.719281 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:16.631716 kubelet[2011]: E1002 19:46:16.631682 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:46:16.631920 kubelet[2011]: E1002 19:46:16.631906 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:46:20.720600 kubelet[2011]: E1002 19:46:20.720561 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:24.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.6:22-10.0.0.1:52844 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:24.737006 systemd[1]: Started sshd@26-10.0.0.6:22-10.0.0.1:52844.service. Oct 2 19:46:24.739417 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:46:24.739475 kernel: audit: type=1130 audit(1696275984.736:1283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.6:22-10.0.0.1:52844 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:24.775000 audit[2932]: USER_ACCT pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:24.777029 sshd[2932]: Accepted publickey for core from 10.0.0.1 port 52844 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:46:24.778743 sshd[2932]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:46:24.777000 audit[2932]: CRED_ACQ pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:24.781385 kernel: audit: type=1101 audit(1696275984.775:1284): pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:24.781458 kernel: audit: type=1103 audit(1696275984.777:1285): pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:24.781480 kernel: audit: type=1006 audit(1696275984.777:1286): pid=2932 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:46:24.777000 audit[2932]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd44826c0 a2=3 a3=1 items=0 ppid=1 pid=2932 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:24.782882 systemd[1]: Started session-27.scope. Oct 2 19:46:24.783043 systemd-logind[1129]: New session 27 of user core. Oct 2 19:46:24.784726 kernel: audit: type=1300 audit(1696275984.777:1286): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd44826c0 a2=3 a3=1 items=0 ppid=1 pid=2932 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:24.777000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:24.786072 kernel: audit: type=1327 audit(1696275984.777:1286): proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:24.785000 audit[2932]: USER_START pid=2932 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:24.787000 audit[2934]: CRED_ACQ pid=2934 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:24.791151 kernel: audit: type=1105 audit(1696275984.785:1287): pid=2932 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:24.791226 kernel: audit: type=1103 audit(1696275984.787:1288): pid=2934 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:24.895627 sshd[2932]: pam_unix(sshd:session): session closed for user core Oct 2 19:46:24.895000 audit[2932]: USER_END pid=2932 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:24.898852 systemd[1]: sshd@26-10.0.0.6:22-10.0.0.1:52844.service: Deactivated successfully. Oct 2 19:46:24.895000 audit[2932]: CRED_DISP pid=2932 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:24.899597 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:46:24.900171 systemd-logind[1129]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:46:24.901324 kernel: audit: type=1106 audit(1696275984.895:1289): pid=2932 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:24.901382 kernel: audit: type=1104 audit(1696275984.895:1290): pid=2932 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:24.898000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.6:22-10.0.0.1:52844 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:24.901309 systemd-logind[1129]: Removed session 27. Oct 2 19:46:25.721414 kubelet[2011]: E1002 19:46:25.721346 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:27.631434 kubelet[2011]: E1002 19:46:27.631392 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:46:28.631059 kubelet[2011]: E1002 19:46:28.631022 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:46:28.631258 kubelet[2011]: E1002 19:46:28.631242 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rgkrh_kube-system(bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf)\"" pod="kube-system/cilium-rgkrh" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" Oct 2 19:46:30.722204 kubelet[2011]: E1002 19:46:30.722164 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:31.631652 kubelet[2011]: E1002 19:46:31.631612 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:46:34.900941 systemd[1]: Started sshd@27-10.0.0.6:22-10.0.0.1:58916.service. Oct 2 19:46:34.900000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.6:22-10.0.0.1:58916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:34.902015 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:46:34.902091 kernel: audit: type=1130 audit(1696275994.900:1292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.6:22-10.0.0.1:58916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:34.943000 audit[2947]: USER_ACCT pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:34.944543 sshd[2947]: Accepted publickey for core from 10.0.0.1 port 58916 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:46:34.946127 sshd[2947]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:46:34.944000 audit[2947]: CRED_ACQ pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:34.948639 kernel: audit: type=1101 audit(1696275994.943:1293): pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:34.948715 kernel: audit: type=1103 audit(1696275994.944:1294): pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:34.948743 kernel: audit: type=1006 audit(1696275994.944:1295): pid=2947 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:46:34.949917 kernel: audit: type=1300 audit(1696275994.944:1295): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf95b680 a2=3 a3=1 items=0 ppid=1 pid=2947 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:34.944000 audit[2947]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf95b680 a2=3 a3=1 items=0 ppid=1 pid=2947 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:34.952111 kernel: audit: type=1327 audit(1696275994.944:1295): proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:34.944000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:34.956731 systemd-logind[1129]: New session 28 of user core. Oct 2 19:46:34.957160 systemd[1]: Started session-28.scope. Oct 2 19:46:34.961000 audit[2947]: USER_START pid=2947 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:34.975354 kernel: audit: type=1105 audit(1696275994.961:1296): pid=2947 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:34.975447 kernel: audit: type=1103 audit(1696275994.964:1297): pid=2950 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:34.964000 audit[2950]: CRED_ACQ pid=2950 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:35.074205 sshd[2947]: pam_unix(sshd:session): session closed for user core Oct 2 19:46:35.074000 audit[2947]: USER_END pid=2947 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:35.074000 audit[2947]: CRED_DISP pid=2947 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:35.078323 systemd[1]: Started sshd@28-10.0.0.6:22-10.0.0.1:58922.service. Oct 2 19:46:35.078833 systemd[1]: sshd@27-10.0.0.6:22-10.0.0.1:58916.service: Deactivated successfully. Oct 2 19:46:35.079891 kernel: audit: type=1106 audit(1696275995.074:1298): pid=2947 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:35.080026 kernel: audit: type=1104 audit(1696275995.074:1299): pid=2947 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:35.077000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.6:22-10.0.0.1:58922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:35.077000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.6:22-10.0.0.1:58916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:35.079665 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:46:35.080883 systemd-logind[1129]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:46:35.083362 systemd-logind[1129]: Removed session 28. Oct 2 19:46:35.117000 audit[2961]: USER_ACCT pid=2961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:35.119143 sshd[2961]: Accepted publickey for core from 10.0.0.1 port 58922 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:46:35.119000 audit[2961]: CRED_ACQ pid=2961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:35.119000 audit[2961]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec8986c0 a2=3 a3=1 items=0 ppid=1 pid=2961 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:35.119000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:35.120893 sshd[2961]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:46:35.125407 systemd-logind[1129]: New session 29 of user core. Oct 2 19:46:35.126327 systemd[1]: Started session-29.scope. Oct 2 19:46:35.128000 audit[2961]: USER_START pid=2961 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:35.130000 audit[2965]: CRED_ACQ pid=2965 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:35.723813 kubelet[2011]: E1002 19:46:35.723787 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:36.974000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:36.974000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400100b8c0 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:46:36.974000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:46:36.974000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:36.974000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f4a390 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:46:36.974000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:46:37.190000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:37.190000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400997d8f0 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:46:37.190000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:46:37.190000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:37.190000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400a14c450 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:46:37.190000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:46:37.206000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=4790 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:37.206000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400997da10 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:46:37.206000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:46:37.213000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:37.213000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4007f98dc0 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:46:37.213000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:46:37.213000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:37.213000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400a14c600 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:46:37.213000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:46:37.213000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:37.213000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4007f87ce0 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:46:37.213000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:46:37.756843 env[1137]: time="2023-10-02T19:46:37.756795314Z" level=info msg="StopPodSandbox for \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\"" Oct 2 19:46:37.757296 env[1137]: time="2023-10-02T19:46:37.756870834Z" level=info msg="Container to stop \"ed254ce6b52867467aa1eb96b85783ef0ee2fe5350035a7b70b8b0d7042a4126\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:46:37.760582 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab-shm.mount: Deactivated successfully. Oct 2 19:46:37.769708 systemd[1]: cri-containerd-d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab.scope: Deactivated successfully. Oct 2 19:46:37.769000 audit: BPF prog-id=110 op=UNLOAD Oct 2 19:46:37.772230 env[1137]: time="2023-10-02T19:46:37.770753293Z" level=info msg="StopContainer for \"6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e\" with timeout 30 (s)" Oct 2 19:46:37.772230 env[1137]: time="2023-10-02T19:46:37.771128851Z" level=info msg="Stop container \"6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e\" with signal terminated" Oct 2 19:46:37.774000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:46:37.788220 systemd[1]: cri-containerd-6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e.scope: Deactivated successfully. Oct 2 19:46:37.787000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:46:37.791000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:46:37.798238 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab-rootfs.mount: Deactivated successfully. Oct 2 19:46:37.805987 env[1137]: time="2023-10-02T19:46:37.805919839Z" level=info msg="shim disconnected" id=d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab Oct 2 19:46:37.806167 env[1137]: time="2023-10-02T19:46:37.806037518Z" level=warning msg="cleaning up after shim disconnected" id=d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab namespace=k8s.io Oct 2 19:46:37.806167 env[1137]: time="2023-10-02T19:46:37.806049798Z" level=info msg="cleaning up dead shim" Oct 2 19:46:37.811278 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e-rootfs.mount: Deactivated successfully. Oct 2 19:46:37.817807 env[1137]: time="2023-10-02T19:46:37.817765673Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:46:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3009 runtime=io.containerd.runc.v2\n" Oct 2 19:46:37.818124 env[1137]: time="2023-10-02T19:46:37.818098991Z" level=info msg="TearDown network for sandbox \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\" successfully" Oct 2 19:46:37.818162 env[1137]: time="2023-10-02T19:46:37.818124151Z" level=info msg="StopPodSandbox for \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\" returns successfully" Oct 2 19:46:37.819146 env[1137]: time="2023-10-02T19:46:37.818949505Z" level=info msg="shim disconnected" id=6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e Oct 2 19:46:37.819146 env[1137]: time="2023-10-02T19:46:37.819007624Z" level=warning msg="cleaning up after shim disconnected" id=6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e namespace=k8s.io Oct 2 19:46:37.819146 env[1137]: time="2023-10-02T19:46:37.819016864Z" level=info msg="cleaning up dead shim" Oct 2 19:46:37.830635 env[1137]: time="2023-10-02T19:46:37.830595380Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:46:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3021 runtime=io.containerd.runc.v2\n" Oct 2 19:46:37.832842 env[1137]: time="2023-10-02T19:46:37.832808684Z" level=info msg="StopContainer for \"6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e\" returns successfully" Oct 2 19:46:37.833371 env[1137]: time="2023-10-02T19:46:37.833285161Z" level=info msg="StopPodSandbox for \"ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9\"" Oct 2 19:46:37.833570 env[1137]: time="2023-10-02T19:46:37.833543399Z" level=info msg="Container to stop \"6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:46:37.835239 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9-shm.mount: Deactivated successfully. Oct 2 19:46:37.843599 systemd[1]: cri-containerd-ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9.scope: Deactivated successfully. Oct 2 19:46:37.842000 audit: BPF prog-id=106 op=UNLOAD Oct 2 19:46:37.847000 audit: BPF prog-id=109 op=UNLOAD Oct 2 19:46:37.867103 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9-rootfs.mount: Deactivated successfully. Oct 2 19:46:37.871666 env[1137]: time="2023-10-02T19:46:37.871616084Z" level=info msg="shim disconnected" id=ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9 Oct 2 19:46:37.871666 env[1137]: time="2023-10-02T19:46:37.871661363Z" level=warning msg="cleaning up after shim disconnected" id=ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9 namespace=k8s.io Oct 2 19:46:37.871874 env[1137]: time="2023-10-02T19:46:37.871672523Z" level=info msg="cleaning up dead shim" Oct 2 19:46:37.881360 env[1137]: time="2023-10-02T19:46:37.881321533Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:46:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3051 runtime=io.containerd.runc.v2\n" Oct 2 19:46:37.881630 env[1137]: time="2023-10-02T19:46:37.881603091Z" level=info msg="TearDown network for sandbox \"ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9\" successfully" Oct 2 19:46:37.881630 env[1137]: time="2023-10-02T19:46:37.881628371Z" level=info msg="StopPodSandbox for \"ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9\" returns successfully" Oct 2 19:46:37.905420 kubelet[2011]: I1002 19:46:37.905362 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-cilium-run\") pod \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " Oct 2 19:46:37.905751 kubelet[2011]: I1002 19:46:37.905480 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-cni-path\") pod \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " Oct 2 19:46:37.905751 kubelet[2011]: I1002 19:46:37.905500 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-lib-modules\") pod \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " Oct 2 19:46:37.905751 kubelet[2011]: I1002 19:46:37.905521 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-host-proc-sys-net\") pod \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " Oct 2 19:46:37.905751 kubelet[2011]: I1002 19:46:37.905538 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-bpf-maps\") pod \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " Oct 2 19:46:37.905751 kubelet[2011]: I1002 19:46:37.905553 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-hostproc\") pod \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " Oct 2 19:46:37.905751 kubelet[2011]: I1002 19:46:37.905577 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-cilium-config-path\") pod \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " Oct 2 19:46:37.905751 kubelet[2011]: I1002 19:46:37.905598 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-clustermesh-secrets\") pod \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " Oct 2 19:46:37.905751 kubelet[2011]: I1002 19:46:37.905614 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-etc-cni-netd\") pod \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " Oct 2 19:46:37.905751 kubelet[2011]: I1002 19:46:37.905705 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" (UID: "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:46:37.905751 kubelet[2011]: I1002 19:46:37.905741 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" (UID: "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:46:37.905751 kubelet[2011]: I1002 19:46:37.905757 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-cni-path" (OuterVolumeSpecName: "cni-path") pod "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" (UID: "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:46:37.906063 kubelet[2011]: I1002 19:46:37.905771 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" (UID: "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:46:37.906063 kubelet[2011]: I1002 19:46:37.905786 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" (UID: "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:46:37.906508 kubelet[2011]: I1002 19:46:37.906164 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-hostproc" (OuterVolumeSpecName: "hostproc") pod "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" (UID: "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:46:37.906508 kubelet[2011]: I1002 19:46:37.906466 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" (UID: "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:46:37.907407 kubelet[2011]: I1002 19:46:37.907110 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-hubble-tls\") pod \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " Oct 2 19:46:37.907407 kubelet[2011]: I1002 19:46:37.907168 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-host-proc-sys-kernel\") pod \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " Oct 2 19:46:37.907407 kubelet[2011]: I1002 19:46:37.907188 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-cilium-cgroup\") pod \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " Oct 2 19:46:37.907407 kubelet[2011]: I1002 19:46:37.907207 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-xtables-lock\") pod \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " Oct 2 19:46:37.907407 kubelet[2011]: I1002 19:46:37.907201 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" (UID: "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:46:37.907407 kubelet[2011]: I1002 19:46:37.907228 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-zpjhg\" (UniqueName: \"kubernetes.io/projected/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-kube-api-access-zpjhg\") pod \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\" (UID: \"bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf\") " Oct 2 19:46:37.907407 kubelet[2011]: I1002 19:46:37.907241 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" (UID: "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:46:37.907407 kubelet[2011]: I1002 19:46:37.907259 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" (UID: "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:46:37.907407 kubelet[2011]: I1002 19:46:37.907276 2011 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:46:37.907407 kubelet[2011]: I1002 19:46:37.907288 2011 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:46:37.907407 kubelet[2011]: I1002 19:46:37.907297 2011 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:46:37.907407 kubelet[2011]: I1002 19:46:37.907306 2011 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:46:37.907407 kubelet[2011]: I1002 19:46:37.907315 2011 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:46:37.907407 kubelet[2011]: I1002 19:46:37.907361 2011 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:46:37.907407 kubelet[2011]: I1002 19:46:37.907372 2011 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:46:37.907407 kubelet[2011]: I1002 19:46:37.907382 2011 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:46:37.907407 kubelet[2011]: I1002 19:46:37.907391 2011 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:46:37.907859 kubelet[2011]: I1002 19:46:37.907574 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" (UID: "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:46:37.911955 kubelet[2011]: I1002 19:46:37.911737 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-kube-api-access-zpjhg" (OuterVolumeSpecName: "kube-api-access-zpjhg") pod "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" (UID: "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf"). InnerVolumeSpecName "kube-api-access-zpjhg". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:46:37.911955 kubelet[2011]: I1002 19:46:37.911813 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" (UID: "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:46:37.912216 kubelet[2011]: I1002 19:46:37.912173 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" (UID: "bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:46:38.008538 kubelet[2011]: I1002 19:46:38.008390 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bb5ba8c9-a28f-4da4-9905-86dcb8b915d0-cilium-config-path\") pod \"bb5ba8c9-a28f-4da4-9905-86dcb8b915d0\" (UID: \"bb5ba8c9-a28f-4da4-9905-86dcb8b915d0\") " Oct 2 19:46:38.008538 kubelet[2011]: I1002 19:46:38.008439 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-jlmlc\" (UniqueName: \"kubernetes.io/projected/bb5ba8c9-a28f-4da4-9905-86dcb8b915d0-kube-api-access-jlmlc\") pod \"bb5ba8c9-a28f-4da4-9905-86dcb8b915d0\" (UID: \"bb5ba8c9-a28f-4da4-9905-86dcb8b915d0\") " Oct 2 19:46:38.008538 kubelet[2011]: I1002 19:46:38.008486 2011 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:46:38.008538 kubelet[2011]: I1002 19:46:38.008499 2011 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:46:38.008538 kubelet[2011]: I1002 19:46:38.008516 2011 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:46:38.008538 kubelet[2011]: I1002 19:46:38.008526 2011 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:46:38.008538 kubelet[2011]: I1002 19:46:38.008536 2011 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-zpjhg\" (UniqueName: \"kubernetes.io/projected/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf-kube-api-access-zpjhg\") on node \"localhost\" DevicePath \"\"" Oct 2 19:46:38.010745 kubelet[2011]: I1002 19:46:38.010700 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/bb5ba8c9-a28f-4da4-9905-86dcb8b915d0-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "bb5ba8c9-a28f-4da4-9905-86dcb8b915d0" (UID: "bb5ba8c9-a28f-4da4-9905-86dcb8b915d0"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:46:38.012621 kubelet[2011]: I1002 19:46:38.012452 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/bb5ba8c9-a28f-4da4-9905-86dcb8b915d0-kube-api-access-jlmlc" (OuterVolumeSpecName: "kube-api-access-jlmlc") pod "bb5ba8c9-a28f-4da4-9905-86dcb8b915d0" (UID: "bb5ba8c9-a28f-4da4-9905-86dcb8b915d0"). InnerVolumeSpecName "kube-api-access-jlmlc". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:46:38.104994 kubelet[2011]: I1002 19:46:38.104945 2011 scope.go:117] "RemoveContainer" containerID="ed254ce6b52867467aa1eb96b85783ef0ee2fe5350035a7b70b8b0d7042a4126" Oct 2 19:46:38.108203 env[1137]: time="2023-10-02T19:46:38.108102192Z" level=info msg="RemoveContainer for \"ed254ce6b52867467aa1eb96b85783ef0ee2fe5350035a7b70b8b0d7042a4126\"" Oct 2 19:46:38.112067 kubelet[2011]: I1002 19:46:38.112041 2011 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bb5ba8c9-a28f-4da4-9905-86dcb8b915d0-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:46:38.112181 env[1137]: time="2023-10-02T19:46:38.112058367Z" level=info msg="RemoveContainer for \"ed254ce6b52867467aa1eb96b85783ef0ee2fe5350035a7b70b8b0d7042a4126\" returns successfully" Oct 2 19:46:38.112398 kubelet[2011]: I1002 19:46:38.112389 2011 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-jlmlc\" (UniqueName: \"kubernetes.io/projected/bb5ba8c9-a28f-4da4-9905-86dcb8b915d0-kube-api-access-jlmlc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:46:38.112491 kubelet[2011]: I1002 19:46:38.112359 2011 scope.go:117] "RemoveContainer" containerID="6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e" Oct 2 19:46:38.115065 systemd[1]: Removed slice kubepods-burstable-podbc4ee64d_b13a_4d5d_ba2f_78aa6088f2bf.slice. Oct 2 19:46:38.118667 env[1137]: time="2023-10-02T19:46:38.118627845Z" level=info msg="RemoveContainer for \"6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e\"" Oct 2 19:46:38.119585 systemd[1]: Removed slice kubepods-besteffort-podbb5ba8c9_a28f_4da4_9905_86dcb8b915d0.slice. Oct 2 19:46:38.125006 env[1137]: time="2023-10-02T19:46:38.122417141Z" level=info msg="RemoveContainer for \"6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e\" returns successfully" Oct 2 19:46:38.128894 kubelet[2011]: I1002 19:46:38.128855 2011 scope.go:117] "RemoveContainer" containerID="6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e" Oct 2 19:46:38.129226 env[1137]: time="2023-10-02T19:46:38.129137779Z" level=error msg="ContainerStatus for \"6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e\": not found" Oct 2 19:46:38.129329 kubelet[2011]: E1002 19:46:38.129310 2011 remote_runtime.go:432] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e\": not found" containerID="6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e" Oct 2 19:46:38.129377 kubelet[2011]: I1002 19:46:38.129351 2011 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e"} err="failed to get container status \"6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e\": rpc error: code = NotFound desc = an error occurred when try to find container \"6951745256cfd5d25108855ea0efd0d6cb4449884d39e281987377f24211183e\": not found" Oct 2 19:46:38.633333 kubelet[2011]: I1002 19:46:38.633286 2011 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="bb5ba8c9-a28f-4da4-9905-86dcb8b915d0" path="/var/lib/kubelet/pods/bb5ba8c9-a28f-4da4-9905-86dcb8b915d0/volumes" Oct 2 19:46:38.633698 kubelet[2011]: I1002 19:46:38.633671 2011 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" path="/var/lib/kubelet/pods/bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf/volumes" Oct 2 19:46:38.758239 systemd[1]: var-lib-kubelet-pods-bc4ee64d\x2db13a\x2d4d5d\x2dba2f\x2d78aa6088f2bf-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dzpjhg.mount: Deactivated successfully. Oct 2 19:46:38.758342 systemd[1]: var-lib-kubelet-pods-bb5ba8c9\x2da28f\x2d4da4\x2d9905\x2d86dcb8b915d0-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2djlmlc.mount: Deactivated successfully. Oct 2 19:46:38.758405 systemd[1]: var-lib-kubelet-pods-bc4ee64d\x2db13a\x2d4d5d\x2dba2f\x2d78aa6088f2bf-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:46:38.758454 systemd[1]: var-lib-kubelet-pods-bc4ee64d\x2db13a\x2d4d5d\x2dba2f\x2d78aa6088f2bf-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:46:39.721602 sshd[2961]: pam_unix(sshd:session): session closed for user core Oct 2 19:46:39.721000 audit[2961]: USER_END pid=2961 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:39.722000 audit[2961]: CRED_DISP pid=2961 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:39.724621 systemd[1]: sshd@28-10.0.0.6:22-10.0.0.1:58922.service: Deactivated successfully. Oct 2 19:46:39.723000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.6:22-10.0.0.1:58922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:39.725344 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:46:39.725533 systemd[1]: session-29.scope: Consumed 1.951s CPU time. Oct 2 19:46:39.725931 systemd-logind[1129]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:46:39.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.6:22-10.0.0.1:58938 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:39.727063 systemd[1]: Started sshd@29-10.0.0.6:22-10.0.0.1:58938.service. Oct 2 19:46:39.728018 systemd-logind[1129]: Removed session 29. Oct 2 19:46:39.769000 audit[3070]: USER_ACCT pid=3070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:39.769870 sshd[3070]: Accepted publickey for core from 10.0.0.1 port 58938 ssh2: RSA SHA256:2lB5IF9sS6KpIpFExr0lw+xbST4N8bo2+5EMLLOpcG8 Oct 2 19:46:39.769000 audit[3070]: CRED_ACQ pid=3070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:39.769000 audit[3070]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd549f250 a2=3 a3=1 items=0 ppid=1 pid=3070 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:39.769000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:39.771328 sshd[3070]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:46:39.776398 systemd-logind[1129]: New session 30 of user core. Oct 2 19:46:39.778823 systemd[1]: Started session-30.scope. Oct 2 19:46:39.781000 audit[3070]: USER_START pid=3070 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:39.783000 audit[3072]: CRED_ACQ pid=3072 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:46:40.612451 env[1137]: time="2023-10-02T19:46:40.612408659Z" level=info msg="StopPodSandbox for \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\"" Oct 2 19:46:40.612907 env[1137]: time="2023-10-02T19:46:40.612857217Z" level=info msg="TearDown network for sandbox \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\" successfully" Oct 2 19:46:40.613013 env[1137]: time="2023-10-02T19:46:40.612995976Z" level=info msg="StopPodSandbox for \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\" returns successfully" Oct 2 19:46:40.613492 env[1137]: time="2023-10-02T19:46:40.613455894Z" level=info msg="RemovePodSandbox for \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\"" Oct 2 19:46:40.613561 env[1137]: time="2023-10-02T19:46:40.613493774Z" level=info msg="Forcibly stopping sandbox \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\"" Oct 2 19:46:40.613589 env[1137]: time="2023-10-02T19:46:40.613565814Z" level=info msg="TearDown network for sandbox \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\" successfully" Oct 2 19:46:40.617723 env[1137]: time="2023-10-02T19:46:40.617679315Z" level=info msg="RemovePodSandbox \"d076f86ccb06c3d97bc259be41e1e6e549450d00ecb18aa90350badea58f41ab\" returns successfully" Oct 2 19:46:40.618234 env[1137]: time="2023-10-02T19:46:40.618182153Z" level=info msg="StopPodSandbox for \"ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9\"" Oct 2 19:46:40.618317 env[1137]: time="2023-10-02T19:46:40.618273472Z" level=info msg="TearDown network for sandbox \"ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9\" successfully" Oct 2 19:46:40.618343 env[1137]: time="2023-10-02T19:46:40.618315072Z" level=info msg="StopPodSandbox for \"ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9\" returns successfully" Oct 2 19:46:40.618700 env[1137]: time="2023-10-02T19:46:40.618673391Z" level=info msg="RemovePodSandbox for \"ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9\"" Oct 2 19:46:40.618810 env[1137]: time="2023-10-02T19:46:40.618777110Z" level=info msg="Forcibly stopping sandbox \"ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9\"" Oct 2 19:46:40.618927 env[1137]: time="2023-10-02T19:46:40.618899790Z" level=info msg="TearDown network for sandbox \"ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9\" successfully" Oct 2 19:46:40.622831 env[1137]: time="2023-10-02T19:46:40.622797412Z" level=info msg="RemovePodSandbox \"ef26bb53d7d614b9a8a150c0001dda38c442b1bfa7d7d6c28ffc6d8f1cbd66c9\" returns successfully" Oct 2 19:46:40.729153 kubelet[2011]: E1002 19:46:40.729126 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:40.867885 kubelet[2011]: I1002 19:46:40.867761 2011 topology_manager.go:215] "Topology Admit Handler" podUID="6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" podNamespace="kube-system" podName="cilium-z7fjv" Oct 2 19:46:40.867885 kubelet[2011]: E1002 19:46:40.867862 2011 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="bb5ba8c9-a28f-4da4-9905-86dcb8b915d0" containerName="cilium-operator" Oct 2 19:46:40.867885 kubelet[2011]: E1002 19:46:40.867876 2011 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" containerName="mount-cgroup" Oct 2 19:46:40.867885 kubelet[2011]: E1002 19:46:40.867883 2011 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" containerName="mount-cgroup" Oct 2 19:46:40.867885 kubelet[2011]: E1002 19:46:40.867890 2011 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" containerName="mount-cgroup" Oct 2 19:46:40.868134 kubelet[2011]: E1002 19:46:40.867900 2011 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" containerName="mount-cgroup" Oct 2 19:46:40.868134 kubelet[2011]: I1002 19:46:40.867925 2011 memory_manager.go:346] "RemoveStaleState removing state" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" containerName="mount-cgroup" Oct 2 19:46:40.868134 kubelet[2011]: I1002 19:46:40.867933 2011 memory_manager.go:346] "RemoveStaleState removing state" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" containerName="mount-cgroup" Oct 2 19:46:40.868134 kubelet[2011]: I1002 19:46:40.867939 2011 memory_manager.go:346] "RemoveStaleState removing state" podUID="bb5ba8c9-a28f-4da4-9905-86dcb8b915d0" containerName="cilium-operator" Oct 2 19:46:40.868134 kubelet[2011]: I1002 19:46:40.867946 2011 memory_manager.go:346] "RemoveStaleState removing state" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" containerName="mount-cgroup" Oct 2 19:46:40.868134 kubelet[2011]: I1002 19:46:40.867951 2011 memory_manager.go:346] "RemoveStaleState removing state" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" containerName="mount-cgroup" Oct 2 19:46:40.868134 kubelet[2011]: E1002 19:46:40.867983 2011 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" containerName="mount-cgroup" Oct 2 19:46:40.868134 kubelet[2011]: E1002 19:46:40.867991 2011 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" containerName="mount-cgroup" Oct 2 19:46:40.868134 kubelet[2011]: I1002 19:46:40.868007 2011 memory_manager.go:346] "RemoveStaleState removing state" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" containerName="mount-cgroup" Oct 2 19:46:40.868134 kubelet[2011]: I1002 19:46:40.868013 2011 memory_manager.go:346] "RemoveStaleState removing state" podUID="bc4ee64d-b13a-4d5d-ba2f-78aa6088f2bf" containerName="mount-cgroup" Oct 2 19:46:40.876827 systemd[1]: Created slice kubepods-burstable-pod6a6cf5d2_d7c5_4da2_92f9_5fc9db040112.slice. Oct 2 19:46:40.927048 kubelet[2011]: I1002 19:46:40.926946 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-host-proc-sys-net\") pod \"cilium-z7fjv\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " pod="kube-system/cilium-z7fjv" Oct 2 19:46:40.927048 kubelet[2011]: I1002 19:46:40.927032 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-lib-modules\") pod \"cilium-z7fjv\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " pod="kube-system/cilium-z7fjv" Oct 2 19:46:40.927048 kubelet[2011]: I1002 19:46:40.927056 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-xtables-lock\") pod \"cilium-z7fjv\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " pod="kube-system/cilium-z7fjv" Oct 2 19:46:40.927298 kubelet[2011]: I1002 19:46:40.927147 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-host-proc-sys-kernel\") pod \"cilium-z7fjv\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " pod="kube-system/cilium-z7fjv" Oct 2 19:46:40.927298 kubelet[2011]: I1002 19:46:40.927192 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cni-path\") pod \"cilium-z7fjv\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " pod="kube-system/cilium-z7fjv" Oct 2 19:46:40.927298 kubelet[2011]: I1002 19:46:40.927217 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xv2t4\" (UniqueName: \"kubernetes.io/projected/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-kube-api-access-xv2t4\") pod \"cilium-z7fjv\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " pod="kube-system/cilium-z7fjv" Oct 2 19:46:40.927298 kubelet[2011]: I1002 19:46:40.927236 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-bpf-maps\") pod \"cilium-z7fjv\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " pod="kube-system/cilium-z7fjv" Oct 2 19:46:40.927411 kubelet[2011]: I1002 19:46:40.927275 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-hostproc\") pod \"cilium-z7fjv\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " pod="kube-system/cilium-z7fjv" Oct 2 19:46:40.927487 kubelet[2011]: I1002 19:46:40.927428 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-clustermesh-secrets\") pod \"cilium-z7fjv\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " pod="kube-system/cilium-z7fjv" Oct 2 19:46:40.928315 kubelet[2011]: I1002 19:46:40.928276 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cilium-run\") pod \"cilium-z7fjv\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " pod="kube-system/cilium-z7fjv" Oct 2 19:46:40.928455 kubelet[2011]: I1002 19:46:40.928332 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cilium-cgroup\") pod \"cilium-z7fjv\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " pod="kube-system/cilium-z7fjv" Oct 2 19:46:40.928455 kubelet[2011]: I1002 19:46:40.928377 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-etc-cni-netd\") pod \"cilium-z7fjv\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " pod="kube-system/cilium-z7fjv" Oct 2 19:46:40.928455 kubelet[2011]: I1002 19:46:40.928404 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cilium-ipsec-secrets\") pod \"cilium-z7fjv\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " pod="kube-system/cilium-z7fjv" Oct 2 19:46:40.928455 kubelet[2011]: I1002 19:46:40.928429 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cilium-config-path\") pod \"cilium-z7fjv\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " pod="kube-system/cilium-z7fjv" Oct 2 19:46:40.928455 kubelet[2011]: I1002 19:46:40.928453 2011 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-hubble-tls\") pod \"cilium-z7fjv\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " pod="kube-system/cilium-z7fjv" Oct 2 19:46:41.183274 kubelet[2011]: E1002 19:46:41.183170 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:46:41.185771 env[1137]: time="2023-10-02T19:46:41.185713606Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-z7fjv,Uid:6a6cf5d2-d7c5-4da2-92f9-5fc9db040112,Namespace:kube-system,Attempt:0,}" Oct 2 19:46:41.539180 env[1137]: time="2023-10-02T19:46:41.539134171Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:46:41.540623 env[1137]: time="2023-10-02T19:46:41.540590486Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:46:41.542176 env[1137]: time="2023-10-02T19:46:41.542149921Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:46:41.544140 env[1137]: time="2023-10-02T19:46:41.544100154Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:46:41.560369 env[1137]: time="2023-10-02T19:46:41.560278215Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:46:41.560369 env[1137]: time="2023-10-02T19:46:41.560332295Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:46:41.560369 env[1137]: time="2023-10-02T19:46:41.560342495Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:46:41.560752 env[1137]: time="2023-10-02T19:46:41.560714174Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d pid=3093 runtime=io.containerd.runc.v2 Oct 2 19:46:41.573097 systemd[1]: Started cri-containerd-8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d.scope. Oct 2 19:46:41.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.619531 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:46:41.619600 kernel: audit: type=1400 audit(1696276001.616:1330): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.619626 kernel: audit: type=1400 audit(1696276001.616:1331): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.621188 kernel: audit: type=1400 audit(1696276001.616:1332): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.622824 kernel: audit: type=1400 audit(1696276001.616:1333): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.626221 kernel: audit: type=1400 audit(1696276001.616:1334): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.626266 kernel: audit: type=1400 audit(1696276001.616:1335): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.629624 kernel: audit: type=1400 audit(1696276001.616:1336): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.631953 kernel: audit: type=1400 audit(1696276001.616:1337): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.632032 kernel: audit: type=1400 audit(1696276001.616:1338): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.633585 kernel: audit: type=1400 audit(1696276001.616:1339): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.616000 audit: BPF prog-id=125 op=LOAD Oct 2 19:46:41.617000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.617000 audit[3102]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3093 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:41.617000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864643931323038663861396233343763376562393137313063343332 Oct 2 19:46:41.617000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.617000 audit[3102]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3093 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:41.617000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864643931323038663861396233343763376562393137313063343332 Oct 2 19:46:41.617000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.617000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.617000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.617000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.617000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.617000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.617000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.617000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.617000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.617000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.617000 audit: BPF prog-id=126 op=LOAD Oct 2 19:46:41.617000 audit[3102]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3093 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:41.617000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864643931323038663861396233343763376562393137313063343332 Oct 2 19:46:41.618000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.618000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.618000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.618000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.618000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.618000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.618000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.618000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.618000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.618000 audit: BPF prog-id=127 op=LOAD Oct 2 19:46:41.618000 audit[3102]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3093 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:41.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864643931323038663861396233343763376562393137313063343332 Oct 2 19:46:41.620000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:46:41.620000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:46:41.620000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.620000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.620000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.620000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.620000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.620000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.620000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.620000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.620000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.620000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:46:41.620000 audit: BPF prog-id=128 op=LOAD Oct 2 19:46:41.620000 audit[3102]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3093 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:41.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864643931323038663861396233343763376562393137313063343332 Oct 2 19:46:41.644069 env[1137]: time="2023-10-02T19:46:41.644030473Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-z7fjv,Uid:6a6cf5d2-d7c5-4da2-92f9-5fc9db040112,Namespace:kube-system,Attempt:0,} returns sandbox id \"8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d\"" Oct 2 19:46:41.644701 kubelet[2011]: E1002 19:46:41.644672 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:46:41.648442 env[1137]: time="2023-10-02T19:46:41.648315818Z" level=info msg="CreateContainer within sandbox \"8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:46:41.656212 env[1137]: time="2023-10-02T19:46:41.656174309Z" level=info msg="CreateContainer within sandbox \"8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91\"" Oct 2 19:46:41.658060 env[1137]: time="2023-10-02T19:46:41.657736064Z" level=info msg="StartContainer for \"37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91\"" Oct 2 19:46:41.672706 systemd[1]: Started cri-containerd-37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91.scope. Oct 2 19:46:41.698751 systemd[1]: cri-containerd-37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91.scope: Deactivated successfully. Oct 2 19:46:41.712273 env[1137]: time="2023-10-02T19:46:41.712209827Z" level=info msg="shim disconnected" id=37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91 Oct 2 19:46:41.712273 env[1137]: time="2023-10-02T19:46:41.712265667Z" level=warning msg="cleaning up after shim disconnected" id=37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91 namespace=k8s.io Oct 2 19:46:41.712273 env[1137]: time="2023-10-02T19:46:41.712277067Z" level=info msg="cleaning up dead shim" Oct 2 19:46:41.729793 env[1137]: time="2023-10-02T19:46:41.729589324Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:46:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3152 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:46:41Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:46:41.729947 env[1137]: time="2023-10-02T19:46:41.729866003Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 19:46:41.731012 env[1137]: time="2023-10-02T19:46:41.730072083Z" level=error msg="Failed to pipe stdout of container \"37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91\"" error="reading from a closed fifo" Oct 2 19:46:41.732298 env[1137]: time="2023-10-02T19:46:41.732108875Z" level=error msg="Failed to pipe stderr of container \"37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91\"" error="reading from a closed fifo" Oct 2 19:46:41.734222 env[1137]: time="2023-10-02T19:46:41.734174748Z" level=error msg="StartContainer for \"37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:46:41.734431 kubelet[2011]: E1002 19:46:41.734407 2011 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91" Oct 2 19:46:41.736381 kubelet[2011]: E1002 19:46:41.734517 2011 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:46:41.736381 kubelet[2011]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:46:41.736381 kubelet[2011]: rm /hostbin/cilium-mount Oct 2 19:46:41.736381 kubelet[2011]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-xv2t4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-z7fjv_kube-system(6a6cf5d2-d7c5-4da2-92f9-5fc9db040112): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:46:41.736381 kubelet[2011]: E1002 19:46:41.734556 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-z7fjv" podUID="6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" Oct 2 19:46:42.121351 kubelet[2011]: E1002 19:46:42.121022 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:46:42.124339 env[1137]: time="2023-10-02T19:46:42.124278803Z" level=info msg="CreateContainer within sandbox \"8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:46:42.141773 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3814658519.mount: Deactivated successfully. Oct 2 19:46:42.143661 env[1137]: time="2023-10-02T19:46:42.143543870Z" level=info msg="CreateContainer within sandbox \"8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208\"" Oct 2 19:46:42.145253 env[1137]: time="2023-10-02T19:46:42.144340068Z" level=info msg="StartContainer for \"1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208\"" Oct 2 19:46:42.161341 systemd[1]: Started cri-containerd-1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208.scope. Oct 2 19:46:42.186601 systemd[1]: cri-containerd-1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208.scope: Deactivated successfully. Oct 2 19:46:42.194217 env[1137]: time="2023-10-02T19:46:42.194158852Z" level=info msg="shim disconnected" id=1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208 Oct 2 19:46:42.194217 env[1137]: time="2023-10-02T19:46:42.194215492Z" level=warning msg="cleaning up after shim disconnected" id=1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208 namespace=k8s.io Oct 2 19:46:42.194421 env[1137]: time="2023-10-02T19:46:42.194225852Z" level=info msg="cleaning up dead shim" Oct 2 19:46:42.203215 env[1137]: time="2023-10-02T19:46:42.203171387Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:46:42Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3189 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:46:42Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:46:42.203494 env[1137]: time="2023-10-02T19:46:42.203429867Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 19:46:42.203633 env[1137]: time="2023-10-02T19:46:42.203599266Z" level=error msg="Failed to pipe stdout of container \"1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208\"" error="reading from a closed fifo" Oct 2 19:46:42.203746 env[1137]: time="2023-10-02T19:46:42.203711026Z" level=error msg="Failed to pipe stderr of container \"1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208\"" error="reading from a closed fifo" Oct 2 19:46:42.205752 env[1137]: time="2023-10-02T19:46:42.205701060Z" level=error msg="StartContainer for \"1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:46:42.206446 kubelet[2011]: E1002 19:46:42.205994 2011 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208" Oct 2 19:46:42.206446 kubelet[2011]: E1002 19:46:42.206094 2011 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:46:42.206446 kubelet[2011]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:46:42.206446 kubelet[2011]: rm /hostbin/cilium-mount Oct 2 19:46:42.206446 kubelet[2011]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-xv2t4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-z7fjv_kube-system(6a6cf5d2-d7c5-4da2-92f9-5fc9db040112): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:46:42.206446 kubelet[2011]: E1002 19:46:42.206132 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-z7fjv" podUID="6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" Oct 2 19:46:43.124202 kubelet[2011]: I1002 19:46:43.124171 2011 scope.go:117] "RemoveContainer" containerID="37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91" Oct 2 19:46:43.124593 kubelet[2011]: I1002 19:46:43.124570 2011 scope.go:117] "RemoveContainer" containerID="37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91" Oct 2 19:46:43.125723 env[1137]: time="2023-10-02T19:46:43.125689771Z" level=info msg="RemoveContainer for \"37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91\"" Oct 2 19:46:43.126196 env[1137]: time="2023-10-02T19:46:43.126165530Z" level=info msg="RemoveContainer for \"37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91\"" Oct 2 19:46:43.126368 env[1137]: time="2023-10-02T19:46:43.126336330Z" level=error msg="RemoveContainer for \"37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91\" failed" error="failed to set removing state for container \"37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91\": container is already in removing state" Oct 2 19:46:43.126563 kubelet[2011]: E1002 19:46:43.126541 2011 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91\": container is already in removing state" containerID="37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91" Oct 2 19:46:43.126620 kubelet[2011]: E1002 19:46:43.126578 2011 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91": container is already in removing state; Skipping pod "cilium-z7fjv_kube-system(6a6cf5d2-d7c5-4da2-92f9-5fc9db040112)" Oct 2 19:46:43.126657 kubelet[2011]: E1002 19:46:43.126639 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:46:43.126877 kubelet[2011]: E1002 19:46:43.126862 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-z7fjv_kube-system(6a6cf5d2-d7c5-4da2-92f9-5fc9db040112)\"" pod="kube-system/cilium-z7fjv" podUID="6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" Oct 2 19:46:43.128472 env[1137]: time="2023-10-02T19:46:43.128439446Z" level=info msg="RemoveContainer for \"37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91\" returns successfully" Oct 2 19:46:44.817942 kubelet[2011]: W1002 19:46:44.817473 2011 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod6a6cf5d2_d7c5_4da2_92f9_5fc9db040112.slice/cri-containerd-37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91.scope WatchSource:0}: container "37e6742634ef7869102dd651642daec59c25a9caf50b98ae2ce669c9997ffd91" in namespace "k8s.io": not found Oct 2 19:46:45.730313 kubelet[2011]: E1002 19:46:45.730286 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:47.924380 kubelet[2011]: W1002 19:46:47.924220 2011 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod6a6cf5d2_d7c5_4da2_92f9_5fc9db040112.slice/cri-containerd-1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208.scope WatchSource:0}: task 1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208 not found: not found Oct 2 19:46:50.731039 kubelet[2011]: E1002 19:46:50.731006 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:52.690000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:52.693038 kernel: kauditd_printk_skb: 47 callbacks suppressed Oct 2 19:46:52.693126 kernel: audit: type=1400 audit(1696276012.690:1348): avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:52.693154 kernel: audit: type=1300 audit(1696276012.690:1348): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400259cf40 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:46:52.690000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400259cf40 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:46:52.690000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:46:52.698026 kernel: audit: type=1327 audit(1696276012.690:1348): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:46:52.698077 kernel: audit: type=1400 audit(1696276012.690:1349): avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:52.690000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:52.700006 kernel: audit: type=1300 audit(1696276012.690:1349): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400098ab20 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:46:52.690000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400098ab20 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:46:52.702640 kernel: audit: type=1327 audit(1696276012.690:1349): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:46:52.690000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:46:52.704860 kernel: audit: type=1400 audit(1696276012.693:1350): avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:52.693000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:52.706907 kernel: audit: type=1300 audit(1696276012.693:1350): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400259d160 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:46:52.693000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400259d160 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:46:52.709624 kernel: audit: type=1327 audit(1696276012.693:1350): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:46:52.693000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:46:52.711993 kernel: audit: type=1400 audit(1696276012.693:1351): avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:52.693000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:52.693000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400098ab40 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:46:52.693000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:46:55.631440 kubelet[2011]: E1002 19:46:55.631404 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:46:55.633684 env[1137]: time="2023-10-02T19:46:55.633637143Z" level=info msg="CreateContainer within sandbox \"8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:46:55.644761 env[1137]: time="2023-10-02T19:46:55.644720146Z" level=info msg="CreateContainer within sandbox \"8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01\"" Oct 2 19:46:55.645545 env[1137]: time="2023-10-02T19:46:55.645514352Z" level=info msg="StartContainer for \"e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01\"" Oct 2 19:46:55.662029 systemd[1]: Started cri-containerd-e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01.scope. Oct 2 19:46:55.665016 systemd[1]: run-containerd-runc-k8s.io-e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01-runc.7muYR9.mount: Deactivated successfully. Oct 2 19:46:55.682328 systemd[1]: cri-containerd-e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01.scope: Deactivated successfully. Oct 2 19:46:55.692400 env[1137]: time="2023-10-02T19:46:55.692352980Z" level=info msg="shim disconnected" id=e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01 Oct 2 19:46:55.692710 env[1137]: time="2023-10-02T19:46:55.692687702Z" level=warning msg="cleaning up after shim disconnected" id=e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01 namespace=k8s.io Oct 2 19:46:55.692789 env[1137]: time="2023-10-02T19:46:55.692776023Z" level=info msg="cleaning up dead shim" Oct 2 19:46:55.703603 env[1137]: time="2023-10-02T19:46:55.703562383Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:46:55Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3229 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:46:55Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:46:55.704052 env[1137]: time="2023-10-02T19:46:55.703955346Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 19:46:55.704192 env[1137]: time="2023-10-02T19:46:55.704134028Z" level=error msg="Failed to pipe stdout of container \"e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01\"" error="reading from a closed fifo" Oct 2 19:46:55.706949 env[1137]: time="2023-10-02T19:46:55.706909208Z" level=error msg="Failed to pipe stderr of container \"e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01\"" error="reading from a closed fifo" Oct 2 19:46:55.708785 env[1137]: time="2023-10-02T19:46:55.708746582Z" level=error msg="StartContainer for \"e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:46:55.709229 kubelet[2011]: E1002 19:46:55.709193 2011 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01" Oct 2 19:46:55.709627 kubelet[2011]: E1002 19:46:55.709608 2011 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:46:55.709627 kubelet[2011]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:46:55.709627 kubelet[2011]: rm /hostbin/cilium-mount Oct 2 19:46:55.709627 kubelet[2011]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-xv2t4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-z7fjv_kube-system(6a6cf5d2-d7c5-4da2-92f9-5fc9db040112): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:46:55.709782 kubelet[2011]: E1002 19:46:55.709681 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-z7fjv" podUID="6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" Oct 2 19:46:55.732645 kubelet[2011]: E1002 19:46:55.732621 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:56.151231 kubelet[2011]: I1002 19:46:56.151200 2011 scope.go:117] "RemoveContainer" containerID="1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208" Oct 2 19:46:56.151596 kubelet[2011]: I1002 19:46:56.151573 2011 scope.go:117] "RemoveContainer" containerID="1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208" Oct 2 19:46:56.152625 env[1137]: time="2023-10-02T19:46:56.152582785Z" level=info msg="RemoveContainer for \"1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208\"" Oct 2 19:46:56.153107 env[1137]: time="2023-10-02T19:46:56.153077829Z" level=info msg="RemoveContainer for \"1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208\"" Oct 2 19:46:56.153323 env[1137]: time="2023-10-02T19:46:56.153289990Z" level=error msg="RemoveContainer for \"1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208\" failed" error="failed to set removing state for container \"1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208\": container is already in removing state" Oct 2 19:46:56.153665 kubelet[2011]: E1002 19:46:56.153626 2011 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208\": container is already in removing state" containerID="1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208" Oct 2 19:46:56.153720 kubelet[2011]: E1002 19:46:56.153685 2011 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208": container is already in removing state; Skipping pod "cilium-z7fjv_kube-system(6a6cf5d2-d7c5-4da2-92f9-5fc9db040112)" Oct 2 19:46:56.153759 kubelet[2011]: E1002 19:46:56.153746 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:46:56.158223 kubelet[2011]: E1002 19:46:56.157162 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-z7fjv_kube-system(6a6cf5d2-d7c5-4da2-92f9-5fc9db040112)\"" pod="kube-system/cilium-z7fjv" podUID="6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" Oct 2 19:46:56.161852 env[1137]: time="2023-10-02T19:46:56.161816380Z" level=info msg="RemoveContainer for \"1595d18ff50d79ac7c7039b37f3bed14e42b549f7e2f53aee42bf1f009710208\" returns successfully" Oct 2 19:46:56.642187 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01-rootfs.mount: Deactivated successfully. Oct 2 19:46:58.795683 kubelet[2011]: W1002 19:46:58.795626 2011 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod6a6cf5d2_d7c5_4da2_92f9_5fc9db040112.slice/cri-containerd-e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01.scope WatchSource:0}: task e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01 not found: not found Oct 2 19:47:00.733976 kubelet[2011]: E1002 19:47:00.733933 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:05.735063 kubelet[2011]: E1002 19:47:05.735030 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:10.631424 kubelet[2011]: E1002 19:47:10.631392 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:47:10.632036 kubelet[2011]: E1002 19:47:10.631603 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-z7fjv_kube-system(6a6cf5d2-d7c5-4da2-92f9-5fc9db040112)\"" pod="kube-system/cilium-z7fjv" podUID="6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" Oct 2 19:47:10.736805 kubelet[2011]: E1002 19:47:10.736775 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:14.631216 kubelet[2011]: E1002 19:47:14.631177 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:47:15.737580 kubelet[2011]: E1002 19:47:15.737552 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:20.739487 kubelet[2011]: E1002 19:47:20.739458 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:24.631684 kubelet[2011]: E1002 19:47:24.631641 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:47:24.633876 env[1137]: time="2023-10-02T19:47:24.633820163Z" level=info msg="CreateContainer within sandbox \"8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:47:24.642757 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1601833343.mount: Deactivated successfully. Oct 2 19:47:24.646891 env[1137]: time="2023-10-02T19:47:24.646835473Z" level=info msg="CreateContainer within sandbox \"8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"55ba649335bcd367f7274188b26da8f99594cf07171ef7fb49ed3c8b8cd62002\"" Oct 2 19:47:24.647408 env[1137]: time="2023-10-02T19:47:24.647377606Z" level=info msg="StartContainer for \"55ba649335bcd367f7274188b26da8f99594cf07171ef7fb49ed3c8b8cd62002\"" Oct 2 19:47:24.664455 systemd[1]: Started cri-containerd-55ba649335bcd367f7274188b26da8f99594cf07171ef7fb49ed3c8b8cd62002.scope. Oct 2 19:47:24.693736 systemd[1]: cri-containerd-55ba649335bcd367f7274188b26da8f99594cf07171ef7fb49ed3c8b8cd62002.scope: Deactivated successfully. Oct 2 19:47:24.702259 env[1137]: time="2023-10-02T19:47:24.702194234Z" level=info msg="shim disconnected" id=55ba649335bcd367f7274188b26da8f99594cf07171ef7fb49ed3c8b8cd62002 Oct 2 19:47:24.702259 env[1137]: time="2023-10-02T19:47:24.702253555Z" level=warning msg="cleaning up after shim disconnected" id=55ba649335bcd367f7274188b26da8f99594cf07171ef7fb49ed3c8b8cd62002 namespace=k8s.io Oct 2 19:47:24.702259 env[1137]: time="2023-10-02T19:47:24.702263635Z" level=info msg="cleaning up dead shim" Oct 2 19:47:24.711400 env[1137]: time="2023-10-02T19:47:24.711335732Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:47:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3267 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:47:24Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/55ba649335bcd367f7274188b26da8f99594cf07171ef7fb49ed3c8b8cd62002/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:47:24.711729 env[1137]: time="2023-10-02T19:47:24.711660660Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:47:24.711918 env[1137]: time="2023-10-02T19:47:24.711865145Z" level=error msg="Failed to pipe stdout of container \"55ba649335bcd367f7274188b26da8f99594cf07171ef7fb49ed3c8b8cd62002\"" error="reading from a closed fifo" Oct 2 19:47:24.711951 env[1137]: time="2023-10-02T19:47:24.711882585Z" level=error msg="Failed to pipe stderr of container \"55ba649335bcd367f7274188b26da8f99594cf07171ef7fb49ed3c8b8cd62002\"" error="reading from a closed fifo" Oct 2 19:47:24.713946 env[1137]: time="2023-10-02T19:47:24.713899433Z" level=error msg="StartContainer for \"55ba649335bcd367f7274188b26da8f99594cf07171ef7fb49ed3c8b8cd62002\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:47:24.714213 kubelet[2011]: E1002 19:47:24.714172 2011 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="55ba649335bcd367f7274188b26da8f99594cf07171ef7fb49ed3c8b8cd62002" Oct 2 19:47:24.715059 kubelet[2011]: E1002 19:47:24.715024 2011 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:47:24.715059 kubelet[2011]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:47:24.715059 kubelet[2011]: rm /hostbin/cilium-mount Oct 2 19:47:24.715059 kubelet[2011]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-xv2t4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-z7fjv_kube-system(6a6cf5d2-d7c5-4da2-92f9-5fc9db040112): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:47:24.715208 kubelet[2011]: E1002 19:47:24.715084 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-z7fjv" podUID="6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" Oct 2 19:47:25.204582 kubelet[2011]: I1002 19:47:25.204552 2011 scope.go:117] "RemoveContainer" containerID="e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01" Oct 2 19:47:25.204931 kubelet[2011]: I1002 19:47:25.204912 2011 scope.go:117] "RemoveContainer" containerID="e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01" Oct 2 19:47:25.205875 env[1137]: time="2023-10-02T19:47:25.205819897Z" level=info msg="RemoveContainer for \"e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01\"" Oct 2 19:47:25.208006 env[1137]: time="2023-10-02T19:47:25.207788945Z" level=info msg="RemoveContainer for \"e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01\"" Oct 2 19:47:25.208100 env[1137]: time="2023-10-02T19:47:25.208053951Z" level=error msg="RemoveContainer for \"e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01\" failed" error="failed to set removing state for container \"e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01\": container is already in removing state" Oct 2 19:47:25.208262 kubelet[2011]: E1002 19:47:25.208234 2011 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01\": container is already in removing state" containerID="e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01" Oct 2 19:47:25.208368 kubelet[2011]: E1002 19:47:25.208279 2011 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01": container is already in removing state; Skipping pod "cilium-z7fjv_kube-system(6a6cf5d2-d7c5-4da2-92f9-5fc9db040112)" Oct 2 19:47:25.208368 kubelet[2011]: E1002 19:47:25.208344 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:47:25.208577 kubelet[2011]: E1002 19:47:25.208563 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-z7fjv_kube-system(6a6cf5d2-d7c5-4da2-92f9-5fc9db040112)\"" pod="kube-system/cilium-z7fjv" podUID="6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" Oct 2 19:47:25.212713 env[1137]: time="2023-10-02T19:47:25.212676984Z" level=info msg="RemoveContainer for \"e481f4dbe8190aa07772937acca17b69dfe1958b46014dc283f18ad1b5efbe01\" returns successfully" Oct 2 19:47:25.640399 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-55ba649335bcd367f7274188b26da8f99594cf07171ef7fb49ed3c8b8cd62002-rootfs.mount: Deactivated successfully. Oct 2 19:47:25.741436 kubelet[2011]: E1002 19:47:25.741406 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:27.806533 kubelet[2011]: W1002 19:47:27.806494 2011 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod6a6cf5d2_d7c5_4da2_92f9_5fc9db040112.slice/cri-containerd-55ba649335bcd367f7274188b26da8f99594cf07171ef7fb49ed3c8b8cd62002.scope WatchSource:0}: task 55ba649335bcd367f7274188b26da8f99594cf07171ef7fb49ed3c8b8cd62002 not found: not found Oct 2 19:47:28.632310 kubelet[2011]: E1002 19:47:28.632281 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:47:28.632487 kubelet[2011]: E1002 19:47:28.632350 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:47:30.742204 kubelet[2011]: E1002 19:47:30.742176 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:35.743065 kubelet[2011]: E1002 19:47:35.743027 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:36.975000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:36.978758 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:47:36.978847 kernel: audit: type=1400 audit(1696276056.975:1352): avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:36.978874 kernel: audit: type=1400 audit(1696276056.975:1353): avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:36.975000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:36.980675 kernel: audit: type=1300 audit(1696276056.975:1353): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40026cdc80 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:47:36.975000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40026cdc80 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:47:36.983470 kernel: audit: type=1327 audit(1696276056.975:1353): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:47:36.975000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:47:36.985564 kernel: audit: type=1300 audit(1696276056.975:1352): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000fa4630 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:47:36.975000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000fa4630 a2=fc6 a3=0 items=0 ppid=1731 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c814,c940 key=(null) Oct 2 19:47:36.988197 kernel: audit: type=1327 audit(1696276056.975:1352): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:47:36.975000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:47:37.191000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:37.191000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4007efcd80 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:47:37.196711 kernel: audit: type=1400 audit(1696276057.191:1354): avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:37.196789 kernel: audit: type=1300 audit(1696276057.191:1354): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4007efcd80 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:47:37.196807 kernel: audit: type=1327 audit(1696276057.191:1354): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:47:37.191000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:47:37.198948 kernel: audit: type=1400 audit(1696276057.191:1355): avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:37.191000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:37.191000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40083e4420 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:47:37.191000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:47:37.206000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=4790 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:37.206000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4007efcea0 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:47:37.206000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:47:37.213000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4788 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:37.213000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4007efd080 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:47:37.213000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:47:37.213000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:37.213000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4008899a40 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:47:37.213000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:47:37.214000 audit[1896]: AVC avc: denied { watch } for pid=1896 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:37.214000 audit[1896]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40082c7460 a2=fc6 a3=0 items=0 ppid=1736 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c628 key=(null) Oct 2 19:47:37.214000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E36002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:47:37.631265 kubelet[2011]: E1002 19:47:37.631234 2011 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:47:37.631621 kubelet[2011]: E1002 19:47:37.631485 2011 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-z7fjv_kube-system(6a6cf5d2-d7c5-4da2-92f9-5fc9db040112)\"" pod="kube-system/cilium-z7fjv" podUID="6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" Oct 2 19:47:40.602369 kubelet[2011]: I1002 19:47:40.602333 2011 image_gc_manager.go:323] "Disk usage on image filesystem is over the high threshold, trying to free bytes down to the low threshold" usage=85 highThreshold=85 amountToFree=82724454 lowThreshold=80 Oct 2 19:47:40.604644 kubelet[2011]: I1002 19:47:40.604596 2011 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180" size=17128551 Oct 2 19:47:40.604890 env[1137]: time="2023-10-02T19:47:40.604852714Z" level=info msg="RemoveImage \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 19:47:40.605877 env[1137]: time="2023-10-02T19:47:40.605855265Z" level=info msg="ImageDelete event &ImageDelete{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,XXX_unrecognized:[],}" Oct 2 19:47:40.606577 env[1137]: time="2023-10-02T19:47:40.606554126Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,XXX_unrecognized:[],}" Oct 2 19:47:40.618339 env[1137]: time="2023-10-02T19:47:40.618305400Z" level=info msg="RemoveImage \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\" returns successfully" Oct 2 19:47:40.618621 kubelet[2011]: E1002 19:47:40.618570 2011 kubelet.go:1427] "Image garbage collection failed multiple times in a row" err="Failed to garbage collect required amount of images. Attempted to free 82724454 bytes, but only found 17128551 bytes eligible to free." Oct 2 19:47:40.655960 kubelet[2011]: W1002 19:47:40.655923 2011 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:47:40.744216 kubelet[2011]: E1002 19:47:40.744190 2011 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:42.028075 env[1137]: time="2023-10-02T19:47:42.028031932Z" level=info msg="StopPodSandbox for \"8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d\"" Oct 2 19:47:42.028568 env[1137]: time="2023-10-02T19:47:42.028542308Z" level=info msg="Container to stop \"55ba649335bcd367f7274188b26da8f99594cf07171ef7fb49ed3c8b8cd62002\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:47:42.036390 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d-shm.mount: Deactivated successfully. Oct 2 19:47:42.041301 systemd[1]: cri-containerd-8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d.scope: Deactivated successfully. Oct 2 19:47:42.042000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:47:42.044328 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:47:42.044384 kernel: audit: type=1334 audit(1696276062.042:1360): prog-id=125 op=UNLOAD Oct 2 19:47:42.046000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:47:42.047991 kernel: audit: type=1334 audit(1696276062.046:1361): prog-id=128 op=UNLOAD Oct 2 19:47:42.079574 sshd[3070]: pam_unix(sshd:session): session closed for user core Oct 2 19:47:42.079000 audit[3070]: USER_END pid=3070 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:47:42.081937 systemd[1]: sshd@29-10.0.0.6:22-10.0.0.1:58938.service: Deactivated successfully. Oct 2 19:47:42.082678 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:47:42.082911 systemd[1]: session-30.scope: Consumed 1.314s CPU time. Oct 2 19:47:42.079000 audit[3070]: CRED_DISP pid=3070 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:47:42.083344 systemd-logind[1129]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:47:42.084386 systemd-logind[1129]: Removed session 30. Oct 2 19:47:42.085106 kernel: audit: type=1106 audit(1696276062.079:1362): pid=3070 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:47:42.085259 kernel: audit: type=1104 audit(1696276062.079:1363): pid=3070 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:47:42.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.6:22-10.0.0.1:58938 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:42.086465 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d-rootfs.mount: Deactivated successfully. Oct 2 19:47:42.087234 kernel: audit: type=1131 audit(1696276062.081:1364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.6:22-10.0.0.1:58938 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:42.099684 env[1137]: time="2023-10-02T19:47:42.099629701Z" level=info msg="shim disconnected" id=8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d Oct 2 19:47:42.100352 env[1137]: time="2023-10-02T19:47:42.100326923Z" level=warning msg="cleaning up after shim disconnected" id=8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d namespace=k8s.io Oct 2 19:47:42.100445 env[1137]: time="2023-10-02T19:47:42.100430246Z" level=info msg="cleaning up dead shim" Oct 2 19:47:42.108826 env[1137]: time="2023-10-02T19:47:42.108791024Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:47:42Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3301 runtime=io.containerd.runc.v2\n" Oct 2 19:47:42.109405 env[1137]: time="2023-10-02T19:47:42.109375802Z" level=info msg="TearDown network for sandbox \"8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d\" successfully" Oct 2 19:47:42.109536 env[1137]: time="2023-10-02T19:47:42.109517286Z" level=info msg="StopPodSandbox for \"8dd91208f8a9b347c7eb91710c432dff5f21847cb9076ac0521576c742abe96d\" returns successfully" Oct 2 19:47:42.172905 kubelet[2011]: I1002 19:47:42.172860 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cni-path\") pod \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " Oct 2 19:47:42.172905 kubelet[2011]: I1002 19:47:42.172906 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-host-proc-sys-kernel\") pod \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " Oct 2 19:47:42.173299 kubelet[2011]: I1002 19:47:42.172933 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cilium-ipsec-secrets\") pod \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " Oct 2 19:47:42.173299 kubelet[2011]: I1002 19:47:42.172954 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-clustermesh-secrets\") pod \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " Oct 2 19:47:42.173299 kubelet[2011]: I1002 19:47:42.172991 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-host-proc-sys-net\") pod \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " Oct 2 19:47:42.173299 kubelet[2011]: I1002 19:47:42.173011 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-hostproc\") pod \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " Oct 2 19:47:42.173299 kubelet[2011]: I1002 19:47:42.173030 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cilium-cgroup\") pod \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " Oct 2 19:47:42.173299 kubelet[2011]: I1002 19:47:42.173051 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cilium-config-path\") pod \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " Oct 2 19:47:42.173299 kubelet[2011]: I1002 19:47:42.173069 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-lib-modules\") pod \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " Oct 2 19:47:42.173299 kubelet[2011]: I1002 19:47:42.173086 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-bpf-maps\") pod \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " Oct 2 19:47:42.173299 kubelet[2011]: I1002 19:47:42.173106 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-xv2t4\" (UniqueName: \"kubernetes.io/projected/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-kube-api-access-xv2t4\") pod \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " Oct 2 19:47:42.173299 kubelet[2011]: I1002 19:47:42.173125 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-hubble-tls\") pod \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " Oct 2 19:47:42.173299 kubelet[2011]: I1002 19:47:42.173143 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cilium-run\") pod \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " Oct 2 19:47:42.173299 kubelet[2011]: I1002 19:47:42.173160 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-xtables-lock\") pod \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " Oct 2 19:47:42.173299 kubelet[2011]: I1002 19:47:42.173177 2011 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-etc-cni-netd\") pod \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\" (UID: \"6a6cf5d2-d7c5-4da2-92f9-5fc9db040112\") " Oct 2 19:47:42.173299 kubelet[2011]: I1002 19:47:42.173234 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" (UID: "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:42.173299 kubelet[2011]: I1002 19:47:42.173262 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cni-path" (OuterVolumeSpecName: "cni-path") pod "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" (UID: "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:42.173299 kubelet[2011]: I1002 19:47:42.173278 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" (UID: "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:42.173763 kubelet[2011]: I1002 19:47:42.173520 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" (UID: "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:42.173793 kubelet[2011]: I1002 19:47:42.173765 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" (UID: "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:42.173940 kubelet[2011]: I1002 19:47:42.173816 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" (UID: "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:42.173940 kubelet[2011]: I1002 19:47:42.173863 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-hostproc" (OuterVolumeSpecName: "hostproc") pod "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" (UID: "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:42.173940 kubelet[2011]: I1002 19:47:42.173884 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" (UID: "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:42.173940 kubelet[2011]: I1002 19:47:42.173920 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" (UID: "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:42.173940 kubelet[2011]: I1002 19:47:42.173922 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" (UID: "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:42.177134 systemd[1]: var-lib-kubelet-pods-6a6cf5d2\x2dd7c5\x2d4da2\x2d92f9\x2d5fc9db040112-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:47:42.178031 kubelet[2011]: I1002 19:47:42.178001 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" (UID: "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:47:42.178546 systemd[1]: var-lib-kubelet-pods-6a6cf5d2\x2dd7c5\x2d4da2\x2d92f9\x2d5fc9db040112-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dxv2t4.mount: Deactivated successfully. Oct 2 19:47:42.178625 systemd[1]: var-lib-kubelet-pods-6a6cf5d2\x2dd7c5\x2d4da2\x2d92f9\x2d5fc9db040112-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:47:42.179379 kubelet[2011]: I1002 19:47:42.179348 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" (UID: "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:47:42.179451 kubelet[2011]: I1002 19:47:42.179406 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" (UID: "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:47:42.179587 kubelet[2011]: I1002 19:47:42.179561 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-kube-api-access-xv2t4" (OuterVolumeSpecName: "kube-api-access-xv2t4") pod "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" (UID: "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112"). InnerVolumeSpecName "kube-api-access-xv2t4". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:47:42.180039 systemd[1]: var-lib-kubelet-pods-6a6cf5d2\x2dd7c5\x2d4da2\x2d92f9\x2d5fc9db040112-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:47:42.180138 kubelet[2011]: I1002 19:47:42.180090 2011 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" (UID: "6a6cf5d2-d7c5-4da2-92f9-5fc9db040112"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:47:42.234248 kubelet[2011]: I1002 19:47:42.234227 2011 scope.go:117] "RemoveContainer" containerID="55ba649335bcd367f7274188b26da8f99594cf07171ef7fb49ed3c8b8cd62002" Oct 2 19:47:42.237163 env[1137]: time="2023-10-02T19:47:42.237125063Z" level=info msg="RemoveContainer for \"55ba649335bcd367f7274188b26da8f99594cf07171ef7fb49ed3c8b8cd62002\"" Oct 2 19:47:42.239305 systemd[1]: Removed slice kubepods-burstable-pod6a6cf5d2_d7c5_4da2_92f9_5fc9db040112.slice. Oct 2 19:47:42.240942 env[1137]: time="2023-10-02T19:47:42.240471846Z" level=info msg="RemoveContainer for \"55ba649335bcd367f7274188b26da8f99594cf07171ef7fb49ed3c8b8cd62002\" returns successfully" Oct 2 19:47:42.273886 kubelet[2011]: I1002 19:47:42.273849 2011 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:47:42.273886 kubelet[2011]: I1002 19:47:42.273883 2011 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:47:42.273886 kubelet[2011]: I1002 19:47:42.273897 2011 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:47:42.274082 kubelet[2011]: I1002 19:47:42.273907 2011 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cilium-ipsec-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:47:42.274082 kubelet[2011]: I1002 19:47:42.273918 2011 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:47:42.274082 kubelet[2011]: I1002 19:47:42.273927 2011 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:47:42.274082 kubelet[2011]: I1002 19:47:42.273935 2011 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:47:42.274082 kubelet[2011]: I1002 19:47:42.273946 2011 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:47:42.274082 kubelet[2011]: I1002 19:47:42.273954 2011 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:47:42.274082 kubelet[2011]: I1002 19:47:42.273981 2011 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:47:42.274082 kubelet[2011]: I1002 19:47:42.273993 2011 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-xv2t4\" (UniqueName: \"kubernetes.io/projected/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-kube-api-access-xv2t4\") on node \"localhost\" DevicePath \"\"" Oct 2 19:47:42.274082 kubelet[2011]: I1002 19:47:42.274002 2011 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:47:42.274082 kubelet[2011]: I1002 19:47:42.274011 2011 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:47:42.274082 kubelet[2011]: I1002 19:47:42.274019 2011 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:47:42.274082 kubelet[2011]: I1002 19:47:42.274027 2011 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:47:42.633732 kubelet[2011]: I1002 19:47:42.633694 2011 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="6a6cf5d2-d7c5-4da2-92f9-5fc9db040112" path="/var/lib/kubelet/pods/6a6cf5d2-d7c5-4da2-92f9-5fc9db040112/volumes"