Oct 2 19:54:38.741493 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 19:54:38.741513 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 19:54:38.741521 kernel: efi: EFI v2.70 by EDK II Oct 2 19:54:38.741527 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Oct 2 19:54:38.741532 kernel: random: crng init done Oct 2 19:54:38.741537 kernel: ACPI: Early table checksum verification disabled Oct 2 19:54:38.741543 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Oct 2 19:54:38.741550 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Oct 2 19:54:38.741556 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:54:38.741561 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:54:38.741567 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:54:38.741572 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:54:38.741578 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:54:38.741584 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:54:38.741592 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:54:38.741598 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:54:38.741604 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:54:38.741609 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Oct 2 19:54:38.741615 kernel: NUMA: Failed to initialise from firmware Oct 2 19:54:38.741621 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:54:38.741627 kernel: NUMA: NODE_DATA [mem 0xdcb09900-0xdcb0efff] Oct 2 19:54:38.741633 kernel: Zone ranges: Oct 2 19:54:38.741639 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:54:38.741645 kernel: DMA32 empty Oct 2 19:54:38.741651 kernel: Normal empty Oct 2 19:54:38.741657 kernel: Movable zone start for each node Oct 2 19:54:38.741663 kernel: Early memory node ranges Oct 2 19:54:38.741669 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Oct 2 19:54:38.741675 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Oct 2 19:54:38.741681 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Oct 2 19:54:38.741687 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Oct 2 19:54:38.741692 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Oct 2 19:54:38.741698 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Oct 2 19:54:38.741704 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Oct 2 19:54:38.741710 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:54:38.741717 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Oct 2 19:54:38.741722 kernel: psci: probing for conduit method from ACPI. Oct 2 19:54:38.741728 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 19:54:38.741734 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 19:54:38.741740 kernel: psci: Trusted OS migration not required Oct 2 19:54:38.741748 kernel: psci: SMC Calling Convention v1.1 Oct 2 19:54:38.741754 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Oct 2 19:54:38.741762 kernel: ACPI: SRAT not present Oct 2 19:54:38.741769 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 19:54:38.741775 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 19:54:38.741781 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Oct 2 19:54:38.741787 kernel: Detected PIPT I-cache on CPU0 Oct 2 19:54:38.741793 kernel: CPU features: detected: GIC system register CPU interface Oct 2 19:54:38.741800 kernel: CPU features: detected: Hardware dirty bit management Oct 2 19:54:38.741806 kernel: CPU features: detected: Spectre-v4 Oct 2 19:54:38.741812 kernel: CPU features: detected: Spectre-BHB Oct 2 19:54:38.741820 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 19:54:38.741826 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 19:54:38.741832 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 19:54:38.741838 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Oct 2 19:54:38.741845 kernel: Policy zone: DMA Oct 2 19:54:38.741852 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:54:38.741859 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:54:38.741865 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:54:38.741872 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:54:38.741878 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:54:38.741885 kernel: Memory: 2459272K/2572288K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 113016K reserved, 0K cma-reserved) Oct 2 19:54:38.741892 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 19:54:38.741898 kernel: trace event string verifier disabled Oct 2 19:54:38.741905 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 19:54:38.741911 kernel: rcu: RCU event tracing is enabled. Oct 2 19:54:38.741918 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 19:54:38.741924 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 19:54:38.741931 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:54:38.741937 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:54:38.741944 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 19:54:38.741956 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 19:54:38.741964 kernel: GICv3: 256 SPIs implemented Oct 2 19:54:38.741972 kernel: GICv3: 0 Extended SPIs implemented Oct 2 19:54:38.741978 kernel: GICv3: Distributor has no Range Selector support Oct 2 19:54:38.741985 kernel: Root IRQ handler: gic_handle_irq Oct 2 19:54:38.741991 kernel: GICv3: 16 PPIs implemented Oct 2 19:54:38.741997 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Oct 2 19:54:38.742003 kernel: ACPI: SRAT not present Oct 2 19:54:38.742009 kernel: ITS [mem 0x08080000-0x0809ffff] Oct 2 19:54:38.742016 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 19:54:38.742023 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Oct 2 19:54:38.742029 kernel: GICv3: using LPI property table @0x00000000400d0000 Oct 2 19:54:38.742035 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Oct 2 19:54:38.742042 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:54:38.742049 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 19:54:38.742056 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 19:54:38.742063 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 19:54:38.742069 kernel: arm-pv: using stolen time PV Oct 2 19:54:38.742076 kernel: Console: colour dummy device 80x25 Oct 2 19:54:38.742082 kernel: ACPI: Core revision 20210730 Oct 2 19:54:38.742089 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 19:54:38.742095 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:54:38.742101 kernel: LSM: Security Framework initializing Oct 2 19:54:38.742108 kernel: SELinux: Initializing. Oct 2 19:54:38.742115 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:54:38.742122 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:54:38.742128 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:54:38.742135 kernel: Platform MSI: ITS@0x8080000 domain created Oct 2 19:54:38.742141 kernel: PCI/MSI: ITS@0x8080000 domain created Oct 2 19:54:38.742147 kernel: Remapping and enabling EFI services. Oct 2 19:54:38.742154 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:54:38.742169 kernel: Detected PIPT I-cache on CPU1 Oct 2 19:54:38.742176 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Oct 2 19:54:38.742184 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Oct 2 19:54:38.742191 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:54:38.742197 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 19:54:38.742204 kernel: Detected PIPT I-cache on CPU2 Oct 2 19:54:38.742210 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Oct 2 19:54:38.742217 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Oct 2 19:54:38.742223 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:54:38.742229 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Oct 2 19:54:38.742236 kernel: Detected PIPT I-cache on CPU3 Oct 2 19:54:38.742243 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Oct 2 19:54:38.742250 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Oct 2 19:54:38.742257 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:54:38.742263 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Oct 2 19:54:38.742270 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 19:54:38.742281 kernel: SMP: Total of 4 processors activated. Oct 2 19:54:38.742289 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 19:54:38.742296 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 19:54:38.742303 kernel: CPU features: detected: Common not Private translations Oct 2 19:54:38.742309 kernel: CPU features: detected: CRC32 instructions Oct 2 19:54:38.742316 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 19:54:38.742323 kernel: CPU features: detected: LSE atomic instructions Oct 2 19:54:38.742330 kernel: CPU features: detected: Privileged Access Never Oct 2 19:54:38.742338 kernel: CPU features: detected: RAS Extension Support Oct 2 19:54:38.742345 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Oct 2 19:54:38.742352 kernel: CPU: All CPU(s) started at EL1 Oct 2 19:54:38.742358 kernel: alternatives: patching kernel code Oct 2 19:54:38.742367 kernel: devtmpfs: initialized Oct 2 19:54:38.742374 kernel: KASLR enabled Oct 2 19:54:38.742380 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:54:38.742387 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 19:54:38.742394 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:54:38.742400 kernel: SMBIOS 3.0.0 present. Oct 2 19:54:38.742407 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Oct 2 19:54:38.742414 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:54:38.742421 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 19:54:38.742428 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 19:54:38.742436 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 19:54:38.742443 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:54:38.742450 kernel: audit: type=2000 audit(0.035:1): state=initialized audit_enabled=0 res=1 Oct 2 19:54:38.742457 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:54:38.742464 kernel: cpuidle: using governor menu Oct 2 19:54:38.742470 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 19:54:38.742477 kernel: ASID allocator initialised with 32768 entries Oct 2 19:54:38.742484 kernel: ACPI: bus type PCI registered Oct 2 19:54:38.742491 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:54:38.742499 kernel: Serial: AMBA PL011 UART driver Oct 2 19:54:38.742505 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:54:38.742512 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 19:54:38.742519 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:54:38.742526 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 19:54:38.742533 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:54:38.742539 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 19:54:38.742546 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:54:38.742553 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:54:38.742561 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:54:38.742567 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:54:38.742574 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:54:38.742581 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:54:38.742587 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:54:38.742594 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:54:38.742601 kernel: ACPI: Interpreter enabled Oct 2 19:54:38.742608 kernel: ACPI: Using GIC for interrupt routing Oct 2 19:54:38.742614 kernel: ACPI: MCFG table detected, 1 entries Oct 2 19:54:38.742623 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Oct 2 19:54:38.742629 kernel: printk: console [ttyAMA0] enabled Oct 2 19:54:38.742636 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:54:38.742776 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:54:38.742843 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 19:54:38.742903 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 19:54:38.742973 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Oct 2 19:54:38.743244 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Oct 2 19:54:38.743258 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Oct 2 19:54:38.743266 kernel: PCI host bridge to bus 0000:00 Oct 2 19:54:38.743342 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Oct 2 19:54:38.743397 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 19:54:38.743453 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Oct 2 19:54:38.743506 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:54:38.743585 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Oct 2 19:54:38.743664 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:54:38.743734 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Oct 2 19:54:38.743797 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Oct 2 19:54:38.743858 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 19:54:38.743921 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 19:54:38.743993 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Oct 2 19:54:38.744061 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Oct 2 19:54:38.744117 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Oct 2 19:54:38.744187 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 19:54:38.744243 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Oct 2 19:54:38.744253 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 19:54:38.744259 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 19:54:38.744266 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 19:54:38.744275 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 19:54:38.744282 kernel: iommu: Default domain type: Translated Oct 2 19:54:38.744289 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 19:54:38.744296 kernel: vgaarb: loaded Oct 2 19:54:38.744303 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:54:38.744310 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:54:38.744317 kernel: PTP clock support registered Oct 2 19:54:38.744323 kernel: Registered efivars operations Oct 2 19:54:38.744330 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 19:54:38.744337 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:54:38.744345 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:54:38.744352 kernel: pnp: PnP ACPI init Oct 2 19:54:38.744424 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Oct 2 19:54:38.744434 kernel: pnp: PnP ACPI: found 1 devices Oct 2 19:54:38.744441 kernel: NET: Registered PF_INET protocol family Oct 2 19:54:38.744448 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:54:38.744455 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:54:38.744461 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:54:38.744470 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:54:38.744477 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:54:38.744484 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:54:38.744491 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:54:38.744498 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:54:38.744504 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:54:38.744511 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:54:38.744518 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Oct 2 19:54:38.744526 kernel: kvm [1]: HYP mode not available Oct 2 19:54:38.744533 kernel: Initialise system trusted keyrings Oct 2 19:54:38.744539 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:54:38.744546 kernel: Key type asymmetric registered Oct 2 19:54:38.744552 kernel: Asymmetric key parser 'x509' registered Oct 2 19:54:38.744559 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:54:38.744566 kernel: io scheduler mq-deadline registered Oct 2 19:54:38.744573 kernel: io scheduler kyber registered Oct 2 19:54:38.744580 kernel: io scheduler bfq registered Oct 2 19:54:38.744587 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 19:54:38.744595 kernel: ACPI: button: Power Button [PWRB] Oct 2 19:54:38.744602 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 19:54:38.744666 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Oct 2 19:54:38.744676 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:54:38.744683 kernel: thunder_xcv, ver 1.0 Oct 2 19:54:38.744690 kernel: thunder_bgx, ver 1.0 Oct 2 19:54:38.744698 kernel: nicpf, ver 1.0 Oct 2 19:54:38.744704 kernel: nicvf, ver 1.0 Oct 2 19:54:38.744773 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 19:54:38.744836 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T19:54:38 UTC (1696276478) Oct 2 19:54:38.744846 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:54:38.744853 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:54:38.744860 kernel: Segment Routing with IPv6 Oct 2 19:54:38.744867 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:54:38.744874 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:54:38.744880 kernel: Key type dns_resolver registered Oct 2 19:54:38.744887 kernel: registered taskstats version 1 Oct 2 19:54:38.744896 kernel: Loading compiled-in X.509 certificates Oct 2 19:54:38.744903 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 19:54:38.744909 kernel: Key type .fscrypt registered Oct 2 19:54:38.744915 kernel: Key type fscrypt-provisioning registered Oct 2 19:54:38.744922 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:54:38.744930 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:54:38.744936 kernel: ima: No architecture policies found Oct 2 19:54:38.744943 kernel: Freeing unused kernel memory: 34560K Oct 2 19:54:38.744950 kernel: Run /init as init process Oct 2 19:54:38.744966 kernel: with arguments: Oct 2 19:54:38.744973 kernel: /init Oct 2 19:54:38.744980 kernel: with environment: Oct 2 19:54:38.744987 kernel: HOME=/ Oct 2 19:54:38.744994 kernel: TERM=linux Oct 2 19:54:38.745000 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:54:38.745009 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:54:38.745018 systemd[1]: Detected virtualization kvm. Oct 2 19:54:38.745027 systemd[1]: Detected architecture arm64. Oct 2 19:54:38.745034 systemd[1]: Running in initrd. Oct 2 19:54:38.745041 systemd[1]: No hostname configured, using default hostname. Oct 2 19:54:38.745048 systemd[1]: Hostname set to . Oct 2 19:54:38.745055 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:54:38.745062 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:54:38.745069 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:54:38.745077 systemd[1]: Reached target cryptsetup.target. Oct 2 19:54:38.745098 systemd[1]: Reached target paths.target. Oct 2 19:54:38.745105 systemd[1]: Reached target slices.target. Oct 2 19:54:38.745113 systemd[1]: Reached target swap.target. Oct 2 19:54:38.745120 systemd[1]: Reached target timers.target. Oct 2 19:54:38.745127 systemd[1]: Listening on iscsid.socket. Oct 2 19:54:38.745135 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:54:38.745142 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:54:38.745150 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:54:38.745165 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:54:38.745173 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:54:38.745181 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:54:38.745188 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:54:38.745195 systemd[1]: Reached target sockets.target. Oct 2 19:54:38.745203 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:54:38.745210 systemd[1]: Finished network-cleanup.service. Oct 2 19:54:38.745217 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:54:38.745226 systemd[1]: Starting systemd-journald.service... Oct 2 19:54:38.745233 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:54:38.745241 systemd[1]: Starting systemd-resolved.service... Oct 2 19:54:38.745248 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:54:38.745255 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:54:38.745262 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:54:38.745270 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:54:38.745277 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:54:38.745284 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:54:38.745296 systemd-journald[291]: Journal started Oct 2 19:54:38.745338 systemd-journald[291]: Runtime Journal (/run/log/journal/048754a156324e1e8156efc430e502d6) is 6.0M, max 48.7M, 42.6M free. Oct 2 19:54:38.736938 systemd-modules-load[292]: Inserted module 'overlay' Oct 2 19:54:38.749268 systemd[1]: Started systemd-journald.service. Oct 2 19:54:38.749000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:38.749752 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:54:38.752312 kernel: audit: type=1130 audit(1696276478.749:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:38.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:38.754176 kernel: audit: type=1130 audit(1696276478.751:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:38.764182 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:54:38.767683 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:54:38.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:38.769302 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:54:38.773588 kernel: audit: type=1130 audit(1696276478.768:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:38.773607 kernel: Bridge firewalling registered Oct 2 19:54:38.771135 systemd-modules-load[292]: Inserted module 'br_netfilter' Oct 2 19:54:38.776516 systemd-resolved[293]: Positive Trust Anchors: Oct 2 19:54:38.776527 systemd-resolved[293]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:54:38.776555 systemd-resolved[293]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:54:38.782034 systemd-resolved[293]: Defaulting to hostname 'linux'. Oct 2 19:54:38.785309 systemd[1]: Started systemd-resolved.service. Oct 2 19:54:38.786000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:38.786301 systemd[1]: Reached target nss-lookup.target. Oct 2 19:54:38.790691 kernel: audit: type=1130 audit(1696276478.786:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:38.790718 kernel: SCSI subsystem initialized Oct 2 19:54:38.790728 dracut-cmdline[308]: dracut-dracut-053 Oct 2 19:54:38.792721 dracut-cmdline[308]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:54:38.800303 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:54:38.800353 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:54:38.800364 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:54:38.803015 systemd-modules-load[292]: Inserted module 'dm_multipath' Oct 2 19:54:38.803855 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:54:38.807176 kernel: audit: type=1130 audit(1696276478.804:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:38.804000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:38.805433 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:54:38.815618 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:54:38.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:38.819187 kernel: audit: type=1130 audit(1696276478.816:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:38.878186 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:54:38.886177 kernel: iscsi: registered transport (tcp) Oct 2 19:54:38.899175 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:54:38.899197 kernel: QLogic iSCSI HBA Driver Oct 2 19:54:38.947581 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:54:38.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:38.949136 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:54:38.951242 kernel: audit: type=1130 audit(1696276478.948:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.002184 kernel: raid6: neonx8 gen() 13794 MB/s Oct 2 19:54:39.019177 kernel: raid6: neonx8 xor() 10796 MB/s Oct 2 19:54:39.036195 kernel: raid6: neonx4 gen() 13541 MB/s Oct 2 19:54:39.053174 kernel: raid6: neonx4 xor() 11061 MB/s Oct 2 19:54:39.070180 kernel: raid6: neonx2 gen() 13000 MB/s Oct 2 19:54:39.087182 kernel: raid6: neonx2 xor() 10270 MB/s Oct 2 19:54:39.104175 kernel: raid6: neonx1 gen() 10464 MB/s Oct 2 19:54:39.121175 kernel: raid6: neonx1 xor() 8723 MB/s Oct 2 19:54:39.138186 kernel: raid6: int64x8 gen() 6292 MB/s Oct 2 19:54:39.155215 kernel: raid6: int64x8 xor() 3544 MB/s Oct 2 19:54:39.172188 kernel: raid6: int64x4 gen() 7237 MB/s Oct 2 19:54:39.189171 kernel: raid6: int64x4 xor() 3856 MB/s Oct 2 19:54:39.206186 kernel: raid6: int64x2 gen() 6146 MB/s Oct 2 19:54:39.223182 kernel: raid6: int64x2 xor() 3313 MB/s Oct 2 19:54:39.240180 kernel: raid6: int64x1 gen() 5041 MB/s Oct 2 19:54:39.257371 kernel: raid6: int64x1 xor() 2653 MB/s Oct 2 19:54:39.257392 kernel: raid6: using algorithm neonx8 gen() 13794 MB/s Oct 2 19:54:39.257402 kernel: raid6: .... xor() 10796 MB/s, rmw enabled Oct 2 19:54:39.257411 kernel: raid6: using neon recovery algorithm Oct 2 19:54:39.268316 kernel: xor: measuring software checksum speed Oct 2 19:54:39.268348 kernel: 8regs : 17297 MB/sec Oct 2 19:54:39.270843 kernel: 32regs : 20755 MB/sec Oct 2 19:54:39.272175 kernel: arm64_neon : 27835 MB/sec Oct 2 19:54:39.272190 kernel: xor: using function: arm64_neon (27835 MB/sec) Oct 2 19:54:39.325202 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 19:54:39.337149 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:54:39.337000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.339000 audit: BPF prog-id=7 op=LOAD Oct 2 19:54:39.340488 kernel: audit: type=1130 audit(1696276479.337:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.340511 kernel: audit: type=1334 audit(1696276479.339:10): prog-id=7 op=LOAD Oct 2 19:54:39.340000 audit: BPF prog-id=8 op=LOAD Oct 2 19:54:39.340894 systemd[1]: Starting systemd-udevd.service... Oct 2 19:54:39.355083 systemd-udevd[491]: Using default interface naming scheme 'v252'. Oct 2 19:54:39.358409 systemd[1]: Started systemd-udevd.service. Oct 2 19:54:39.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.360489 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:54:39.373414 dracut-pre-trigger[498]: rd.md=0: removing MD RAID activation Oct 2 19:54:39.413066 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:54:39.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.414755 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:54:39.452267 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:54:39.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.488028 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 19:54:39.505188 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:54:39.517177 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (555) Oct 2 19:54:39.521396 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:54:39.526246 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:54:39.527285 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:54:39.534542 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:54:39.538077 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:54:39.539990 systemd[1]: Starting disk-uuid.service... Oct 2 19:54:39.551839 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:54:40.563080 disk-uuid[566]: The operation has completed successfully. Oct 2 19:54:40.564195 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:54:40.587690 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:54:40.588000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.588000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.587797 systemd[1]: Finished disk-uuid.service. Oct 2 19:54:40.589575 systemd[1]: Starting verity-setup.service... Oct 2 19:54:40.605205 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 19:54:40.630502 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:54:40.631815 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:54:40.632837 systemd[1]: Finished verity-setup.service. Oct 2 19:54:40.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.685851 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:54:40.687070 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:54:40.686537 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:54:40.687288 systemd[1]: Starting ignition-setup.service... Oct 2 19:54:40.689229 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:54:40.697323 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:54:40.697364 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:54:40.697374 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:54:40.707647 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:54:40.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.715913 systemd[1]: Finished ignition-setup.service. Oct 2 19:54:40.717559 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:54:40.794371 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:54:40.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.797000 audit: BPF prog-id=9 op=LOAD Oct 2 19:54:40.797835 systemd[1]: Starting systemd-networkd.service... Oct 2 19:54:40.801419 ignition[653]: Ignition 2.14.0 Oct 2 19:54:40.802050 ignition[653]: Stage: fetch-offline Oct 2 19:54:40.802638 ignition[653]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:54:40.803267 ignition[653]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:54:40.804142 ignition[653]: parsed url from cmdline: "" Oct 2 19:54:40.804216 ignition[653]: no config URL provided Oct 2 19:54:40.804738 ignition[653]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:54:40.805480 ignition[653]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:54:40.806149 ignition[653]: op(1): [started] loading QEMU firmware config module Oct 2 19:54:40.806917 ignition[653]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 19:54:40.810341 ignition[653]: op(1): [finished] loading QEMU firmware config module Oct 2 19:54:40.821098 systemd-networkd[743]: lo: Link UP Oct 2 19:54:40.821107 systemd-networkd[743]: lo: Gained carrier Oct 2 19:54:40.821695 systemd-networkd[743]: Enumeration completed Oct 2 19:54:40.821793 systemd[1]: Started systemd-networkd.service. Oct 2 19:54:40.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.822073 systemd-networkd[743]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:54:40.823004 systemd[1]: Reached target network.target. Oct 2 19:54:40.823473 systemd-networkd[743]: eth0: Link UP Oct 2 19:54:40.823477 systemd-networkd[743]: eth0: Gained carrier Oct 2 19:54:40.824588 systemd[1]: Starting iscsiuio.service... Oct 2 19:54:40.833822 systemd[1]: Started iscsiuio.service. Oct 2 19:54:40.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.835412 systemd[1]: Starting iscsid.service... Oct 2 19:54:40.839694 iscsid[750]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:54:40.839694 iscsid[750]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:54:40.839694 iscsid[750]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:54:40.839694 iscsid[750]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:54:40.839694 iscsid[750]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:54:40.839694 iscsid[750]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:54:40.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.842981 systemd[1]: Started iscsid.service. Oct 2 19:54:40.846854 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:54:40.848346 systemd-networkd[743]: eth0: DHCPv4 address 10.0.0.7/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:54:40.858926 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:54:40.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.859794 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:54:40.861181 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:54:40.862639 systemd[1]: Reached target remote-fs.target. Oct 2 19:54:40.864808 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:54:40.872577 ignition[653]: parsing config with SHA512: 2483971f38acb41c694aaa8d5966a48bfd25652bae95b343df68ccb7d215851e0d1f41348f167f877872fc703cece78b7fef5e7cbdd2c41c98746b92844cdbaf Oct 2 19:54:40.873729 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:54:40.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.895925 unknown[653]: fetched base config from "system" Oct 2 19:54:40.895936 unknown[653]: fetched user config from "qemu" Oct 2 19:54:40.896390 ignition[653]: fetch-offline: fetch-offline passed Oct 2 19:54:40.896640 systemd-resolved[293]: Detected conflict on linux IN A 10.0.0.7 Oct 2 19:54:40.896445 ignition[653]: Ignition finished successfully Oct 2 19:54:40.896648 systemd-resolved[293]: Hostname conflict, changing published hostname from 'linux' to 'linux3'. Oct 2 19:54:40.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.898059 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:54:40.898796 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 19:54:40.899532 systemd[1]: Starting ignition-kargs.service... Oct 2 19:54:40.910576 ignition[765]: Ignition 2.14.0 Oct 2 19:54:40.910585 ignition[765]: Stage: kargs Oct 2 19:54:40.910686 ignition[765]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:54:40.910695 ignition[765]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:54:40.911610 ignition[765]: kargs: kargs passed Oct 2 19:54:40.911652 ignition[765]: Ignition finished successfully Oct 2 19:54:40.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.913923 systemd[1]: Finished ignition-kargs.service. Oct 2 19:54:40.915571 systemd[1]: Starting ignition-disks.service... Oct 2 19:54:40.923966 ignition[771]: Ignition 2.14.0 Oct 2 19:54:40.923975 ignition[771]: Stage: disks Oct 2 19:54:40.924073 ignition[771]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:54:40.924082 ignition[771]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:54:40.926118 systemd[1]: Finished ignition-disks.service. Oct 2 19:54:40.927000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.925043 ignition[771]: disks: disks passed Oct 2 19:54:40.927501 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:54:40.925087 ignition[771]: Ignition finished successfully Oct 2 19:54:40.929814 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:54:40.930702 systemd[1]: Reached target local-fs.target. Oct 2 19:54:40.931800 systemd[1]: Reached target sysinit.target. Oct 2 19:54:40.932789 systemd[1]: Reached target basic.target. Oct 2 19:54:40.934595 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:54:40.946769 systemd-fsck[779]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 19:54:40.950115 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:54:40.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.951551 systemd[1]: Mounting sysroot.mount... Oct 2 19:54:40.967951 systemd[1]: Mounted sysroot.mount. Oct 2 19:54:40.968859 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:54:40.968561 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:54:40.970469 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:54:40.971822 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:54:40.971859 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:54:40.971882 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:54:40.973873 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:54:40.981428 initrd-setup-root[789]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:54:40.975138 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:54:40.985350 initrd-setup-root[797]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:54:40.989879 initrd-setup-root[805]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:54:40.994635 initrd-setup-root[813]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:54:41.026236 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:54:41.026000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:41.027657 systemd[1]: Starting ignition-mount.service... Oct 2 19:54:41.028833 systemd[1]: Starting sysroot-boot.service... Oct 2 19:54:41.034088 bash[830]: umount: /sysroot/usr/share/oem: not mounted. Oct 2 19:54:41.043726 ignition[832]: INFO : Ignition 2.14.0 Oct 2 19:54:41.043726 ignition[832]: INFO : Stage: mount Oct 2 19:54:41.044867 ignition[832]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:54:41.044867 ignition[832]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:54:41.044867 ignition[832]: INFO : mount: mount passed Oct 2 19:54:41.047414 ignition[832]: INFO : Ignition finished successfully Oct 2 19:54:41.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:41.047345 systemd[1]: Finished ignition-mount.service. Oct 2 19:54:41.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:41.048393 systemd[1]: Finished sysroot-boot.service. Oct 2 19:54:41.640497 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:54:41.648527 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (840) Oct 2 19:54:41.650171 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:54:41.650186 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:54:41.650195 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:54:41.656093 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:54:41.657567 systemd[1]: Starting ignition-files.service... Oct 2 19:54:41.683438 ignition[860]: INFO : Ignition 2.14.0 Oct 2 19:54:41.683438 ignition[860]: INFO : Stage: files Oct 2 19:54:41.684921 ignition[860]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:54:41.684921 ignition[860]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:54:41.684921 ignition[860]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:54:41.691463 ignition[860]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:54:41.691463 ignition[860]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:54:41.695085 ignition[860]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:54:41.696144 ignition[860]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:54:41.696144 ignition[860]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:54:41.696067 unknown[860]: wrote ssh authorized keys file for user: core Oct 2 19:54:41.700129 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 19:54:41.700129 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-arm64-v1.1.1.tgz: attempt #1 Oct 2 19:54:41.900341 systemd-networkd[743]: eth0: Gained IPv6LL Oct 2 19:54:41.925352 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:54:42.127878 ignition[860]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 6b5df61a53601926e4b5a9174828123d555f592165439f541bc117c68781f41c8bd30dccd52367e406d104df849bcbcfb72d9c4bafda4b045c59ce95d0ca0742 Oct 2 19:54:42.129970 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 19:54:42.129970 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 19:54:42.129970 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-arm64.tar.gz: attempt #1 Oct 2 19:54:42.280491 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:54:42.398179 ignition[860]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: 4c7e4541123cbd6f1d6fec1f827395cd58d65716c0998de790f965485738b6d6257c0dc46fd7f66403166c299f6d5bf9ff30b6e1ff9afbb071f17005e834518c Oct 2 19:54:42.400363 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 19:54:42.400363 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:54:42.400363 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubeadm: attempt #1 Oct 2 19:54:42.464772 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:54:42.761792 ignition[860]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 46c9f489062bdb84574703f7339d140d7e42c9c71b367cd860071108a3c1d38fabda2ef69f9c0ff88f7c80e88d38f96ab2248d4c9a6c9c60b0a4c20fd640d0db Oct 2 19:54:42.761792 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:54:42.764988 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:54:42.764988 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubelet: attempt #1 Oct 2 19:54:42.798389 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:54:43.818767 ignition[860]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 0e4ee1f23bf768c49d09beb13a6b5fad6efc8e3e685e7c5610188763e3af55923fb46158b5e76973a0f9a055f9b30d525b467c53415f965536adc2f04d9cf18d Oct 2 19:54:43.820937 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:54:43.820937 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:54:43.820937 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubectl: attempt #1 Oct 2 19:54:43.859852 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:54:44.167688 ignition[860]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 3672fda0beebbbd636a2088f427463cbad32683ea4fbb1df61650552e63846b6a47db803ccb70c3db0a8f24746a23a5632bdc15a3fb78f4f7d833e7f86763c2a Oct 2 19:54:44.167688 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:54:44.167688 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:54:44.171862 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:54:44.171862 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:54:44.171862 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 19:54:44.333110 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 19:54:44.380773 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:54:44.382220 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:54:44.382220 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:54:44.382220 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:54:44.382220 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:54:44.382220 ignition[860]: INFO : files: op(c): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:54:44.382220 ignition[860]: INFO : files: op(c): op(d): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:54:44.382220 ignition[860]: INFO : files: op(c): op(d): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:54:44.382220 ignition[860]: INFO : files: op(c): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:54:44.382220 ignition[860]: INFO : files: op(e): [started] processing unit "prepare-critools.service" Oct 2 19:54:44.382220 ignition[860]: INFO : files: op(e): op(f): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:54:44.382220 ignition[860]: INFO : files: op(e): op(f): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:54:44.382220 ignition[860]: INFO : files: op(e): [finished] processing unit "prepare-critools.service" Oct 2 19:54:44.382220 ignition[860]: INFO : files: op(10): [started] processing unit "coreos-metadata.service" Oct 2 19:54:44.382220 ignition[860]: INFO : files: op(10): op(11): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:54:44.382220 ignition[860]: INFO : files: op(10): op(11): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:54:44.382220 ignition[860]: INFO : files: op(10): [finished] processing unit "coreos-metadata.service" Oct 2 19:54:44.382220 ignition[860]: INFO : files: op(12): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:54:44.382220 ignition[860]: INFO : files: op(12): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:54:44.407127 ignition[860]: INFO : files: op(13): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:54:44.407127 ignition[860]: INFO : files: op(13): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:54:44.407127 ignition[860]: INFO : files: op(14): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 19:54:44.407127 ignition[860]: INFO : files: op(14): op(15): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:54:44.422053 ignition[860]: INFO : files: op(14): op(15): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:54:44.424153 ignition[860]: INFO : files: op(14): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 19:54:44.424153 ignition[860]: INFO : files: createResultFile: createFiles: op(16): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:54:44.424153 ignition[860]: INFO : files: createResultFile: createFiles: op(16): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:54:44.424153 ignition[860]: INFO : files: files passed Oct 2 19:54:44.424153 ignition[860]: INFO : Ignition finished successfully Oct 2 19:54:44.434885 kernel: kauditd_printk_skb: 22 callbacks suppressed Oct 2 19:54:44.434907 kernel: audit: type=1130 audit(1696276484.426:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.425692 systemd[1]: Finished ignition-files.service. Oct 2 19:54:44.427943 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:54:44.436683 initrd-setup-root-after-ignition[884]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 19:54:44.441802 kernel: audit: type=1130 audit(1696276484.437:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.441825 kernel: audit: type=1131 audit(1696276484.437:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.431648 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:54:44.445428 kernel: audit: type=1130 audit(1696276484.442:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.445523 initrd-setup-root-after-ignition[887]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:54:44.432563 systemd[1]: Starting ignition-quench.service... Oct 2 19:54:44.435814 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:54:44.435901 systemd[1]: Finished ignition-quench.service. Oct 2 19:54:44.440569 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:54:44.442579 systemd[1]: Reached target ignition-complete.target. Oct 2 19:54:44.447068 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:54:44.462400 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:54:44.462497 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:54:44.467739 kernel: audit: type=1130 audit(1696276484.463:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.467761 kernel: audit: type=1131 audit(1696276484.463:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.463000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.463000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.463891 systemd[1]: Reached target initrd-fs.target. Oct 2 19:54:44.468552 systemd[1]: Reached target initrd.target. Oct 2 19:54:44.469726 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:54:44.470541 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:54:44.482354 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:54:44.485189 kernel: audit: type=1130 audit(1696276484.482:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.483721 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:54:44.492652 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:54:44.493337 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:54:44.494378 systemd[1]: Stopped target timers.target. Oct 2 19:54:44.495376 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:54:44.496000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.495484 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:54:44.499467 kernel: audit: type=1131 audit(1696276484.496:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.496447 systemd[1]: Stopped target initrd.target. Oct 2 19:54:44.499079 systemd[1]: Stopped target basic.target. Oct 2 19:54:44.500000 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:54:44.500993 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:54:44.502215 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:54:44.503528 systemd[1]: Stopped target remote-fs.target. Oct 2 19:54:44.504530 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:54:44.505609 systemd[1]: Stopped target sysinit.target. Oct 2 19:54:44.506661 systemd[1]: Stopped target local-fs.target. Oct 2 19:54:44.507643 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:54:44.508612 systemd[1]: Stopped target swap.target. Oct 2 19:54:44.510000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.509581 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:54:44.514016 kernel: audit: type=1131 audit(1696276484.510:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.509701 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:54:44.514000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.510853 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:54:44.518152 kernel: audit: type=1131 audit(1696276484.514:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.517000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.513513 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:54:44.513619 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:54:44.514913 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:54:44.515021 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:54:44.517868 systemd[1]: Stopped target paths.target. Oct 2 19:54:44.518911 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:54:44.521430 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:54:44.522561 systemd[1]: Stopped target slices.target. Oct 2 19:54:44.526000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.523669 systemd[1]: Stopped target sockets.target. Oct 2 19:54:44.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.525016 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:54:44.525122 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:54:44.531809 iscsid[750]: iscsid shutting down. Oct 2 19:54:44.526416 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:54:44.533000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.526508 systemd[1]: Stopped ignition-files.service. Oct 2 19:54:44.528131 systemd[1]: Stopping ignition-mount.service... Oct 2 19:54:44.537204 ignition[900]: INFO : Ignition 2.14.0 Oct 2 19:54:44.537204 ignition[900]: INFO : Stage: umount Oct 2 19:54:44.537204 ignition[900]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:54:44.537204 ignition[900]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:54:44.537000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.538000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.529148 systemd[1]: Stopping iscsid.service... Oct 2 19:54:44.541000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.541819 ignition[900]: INFO : umount: umount passed Oct 2 19:54:44.541819 ignition[900]: INFO : Ignition finished successfully Oct 2 19:54:44.532390 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:54:44.542000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.544000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.532505 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:54:44.545000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.534290 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:54:44.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.536667 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:54:44.536799 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:54:44.537876 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:54:44.537972 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:54:44.551000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.540629 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:54:44.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.552000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.540715 systemd[1]: Stopped iscsid.service. Oct 2 19:54:44.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.541627 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:54:44.541697 systemd[1]: Stopped ignition-mount.service. Oct 2 19:54:44.542742 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:54:44.542806 systemd[1]: Closed iscsid.socket. Oct 2 19:54:44.557000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.543495 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:54:44.543567 systemd[1]: Stopped ignition-disks.service. Oct 2 19:54:44.544758 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:54:44.544795 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:54:44.546138 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:54:44.546191 systemd[1]: Stopped ignition-setup.service. Oct 2 19:54:44.547489 systemd[1]: Stopping iscsiuio.service... Oct 2 19:54:44.550532 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:54:44.550984 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:54:44.551067 systemd[1]: Stopped iscsiuio.service. Oct 2 19:54:44.552083 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:54:44.552168 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:54:44.553250 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:54:44.553322 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:54:44.554735 systemd[1]: Stopped target network.target. Oct 2 19:54:44.555572 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:54:44.555606 systemd[1]: Closed iscsiuio.socket. Oct 2 19:54:44.556637 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:54:44.556679 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:54:44.557880 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:54:44.558810 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:54:44.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.569231 systemd-networkd[743]: eth0: DHCPv6 lease lost Oct 2 19:54:44.574000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.572150 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:54:44.572280 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:54:44.573860 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:54:44.577000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:54:44.577000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:54:44.573957 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:54:44.578000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.574870 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:54:44.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.574897 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:54:44.576535 systemd[1]: Stopping network-cleanup.service... Oct 2 19:54:44.581000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.577472 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:54:44.577524 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:54:44.578939 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:54:44.578977 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:54:44.580709 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:54:44.580749 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:54:44.584079 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:54:44.586728 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:54:44.590000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.589577 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:54:44.589666 systemd[1]: Stopped network-cleanup.service. Oct 2 19:54:44.592704 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:54:44.593000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.592832 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:54:44.593803 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:54:44.593838 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:54:44.597000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.594979 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:54:44.598000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.595009 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:54:44.599000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.595948 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:54:44.595994 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:54:44.597318 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:54:44.602000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.597360 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:54:44.598501 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:54:44.598539 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:54:44.600454 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:54:44.601516 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:54:44.601565 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:54:44.606432 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:54:44.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.606515 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:54:44.607690 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:54:44.609648 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:54:44.616973 systemd[1]: Switching root. Oct 2 19:54:44.638373 systemd-journald[291]: Journal stopped Oct 2 19:54:46.894221 systemd-journald[291]: Received SIGTERM from PID 1 (systemd). Oct 2 19:54:46.894339 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:54:46.894352 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:54:46.894362 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:54:46.894372 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:54:46.894381 kernel: SELinux: policy capability open_perms=1 Oct 2 19:54:46.894394 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:54:46.894404 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:54:46.894413 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:54:46.894422 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:54:46.894432 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:54:46.894441 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:54:46.894451 systemd[1]: Successfully loaded SELinux policy in 32.174ms. Oct 2 19:54:46.894483 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.336ms. Oct 2 19:54:46.894495 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:54:46.894520 systemd[1]: Detected virtualization kvm. Oct 2 19:54:46.894531 systemd[1]: Detected architecture arm64. Oct 2 19:54:46.894542 systemd[1]: Detected first boot. Oct 2 19:54:46.894553 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:54:46.894563 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:54:46.894574 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:54:46.894585 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:54:46.894599 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:54:46.894611 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:54:46.894622 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:54:46.894634 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:54:46.894645 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:54:46.894656 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:54:46.894666 systemd[1]: Created slice system-getty.slice. Oct 2 19:54:46.894677 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:54:46.894687 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:54:46.894698 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:54:46.894709 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:54:46.894720 systemd[1]: Created slice user.slice. Oct 2 19:54:46.894732 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:54:46.894743 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:54:46.894754 systemd[1]: Set up automount boot.automount. Oct 2 19:54:46.894764 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:54:46.894775 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:54:46.894786 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:54:46.894796 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:54:46.894812 systemd[1]: Reached target integritysetup.target. Oct 2 19:54:46.894823 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:54:46.894833 systemd[1]: Reached target remote-fs.target. Oct 2 19:54:46.894844 systemd[1]: Reached target slices.target. Oct 2 19:54:46.894854 systemd[1]: Reached target swap.target. Oct 2 19:54:46.894867 systemd[1]: Reached target torcx.target. Oct 2 19:54:46.894878 systemd[1]: Reached target veritysetup.target. Oct 2 19:54:46.894888 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:54:46.894898 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:54:46.894908 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:54:46.894927 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:54:46.894941 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:54:46.894952 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:54:46.894962 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:54:46.894973 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:54:46.894986 systemd[1]: Mounting media.mount... Oct 2 19:54:46.894997 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:54:46.895007 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:54:46.895017 systemd[1]: Mounting tmp.mount... Oct 2 19:54:46.895028 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:54:46.895039 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:54:46.895049 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:54:46.895060 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:54:46.895070 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:54:46.895082 systemd[1]: Starting modprobe@drm.service... Oct 2 19:54:46.895092 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:54:46.895104 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:54:46.895124 systemd[1]: Starting modprobe@loop.service... Oct 2 19:54:46.895136 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:54:46.895146 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:54:46.895178 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:54:46.895190 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:54:46.895202 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:54:46.895213 systemd[1]: Stopped systemd-journald.service. Oct 2 19:54:46.895223 kernel: fuse: init (API version 7.34) Oct 2 19:54:46.895232 systemd[1]: Starting systemd-journald.service... Oct 2 19:54:46.895244 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:54:46.895254 kernel: loop: module loaded Oct 2 19:54:46.895263 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:54:46.895273 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:54:46.895284 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:54:46.895294 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:54:46.895306 systemd[1]: Stopped verity-setup.service. Oct 2 19:54:46.895316 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:54:46.895327 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:54:46.895337 systemd[1]: Mounted media.mount. Oct 2 19:54:46.895347 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:54:46.895361 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:54:46.895371 systemd[1]: Mounted tmp.mount. Oct 2 19:54:46.895381 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:54:46.895391 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:54:46.895403 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:54:46.895414 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:54:46.895424 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:54:46.895435 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:54:46.895445 systemd[1]: Finished modprobe@drm.service. Oct 2 19:54:46.895457 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:54:46.895468 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:54:46.895478 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:54:46.895491 systemd-journald[1003]: Journal started Oct 2 19:54:46.895545 systemd-journald[1003]: Runtime Journal (/run/log/journal/048754a156324e1e8156efc430e502d6) is 6.0M, max 48.7M, 42.6M free. Oct 2 19:54:44.702000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:54:45.010000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:54:45.010000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:54:45.010000 audit: BPF prog-id=10 op=LOAD Oct 2 19:54:45.010000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:54:45.010000 audit: BPF prog-id=11 op=LOAD Oct 2 19:54:45.010000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:54:46.771000 audit: BPF prog-id=12 op=LOAD Oct 2 19:54:46.771000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:54:46.771000 audit: BPF prog-id=13 op=LOAD Oct 2 19:54:46.771000 audit: BPF prog-id=14 op=LOAD Oct 2 19:54:46.771000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:54:46.771000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:54:46.772000 audit: BPF prog-id=15 op=LOAD Oct 2 19:54:46.772000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:54:46.772000 audit: BPF prog-id=16 op=LOAD Oct 2 19:54:46.772000 audit: BPF prog-id=17 op=LOAD Oct 2 19:54:46.772000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:54:46.772000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:54:46.773000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.775000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.775000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.782000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:54:46.849000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.851000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.852000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.853000 audit: BPF prog-id=18 op=LOAD Oct 2 19:54:46.857000 audit: BPF prog-id=19 op=LOAD Oct 2 19:54:46.858000 audit: BPF prog-id=20 op=LOAD Oct 2 19:54:46.858000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:54:46.859000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:54:46.873000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.887000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.889000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.891000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:54:46.891000 audit[1003]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=fffff87c5110 a2=4000 a3=1 items=0 ppid=1 pid=1003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:46.891000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:54:46.891000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.891000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.893000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.894000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.769808 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:54:45.051333 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:45Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:54:46.769820 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:54:45.052003 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:45Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:54:46.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.773004 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:54:45.052023 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:45Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:54:45.052053 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:45Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:54:45.052062 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:45Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:54:45.052091 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:45Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:54:45.052103 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:45Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:54:45.052320 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:45Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:54:46.897939 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:54:46.897976 systemd[1]: Started systemd-journald.service. Oct 2 19:54:45.052354 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:45Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:54:45.052366 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:45Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:54:45.052860 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:45Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:54:46.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.052894 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:45Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:54:45.052912 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:45Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:54:45.052933 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:45Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:54:45.052954 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:45Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:54:45.052967 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:45Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:54:46.484402 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:46Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:54:46.484656 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:46Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:54:46.898771 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:54:46.484751 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:46Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:54:46.484903 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:46Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:54:46.484963 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:46Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:54:46.485024 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2023-10-02T19:54:46Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:54:46.898929 systemd[1]: Finished modprobe@loop.service. Oct 2 19:54:46.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.899000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.900011 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:54:46.900000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.901036 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:54:46.901000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.902040 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:54:46.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.903075 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:54:46.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.904275 systemd[1]: Reached target network-pre.target. Oct 2 19:54:46.906251 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:54:46.908209 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:54:46.908813 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:54:46.911014 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:54:46.912777 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:54:46.913589 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:54:46.914707 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:54:46.915384 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:54:46.916471 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:54:46.918913 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:54:46.922762 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:54:46.923664 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:54:46.924699 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:54:46.925300 systemd-journald[1003]: Time spent on flushing to /var/log/journal/048754a156324e1e8156efc430e502d6 is 13.119ms for 998 entries. Oct 2 19:54:46.925300 systemd-journald[1003]: System Journal (/var/log/journal/048754a156324e1e8156efc430e502d6) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:54:46.961599 systemd-journald[1003]: Received client request to flush runtime journal. Oct 2 19:54:46.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.936000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.926368 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:54:46.935481 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:54:46.962974 udevadm[1036]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:54:46.937647 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:54:46.941057 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:54:46.962746 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:54:46.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:46.965102 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:54:46.965000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.369076 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:54:47.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.370000 audit: BPF prog-id=21 op=LOAD Oct 2 19:54:47.370000 audit: BPF prog-id=22 op=LOAD Oct 2 19:54:47.370000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:54:47.370000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:54:47.371042 systemd[1]: Starting systemd-udevd.service... Oct 2 19:54:47.389104 systemd-udevd[1038]: Using default interface naming scheme 'v252'. Oct 2 19:54:47.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.405000 audit: BPF prog-id=23 op=LOAD Oct 2 19:54:47.404082 systemd[1]: Started systemd-udevd.service. Oct 2 19:54:47.406325 systemd[1]: Starting systemd-networkd.service... Oct 2 19:54:47.422000 audit: BPF prog-id=24 op=LOAD Oct 2 19:54:47.422000 audit: BPF prog-id=25 op=LOAD Oct 2 19:54:47.422000 audit: BPF prog-id=26 op=LOAD Oct 2 19:54:47.423123 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:54:47.459649 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 19:54:47.478000 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:54:47.487478 systemd[1]: Started systemd-userdbd.service. Oct 2 19:54:47.488000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.517237 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:54:47.517000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.519126 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:54:47.542882 lvm[1070]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:54:47.570076 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:54:47.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.570986 systemd[1]: Reached target cryptsetup.target. Oct 2 19:54:47.572765 systemd[1]: Starting lvm2-activation.service... Oct 2 19:54:47.577928 lvm[1072]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:54:47.591464 systemd-networkd[1046]: lo: Link UP Oct 2 19:54:47.591474 systemd-networkd[1046]: lo: Gained carrier Oct 2 19:54:47.591816 systemd-networkd[1046]: Enumeration completed Oct 2 19:54:47.591938 systemd[1]: Started systemd-networkd.service. Oct 2 19:54:47.591945 systemd-networkd[1046]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:54:47.592000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.593421 systemd-networkd[1046]: eth0: Link UP Oct 2 19:54:47.593430 systemd-networkd[1046]: eth0: Gained carrier Oct 2 19:54:47.607374 systemd[1]: Finished lvm2-activation.service. Oct 2 19:54:47.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.608089 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:54:47.608768 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:54:47.608798 systemd[1]: Reached target local-fs.target. Oct 2 19:54:47.609276 systemd-networkd[1046]: eth0: DHCPv4 address 10.0.0.7/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:54:47.609644 systemd[1]: Reached target machines.target. Oct 2 19:54:47.611491 systemd[1]: Starting ldconfig.service... Oct 2 19:54:47.612375 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:54:47.612446 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:54:47.613540 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:54:47.615567 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:54:47.617490 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:54:47.618222 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:54:47.618272 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:54:47.619330 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:54:47.623686 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1074 (bootctl) Oct 2 19:54:47.625196 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:54:47.633407 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:54:47.634000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.638767 systemd-tmpfiles[1077]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:54:47.642326 systemd-tmpfiles[1077]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:54:47.761449 systemd-tmpfiles[1077]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:54:47.810178 systemd-fsck[1084]: fsck.fat 4.2 (2021-01-31) Oct 2 19:54:47.810178 systemd-fsck[1084]: /dev/vda1: 236 files, 113463/258078 clusters Oct 2 19:54:47.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.812443 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:54:47.814482 systemd[1]: Mounting boot.mount... Oct 2 19:54:47.840017 systemd[1]: Mounted boot.mount. Oct 2 19:54:47.864862 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:54:47.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.867650 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:54:47.876170 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:54:47.919361 ldconfig[1073]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:54:47.923663 systemd[1]: Finished ldconfig.service. Oct 2 19:54:47.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.961941 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:54:47.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.963932 systemd[1]: Starting audit-rules.service... Oct 2 19:54:47.965484 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:54:47.967081 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:54:47.969000 audit: BPF prog-id=27 op=LOAD Oct 2 19:54:47.970088 systemd[1]: Starting systemd-resolved.service... Oct 2 19:54:47.973000 audit: BPF prog-id=28 op=LOAD Oct 2 19:54:47.974088 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:54:47.975903 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:54:47.977084 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:54:47.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.978209 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:54:47.984000 audit[1093]: SYSTEM_BOOT pid=1093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.987094 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:54:47.987000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.988708 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:54:47.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.990735 systemd[1]: Starting systemd-update-done.service... Oct 2 19:54:47.997947 systemd[1]: Finished systemd-update-done.service. Oct 2 19:54:47.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.018000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:54:48.018000 audit[1108]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffffde8f490 a2=420 a3=0 items=0 ppid=1087 pid=1108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:48.018000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:54:48.018858 augenrules[1108]: No rules Oct 2 19:54:48.019904 systemd[1]: Finished audit-rules.service. Oct 2 19:54:48.029271 systemd-resolved[1091]: Positive Trust Anchors: Oct 2 19:54:48.029282 systemd-resolved[1091]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:54:48.029308 systemd-resolved[1091]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:54:48.034125 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:54:48.034913 systemd-timesyncd[1092]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 19:54:48.034982 systemd-timesyncd[1092]: Initial clock synchronization to Mon 2023-10-02 19:54:47.782652 UTC. Oct 2 19:54:48.035089 systemd[1]: Reached target time-set.target. Oct 2 19:54:48.045082 systemd-resolved[1091]: Defaulting to hostname 'linux'. Oct 2 19:54:48.046511 systemd[1]: Started systemd-resolved.service. Oct 2 19:54:48.047211 systemd[1]: Reached target network.target. Oct 2 19:54:48.047755 systemd[1]: Reached target nss-lookup.target. Oct 2 19:54:48.048315 systemd[1]: Reached target sysinit.target. Oct 2 19:54:48.048906 systemd[1]: Started motdgen.path. Oct 2 19:54:48.049454 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:54:48.050344 systemd[1]: Started logrotate.timer. Oct 2 19:54:48.051063 systemd[1]: Started mdadm.timer. Oct 2 19:54:48.051597 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:54:48.053339 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:54:48.053377 systemd[1]: Reached target paths.target. Oct 2 19:54:48.053883 systemd[1]: Reached target timers.target. Oct 2 19:54:48.054774 systemd[1]: Listening on dbus.socket. Oct 2 19:54:48.056441 systemd[1]: Starting docker.socket... Oct 2 19:54:48.059575 systemd[1]: Listening on sshd.socket. Oct 2 19:54:48.060373 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:54:48.060776 systemd[1]: Listening on docker.socket. Oct 2 19:54:48.061509 systemd[1]: Reached target sockets.target. Oct 2 19:54:48.062066 systemd[1]: Reached target basic.target. Oct 2 19:54:48.062653 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:54:48.062681 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:54:48.063587 systemd[1]: Starting containerd.service... Oct 2 19:54:48.065106 systemd[1]: Starting dbus.service... Oct 2 19:54:48.066544 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:54:48.068096 systemd[1]: Starting extend-filesystems.service... Oct 2 19:54:48.068773 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:54:48.069842 systemd[1]: Starting motdgen.service... Oct 2 19:54:48.071450 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:54:48.073339 systemd[1]: Starting prepare-critools.service... Oct 2 19:54:48.076455 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:54:48.078713 systemd[1]: Starting sshd-keygen.service... Oct 2 19:54:48.079467 jq[1118]: false Oct 2 19:54:48.081498 systemd[1]: Starting systemd-logind.service... Oct 2 19:54:48.082566 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:54:48.082659 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:54:48.083178 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:54:48.083907 systemd[1]: Starting update-engine.service... Oct 2 19:54:48.085585 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:54:48.088232 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:54:48.090112 jq[1136]: true Oct 2 19:54:48.088427 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:54:48.090508 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:54:48.091744 extend-filesystems[1119]: Found vda Oct 2 19:54:48.091744 extend-filesystems[1119]: Found vda1 Oct 2 19:54:48.091744 extend-filesystems[1119]: Found vda2 Oct 2 19:54:48.091744 extend-filesystems[1119]: Found vda3 Oct 2 19:54:48.091744 extend-filesystems[1119]: Found usr Oct 2 19:54:48.091744 extend-filesystems[1119]: Found vda4 Oct 2 19:54:48.091744 extend-filesystems[1119]: Found vda6 Oct 2 19:54:48.091744 extend-filesystems[1119]: Found vda7 Oct 2 19:54:48.091744 extend-filesystems[1119]: Found vda9 Oct 2 19:54:48.091744 extend-filesystems[1119]: Checking size of /dev/vda9 Oct 2 19:54:48.106650 tar[1139]: ./ Oct 2 19:54:48.106650 tar[1139]: ./macvlan Oct 2 19:54:48.090697 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:54:48.107088 jq[1142]: true Oct 2 19:54:48.110388 tar[1140]: crictl Oct 2 19:54:48.113603 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:54:48.113769 systemd[1]: Finished motdgen.service. Oct 2 19:54:48.117505 dbus-daemon[1117]: [system] SELinux support is enabled Oct 2 19:54:48.117674 systemd[1]: Started dbus.service. Oct 2 19:54:48.120388 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:54:48.120444 systemd[1]: Reached target system-config.target. Oct 2 19:54:48.121342 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:54:48.121357 systemd[1]: Reached target user-config.target. Oct 2 19:54:48.140487 extend-filesystems[1119]: Old size kept for /dev/vda9 Oct 2 19:54:48.139316 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:54:48.139473 systemd[1]: Finished extend-filesystems.service. Oct 2 19:54:48.164438 bash[1165]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:54:48.163545 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:54:48.182729 tar[1139]: ./static Oct 2 19:54:48.188222 systemd-logind[1130]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 19:54:48.192007 systemd-logind[1130]: New seat seat0. Oct 2 19:54:48.197446 systemd[1]: Started systemd-logind.service. Oct 2 19:54:48.232096 tar[1139]: ./vlan Oct 2 19:54:48.258626 update_engine[1134]: I1002 19:54:48.258364 1134 main.cc:92] Flatcar Update Engine starting Oct 2 19:54:48.261023 systemd[1]: Started update-engine.service. Oct 2 19:54:48.261292 update_engine[1134]: I1002 19:54:48.261056 1134 update_check_scheduler.cc:74] Next update check in 4m35s Oct 2 19:54:48.263459 systemd[1]: Started locksmithd.service. Oct 2 19:54:48.279080 env[1143]: time="2023-10-02T19:54:48.277346280Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:54:48.284478 tar[1139]: ./portmap Oct 2 19:54:48.316688 tar[1139]: ./host-local Oct 2 19:54:48.337094 env[1143]: time="2023-10-02T19:54:48.337039840Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:54:48.337404 env[1143]: time="2023-10-02T19:54:48.337384680Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:54:48.338921 env[1143]: time="2023-10-02T19:54:48.338873120Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:54:48.338921 env[1143]: time="2023-10-02T19:54:48.338911440Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:54:48.339168 env[1143]: time="2023-10-02T19:54:48.339135200Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:54:48.339212 env[1143]: time="2023-10-02T19:54:48.339168520Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:54:48.339212 env[1143]: time="2023-10-02T19:54:48.339184960Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:54:48.339212 env[1143]: time="2023-10-02T19:54:48.339194840Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:54:48.339288 env[1143]: time="2023-10-02T19:54:48.339272640Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:54:48.339636 env[1143]: time="2023-10-02T19:54:48.339621360Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:54:48.339765 env[1143]: time="2023-10-02T19:54:48.339746200Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:54:48.339794 env[1143]: time="2023-10-02T19:54:48.339765200Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:54:48.339836 env[1143]: time="2023-10-02T19:54:48.339819680Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:54:48.339909 env[1143]: time="2023-10-02T19:54:48.339835640Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:54:48.343241 tar[1139]: ./vrf Oct 2 19:54:48.343706 env[1143]: time="2023-10-02T19:54:48.343671440Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:54:48.343739 env[1143]: time="2023-10-02T19:54:48.343708320Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:54:48.343739 env[1143]: time="2023-10-02T19:54:48.343721880Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:54:48.343798 env[1143]: time="2023-10-02T19:54:48.343752040Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:54:48.343798 env[1143]: time="2023-10-02T19:54:48.343767880Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:54:48.343798 env[1143]: time="2023-10-02T19:54:48.343782160Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:54:48.343798 env[1143]: time="2023-10-02T19:54:48.343794800Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:54:48.344404 env[1143]: time="2023-10-02T19:54:48.344372760Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:54:48.344449 env[1143]: time="2023-10-02T19:54:48.344406280Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:54:48.344449 env[1143]: time="2023-10-02T19:54:48.344421080Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:54:48.344449 env[1143]: time="2023-10-02T19:54:48.344435480Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:54:48.344518 env[1143]: time="2023-10-02T19:54:48.344448480Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:54:48.344595 env[1143]: time="2023-10-02T19:54:48.344575920Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:54:48.344678 env[1143]: time="2023-10-02T19:54:48.344663360Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:54:48.344923 env[1143]: time="2023-10-02T19:54:48.344893520Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:54:48.344960 env[1143]: time="2023-10-02T19:54:48.344930840Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:54:48.344960 env[1143]: time="2023-10-02T19:54:48.344946800Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:54:48.345074 env[1143]: time="2023-10-02T19:54:48.345059440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:54:48.345097 env[1143]: time="2023-10-02T19:54:48.345077760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:54:48.345097 env[1143]: time="2023-10-02T19:54:48.345092280Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:54:48.345136 env[1143]: time="2023-10-02T19:54:48.345103400Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:54:48.345136 env[1143]: time="2023-10-02T19:54:48.345114840Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:54:48.345136 env[1143]: time="2023-10-02T19:54:48.345126400Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:54:48.345212 env[1143]: time="2023-10-02T19:54:48.345136920Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:54:48.345212 env[1143]: time="2023-10-02T19:54:48.345148120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:54:48.345212 env[1143]: time="2023-10-02T19:54:48.345176440Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:54:48.345313 env[1143]: time="2023-10-02T19:54:48.345296120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:54:48.345336 env[1143]: time="2023-10-02T19:54:48.345317240Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:54:48.345336 env[1143]: time="2023-10-02T19:54:48.345331600Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:54:48.345372 env[1143]: time="2023-10-02T19:54:48.345344320Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:54:48.345372 env[1143]: time="2023-10-02T19:54:48.345360600Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:54:48.345409 env[1143]: time="2023-10-02T19:54:48.345371000Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:54:48.345409 env[1143]: time="2023-10-02T19:54:48.345387640Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:54:48.345452 env[1143]: time="2023-10-02T19:54:48.345421280Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:54:48.345669 env[1143]: time="2023-10-02T19:54:48.345623800Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:54:48.348228 env[1143]: time="2023-10-02T19:54:48.345680840Z" level=info msg="Connect containerd service" Oct 2 19:54:48.348228 env[1143]: time="2023-10-02T19:54:48.345715200Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:54:48.348228 env[1143]: time="2023-10-02T19:54:48.346557240Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:54:48.348228 env[1143]: time="2023-10-02T19:54:48.346945840Z" level=info msg="Start subscribing containerd event" Oct 2 19:54:48.348228 env[1143]: time="2023-10-02T19:54:48.346996360Z" level=info msg="Start recovering state" Oct 2 19:54:48.348228 env[1143]: time="2023-10-02T19:54:48.346998520Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:54:48.348228 env[1143]: time="2023-10-02T19:54:48.347037160Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:54:48.348228 env[1143]: time="2023-10-02T19:54:48.347055920Z" level=info msg="Start event monitor" Oct 2 19:54:48.348228 env[1143]: time="2023-10-02T19:54:48.347082160Z" level=info msg="containerd successfully booted in 0.074318s" Oct 2 19:54:48.347179 systemd[1]: Started containerd.service. Oct 2 19:54:48.348948 env[1143]: time="2023-10-02T19:54:48.348922120Z" level=info msg="Start snapshots syncer" Oct 2 19:54:48.348996 env[1143]: time="2023-10-02T19:54:48.348954200Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:54:48.348996 env[1143]: time="2023-10-02T19:54:48.348966080Z" level=info msg="Start streaming server" Oct 2 19:54:48.377667 tar[1139]: ./bridge Oct 2 19:54:48.398231 locksmithd[1173]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:54:48.411496 tar[1139]: ./tuning Oct 2 19:54:48.439217 tar[1139]: ./firewall Oct 2 19:54:48.474425 tar[1139]: ./host-device Oct 2 19:54:48.505451 tar[1139]: ./sbr Oct 2 19:54:48.533412 tar[1139]: ./loopback Oct 2 19:54:48.560628 tar[1139]: ./dhcp Oct 2 19:54:48.593154 systemd[1]: Finished prepare-critools.service. Oct 2 19:54:48.631648 tar[1139]: ./ptp Oct 2 19:54:48.659721 tar[1139]: ./ipvlan Oct 2 19:54:48.686756 tar[1139]: ./bandwidth Oct 2 19:54:48.725269 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:54:49.458464 sshd_keygen[1146]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:54:49.477403 systemd[1]: Finished sshd-keygen.service. Oct 2 19:54:49.479444 systemd[1]: Starting issuegen.service... Oct 2 19:54:49.484515 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:54:49.484667 systemd[1]: Finished issuegen.service. Oct 2 19:54:49.486886 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:54:49.493404 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:54:49.495588 systemd[1]: Started getty@tty1.service. Oct 2 19:54:49.497355 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 19:54:49.498123 systemd[1]: Reached target getty.target. Oct 2 19:54:49.498761 systemd[1]: Reached target multi-user.target. Oct 2 19:54:49.500440 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:54:49.507612 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:54:49.507778 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:54:49.508619 systemd[1]: Startup finished in 610ms (kernel) + 6.091s (initrd) + 4.841s (userspace) = 11.543s. Oct 2 19:54:49.644380 systemd-networkd[1046]: eth0: Gained IPv6LL Oct 2 19:54:52.518697 systemd[1]: Created slice system-sshd.slice. Oct 2 19:54:52.519723 systemd[1]: Started sshd@0-10.0.0.7:22-10.0.0.1:46376.service. Oct 2 19:54:52.558736 sshd[1199]: Accepted publickey for core from 10.0.0.1 port 46376 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:54:52.561021 sshd[1199]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:52.573236 systemd-logind[1130]: New session 1 of user core. Oct 2 19:54:52.574084 systemd[1]: Created slice user-500.slice. Oct 2 19:54:52.575076 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:54:52.583572 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:54:52.584948 systemd[1]: Starting user@500.service... Oct 2 19:54:52.588014 (systemd)[1202]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:52.653612 systemd[1202]: Queued start job for default target default.target. Oct 2 19:54:52.654078 systemd[1202]: Reached target paths.target. Oct 2 19:54:52.654098 systemd[1202]: Reached target sockets.target. Oct 2 19:54:52.654117 systemd[1202]: Reached target timers.target. Oct 2 19:54:52.654128 systemd[1202]: Reached target basic.target. Oct 2 19:54:52.654191 systemd[1202]: Reached target default.target. Oct 2 19:54:52.654215 systemd[1202]: Startup finished in 59ms. Oct 2 19:54:52.654255 systemd[1]: Started user@500.service. Oct 2 19:54:52.655164 systemd[1]: Started session-1.scope. Oct 2 19:54:52.704921 systemd[1]: Started sshd@1-10.0.0.7:22-10.0.0.1:46378.service. Oct 2 19:54:52.739019 sshd[1211]: Accepted publickey for core from 10.0.0.1 port 46378 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:54:52.740199 sshd[1211]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:52.743692 systemd-logind[1130]: New session 2 of user core. Oct 2 19:54:52.744521 systemd[1]: Started session-2.scope. Oct 2 19:54:52.798435 sshd[1211]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:52.802271 systemd[1]: Started sshd@2-10.0.0.7:22-10.0.0.1:46388.service. Oct 2 19:54:52.802698 systemd[1]: sshd@1-10.0.0.7:22-10.0.0.1:46378.service: Deactivated successfully. Oct 2 19:54:52.803401 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:54:52.803849 systemd-logind[1130]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:54:52.804557 systemd-logind[1130]: Removed session 2. Oct 2 19:54:52.836843 sshd[1216]: Accepted publickey for core from 10.0.0.1 port 46388 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:54:52.837940 sshd[1216]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:52.841174 systemd-logind[1130]: New session 3 of user core. Oct 2 19:54:52.841917 systemd[1]: Started session-3.scope. Oct 2 19:54:52.890239 sshd[1216]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:52.892922 systemd[1]: sshd@2-10.0.0.7:22-10.0.0.1:46388.service: Deactivated successfully. Oct 2 19:54:52.893463 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:54:52.893899 systemd-logind[1130]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:54:52.894853 systemd[1]: Started sshd@3-10.0.0.7:22-10.0.0.1:46404.service. Oct 2 19:54:52.895533 systemd-logind[1130]: Removed session 3. Oct 2 19:54:52.928312 sshd[1223]: Accepted publickey for core from 10.0.0.1 port 46404 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:54:52.929416 sshd[1223]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:52.932323 systemd-logind[1130]: New session 4 of user core. Oct 2 19:54:52.933124 systemd[1]: Started session-4.scope. Oct 2 19:54:52.986599 sshd[1223]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:52.989629 systemd[1]: sshd@3-10.0.0.7:22-10.0.0.1:46404.service: Deactivated successfully. Oct 2 19:54:52.990242 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:54:52.990991 systemd-logind[1130]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:54:52.992087 systemd[1]: Started sshd@4-10.0.0.7:22-10.0.0.1:46418.service. Oct 2 19:54:52.992762 systemd-logind[1130]: Removed session 4. Oct 2 19:54:53.026486 sshd[1229]: Accepted publickey for core from 10.0.0.1 port 46418 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:54:53.027688 sshd[1229]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:53.031901 systemd[1]: Started session-5.scope. Oct 2 19:54:53.032439 systemd-logind[1130]: New session 5 of user core. Oct 2 19:54:53.091038 sudo[1232]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:54:53.091257 sudo[1232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:54:53.109374 dbus-daemon[1117]: avc: received setenforce notice (enforcing=1) Oct 2 19:54:53.111127 sudo[1232]: pam_unix(sudo:session): session closed for user root Oct 2 19:54:53.113099 sshd[1229]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:53.117451 systemd[1]: sshd@4-10.0.0.7:22-10.0.0.1:46418.service: Deactivated successfully. Oct 2 19:54:53.118931 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:54:53.119848 systemd-logind[1130]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:54:53.121695 systemd[1]: Started sshd@5-10.0.0.7:22-10.0.0.1:33598.service. Oct 2 19:54:53.122925 systemd-logind[1130]: Removed session 5. Oct 2 19:54:53.155533 sshd[1236]: Accepted publickey for core from 10.0.0.1 port 33598 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:54:53.156717 sshd[1236]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:53.159722 systemd-logind[1130]: New session 6 of user core. Oct 2 19:54:53.160757 systemd[1]: Started session-6.scope. Oct 2 19:54:53.211873 sudo[1241]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:54:53.212064 sudo[1241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:54:53.214623 sudo[1241]: pam_unix(sudo:session): session closed for user root Oct 2 19:54:53.219080 sudo[1240]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:54:53.219507 sudo[1240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:54:53.228061 systemd[1]: Stopping audit-rules.service... Oct 2 19:54:53.228000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:54:53.229519 auditctl[1244]: No rules Oct 2 19:54:53.229775 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:54:53.229921 systemd[1]: Stopped audit-rules.service. Oct 2 19:54:53.231028 kernel: kauditd_printk_skb: 121 callbacks suppressed Oct 2 19:54:53.231087 kernel: audit: type=1305 audit(1696276493.228:160): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:54:53.231106 kernel: audit: type=1300 audit(1696276493.228:160): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffcd63a130 a2=420 a3=0 items=0 ppid=1 pid=1244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:53.228000 audit[1244]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffcd63a130 a2=420 a3=0 items=0 ppid=1 pid=1244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:53.231265 systemd[1]: Starting audit-rules.service... Oct 2 19:54:53.228000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:54:53.228000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:53.235996 kernel: audit: type=1327 audit(1696276493.228:160): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:54:53.236052 kernel: audit: type=1131 audit(1696276493.228:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:53.248460 augenrules[1261]: No rules Oct 2 19:54:53.249318 systemd[1]: Finished audit-rules.service. Oct 2 19:54:53.249000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:53.250186 sudo[1240]: pam_unix(sudo:session): session closed for user root Oct 2 19:54:53.250000 audit[1240]: USER_END pid=1240 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:53.252102 sshd[1236]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:53.257593 kernel: audit: type=1130 audit(1696276493.249:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:53.258775 kernel: audit: type=1106 audit(1696276493.250:163): pid=1240 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:53.258830 kernel: audit: type=1104 audit(1696276493.250:164): pid=1240 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:53.258847 kernel: audit: type=1130 audit(1696276493.253:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.7:22-10.0.0.1:33614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:53.258862 kernel: audit: type=1106 audit(1696276493.254:166): pid=1236 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:54:53.250000 audit[1240]: CRED_DISP pid=1240 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:53.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.7:22-10.0.0.1:33614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:53.254000 audit[1236]: USER_END pid=1236 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:54:53.254938 systemd[1]: Started sshd@6-10.0.0.7:22-10.0.0.1:33614.service. Oct 2 19:54:53.256633 systemd[1]: sshd@5-10.0.0.7:22-10.0.0.1:33598.service: Deactivated successfully. Oct 2 19:54:53.257285 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:54:53.257755 systemd-logind[1130]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:54:53.259068 systemd-logind[1130]: Removed session 6. Oct 2 19:54:53.254000 audit[1236]: CRED_DISP pid=1236 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:54:53.261458 kernel: audit: type=1104 audit(1696276493.254:167): pid=1236 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:54:53.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.7:22-10.0.0.1:33598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:53.287000 audit[1266]: USER_ACCT pid=1266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:54:53.288992 sshd[1266]: Accepted publickey for core from 10.0.0.1 port 33614 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:54:53.288000 audit[1266]: CRED_ACQ pid=1266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:54:53.288000 audit[1266]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc61b55c0 a2=3 a3=1 items=0 ppid=1 pid=1266 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:53.288000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:54:53.289906 sshd[1266]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:53.296584 systemd-logind[1130]: New session 7 of user core. Oct 2 19:54:53.297516 systemd[1]: Started session-7.scope. Oct 2 19:54:53.301000 audit[1266]: USER_START pid=1266 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:54:53.302000 audit[1269]: CRED_ACQ pid=1269 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:54:53.350390 sudo[1270]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:54:53.350000 audit[1270]: USER_ACCT pid=1270 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:53.350000 audit[1270]: CRED_REFR pid=1270 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:53.350582 sudo[1270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:54:53.352000 audit[1270]: USER_START pid=1270 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:54.030520 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:54:54.036682 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:54:54.036971 systemd[1]: Reached target network-online.target. Oct 2 19:54:54.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:54.038207 systemd[1]: Starting docker.service... Oct 2 19:54:54.131962 env[1288]: time="2023-10-02T19:54:54.131904998Z" level=info msg="Starting up" Oct 2 19:54:54.133522 env[1288]: time="2023-10-02T19:54:54.133498295Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:54:54.133522 env[1288]: time="2023-10-02T19:54:54.133519309Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:54:54.133635 env[1288]: time="2023-10-02T19:54:54.133608641Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:54:54.133635 env[1288]: time="2023-10-02T19:54:54.133632726Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:54:54.135630 env[1288]: time="2023-10-02T19:54:54.135605034Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:54:54.135710 env[1288]: time="2023-10-02T19:54:54.135696491Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:54:54.135766 env[1288]: time="2023-10-02T19:54:54.135751979Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:54:54.135827 env[1288]: time="2023-10-02T19:54:54.135814708Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:54:54.174585 env[1288]: time="2023-10-02T19:54:54.174551018Z" level=info msg="Loading containers: start." Oct 2 19:54:54.217000 audit[1323]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.217000 audit[1323]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffde29ef60 a2=0 a3=1 items=0 ppid=1288 pid=1323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.217000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:54:54.219000 audit[1325]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.219000 audit[1325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffebc9a480 a2=0 a3=1 items=0 ppid=1288 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.219000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:54:54.222000 audit[1327]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.222000 audit[1327]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff24266d0 a2=0 a3=1 items=0 ppid=1288 pid=1327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.222000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:54:54.224000 audit[1329]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1329 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.224000 audit[1329]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd8915480 a2=0 a3=1 items=0 ppid=1288 pid=1329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.224000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:54:54.234000 audit[1331]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1331 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.234000 audit[1331]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc13c0f20 a2=0 a3=1 items=0 ppid=1288 pid=1331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.234000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:54:54.259000 audit[1336]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.259000 audit[1336]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd24657d0 a2=0 a3=1 items=0 ppid=1288 pid=1336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.259000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:54:54.267000 audit[1338]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1338 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.267000 audit[1338]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc4a9e4b0 a2=0 a3=1 items=0 ppid=1288 pid=1338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.267000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:54:54.268000 audit[1340]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1340 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.268000 audit[1340]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=fffff55f3660 a2=0 a3=1 items=0 ppid=1288 pid=1340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.268000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:54:54.270000 audit[1342]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1342 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.270000 audit[1342]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffff5a903a0 a2=0 a3=1 items=0 ppid=1288 pid=1342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.270000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:54.277000 audit[1346]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1346 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.277000 audit[1346]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe7ba82b0 a2=0 a3=1 items=0 ppid=1288 pid=1346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.277000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:54.283000 audit[1347]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1347 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.283000 audit[1347]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffffa0b3510 a2=0 a3=1 items=0 ppid=1288 pid=1347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.283000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:54.291180 kernel: Initializing XFRM netlink socket Oct 2 19:54:54.312802 env[1288]: time="2023-10-02T19:54:54.312772053Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:54:54.334000 audit[1355]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1355 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.334000 audit[1355]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffff68ded70 a2=0 a3=1 items=0 ppid=1288 pid=1355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.334000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:54:54.355000 audit[1358]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1358 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.355000 audit[1358]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffd948dbc0 a2=0 a3=1 items=0 ppid=1288 pid=1358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.355000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:54:54.360000 audit[1361]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1361 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.360000 audit[1361]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff519ba80 a2=0 a3=1 items=0 ppid=1288 pid=1361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.360000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:54:54.361000 audit[1363]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1363 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.361000 audit[1363]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffffe8eb6b0 a2=0 a3=1 items=0 ppid=1288 pid=1363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.361000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:54:54.363000 audit[1365]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1365 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.363000 audit[1365]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=fffff877c010 a2=0 a3=1 items=0 ppid=1288 pid=1365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.363000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:54:54.365000 audit[1367]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1367 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.365000 audit[1367]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffe5ab96f0 a2=0 a3=1 items=0 ppid=1288 pid=1367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.365000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:54:54.367000 audit[1369]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1369 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.367000 audit[1369]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffdeb3a220 a2=0 a3=1 items=0 ppid=1288 pid=1369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.367000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:54:54.374000 audit[1372]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1372 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.374000 audit[1372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffe57e1dc0 a2=0 a3=1 items=0 ppid=1288 pid=1372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.374000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:54:54.376000 audit[1374]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1374 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.376000 audit[1374]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=fffffc7c5960 a2=0 a3=1 items=0 ppid=1288 pid=1374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.376000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:54:54.378000 audit[1376]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1376 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.378000 audit[1376]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=fffffd39b090 a2=0 a3=1 items=0 ppid=1288 pid=1376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.378000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:54:54.380000 audit[1378]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1378 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.380000 audit[1378]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe3a5ac90 a2=0 a3=1 items=0 ppid=1288 pid=1378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.380000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:54:54.382356 systemd-networkd[1046]: docker0: Link UP Oct 2 19:54:54.389000 audit[1382]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1382 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.389000 audit[1382]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcf4ff710 a2=0 a3=1 items=0 ppid=1288 pid=1382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.389000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:54.390000 audit[1383]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1383 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:54.390000 audit[1383]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffdd6dab30 a2=0 a3=1 items=0 ppid=1288 pid=1383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.390000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:54.392247 env[1288]: time="2023-10-02T19:54:54.392214777Z" level=info msg="Loading containers: done." Oct 2 19:54:54.420753 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1418655542-merged.mount: Deactivated successfully. Oct 2 19:54:54.425652 env[1288]: time="2023-10-02T19:54:54.425612340Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:54:54.425830 env[1288]: time="2023-10-02T19:54:54.425799308Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:54:54.425937 env[1288]: time="2023-10-02T19:54:54.425914967Z" level=info msg="Daemon has completed initialization" Oct 2 19:54:54.443830 systemd[1]: Started docker.service. Oct 2 19:54:54.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:54.449916 env[1288]: time="2023-10-02T19:54:54.449806153Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:54:54.468439 systemd[1]: Reloading. Oct 2 19:54:54.519719 /usr/lib/systemd/system-generators/torcx-generator[1431]: time="2023-10-02T19:54:54Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:54:54.520020 /usr/lib/systemd/system-generators/torcx-generator[1431]: time="2023-10-02T19:54:54Z" level=info msg="torcx already run" Oct 2 19:54:54.583207 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:54:54.583231 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:54:54.600635 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:54:54.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.670000 audit: BPF prog-id=34 op=LOAD Oct 2 19:54:54.670000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit: BPF prog-id=35 op=LOAD Oct 2 19:54:54.671000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit: BPF prog-id=36 op=LOAD Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit: BPF prog-id=37 op=LOAD Oct 2 19:54:54.671000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:54:54.671000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.671000 audit: BPF prog-id=38 op=LOAD Oct 2 19:54:54.671000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit: BPF prog-id=39 op=LOAD Oct 2 19:54:54.672000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit: BPF prog-id=40 op=LOAD Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.672000 audit: BPF prog-id=41 op=LOAD Oct 2 19:54:54.672000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:54:54.672000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit: BPF prog-id=42 op=LOAD Oct 2 19:54:54.673000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit: BPF prog-id=43 op=LOAD Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.673000 audit: BPF prog-id=44 op=LOAD Oct 2 19:54:54.673000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:54:54.673000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:54:54.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.674000 audit: BPF prog-id=45 op=LOAD Oct 2 19:54:54.674000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit: BPF prog-id=46 op=LOAD Oct 2 19:54:54.675000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit: BPF prog-id=47 op=LOAD Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:54.675000 audit: BPF prog-id=48 op=LOAD Oct 2 19:54:54.675000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:54:54.675000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:54:54.682919 systemd[1]: Started kubelet.service. Oct 2 19:54:54.681000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:54.844640 kubelet[1468]: E1002 19:54:54.844528 1468 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:54:54.848169 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:54:54.848294 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:54:54.847000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:54:55.055609 env[1143]: time="2023-10-02T19:54:55.055562224Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 19:54:55.573429 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3536655808.mount: Deactivated successfully. Oct 2 19:54:58.153283 env[1143]: time="2023-10-02T19:54:58.153236153Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:58.156908 env[1143]: time="2023-10-02T19:54:58.156874739Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:58.158982 env[1143]: time="2023-10-02T19:54:58.158948537Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:58.161181 env[1143]: time="2023-10-02T19:54:58.161140643Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:58.161808 env[1143]: time="2023-10-02T19:54:58.161766891Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99\"" Oct 2 19:54:58.174491 env[1143]: time="2023-10-02T19:54:58.174443919Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 19:55:00.073982 env[1143]: time="2023-10-02T19:55:00.073917620Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:00.075261 env[1143]: time="2023-10-02T19:55:00.075228558Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:00.078267 env[1143]: time="2023-10-02T19:55:00.078235421Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:00.079937 env[1143]: time="2023-10-02T19:55:00.079893661Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:00.080902 env[1143]: time="2023-10-02T19:55:00.080865478Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013\"" Oct 2 19:55:00.092927 env[1143]: time="2023-10-02T19:55:00.092876409Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 19:55:01.460830 env[1143]: time="2023-10-02T19:55:01.460787669Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:01.462618 env[1143]: time="2023-10-02T19:55:01.462591106Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:01.464578 env[1143]: time="2023-10-02T19:55:01.464555355Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:01.466040 env[1143]: time="2023-10-02T19:55:01.466017731Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:01.467007 env[1143]: time="2023-10-02T19:55:01.466976803Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803\"" Oct 2 19:55:01.477425 env[1143]: time="2023-10-02T19:55:01.477388676Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 19:55:02.583408 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3968327034.mount: Deactivated successfully. Oct 2 19:55:03.046941 env[1143]: time="2023-10-02T19:55:03.046830228Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:03.048419 env[1143]: time="2023-10-02T19:55:03.048377072Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:03.051607 env[1143]: time="2023-10-02T19:55:03.051572464Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:03.052365 env[1143]: time="2023-10-02T19:55:03.052335497Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343\"" Oct 2 19:55:03.053896 env[1143]: time="2023-10-02T19:55:03.053862916Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:03.062350 env[1143]: time="2023-10-02T19:55:03.062319050Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:55:03.611082 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1795181847.mount: Deactivated successfully. Oct 2 19:55:03.615347 env[1143]: time="2023-10-02T19:55:03.615296641Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:03.617145 env[1143]: time="2023-10-02T19:55:03.617111018Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:03.619123 env[1143]: time="2023-10-02T19:55:03.619089912Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:03.620071 env[1143]: time="2023-10-02T19:55:03.620041424Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:03.620828 env[1143]: time="2023-10-02T19:55:03.620780653Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 19:55:03.631165 env[1143]: time="2023-10-02T19:55:03.631112584Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 19:55:04.355982 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount345498538.mount: Deactivated successfully. Oct 2 19:55:05.099011 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:55:05.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:05.099220 systemd[1]: Stopped kubelet.service. Oct 2 19:55:05.101371 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 19:55:05.101408 kernel: audit: type=1130 audit(1696276505.098:377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:05.101429 kernel: audit: type=1131 audit(1696276505.098:378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:05.098000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:05.100666 systemd[1]: Started kubelet.service. Oct 2 19:55:05.103103 kernel: audit: type=1130 audit(1696276505.099:379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:05.099000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:05.149152 kubelet[1523]: E1002 19:55:05.149095 1523 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:55:05.151000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:55:05.152544 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:55:05.152667 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:55:05.155178 kernel: audit: type=1131 audit(1696276505.151:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:55:06.669455 env[1143]: time="2023-10-02T19:55:06.669402557Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:06.670800 env[1143]: time="2023-10-02T19:55:06.670766580Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:06.672612 env[1143]: time="2023-10-02T19:55:06.672578939Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:06.674435 env[1143]: time="2023-10-02T19:55:06.674401106Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:06.675277 env[1143]: time="2023-10-02T19:55:06.675248976Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\"" Oct 2 19:55:06.685938 env[1143]: time="2023-10-02T19:55:06.685903885Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:55:07.212788 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2325637434.mount: Deactivated successfully. Oct 2 19:55:07.722686 env[1143]: time="2023-10-02T19:55:07.722643242Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:07.724095 env[1143]: time="2023-10-02T19:55:07.724062985Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:07.725785 env[1143]: time="2023-10-02T19:55:07.725761811Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:07.730111 env[1143]: time="2023-10-02T19:55:07.730068584Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:07.730837 env[1143]: time="2023-10-02T19:55:07.730802886Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 19:55:13.174573 systemd[1]: Stopped kubelet.service. Oct 2 19:55:13.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:13.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:13.178598 kernel: audit: type=1130 audit(1696276513.173:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:13.178660 kernel: audit: type=1131 audit(1696276513.173:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:13.195263 systemd[1]: Reloading. Oct 2 19:55:13.258896 /usr/lib/systemd/system-generators/torcx-generator[1625]: time="2023-10-02T19:55:13Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:55:13.259340 /usr/lib/systemd/system-generators/torcx-generator[1625]: time="2023-10-02T19:55:13Z" level=info msg="torcx already run" Oct 2 19:55:13.328965 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:55:13.329172 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:55:13.346826 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:55:13.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.410912 kernel: audit: type=1400 audit(1696276513.407:383): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.410966 kernel: audit: type=1400 audit(1696276513.407:384): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.410998 kernel: audit: type=1400 audit(1696276513.407:385): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.412342 kernel: audit: type=1400 audit(1696276513.407:386): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.413970 kernel: audit: type=1400 audit(1696276513.407:387): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.417215 kernel: audit: type=1400 audit(1696276513.407:388): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.417272 kernel: audit: type=1400 audit(1696276513.407:389): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.418859 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:55:13.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.409000 audit: BPF prog-id=49 op=LOAD Oct 2 19:55:13.409000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:55:13.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.410000 audit: BPF prog-id=50 op=LOAD Oct 2 19:55:13.410000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:55:13.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.412000 audit: BPF prog-id=51 op=LOAD Oct 2 19:55:13.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.413000 audit: BPF prog-id=52 op=LOAD Oct 2 19:55:13.413000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:55:13.413000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:55:13.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.415000 audit: BPF prog-id=53 op=LOAD Oct 2 19:55:13.415000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:55:13.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.417000 audit: BPF prog-id=54 op=LOAD Oct 2 19:55:13.417000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:55:13.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit: BPF prog-id=55 op=LOAD Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit: BPF prog-id=56 op=LOAD Oct 2 19:55:13.419000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:55:13.419000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit: BPF prog-id=57 op=LOAD Oct 2 19:55:13.419000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit: BPF prog-id=58 op=LOAD Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.419000 audit: BPF prog-id=59 op=LOAD Oct 2 19:55:13.420000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:55:13.420000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:55:13.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.420000 audit: BPF prog-id=60 op=LOAD Oct 2 19:55:13.420000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:55:13.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit: BPF prog-id=61 op=LOAD Oct 2 19:55:13.423000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit: BPF prog-id=62 op=LOAD Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:13.423000 audit: BPF prog-id=63 op=LOAD Oct 2 19:55:13.423000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:55:13.423000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:55:13.438226 systemd[1]: Started kubelet.service. Oct 2 19:55:13.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:13.488328 kubelet[1662]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:55:13.488642 kubelet[1662]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:55:13.488933 kubelet[1662]: I1002 19:55:13.488892 1662 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:55:13.490276 kubelet[1662]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:55:13.490364 kubelet[1662]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:55:15.314444 kubelet[1662]: I1002 19:55:15.314400 1662 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:55:15.314444 kubelet[1662]: I1002 19:55:15.314429 1662 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:55:15.314816 kubelet[1662]: I1002 19:55:15.314662 1662 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:55:15.319258 kubelet[1662]: I1002 19:55:15.319232 1662 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:55:15.319322 kubelet[1662]: E1002 19:55:15.319306 1662 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.7:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:15.321079 kubelet[1662]: W1002 19:55:15.321057 1662 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:55:15.321817 kubelet[1662]: I1002 19:55:15.321795 1662 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:55:15.322160 kubelet[1662]: I1002 19:55:15.322135 1662 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:55:15.322236 kubelet[1662]: I1002 19:55:15.322214 1662 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:55:15.322321 kubelet[1662]: I1002 19:55:15.322300 1662 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:55:15.322321 kubelet[1662]: I1002 19:55:15.322311 1662 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:55:15.322486 kubelet[1662]: I1002 19:55:15.322461 1662 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:55:15.327871 kubelet[1662]: I1002 19:55:15.327811 1662 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:55:15.327871 kubelet[1662]: I1002 19:55:15.327868 1662 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:55:15.328004 kubelet[1662]: I1002 19:55:15.327963 1662 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:55:15.328004 kubelet[1662]: I1002 19:55:15.327974 1662 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:55:15.328938 kubelet[1662]: I1002 19:55:15.328875 1662 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:55:15.329863 kubelet[1662]: W1002 19:55:15.329841 1662 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:55:15.330068 kubelet[1662]: W1002 19:55:15.330024 1662 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.7:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:15.330068 kubelet[1662]: E1002 19:55:15.330070 1662 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.7:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:15.330136 kubelet[1662]: W1002 19:55:15.330118 1662 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.7:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:15.330174 kubelet[1662]: E1002 19:55:15.330139 1662 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.7:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:15.330366 kubelet[1662]: I1002 19:55:15.330341 1662 server.go:1186] "Started kubelet" Oct 2 19:55:15.330801 kubelet[1662]: I1002 19:55:15.330779 1662 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:55:15.331311 kubelet[1662]: E1002 19:55:15.331217 1662 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6280e119eb9b", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 330321307, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 330321307, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.7:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.7:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:55:15.331837 kubelet[1662]: I1002 19:55:15.331812 1662 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:55:15.332032 kubelet[1662]: E1002 19:55:15.332016 1662 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:55:15.332079 kubelet[1662]: E1002 19:55:15.332038 1662 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:55:15.331000 audit[1662]: AVC avc: denied { mac_admin } for pid=1662 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:15.331000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:55:15.331000 audit[1662]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400099f4d0 a1=40011647b0 a2=400099f4a0 a3=25 items=0 ppid=1 pid=1662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.331000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:55:15.331000 audit[1662]: AVC avc: denied { mac_admin } for pid=1662 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:15.331000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:55:15.331000 audit[1662]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40000b3520 a1=40011647c8 a2=400099f560 a3=25 items=0 ppid=1 pid=1662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.331000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:55:15.333443 kubelet[1662]: I1002 19:55:15.333080 1662 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:55:15.333443 kubelet[1662]: I1002 19:55:15.333113 1662 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:55:15.333443 kubelet[1662]: I1002 19:55:15.333177 1662 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:55:15.333672 kubelet[1662]: E1002 19:55:15.333657 1662 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:55:15.333834 kubelet[1662]: I1002 19:55:15.333822 1662 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:55:15.333952 kubelet[1662]: I1002 19:55:15.333939 1662 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:55:15.334509 kubelet[1662]: W1002 19:55:15.334469 1662 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.7:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:15.334609 kubelet[1662]: E1002 19:55:15.334594 1662 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.7:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:15.334988 kubelet[1662]: E1002 19:55:15.334961 1662 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://10.0.0.7:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:15.335000 audit[1674]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1674 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:15.335000 audit[1674]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcdeb7260 a2=0 a3=1 items=0 ppid=1662 pid=1674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.335000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:55:15.336000 audit[1675]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1675 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:15.336000 audit[1675]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc9957b90 a2=0 a3=1 items=0 ppid=1662 pid=1675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.336000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:55:15.338000 audit[1677]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1677 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:15.338000 audit[1677]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc711e200 a2=0 a3=1 items=0 ppid=1662 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.338000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:55:15.340000 audit[1679]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1679 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:15.340000 audit[1679]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff8448d50 a2=0 a3=1 items=0 ppid=1662 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.340000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:55:15.349000 audit[1684]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1684 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:15.349000 audit[1684]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffed82c690 a2=0 a3=1 items=0 ppid=1662 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.349000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:55:15.350000 audit[1687]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=1687 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:15.350000 audit[1687]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffa0127f0 a2=0 a3=1 items=0 ppid=1662 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.350000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:55:15.356898 kubelet[1662]: I1002 19:55:15.356869 1662 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:55:15.357337 kubelet[1662]: I1002 19:55:15.357321 1662 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:55:15.357397 kubelet[1662]: I1002 19:55:15.357347 1662 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:55:15.358000 audit[1692]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=1692 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:15.358000 audit[1692]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe9c36460 a2=0 a3=1 items=0 ppid=1662 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.358000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:55:15.360550 kubelet[1662]: I1002 19:55:15.360529 1662 policy_none.go:49] "None policy: Start" Oct 2 19:55:15.361110 kubelet[1662]: I1002 19:55:15.361089 1662 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:55:15.361110 kubelet[1662]: I1002 19:55:15.361114 1662 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:55:15.366316 systemd[1]: Created slice kubepods.slice. Oct 2 19:55:15.366000 audit[1695]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=1695 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:15.366000 audit[1695]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=fffff43203c0 a2=0 a3=1 items=0 ppid=1662 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.366000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:55:15.367000 audit[1696]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1696 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:15.367000 audit[1696]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe30954b0 a2=0 a3=1 items=0 ppid=1662 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.367000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:55:15.368000 audit[1697]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1697 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:15.368000 audit[1697]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffff58ffd0 a2=0 a3=1 items=0 ppid=1662 pid=1697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.368000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:55:15.370081 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:55:15.371000 audit[1699]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=1699 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:15.371000 audit[1699]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff764c460 a2=0 a3=1 items=0 ppid=1662 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.371000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:55:15.372577 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:55:15.373000 audit[1701]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=1701 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:15.373000 audit[1701]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=fffffcaf8c10 a2=0 a3=1 items=0 ppid=1662 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.373000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:55:15.376000 audit[1703]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=1703 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:15.376000 audit[1703]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffd8dd8b30 a2=0 a3=1 items=0 ppid=1662 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.376000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:55:15.378839 kubelet[1662]: I1002 19:55:15.378821 1662 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:55:15.377000 audit[1662]: AVC avc: denied { mac_admin } for pid=1662 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:15.377000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:55:15.377000 audit[1662]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000af38f0 a1=4000c0fa58 a2=4000af3890 a3=25 items=0 ppid=1 pid=1662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.377000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:55:15.379055 kubelet[1662]: I1002 19:55:15.378871 1662 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:55:15.379055 kubelet[1662]: I1002 19:55:15.379022 1662 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:55:15.379600 kubelet[1662]: E1002 19:55:15.379585 1662 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 2 19:55:15.379000 audit[1705]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=1705 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:15.379000 audit[1705]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=ffffcb22e1f0 a2=0 a3=1 items=0 ppid=1662 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.379000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:55:15.382000 audit[1707]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=1707 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:15.382000 audit[1707]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=540 a0=3 a1=fffff7104bc0 a2=0 a3=1 items=0 ppid=1662 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.382000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:55:15.383819 kubelet[1662]: I1002 19:55:15.383804 1662 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:55:15.383000 audit[1708]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=1708 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:15.383000 audit[1708]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffffc8c6bc0 a2=0 a3=1 items=0 ppid=1662 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.383000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:55:15.384000 audit[1709]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=1709 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:15.384000 audit[1709]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd9ec0e70 a2=0 a3=1 items=0 ppid=1662 pid=1709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.384000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:55:15.384000 audit[1710]: NETFILTER_CFG table=nat:43 family=10 entries=2 op=nft_register_chain pid=1710 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:15.384000 audit[1710]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffff70d2a50 a2=0 a3=1 items=0 ppid=1662 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.384000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:55:15.385000 audit[1712]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=1712 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:15.385000 audit[1712]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd0b949d0 a2=0 a3=1 items=0 ppid=1662 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.385000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:55:15.386000 audit[1713]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=1713 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:15.386000 audit[1713]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff8352fe0 a2=0 a3=1 items=0 ppid=1662 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.387000 audit[1714]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=1714 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:15.387000 audit[1714]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffffe6863f0 a2=0 a3=1 items=0 ppid=1662 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.387000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:55:15.386000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:55:15.388000 audit[1715]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=1715 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:15.388000 audit[1715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=fffff6bca720 a2=0 a3=1 items=0 ppid=1662 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.388000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:55:15.390000 audit[1717]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=1717 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:15.390000 audit[1717]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffef26feb0 a2=0 a3=1 items=0 ppid=1662 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.390000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:55:15.391000 audit[1718]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=1718 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:15.391000 audit[1718]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd7a87fe0 a2=0 a3=1 items=0 ppid=1662 pid=1718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.391000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:55:15.392000 audit[1719]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=1719 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:15.392000 audit[1719]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff9f50fd0 a2=0 a3=1 items=0 ppid=1662 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.392000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:55:15.394000 audit[1721]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=1721 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:15.394000 audit[1721]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffc1122a10 a2=0 a3=1 items=0 ppid=1662 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.394000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:55:15.397000 audit[1723]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=1723 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:15.397000 audit[1723]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffdddb45c0 a2=0 a3=1 items=0 ppid=1662 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.397000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:55:15.399000 audit[1725]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=1725 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:15.399000 audit[1725]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffe579ac50 a2=0 a3=1 items=0 ppid=1662 pid=1725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.399000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:55:15.402000 audit[1727]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=1727 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:15.402000 audit[1727]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=fffffd2d6630 a2=0 a3=1 items=0 ppid=1662 pid=1727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.402000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:55:15.405000 audit[1729]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=1729 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:15.405000 audit[1729]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=556 a0=3 a1=ffffda281300 a2=0 a3=1 items=0 ppid=1662 pid=1729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.405000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:55:15.406935 kubelet[1662]: I1002 19:55:15.406899 1662 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:55:15.406935 kubelet[1662]: I1002 19:55:15.406921 1662 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:55:15.406935 kubelet[1662]: I1002 19:55:15.406938 1662 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:55:15.407021 kubelet[1662]: E1002 19:55:15.406981 1662 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:55:15.407694 kubelet[1662]: W1002 19:55:15.407662 1662 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.7:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:15.407694 kubelet[1662]: E1002 19:55:15.407698 1662 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.7:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:15.407000 audit[1730]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=1730 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:15.407000 audit[1730]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc6a21250 a2=0 a3=1 items=0 ppid=1662 pid=1730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.407000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:55:15.408000 audit[1731]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=1731 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:15.408000 audit[1731]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffda7e5530 a2=0 a3=1 items=0 ppid=1662 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.408000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:55:15.409000 audit[1732]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=1732 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:15.409000 audit[1732]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffffa78680 a2=0 a3=1 items=0 ppid=1662 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:15.409000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:55:15.435822 kubelet[1662]: I1002 19:55:15.435796 1662 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:55:15.436240 kubelet[1662]: E1002 19:55:15.436224 1662 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.7:6443/api/v1/nodes\": dial tcp 10.0.0.7:6443: connect: connection refused" node="localhost" Oct 2 19:55:15.507326 kubelet[1662]: I1002 19:55:15.507297 1662 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:55:15.508661 kubelet[1662]: I1002 19:55:15.508634 1662 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:55:15.509317 kubelet[1662]: I1002 19:55:15.509293 1662 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:55:15.510627 kubelet[1662]: I1002 19:55:15.510605 1662 status_manager.go:698] "Failed to get status for pod" podUID=25f54892ed8d0106861b10601979c553 pod="kube-system/kube-apiserver-localhost" err="Get \"https://10.0.0.7:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-localhost\": dial tcp 10.0.0.7:6443: connect: connection refused" Oct 2 19:55:15.510862 kubelet[1662]: I1002 19:55:15.510835 1662 status_manager.go:698] "Failed to get status for pod" podUID=b3fbb6a05b0456c4809ee638aa5cfabe pod="kube-system/kube-controller-manager-localhost" err="Get \"https://10.0.0.7:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-localhost\": dial tcp 10.0.0.7:6443: connect: connection refused" Oct 2 19:55:15.511073 kubelet[1662]: I1002 19:55:15.511058 1662 status_manager.go:698] "Failed to get status for pod" podUID=fbbee22b6941d370b4e7de3cf42df07f pod="kube-system/kube-scheduler-localhost" err="Get \"https://10.0.0.7:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-localhost\": dial tcp 10.0.0.7:6443: connect: connection refused" Oct 2 19:55:15.514030 systemd[1]: Created slice kubepods-burstable-pod25f54892ed8d0106861b10601979c553.slice. Oct 2 19:55:15.534628 systemd[1]: Created slice kubepods-burstable-podb3fbb6a05b0456c4809ee638aa5cfabe.slice. Oct 2 19:55:15.535070 kubelet[1662]: I1002 19:55:15.534906 1662 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:15.535070 kubelet[1662]: I1002 19:55:15.534963 1662 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:15.535070 kubelet[1662]: I1002 19:55:15.535020 1662 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fbbee22b6941d370b4e7de3cf42df07f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fbbee22b6941d370b4e7de3cf42df07f\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:55:15.535070 kubelet[1662]: I1002 19:55:15.535048 1662 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/25f54892ed8d0106861b10601979c553-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"25f54892ed8d0106861b10601979c553\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:55:15.535220 kubelet[1662]: I1002 19:55:15.535082 1662 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/25f54892ed8d0106861b10601979c553-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"25f54892ed8d0106861b10601979c553\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:55:15.535220 kubelet[1662]: I1002 19:55:15.535115 1662 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/25f54892ed8d0106861b10601979c553-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"25f54892ed8d0106861b10601979c553\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:55:15.535220 kubelet[1662]: I1002 19:55:15.535145 1662 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:15.535220 kubelet[1662]: I1002 19:55:15.535180 1662 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:15.535319 kubelet[1662]: I1002 19:55:15.535223 1662 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:15.535843 kubelet[1662]: E1002 19:55:15.535550 1662 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://10.0.0.7:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:15.551520 systemd[1]: Created slice kubepods-burstable-podfbbee22b6941d370b4e7de3cf42df07f.slice. Oct 2 19:55:15.637564 kubelet[1662]: I1002 19:55:15.637456 1662 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:55:15.637873 kubelet[1662]: E1002 19:55:15.637844 1662 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.7:6443/api/v1/nodes\": dial tcp 10.0.0.7:6443: connect: connection refused" node="localhost" Oct 2 19:55:15.832930 kubelet[1662]: E1002 19:55:15.832893 1662 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:15.833575 env[1143]: time="2023-10-02T19:55:15.833520672Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:25f54892ed8d0106861b10601979c553,Namespace:kube-system,Attempt:0,}" Oct 2 19:55:15.849989 kubelet[1662]: E1002 19:55:15.849960 1662 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:15.850652 env[1143]: time="2023-10-02T19:55:15.850604609Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:b3fbb6a05b0456c4809ee638aa5cfabe,Namespace:kube-system,Attempt:0,}" Oct 2 19:55:15.853856 kubelet[1662]: E1002 19:55:15.853832 1662 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:15.854435 env[1143]: time="2023-10-02T19:55:15.854210275Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fbbee22b6941d370b4e7de3cf42df07f,Namespace:kube-system,Attempt:0,}" Oct 2 19:55:15.937618 kubelet[1662]: E1002 19:55:15.937511 1662 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://10.0.0.7:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:16.040092 kubelet[1662]: I1002 19:55:16.040055 1662 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:55:16.040420 kubelet[1662]: E1002 19:55:16.040396 1662 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.7:6443/api/v1/nodes\": dial tcp 10.0.0.7:6443: connect: connection refused" node="localhost" Oct 2 19:55:16.207666 kubelet[1662]: W1002 19:55:16.207541 1662 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.7:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:16.207810 kubelet[1662]: E1002 19:55:16.207798 1662 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.7:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:16.303563 kubelet[1662]: W1002 19:55:16.303519 1662 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.7:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:16.303563 kubelet[1662]: E1002 19:55:16.303560 1662 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.7:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:16.473976 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2428628516.mount: Deactivated successfully. Oct 2 19:55:16.478744 env[1143]: time="2023-10-02T19:55:16.478705437Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:16.479841 env[1143]: time="2023-10-02T19:55:16.479813567Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:16.480871 env[1143]: time="2023-10-02T19:55:16.480812630Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:16.482423 env[1143]: time="2023-10-02T19:55:16.482390917Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:16.483872 env[1143]: time="2023-10-02T19:55:16.483824568Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:16.484572 env[1143]: time="2023-10-02T19:55:16.484516774Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:16.485331 env[1143]: time="2023-10-02T19:55:16.485280200Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:16.488468 env[1143]: time="2023-10-02T19:55:16.488421426Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:16.490297 env[1143]: time="2023-10-02T19:55:16.490267164Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:16.491011 env[1143]: time="2023-10-02T19:55:16.490983869Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:16.493429 env[1143]: time="2023-10-02T19:55:16.493394362Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:16.495089 env[1143]: time="2023-10-02T19:55:16.495064930Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:16.527715 kubelet[1662]: W1002 19:55:16.527629 1662 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.7:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:16.527715 kubelet[1662]: E1002 19:55:16.527692 1662 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.7:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:16.528152 env[1143]: time="2023-10-02T19:55:16.528098766Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:55:16.528152 env[1143]: time="2023-10-02T19:55:16.528134615Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:55:16.528152 env[1143]: time="2023-10-02T19:55:16.528144247Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:55:16.528395 env[1143]: time="2023-10-02T19:55:16.528347073Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f12fd336c429fcacde7d547e860ed0e3dbbdc09402d57cee3af5c2fac2503f6c pid=1751 runtime=io.containerd.runc.v2 Oct 2 19:55:16.530377 env[1143]: time="2023-10-02T19:55:16.530207278Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:55:16.530377 env[1143]: time="2023-10-02T19:55:16.530236253Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:55:16.530377 env[1143]: time="2023-10-02T19:55:16.530246844Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:55:16.530377 env[1143]: time="2023-10-02T19:55:16.530173507Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:55:16.530377 env[1143]: time="2023-10-02T19:55:16.530218468Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:55:16.530377 env[1143]: time="2023-10-02T19:55:16.530228779Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:55:16.530377 env[1143]: time="2023-10-02T19:55:16.530354512Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/18bb4cc97a751a4115a968487ef492ace28aacbf2de56224612b0275c4efc640 pid=1763 runtime=io.containerd.runc.v2 Oct 2 19:55:16.530582 env[1143]: time="2023-10-02T19:55:16.530435242Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/00ddeaa4a206c3f8936307023ccd737c7ec479716d5ead9561d5258ad25e756a pid=1764 runtime=io.containerd.runc.v2 Oct 2 19:55:16.542806 systemd[1]: Started cri-containerd-18bb4cc97a751a4115a968487ef492ace28aacbf2de56224612b0275c4efc640.scope. Oct 2 19:55:16.544925 systemd[1]: Started cri-containerd-f12fd336c429fcacde7d547e860ed0e3dbbdc09402d57cee3af5c2fac2503f6c.scope. Oct 2 19:55:16.558228 systemd[1]: Started cri-containerd-00ddeaa4a206c3f8936307023ccd737c7ec479716d5ead9561d5258ad25e756a.scope. Oct 2 19:55:16.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.581000 audit: BPF prog-id=64 op=LOAD Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=1763 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138626234636339376137353161343131356139363834383765663439 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1763 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138626234636339376137353161343131356139363834383765663439 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit: BPF prog-id=65 op=LOAD Oct 2 19:55:16.582000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1763 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138626234636339376137353161343131356139363834383765663439 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit: BPF prog-id=66 op=LOAD Oct 2 19:55:16.582000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1763 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138626234636339376137353161343131356139363834383765663439 Oct 2 19:55:16.582000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:55:16.582000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.582000 audit: BPF prog-id=67 op=LOAD Oct 2 19:55:16.582000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1763 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138626234636339376137353161343131356139363834383765663439 Oct 2 19:55:16.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.586000 audit: BPF prog-id=68 op=LOAD Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=1751 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631326664333336633432396663616364653764353437653836306564 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1751 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631326664333336633432396663616364653764353437653836306564 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit: BPF prog-id=69 op=LOAD Oct 2 19:55:16.587000 audit[1776]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1751 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631326664333336633432396663616364653764353437653836306564 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit: BPF prog-id=70 op=LOAD Oct 2 19:55:16.587000 audit[1776]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1751 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631326664333336633432396663616364653764353437653836306564 Oct 2 19:55:16.587000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:55:16.587000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.587000 audit: BPF prog-id=71 op=LOAD Oct 2 19:55:16.587000 audit[1776]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1751 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631326664333336633432396663616364653764353437653836306564 Oct 2 19:55:16.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.588000 audit: BPF prog-id=72 op=LOAD Oct 2 19:55:16.590000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.590000 audit[1788]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000149b38 a2=10 a3=0 items=0 ppid=1764 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030646465616134613230366333663839333633303730323363636437 Oct 2 19:55:16.590000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.590000 audit[1788]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001495a0 a2=3c a3=0 items=0 ppid=1764 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030646465616134613230366333663839333633303730323363636437 Oct 2 19:55:16.590000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.590000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.590000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.590000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.590000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.590000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.590000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.590000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.590000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.590000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.590000 audit: BPF prog-id=73 op=LOAD Oct 2 19:55:16.590000 audit[1788]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001498e0 a2=78 a3=0 items=0 ppid=1764 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030646465616134613230366333663839333633303730323363636437 Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit: BPF prog-id=74 op=LOAD Oct 2 19:55:16.591000 audit[1788]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000149670 a2=78 a3=0 items=0 ppid=1764 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030646465616134613230366333663839333633303730323363636437 Oct 2 19:55:16.591000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:55:16.591000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.591000 audit: BPF prog-id=75 op=LOAD Oct 2 19:55:16.591000 audit[1788]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000149b40 a2=78 a3=0 items=0 ppid=1764 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030646465616134613230366333663839333633303730323363636437 Oct 2 19:55:16.628651 env[1143]: time="2023-10-02T19:55:16.627461050Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fbbee22b6941d370b4e7de3cf42df07f,Namespace:kube-system,Attempt:0,} returns sandbox id \"18bb4cc97a751a4115a968487ef492ace28aacbf2de56224612b0275c4efc640\"" Oct 2 19:55:16.628651 env[1143]: time="2023-10-02T19:55:16.627541501Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:b3fbb6a05b0456c4809ee638aa5cfabe,Namespace:kube-system,Attempt:0,} returns sandbox id \"f12fd336c429fcacde7d547e860ed0e3dbbdc09402d57cee3af5c2fac2503f6c\"" Oct 2 19:55:16.628651 env[1143]: time="2023-10-02T19:55:16.628599553Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:25f54892ed8d0106861b10601979c553,Namespace:kube-system,Attempt:0,} returns sandbox id \"00ddeaa4a206c3f8936307023ccd737c7ec479716d5ead9561d5258ad25e756a\"" Oct 2 19:55:16.629171 kubelet[1662]: E1002 19:55:16.629004 1662 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:16.629171 kubelet[1662]: E1002 19:55:16.629062 1662 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:16.629171 kubelet[1662]: E1002 19:55:16.629004 1662 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:16.632604 env[1143]: time="2023-10-02T19:55:16.632543851Z" level=info msg="CreateContainer within sandbox \"f12fd336c429fcacde7d547e860ed0e3dbbdc09402d57cee3af5c2fac2503f6c\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:55:16.632679 env[1143]: time="2023-10-02T19:55:16.632616789Z" level=info msg="CreateContainer within sandbox \"18bb4cc97a751a4115a968487ef492ace28aacbf2de56224612b0275c4efc640\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:55:16.633852 env[1143]: time="2023-10-02T19:55:16.633827271Z" level=info msg="CreateContainer within sandbox \"00ddeaa4a206c3f8936307023ccd737c7ec479716d5ead9561d5258ad25e756a\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:55:16.648329 env[1143]: time="2023-10-02T19:55:16.648280918Z" level=info msg="CreateContainer within sandbox \"18bb4cc97a751a4115a968487ef492ace28aacbf2de56224612b0275c4efc640\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"65eab80b6b2b18e6c1f026d79c4186e243f97d991740c89e5ce63ef99ee63d2a\"" Oct 2 19:55:16.648896 env[1143]: time="2023-10-02T19:55:16.648869493Z" level=info msg="StartContainer for \"65eab80b6b2b18e6c1f026d79c4186e243f97d991740c89e5ce63ef99ee63d2a\"" Oct 2 19:55:16.653548 env[1143]: time="2023-10-02T19:55:16.653481059Z" level=info msg="CreateContainer within sandbox \"f12fd336c429fcacde7d547e860ed0e3dbbdc09402d57cee3af5c2fac2503f6c\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"2f93129f1f9ed5f9bb1190ba9ba0583d6f0201343bb7bfb1b3888521d93d22ee\"" Oct 2 19:55:16.653969 env[1143]: time="2023-10-02T19:55:16.653934071Z" level=info msg="StartContainer for \"2f93129f1f9ed5f9bb1190ba9ba0583d6f0201343bb7bfb1b3888521d93d22ee\"" Oct 2 19:55:16.655781 env[1143]: time="2023-10-02T19:55:16.655737285Z" level=info msg="CreateContainer within sandbox \"00ddeaa4a206c3f8936307023ccd737c7ec479716d5ead9561d5258ad25e756a\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"53607fb5a9022ae6337d5925ce83942475cd6501049ecfc79a87788373d51565\"" Oct 2 19:55:16.656305 env[1143]: time="2023-10-02T19:55:16.656277821Z" level=info msg="StartContainer for \"53607fb5a9022ae6337d5925ce83942475cd6501049ecfc79a87788373d51565\"" Oct 2 19:55:16.667476 systemd[1]: Started cri-containerd-65eab80b6b2b18e6c1f026d79c4186e243f97d991740c89e5ce63ef99ee63d2a.scope. Oct 2 19:55:16.671613 systemd[1]: Started cri-containerd-2f93129f1f9ed5f9bb1190ba9ba0583d6f0201343bb7bfb1b3888521d93d22ee.scope. Oct 2 19:55:16.688735 systemd[1]: Started cri-containerd-53607fb5a9022ae6337d5925ce83942475cd6501049ecfc79a87788373d51565.scope. Oct 2 19:55:16.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit: BPF prog-id=76 op=LOAD Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1751 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266393331323966316639656435663962623131393062613962613035 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1751 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266393331323966316639656435663962623131393062613962613035 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit: BPF prog-id=77 op=LOAD Oct 2 19:55:16.699000 audit[1891]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1751 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266393331323966316639656435663962623131393062613962613035 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit: BPF prog-id=78 op=LOAD Oct 2 19:55:16.699000 audit[1891]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1751 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266393331323966316639656435663962623131393062613962613035 Oct 2 19:55:16.699000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:55:16.699000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.699000 audit: BPF prog-id=79 op=LOAD Oct 2 19:55:16.699000 audit[1891]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1751 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266393331323966316639656435663962623131393062613962613035 Oct 2 19:55:16.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.708000 audit: BPF prog-id=80 op=LOAD Oct 2 19:55:16.708000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.708000 audit[1870]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1763 pid=1870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.708000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635656162383062366232623138653663316630323664373963343138 Oct 2 19:55:16.708000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.708000 audit[1870]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1763 pid=1870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.708000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635656162383062366232623138653663316630323664373963343138 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit: BPF prog-id=81 op=LOAD Oct 2 19:55:16.709000 audit[1870]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1763 pid=1870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635656162383062366232623138653663316630323664373963343138 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit: BPF prog-id=82 op=LOAD Oct 2 19:55:16.709000 audit[1870]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1763 pid=1870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635656162383062366232623138653663316630323664373963343138 Oct 2 19:55:16.709000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:55:16.709000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { perfmon } for pid=1870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit[1870]: AVC avc: denied { bpf } for pid=1870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.709000 audit: BPF prog-id=83 op=LOAD Oct 2 19:55:16.709000 audit[1870]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1763 pid=1870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635656162383062366232623138653663316630323664373963343138 Oct 2 19:55:16.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit: BPF prog-id=84 op=LOAD Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { bpf } for pid=1892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=1764 pid=1892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533363037666235613930323261653633333764353932356365383339 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { perfmon } for pid=1892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=1764 pid=1892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533363037666235613930323261653633333764353932356365383339 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { bpf } for pid=1892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { bpf } for pid=1892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { bpf } for pid=1892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { perfmon } for pid=1892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { perfmon } for pid=1892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { perfmon } for pid=1892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { perfmon } for pid=1892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { perfmon } for pid=1892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { bpf } for pid=1892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { bpf } for pid=1892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit: BPF prog-id=85 op=LOAD Oct 2 19:55:16.711000 audit[1892]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=1764 pid=1892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533363037666235613930323261653633333764353932356365383339 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { bpf } for pid=1892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { bpf } for pid=1892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { perfmon } for pid=1892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { perfmon } for pid=1892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { perfmon } for pid=1892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { perfmon } for pid=1892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { perfmon } for pid=1892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { bpf } for pid=1892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { bpf } for pid=1892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit: BPF prog-id=86 op=LOAD Oct 2 19:55:16.711000 audit[1892]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=1764 pid=1892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533363037666235613930323261653633333764353932356365383339 Oct 2 19:55:16.711000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:55:16.711000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { bpf } for pid=1892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { bpf } for pid=1892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { bpf } for pid=1892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { perfmon } for pid=1892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { perfmon } for pid=1892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { perfmon } for pid=1892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { perfmon } for pid=1892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { perfmon } for pid=1892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { bpf } for pid=1892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit[1892]: AVC avc: denied { bpf } for pid=1892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.711000 audit: BPF prog-id=87 op=LOAD Oct 2 19:55:16.711000 audit[1892]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=1764 pid=1892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:16.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533363037666235613930323261653633333764353932356365383339 Oct 2 19:55:16.734840 env[1143]: time="2023-10-02T19:55:16.728952907Z" level=info msg="StartContainer for \"2f93129f1f9ed5f9bb1190ba9ba0583d6f0201343bb7bfb1b3888521d93d22ee\" returns successfully" Oct 2 19:55:16.746295 kubelet[1662]: E1002 19:55:16.743640 1662 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://10.0.0.7:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:16.759625 env[1143]: time="2023-10-02T19:55:16.758264455Z" level=info msg="StartContainer for \"53607fb5a9022ae6337d5925ce83942475cd6501049ecfc79a87788373d51565\" returns successfully" Oct 2 19:55:16.774356 env[1143]: time="2023-10-02T19:55:16.774309417Z" level=info msg="StartContainer for \"65eab80b6b2b18e6c1f026d79c4186e243f97d991740c89e5ce63ef99ee63d2a\" returns successfully" Oct 2 19:55:16.804985 kubelet[1662]: W1002 19:55:16.804323 1662 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.7:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:16.804985 kubelet[1662]: E1002 19:55:16.804386 1662 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.7:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 19:55:16.844044 kubelet[1662]: I1002 19:55:16.844001 1662 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:55:16.844384 kubelet[1662]: E1002 19:55:16.844366 1662 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.7:6443/api/v1/nodes\": dial tcp 10.0.0.7:6443: connect: connection refused" node="localhost" Oct 2 19:55:17.413275 kubelet[1662]: E1002 19:55:17.413249 1662 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:17.414630 kubelet[1662]: E1002 19:55:17.414589 1662 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:17.416106 kubelet[1662]: E1002 19:55:17.416089 1662 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:17.936000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:17.936000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:17.936000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000d0e000 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:55:17.936000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:17.936000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000aea020 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:55:17.936000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:18.417493 kubelet[1662]: E1002 19:55:18.417463 1662 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:18.417786 kubelet[1662]: E1002 19:55:18.417659 1662 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:18.417786 kubelet[1662]: E1002 19:55:18.417730 1662 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:18.445689 kubelet[1662]: I1002 19:55:18.445663 1662 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:55:18.634000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:18.636292 kernel: kauditd_printk_skb: 626 callbacks suppressed Oct 2 19:55:18.636350 kernel: audit: type=1400 audit(1696276518.634:701): avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:18.634000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:18.640802 kernel: audit: type=1400 audit(1696276518.634:702): avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:18.640927 kernel: audit: type=1300 audit(1696276518.634:702): arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=40051a82d0 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:55:18.634000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=40051a82d0 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:55:18.634000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:55:18.645937 kernel: audit: type=1327 audit(1696276518.634:702): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:55:18.636000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:18.653418 kernel: audit: type=1400 audit(1696276518.636:703): avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:18.653502 kernel: audit: type=1300 audit(1696276518.636:703): arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=40051a83c0 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:55:18.636000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=40051a83c0 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:55:18.657218 kernel: audit: type=1327 audit(1696276518.636:703): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:55:18.636000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:55:18.634000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=40029ae080 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:55:18.661566 kernel: audit: type=1300 audit(1696276518.634:701): arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=40029ae080 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:55:18.634000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:55:18.665656 kernel: audit: type=1327 audit(1696276518.634:701): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:55:18.665726 kernel: audit: type=1400 audit(1696276518.642:704): avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:18.642000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:18.642000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=400299bd20 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:55:18.642000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:55:18.642000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:18.642000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=400b158270 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:55:18.642000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:55:18.643000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7051 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:18.643000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=400527e9f0 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:55:18.643000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:55:18.718911 kubelet[1662]: E1002 19:55:18.718881 1662 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Oct 2 19:55:18.764844 kubelet[1662]: I1002 19:55:18.764794 1662 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:55:18.821851 kubelet[1662]: E1002 19:55:18.821722 1662 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6280e119eb9b", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 330321307, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 330321307, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:55:18.876555 kubelet[1662]: E1002 19:55:18.876444 1662 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6280e1340080", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 332030592, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 332030592, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:55:18.931375 kubelet[1662]: E1002 19:55:18.931216 1662 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6280e277432e", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node localhost status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 353215790, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 353215790, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:55:18.986697 kubelet[1662]: E1002 19:55:18.986606 1662 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6280e2775ac0", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node localhost status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 353221824, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 353221824, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:55:19.040582 kubelet[1662]: E1002 19:55:19.040472 1662 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6280e27786c5", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node localhost status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 353233093, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 353233093, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:55:19.094312 kubelet[1662]: E1002 19:55:19.094204 1662 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6280e4176526", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeAllocatableEnforced", Message:"Updated Node Allocatable limit across pods", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 380487462, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 380487462, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:55:19.152541 kubelet[1662]: E1002 19:55:19.152435 1662 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6280e277432e", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node localhost status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 353215790, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 435744548, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:55:19.221659 kubelet[1662]: E1002 19:55:19.221468 1662 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6280e2775ac0", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node localhost status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 353221824, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 435755138, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:55:19.279799 kubelet[1662]: E1002 19:55:19.279683 1662 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6280e27786c5", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node localhost status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 353233093, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 435758774, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:55:19.332249 kubelet[1662]: I1002 19:55:19.332211 1662 apiserver.go:52] "Watching apiserver" Oct 2 19:55:19.479670 kubelet[1662]: E1002 19:55:19.479505 1662 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6280e277432e", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node localhost status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 353215790, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 508549716, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:55:19.734763 kubelet[1662]: I1002 19:55:19.734649 1662 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:55:19.758955 kubelet[1662]: I1002 19:55:19.758906 1662 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:55:19.882236 kubelet[1662]: E1002 19:55:19.882104 1662 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6280e2775ac0", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node localhost status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 353221824, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 508561265, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:55:20.014498 kubelet[1662]: E1002 19:55:20.014394 1662 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:20.133169 kubelet[1662]: E1002 19:55:20.133125 1662 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:20.276403 kubelet[1662]: E1002 19:55:20.276303 1662 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6280e27786c5", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node localhost status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 353233093, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 55, 15, 508566899, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:55:20.333695 kubelet[1662]: E1002 19:55:20.333651 1662 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:20.419305 kubelet[1662]: E1002 19:55:20.419282 1662 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:20.419428 kubelet[1662]: E1002 19:55:20.419368 1662 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:20.419455 kubelet[1662]: E1002 19:55:20.419430 1662 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:21.569124 systemd[1]: Reloading. Oct 2 19:55:21.620328 /usr/lib/systemd/system-generators/torcx-generator[1998]: time="2023-10-02T19:55:21Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:55:21.620353 /usr/lib/systemd/system-generators/torcx-generator[1998]: time="2023-10-02T19:55:21Z" level=info msg="torcx already run" Oct 2 19:55:21.695794 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:55:21.695819 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:55:21.714427 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:55:21.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.786000 audit: BPF prog-id=88 op=LOAD Oct 2 19:55:21.786000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:55:21.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.789000 audit: BPF prog-id=89 op=LOAD Oct 2 19:55:21.789000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit: BPF prog-id=90 op=LOAD Oct 2 19:55:21.790000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit: BPF prog-id=91 op=LOAD Oct 2 19:55:21.790000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.790000 audit: BPF prog-id=92 op=LOAD Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit: BPF prog-id=93 op=LOAD Oct 2 19:55:21.791000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:55:21.791000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit: BPF prog-id=94 op=LOAD Oct 2 19:55:21.791000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.791000 audit: BPF prog-id=95 op=LOAD Oct 2 19:55:21.791000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:55:21.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit: BPF prog-id=96 op=LOAD Oct 2 19:55:21.793000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit: BPF prog-id=97 op=LOAD Oct 2 19:55:21.793000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit: BPF prog-id=98 op=LOAD Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit: BPF prog-id=99 op=LOAD Oct 2 19:55:21.793000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:55:21.793000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.793000 audit: BPF prog-id=100 op=LOAD Oct 2 19:55:21.793000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit: BPF prog-id=101 op=LOAD Oct 2 19:55:21.794000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit: BPF prog-id=102 op=LOAD Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.794000 audit: BPF prog-id=103 op=LOAD Oct 2 19:55:21.794000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:55:21.794000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.795000 audit: BPF prog-id=104 op=LOAD Oct 2 19:55:21.795000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.796000 audit: BPF prog-id=105 op=LOAD Oct 2 19:55:21.796000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:55:21.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit: BPF prog-id=106 op=LOAD Oct 2 19:55:21.797000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit: BPF prog-id=107 op=LOAD Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.797000 audit: BPF prog-id=108 op=LOAD Oct 2 19:55:21.797000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:55:21.797000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:55:21.810523 systemd[1]: Stopping kubelet.service... Oct 2 19:55:21.831285 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:55:21.833070 systemd[1]: Stopped kubelet.service. Oct 2 19:55:21.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:21.833259 systemd[1]: kubelet.service: Consumed 2.230s CPU time. Oct 2 19:55:21.836000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:21.837637 systemd[1]: Started kubelet.service. Oct 2 19:55:21.887824 kubelet[2036]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:55:21.887824 kubelet[2036]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:55:21.888204 kubelet[2036]: I1002 19:55:21.887861 2036 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:55:21.889192 kubelet[2036]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:55:21.889192 kubelet[2036]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:55:21.892784 kubelet[2036]: I1002 19:55:21.892761 2036 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:55:21.892898 kubelet[2036]: I1002 19:55:21.892887 2036 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:55:21.893181 kubelet[2036]: I1002 19:55:21.893146 2036 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:55:21.894644 kubelet[2036]: I1002 19:55:21.894624 2036 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:55:21.895960 kubelet[2036]: I1002 19:55:21.895936 2036 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:55:21.897502 kubelet[2036]: W1002 19:55:21.897488 2036 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:55:21.898372 kubelet[2036]: I1002 19:55:21.898358 2036 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:55:21.898684 kubelet[2036]: I1002 19:55:21.898675 2036 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:55:21.898815 kubelet[2036]: I1002 19:55:21.898803 2036 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:55:21.898935 kubelet[2036]: I1002 19:55:21.898925 2036 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:55:21.898993 kubelet[2036]: I1002 19:55:21.898985 2036 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:55:21.899083 kubelet[2036]: I1002 19:55:21.899074 2036 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:55:21.902147 kubelet[2036]: I1002 19:55:21.902126 2036 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:55:21.902227 kubelet[2036]: I1002 19:55:21.902152 2036 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:55:21.902227 kubelet[2036]: I1002 19:55:21.902210 2036 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:55:21.902227 kubelet[2036]: I1002 19:55:21.902223 2036 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:55:21.903684 kubelet[2036]: I1002 19:55:21.903654 2036 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:55:21.904139 kubelet[2036]: I1002 19:55:21.904121 2036 server.go:1186] "Started kubelet" Oct 2 19:55:21.904000 audit[2036]: AVC avc: denied { mac_admin } for pid=2036 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.904000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:55:21.904000 audit[2036]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ff4b70 a1=400033baa0 a2=4000ff4b40 a3=25 items=0 ppid=1 pid=2036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:21.904000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:55:21.904000 audit[2036]: AVC avc: denied { mac_admin } for pid=2036 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.904000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:55:21.904000 audit[2036]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40004f9120 a1=400033bab8 a2=4000ff4c00 a3=25 items=0 ppid=1 pid=2036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:21.904000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:55:21.906488 kubelet[2036]: I1002 19:55:21.906081 2036 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:55:21.906488 kubelet[2036]: I1002 19:55:21.906114 2036 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:55:21.906488 kubelet[2036]: I1002 19:55:21.906137 2036 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:55:21.908875 kubelet[2036]: I1002 19:55:21.908848 2036 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:55:21.909994 kubelet[2036]: I1002 19:55:21.909971 2036 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:55:21.911066 kubelet[2036]: E1002 19:55:21.911044 2036 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:55:21.911222 kubelet[2036]: I1002 19:55:21.911210 2036 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:55:21.911383 kubelet[2036]: I1002 19:55:21.911371 2036 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:55:21.919894 kubelet[2036]: E1002 19:55:21.919866 2036 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:55:21.919894 kubelet[2036]: E1002 19:55:21.919897 2036 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:55:21.955000 audit[2069]: USER_ACCT pid=2069 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:55:21.955000 audit[2069]: CRED_REFR pid=2069 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:55:21.956410 sudo[2069]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:55:21.956604 sudo[2069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:55:21.958912 kubelet[2036]: I1002 19:55:21.958889 2036 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:55:21.958000 audit[2069]: USER_START pid=2069 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:55:21.980472 kubelet[2036]: I1002 19:55:21.980446 2036 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:55:21.980607 kubelet[2036]: I1002 19:55:21.980598 2036 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:55:21.980684 kubelet[2036]: I1002 19:55:21.980675 2036 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:55:21.980823 kubelet[2036]: E1002 19:55:21.980812 2036 kubelet.go:2137] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:55:21.985249 kubelet[2036]: I1002 19:55:21.985209 2036 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:55:21.985249 kubelet[2036]: I1002 19:55:21.985229 2036 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:55:21.985249 kubelet[2036]: I1002 19:55:21.985251 2036 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:55:21.985588 kubelet[2036]: I1002 19:55:21.985571 2036 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:55:21.985643 kubelet[2036]: I1002 19:55:21.985599 2036 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:55:21.985643 kubelet[2036]: I1002 19:55:21.985619 2036 policy_none.go:49] "None policy: Start" Oct 2 19:55:21.986441 kubelet[2036]: I1002 19:55:21.986308 2036 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:55:21.986441 kubelet[2036]: I1002 19:55:21.986333 2036 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:55:21.986521 kubelet[2036]: I1002 19:55:21.986474 2036 state_mem.go:75] "Updated machine memory state" Oct 2 19:55:21.990218 kubelet[2036]: I1002 19:55:21.990202 2036 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:55:21.989000 audit[2036]: AVC avc: denied { mac_admin } for pid=2036 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:21.989000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:55:21.989000 audit[2036]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40013ec750 a1=40013f8c18 a2=40013ec720 a3=25 items=0 ppid=1 pid=2036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:21.989000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:55:21.990556 kubelet[2036]: I1002 19:55:21.990540 2036 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:55:21.990820 kubelet[2036]: I1002 19:55:21.990806 2036 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:55:22.014518 kubelet[2036]: I1002 19:55:22.014487 2036 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:55:22.039324 kubelet[2036]: I1002 19:55:22.039296 2036 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Oct 2 19:55:22.039531 kubelet[2036]: I1002 19:55:22.039520 2036 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:55:22.080976 kubelet[2036]: I1002 19:55:22.080926 2036 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:55:22.081100 kubelet[2036]: I1002 19:55:22.081028 2036 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:55:22.082701 kubelet[2036]: I1002 19:55:22.081563 2036 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:55:22.087492 kubelet[2036]: E1002 19:55:22.087464 2036 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 19:55:22.109297 kubelet[2036]: E1002 19:55:22.109272 2036 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 19:55:22.212083 kubelet[2036]: I1002 19:55:22.212053 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/25f54892ed8d0106861b10601979c553-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"25f54892ed8d0106861b10601979c553\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:55:22.212269 kubelet[2036]: I1002 19:55:22.212259 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/25f54892ed8d0106861b10601979c553-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"25f54892ed8d0106861b10601979c553\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:55:22.212346 kubelet[2036]: I1002 19:55:22.212337 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:22.212417 kubelet[2036]: I1002 19:55:22.212408 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:22.212511 kubelet[2036]: I1002 19:55:22.212501 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:22.212587 kubelet[2036]: I1002 19:55:22.212579 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:22.212660 kubelet[2036]: I1002 19:55:22.212652 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/25f54892ed8d0106861b10601979c553-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"25f54892ed8d0106861b10601979c553\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:55:22.212738 kubelet[2036]: I1002 19:55:22.212729 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:22.212811 kubelet[2036]: I1002 19:55:22.212802 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fbbee22b6941d370b4e7de3cf42df07f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fbbee22b6941d370b4e7de3cf42df07f\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:55:22.309099 kubelet[2036]: E1002 19:55:22.309069 2036 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:22.388766 kubelet[2036]: E1002 19:55:22.388662 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:22.410598 kubelet[2036]: E1002 19:55:22.410563 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:22.485000 audit[2069]: USER_END pid=2069 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:55:22.485000 audit[2069]: CRED_DISP pid=2069 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:55:22.486377 sudo[2069]: pam_unix(sudo:session): session closed for user root Oct 2 19:55:22.610433 kubelet[2036]: E1002 19:55:22.610405 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:22.904891 kubelet[2036]: I1002 19:55:22.904842 2036 apiserver.go:52] "Watching apiserver" Oct 2 19:55:22.912040 kubelet[2036]: I1002 19:55:22.912005 2036 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:55:22.918107 kubelet[2036]: I1002 19:55:22.918083 2036 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:55:23.325917 kubelet[2036]: E1002 19:55:23.325879 2036 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:23.326334 kubelet[2036]: E1002 19:55:23.326317 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:23.572472 kubelet[2036]: E1002 19:55:23.572437 2036 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 19:55:23.572893 kubelet[2036]: E1002 19:55:23.572875 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:23.713986 kubelet[2036]: E1002 19:55:23.713878 2036 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 19:55:23.714231 kubelet[2036]: E1002 19:55:23.714217 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:23.992889 kubelet[2036]: E1002 19:55:23.992772 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:23.994451 kubelet[2036]: E1002 19:55:23.993755 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:23.994451 kubelet[2036]: E1002 19:55:23.993943 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:24.314415 kubelet[2036]: I1002 19:55:24.314368 2036 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=4.314322589 pod.CreationTimestamp="2023-10-02 19:55:20 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:55:23.916037756 +0000 UTC m=+2.074473242" watchObservedRunningTime="2023-10-02 19:55:24.314322589 +0000 UTC m=+2.472758075" Oct 2 19:55:24.326562 sudo[1270]: pam_unix(sudo:session): session closed for user root Oct 2 19:55:24.326000 audit[1270]: USER_END pid=1270 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:55:24.327311 kernel: kauditd_printk_skb: 271 callbacks suppressed Oct 2 19:55:24.327372 kernel: audit: type=1106 audit(1696276524.326:961): pid=1270 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:55:24.329286 sshd[1266]: pam_unix(sshd:session): session closed for user core Oct 2 19:55:24.327000 audit[1270]: CRED_DISP pid=1270 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:55:24.332761 kernel: audit: type=1104 audit(1696276524.327:962): pid=1270 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:55:24.333000 audit[1266]: USER_END pid=1266 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:55:24.334996 systemd[1]: sshd@6-10.0.0.7:22-10.0.0.1:33614.service: Deactivated successfully. Oct 2 19:55:24.335942 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:55:24.336138 systemd[1]: session-7.scope: Consumed 7.061s CPU time. Oct 2 19:55:24.333000 audit[1266]: CRED_DISP pid=1266 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:55:24.338665 kernel: audit: type=1106 audit(1696276524.333:963): pid=1266 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:55:24.338738 kernel: audit: type=1104 audit(1696276524.333:964): pid=1266 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:55:24.338755 kernel: audit: type=1131 audit(1696276524.335:965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.7:22-10.0.0.1:33614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:24.335000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.7:22-10.0.0.1:33614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:24.340962 systemd-logind[1130]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:55:24.341808 systemd-logind[1130]: Removed session 7. Oct 2 19:55:24.711980 kubelet[2036]: I1002 19:55:24.711869 2036 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=5.711824413 pod.CreationTimestamp="2023-10-02 19:55:19 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:55:24.314523877 +0000 UTC m=+2.472959363" watchObservedRunningTime="2023-10-02 19:55:24.711824413 +0000 UTC m=+2.870259899" Oct 2 19:55:24.994628 kubelet[2036]: E1002 19:55:24.994541 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:25.781827 kubelet[2036]: E1002 19:55:25.781796 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:27.466960 kubelet[2036]: E1002 19:55:27.466918 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:27.481502 kubelet[2036]: I1002 19:55:27.481469 2036 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=7.481433578 pod.CreationTimestamp="2023-10-02 19:55:20 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:55:24.712272669 +0000 UTC m=+2.870708155" watchObservedRunningTime="2023-10-02 19:55:27.481433578 +0000 UTC m=+5.639869024" Oct 2 19:55:27.997557 kubelet[2036]: E1002 19:55:27.997520 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:28.186514 kubelet[2036]: E1002 19:55:28.186491 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:28.998510 kubelet[2036]: E1002 19:55:28.998485 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:30.000378 kubelet[2036]: E1002 19:55:30.000351 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:31.774000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:31.774000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40005e83c0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:55:31.781204 kernel: audit: type=1400 audit(1696276531.774:967): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:31.781315 kernel: audit: type=1300 audit(1696276531.774:967): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40005e83c0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:55:31.781339 kernel: audit: type=1327 audit(1696276531.774:967): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:31.774000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:31.774000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:31.786839 kernel: audit: type=1400 audit(1696276531.774:968): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:31.786922 kernel: audit: type=1300 audit(1696276531.774:968): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40005e8420 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:55:31.774000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40005e8420 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:55:31.774000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:31.792027 kernel: audit: type=1327 audit(1696276531.774:968): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:31.793240 kernel: audit: type=1400 audit(1696276531.774:966): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:31.774000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:31.774000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012a1e60 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:55:31.798996 kernel: audit: type=1300 audit(1696276531.774:966): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012a1e60 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:55:31.799069 kernel: audit: type=1327 audit(1696276531.774:966): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:31.774000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:31.778000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:31.804004 kernel: audit: type=1400 audit(1696276531.778:969): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:31.778000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40005e91c0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:55:31.778000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:31.843000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32581 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:55:31.843000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012bcb80 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:55:31.843000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:33.974667 update_engine[1134]: I1002 19:55:33.974254 1134 update_attempter.cc:505] Updating boot flags... Oct 2 19:55:34.325639 kubelet[2036]: I1002 19:55:34.325607 2036 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:55:34.326511 env[1143]: time="2023-10-02T19:55:34.326417063Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:55:34.326949 kubelet[2036]: I1002 19:55:34.326905 2036 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:55:35.186478 kubelet[2036]: I1002 19:55:35.186427 2036 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:55:35.191475 kubelet[2036]: I1002 19:55:35.191425 2036 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:55:35.192185 systemd[1]: Created slice kubepods-besteffort-podc9903e22_2ac6_46f9_b623_ec78329692fe.slice. Oct 2 19:55:35.203773 systemd[1]: Created slice kubepods-burstable-pod725cca0a_a446_473d_a797_961a298ab61a.slice. Oct 2 19:55:35.215312 kubelet[2036]: I1002 19:55:35.215263 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c9903e22-2ac6-46f9-b623-ec78329692fe-lib-modules\") pod \"kube-proxy-kh82s\" (UID: \"c9903e22-2ac6-46f9-b623-ec78329692fe\") " pod="kube-system/kube-proxy-kh82s" Oct 2 19:55:35.215464 kubelet[2036]: I1002 19:55:35.215324 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-cilium-cgroup\") pod \"cilium-wkz2w\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " pod="kube-system/cilium-wkz2w" Oct 2 19:55:35.215464 kubelet[2036]: I1002 19:55:35.215346 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-cni-path\") pod \"cilium-wkz2w\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " pod="kube-system/cilium-wkz2w" Oct 2 19:55:35.215464 kubelet[2036]: I1002 19:55:35.215368 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-lib-modules\") pod \"cilium-wkz2w\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " pod="kube-system/cilium-wkz2w" Oct 2 19:55:35.215464 kubelet[2036]: I1002 19:55:35.215388 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/725cca0a-a446-473d-a797-961a298ab61a-cilium-config-path\") pod \"cilium-wkz2w\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " pod="kube-system/cilium-wkz2w" Oct 2 19:55:35.215464 kubelet[2036]: I1002 19:55:35.215407 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/725cca0a-a446-473d-a797-961a298ab61a-hubble-tls\") pod \"cilium-wkz2w\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " pod="kube-system/cilium-wkz2w" Oct 2 19:55:35.215464 kubelet[2036]: I1002 19:55:35.215433 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/725cca0a-a446-473d-a797-961a298ab61a-clustermesh-secrets\") pod \"cilium-wkz2w\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " pod="kube-system/cilium-wkz2w" Oct 2 19:55:35.215604 kubelet[2036]: I1002 19:55:35.215453 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-host-proc-sys-kernel\") pod \"cilium-wkz2w\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " pod="kube-system/cilium-wkz2w" Oct 2 19:55:35.215604 kubelet[2036]: I1002 19:55:35.215471 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c9903e22-2ac6-46f9-b623-ec78329692fe-xtables-lock\") pod \"kube-proxy-kh82s\" (UID: \"c9903e22-2ac6-46f9-b623-ec78329692fe\") " pod="kube-system/kube-proxy-kh82s" Oct 2 19:55:35.215604 kubelet[2036]: I1002 19:55:35.215496 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-etc-cni-netd\") pod \"cilium-wkz2w\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " pod="kube-system/cilium-wkz2w" Oct 2 19:55:35.215604 kubelet[2036]: I1002 19:55:35.215515 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-cilium-run\") pod \"cilium-wkz2w\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " pod="kube-system/cilium-wkz2w" Oct 2 19:55:35.215719 kubelet[2036]: I1002 19:55:35.215614 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rgscl\" (UniqueName: \"kubernetes.io/projected/725cca0a-a446-473d-a797-961a298ab61a-kube-api-access-rgscl\") pod \"cilium-wkz2w\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " pod="kube-system/cilium-wkz2w" Oct 2 19:55:35.215719 kubelet[2036]: I1002 19:55:35.215641 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-xtables-lock\") pod \"cilium-wkz2w\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " pod="kube-system/cilium-wkz2w" Oct 2 19:55:35.215719 kubelet[2036]: I1002 19:55:35.215663 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4dngc\" (UniqueName: \"kubernetes.io/projected/c9903e22-2ac6-46f9-b623-ec78329692fe-kube-api-access-4dngc\") pod \"kube-proxy-kh82s\" (UID: \"c9903e22-2ac6-46f9-b623-ec78329692fe\") " pod="kube-system/kube-proxy-kh82s" Oct 2 19:55:35.215719 kubelet[2036]: I1002 19:55:35.215684 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-hostproc\") pod \"cilium-wkz2w\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " pod="kube-system/cilium-wkz2w" Oct 2 19:55:35.215719 kubelet[2036]: I1002 19:55:35.215704 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-bpf-maps\") pod \"cilium-wkz2w\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " pod="kube-system/cilium-wkz2w" Oct 2 19:55:35.215831 kubelet[2036]: I1002 19:55:35.215723 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-host-proc-sys-net\") pod \"cilium-wkz2w\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " pod="kube-system/cilium-wkz2w" Oct 2 19:55:35.215831 kubelet[2036]: I1002 19:55:35.215749 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/c9903e22-2ac6-46f9-b623-ec78329692fe-kube-proxy\") pod \"kube-proxy-kh82s\" (UID: \"c9903e22-2ac6-46f9-b623-ec78329692fe\") " pod="kube-system/kube-proxy-kh82s" Oct 2 19:55:35.280718 kubelet[2036]: I1002 19:55:35.280662 2036 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:55:35.285811 systemd[1]: Created slice kubepods-besteffort-pod57fce457_4eb1_480f_b467_93b7a2b9613c.slice. Oct 2 19:55:35.316805 kubelet[2036]: I1002 19:55:35.316734 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/57fce457-4eb1-480f-b467-93b7a2b9613c-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-2czkv\" (UID: \"57fce457-4eb1-480f-b467-93b7a2b9613c\") " pod="kube-system/cilium-operator-f59cbd8c6-2czkv" Oct 2 19:55:35.316805 kubelet[2036]: I1002 19:55:35.316815 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ps6d2\" (UniqueName: \"kubernetes.io/projected/57fce457-4eb1-480f-b467-93b7a2b9613c-kube-api-access-ps6d2\") pod \"cilium-operator-f59cbd8c6-2czkv\" (UID: \"57fce457-4eb1-480f-b467-93b7a2b9613c\") " pod="kube-system/cilium-operator-f59cbd8c6-2czkv" Oct 2 19:55:35.791891 kubelet[2036]: E1002 19:55:35.791852 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:35.801510 kubelet[2036]: E1002 19:55:35.801473 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:35.802740 env[1143]: time="2023-10-02T19:55:35.802182913Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-kh82s,Uid:c9903e22-2ac6-46f9-b623-ec78329692fe,Namespace:kube-system,Attempt:0,}" Oct 2 19:55:35.807850 kubelet[2036]: E1002 19:55:35.807828 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:35.809101 env[1143]: time="2023-10-02T19:55:35.808875812Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-wkz2w,Uid:725cca0a-a446-473d-a797-961a298ab61a,Namespace:kube-system,Attempt:0,}" Oct 2 19:55:35.821777 env[1143]: time="2023-10-02T19:55:35.821716318Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:55:35.821926 env[1143]: time="2023-10-02T19:55:35.821754999Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:55:35.821926 env[1143]: time="2023-10-02T19:55:35.821765479Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:55:35.821926 env[1143]: time="2023-10-02T19:55:35.821892322Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/256e2eb6ba5415f2791ac2a3544efaaaf1e3e08522f6f9b283f2530c8cf521c3 pid=2156 runtime=io.containerd.runc.v2 Oct 2 19:55:35.830994 env[1143]: time="2023-10-02T19:55:35.830926069Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:55:35.831133 env[1143]: time="2023-10-02T19:55:35.830969910Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:55:35.831133 env[1143]: time="2023-10-02T19:55:35.830992190Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:55:35.831427 env[1143]: time="2023-10-02T19:55:35.831383478Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993 pid=2178 runtime=io.containerd.runc.v2 Oct 2 19:55:35.833355 systemd[1]: Started cri-containerd-256e2eb6ba5415f2791ac2a3544efaaaf1e3e08522f6f9b283f2530c8cf521c3.scope. Oct 2 19:55:35.846103 systemd[1]: Started cri-containerd-1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993.scope. Oct 2 19:55:35.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.862000 audit: BPF prog-id=109 op=LOAD Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2156 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:35.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235366532656236626135343135663237393161633261333534346566 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2156 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:35.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235366532656236626135343135663237393161633261333534346566 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit: BPF prog-id=110 op=LOAD Oct 2 19:55:35.863000 audit[2166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2156 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:35.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235366532656236626135343135663237393161633261333534346566 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit: BPF prog-id=111 op=LOAD Oct 2 19:55:35.863000 audit[2166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2156 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:35.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235366532656236626135343135663237393161633261333534346566 Oct 2 19:55:35.863000 audit: BPF prog-id=111 op=UNLOAD Oct 2 19:55:35.863000 audit: BPF prog-id=110 op=UNLOAD Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.863000 audit: BPF prog-id=112 op=LOAD Oct 2 19:55:35.863000 audit[2166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2156 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:35.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235366532656236626135343135663237393161633261333534346566 Oct 2 19:55:35.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit: BPF prog-id=113 op=LOAD Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2178 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:35.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132343764353438666263636262373538626235643035383032343334 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2178 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:35.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132343764353438666263636262373538626235643035383032343334 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit: BPF prog-id=114 op=LOAD Oct 2 19:55:35.873000 audit[2193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2178 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:35.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132343764353438666263636262373538626235643035383032343334 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit: BPF prog-id=115 op=LOAD Oct 2 19:55:35.873000 audit[2193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2178 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:35.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132343764353438666263636262373538626235643035383032343334 Oct 2 19:55:35.873000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:55:35.873000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.873000 audit: BPF prog-id=116 op=LOAD Oct 2 19:55:35.873000 audit[2193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2178 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:35.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132343764353438666263636262373538626235643035383032343334 Oct 2 19:55:35.884522 env[1143]: time="2023-10-02T19:55:35.884480659Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-kh82s,Uid:c9903e22-2ac6-46f9-b623-ec78329692fe,Namespace:kube-system,Attempt:0,} returns sandbox id \"256e2eb6ba5415f2791ac2a3544efaaaf1e3e08522f6f9b283f2530c8cf521c3\"" Oct 2 19:55:35.885401 kubelet[2036]: E1002 19:55:35.885229 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:35.887552 env[1143]: time="2023-10-02T19:55:35.887515322Z" level=info msg="CreateContainer within sandbox \"256e2eb6ba5415f2791ac2a3544efaaaf1e3e08522f6f9b283f2530c8cf521c3\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:55:35.893753 env[1143]: time="2023-10-02T19:55:35.893704010Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-wkz2w,Uid:725cca0a-a446-473d-a797-961a298ab61a,Namespace:kube-system,Attempt:0,} returns sandbox id \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\"" Oct 2 19:55:35.895025 kubelet[2036]: E1002 19:55:35.894304 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:35.896106 env[1143]: time="2023-10-02T19:55:35.896072819Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:55:35.902599 env[1143]: time="2023-10-02T19:55:35.902546233Z" level=info msg="CreateContainer within sandbox \"256e2eb6ba5415f2791ac2a3544efaaaf1e3e08522f6f9b283f2530c8cf521c3\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"cf9554214eef7c0f7b65d242067f5bf91325093c755b6ffda78476b9c05333c8\"" Oct 2 19:55:35.903485 env[1143]: time="2023-10-02T19:55:35.903451652Z" level=info msg="StartContainer for \"cf9554214eef7c0f7b65d242067f5bf91325093c755b6ffda78476b9c05333c8\"" Oct 2 19:55:35.919762 systemd[1]: Started cri-containerd-cf9554214eef7c0f7b65d242067f5bf91325093c755b6ffda78476b9c05333c8.scope. Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2156 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:35.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366393535343231346565663763306637623635643234323036376635 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit: BPF prog-id=117 op=LOAD Oct 2 19:55:35.949000 audit[2238]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2156 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:35.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366393535343231346565663763306637623635643234323036376635 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit: BPF prog-id=118 op=LOAD Oct 2 19:55:35.949000 audit[2238]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2156 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:35.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366393535343231346565663763306637623635643234323036376635 Oct 2 19:55:35.949000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:55:35.949000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:35.949000 audit: BPF prog-id=119 op=LOAD Oct 2 19:55:35.949000 audit[2238]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2156 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:35.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366393535343231346565663763306637623635643234323036376635 Oct 2 19:55:35.977044 env[1143]: time="2023-10-02T19:55:35.976867413Z" level=info msg="StartContainer for \"cf9554214eef7c0f7b65d242067f5bf91325093c755b6ffda78476b9c05333c8\" returns successfully" Oct 2 19:55:36.011783 kubelet[2036]: E1002 19:55:36.011757 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:36.079000 audit[2290]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.079000 audit[2290]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd25221f0 a2=0 a3=ffffa2cf76c0 items=0 ppid=2248 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.079000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:55:36.080000 audit[2291]: NETFILTER_CFG table=mangle:60 family=10 entries=1 op=nft_register_chain pid=2291 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.080000 audit[2291]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffeea40900 a2=0 a3=ffff9e7fe6c0 items=0 ppid=2248 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.080000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:55:36.081000 audit[2292]: NETFILTER_CFG table=nat:61 family=10 entries=1 op=nft_register_chain pid=2292 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.081000 audit[2292]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffce650c80 a2=0 a3=ffffa6d4b6c0 items=0 ppid=2248 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.081000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:55:36.082000 audit[2293]: NETFILTER_CFG table=filter:62 family=10 entries=1 op=nft_register_chain pid=2293 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.082000 audit[2293]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd81367f0 a2=0 a3=ffff7fea16c0 items=0 ppid=2248 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.082000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:55:36.085000 audit[2294]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_chain pid=2294 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.085000 audit[2294]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc8809e10 a2=0 a3=ffffa0c556c0 items=0 ppid=2248 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.085000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:55:36.087000 audit[2295]: NETFILTER_CFG table=filter:64 family=2 entries=1 op=nft_register_chain pid=2295 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.087000 audit[2295]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd0102810 a2=0 a3=ffffbb67c6c0 items=0 ppid=2248 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.087000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:55:36.181000 audit[2296]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=2296 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.181000 audit[2296]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe9f2e690 a2=0 a3=ffff9faad6c0 items=0 ppid=2248 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.181000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:55:36.184000 audit[2298]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=2298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.184000 audit[2298]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffcc40f7d0 a2=0 a3=ffffb82656c0 items=0 ppid=2248 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.184000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:55:36.189915 kubelet[2036]: E1002 19:55:36.189764 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:36.189000 audit[2301]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=2301 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.189000 audit[2301]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe15b1b00 a2=0 a3=ffffa950b6c0 items=0 ppid=2248 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.189000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:55:36.190622 env[1143]: time="2023-10-02T19:55:36.190587774Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-2czkv,Uid:57fce457-4eb1-480f-b467-93b7a2b9613c,Namespace:kube-system,Attempt:0,}" Oct 2 19:55:36.190000 audit[2302]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.190000 audit[2302]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc2d50780 a2=0 a3=ffff974f56c0 items=0 ppid=2248 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.190000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:55:36.194000 audit[2304]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=2304 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.194000 audit[2304]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcc8b9830 a2=0 a3=ffff99cc96c0 items=0 ppid=2248 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.194000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:55:36.195000 audit[2305]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=2305 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.195000 audit[2305]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc494e440 a2=0 a3=ffff9a15f6c0 items=0 ppid=2248 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.195000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:55:36.200000 audit[2307]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2307 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.200000 audit[2307]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffcaded300 a2=0 a3=ffffa8bca6c0 items=0 ppid=2248 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.200000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:55:36.204000 audit[2310]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=2310 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.204000 audit[2310]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc29fd560 a2=0 a3=ffff9c5496c0 items=0 ppid=2248 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.204000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:55:36.205000 audit[2314]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=2314 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.205000 audit[2314]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffce44b6a0 a2=0 a3=ffff961f16c0 items=0 ppid=2248 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.205000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:55:36.208000 audit[2322]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=2322 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.208000 audit[2322]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffebca15b0 a2=0 a3=ffff9476e6c0 items=0 ppid=2248 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.208000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:55:36.209000 audit[2327]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=2327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.209000 audit[2327]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe1b1d860 a2=0 a3=ffffa53846c0 items=0 ppid=2248 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.209000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:55:36.212805 env[1143]: time="2023-10-02T19:55:36.212698890Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:55:36.212805 env[1143]: time="2023-10-02T19:55:36.212773572Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:55:36.212805 env[1143]: time="2023-10-02T19:55:36.212785812Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:55:36.213058 env[1143]: time="2023-10-02T19:55:36.213007536Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9 pid=2321 runtime=io.containerd.runc.v2 Oct 2 19:55:36.212000 audit[2333]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.212000 audit[2333]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffceba37d0 a2=0 a3=ffff90c926c0 items=0 ppid=2248 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.212000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:55:36.216000 audit[2337]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=2337 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.216000 audit[2337]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe2719ae0 a2=0 a3=ffffbc9146c0 items=0 ppid=2248 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.216000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:55:36.220000 audit[2345]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=2345 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.220000 audit[2345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc7e0af40 a2=0 a3=ffffb2ff46c0 items=0 ppid=2248 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.220000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:55:36.225517 systemd[1]: Started cri-containerd-695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9.scope. Oct 2 19:55:36.224000 audit[2350]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=2350 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.224000 audit[2350]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe39f6f30 a2=0 a3=ffff98fb76c0 items=0 ppid=2248 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.224000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:55:36.230000 audit[2352]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.230000 audit[2352]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffffd835230 a2=0 a3=ffff929936c0 items=0 ppid=2248 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.230000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:55:36.234000 audit[2358]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=2358 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:36.234000 audit[2358]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffd132170 a2=0 a3=ffff7fa406c0 items=0 ppid=2248 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.234000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:55:36.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit: BPF prog-id=120 op=LOAD Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2321 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639356366346636646366333765613236616436306431366437613064 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2321 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639356366346636646366333765613236616436306431366437613064 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit: BPF prog-id=121 op=LOAD Oct 2 19:55:36.245000 audit[2335]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2321 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639356366346636646366333765613236616436306431366437613064 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit: BPF prog-id=122 op=LOAD Oct 2 19:55:36.245000 audit[2335]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2321 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639356366346636646366333765613236616436306431366437613064 Oct 2 19:55:36.245000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:55:36.245000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { perfmon } for pid=2335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit[2335]: AVC avc: denied { bpf } for pid=2335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:36.245000 audit: BPF prog-id=123 op=LOAD Oct 2 19:55:36.245000 audit[2335]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2321 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639356366346636646366333765613236616436306431366437613064 Oct 2 19:55:36.246000 audit[2365]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=2365 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:55:36.246000 audit[2365]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=ffffee6693c0 a2=0 a3=ffff9f1466c0 items=0 ppid=2248 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.246000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:55:36.253000 audit[2365]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=2365 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:55:36.253000 audit[2365]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffee6693c0 a2=0 a3=ffff9f1466c0 items=0 ppid=2248 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.253000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:55:36.271791 env[1143]: time="2023-10-02T19:55:36.271741535Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-2czkv,Uid:57fce457-4eb1-480f-b467-93b7a2b9613c,Namespace:kube-system,Attempt:0,} returns sandbox id \"695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9\"" Oct 2 19:55:36.272602 kubelet[2036]: E1002 19:55:36.272566 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:36.298000 audit[2401]: NETFILTER_CFG table=filter:84 family=2 entries=12 op=nft_register_rule pid=2401 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:55:36.298000 audit[2401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=ffffe27a0a40 a2=0 a3=ffff924c76c0 items=0 ppid=2248 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.298000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:55:36.299000 audit[2401]: NETFILTER_CFG table=nat:85 family=2 entries=20 op=nft_register_rule pid=2401 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:55:36.299000 audit[2401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffe27a0a40 a2=0 a3=ffff924c76c0 items=0 ppid=2248 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.299000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:55:36.307000 audit[2402]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_chain pid=2402 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.307000 audit[2402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe26d7230 a2=0 a3=ffff8b9046c0 items=0 ppid=2248 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.307000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:55:36.310000 audit[2404]: NETFILTER_CFG table=filter:87 family=10 entries=2 op=nft_register_chain pid=2404 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.310000 audit[2404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffcee7cdc0 a2=0 a3=ffff8e74a6c0 items=0 ppid=2248 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.310000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:55:36.318000 audit[2407]: NETFILTER_CFG table=filter:88 family=10 entries=2 op=nft_register_chain pid=2407 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.318000 audit[2407]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff534ae20 a2=0 a3=ffffa982e6c0 items=0 ppid=2248 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.318000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:55:36.319000 audit[2408]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=2408 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.319000 audit[2408]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdad8f550 a2=0 a3=ffff8ae626c0 items=0 ppid=2248 pid=2408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.319000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:55:36.321000 audit[2410]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2410 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.321000 audit[2410]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffedbe7610 a2=0 a3=ffff859d26c0 items=0 ppid=2248 pid=2410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.321000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:55:36.323000 audit[2411]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_chain pid=2411 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.323000 audit[2411]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd1ace620 a2=0 a3=ffff943b96c0 items=0 ppid=2248 pid=2411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.323000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:55:36.326000 audit[2413]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_rule pid=2413 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.326000 audit[2413]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc5866f40 a2=0 a3=ffffb1a2f6c0 items=0 ppid=2248 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.326000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:55:36.331000 audit[2416]: NETFILTER_CFG table=filter:93 family=10 entries=2 op=nft_register_chain pid=2416 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.331000 audit[2416]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffe58b1d60 a2=0 a3=ffffab7b16c0 items=0 ppid=2248 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.331000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:55:36.335000 audit[2417]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=2417 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.335000 audit[2417]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff2d4a3e0 a2=0 a3=ffffafe506c0 items=0 ppid=2248 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.335000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:55:36.338000 audit[2419]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=2419 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.338000 audit[2419]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffe4026f0 a2=0 a3=ffffa43466c0 items=0 ppid=2248 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.338000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:55:36.340000 audit[2420]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_chain pid=2420 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.340000 audit[2420]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe9d9ac70 a2=0 a3=ffff840ea6c0 items=0 ppid=2248 pid=2420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.340000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:55:36.342000 audit[2422]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=2422 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.342000 audit[2422]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc4a948d0 a2=0 a3=ffff8683f6c0 items=0 ppid=2248 pid=2422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.342000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:55:36.346000 audit[2425]: NETFILTER_CFG table=filter:98 family=10 entries=1 op=nft_register_rule pid=2425 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.346000 audit[2425]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe1fd39c0 a2=0 a3=ffff9e6a36c0 items=0 ppid=2248 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.346000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:55:36.350000 audit[2428]: NETFILTER_CFG table=filter:99 family=10 entries=1 op=nft_register_rule pid=2428 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.350000 audit[2428]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffff451210 a2=0 a3=ffffa98b56c0 items=0 ppid=2248 pid=2428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.350000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:55:36.351000 audit[2429]: NETFILTER_CFG table=nat:100 family=10 entries=1 op=nft_register_chain pid=2429 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.351000 audit[2429]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff88a6940 a2=0 a3=ffff985d96c0 items=0 ppid=2248 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.351000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:55:36.354000 audit[2431]: NETFILTER_CFG table=nat:101 family=10 entries=2 op=nft_register_chain pid=2431 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.354000 audit[2431]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffdca34530 a2=0 a3=ffff8964e6c0 items=0 ppid=2248 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.354000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:55:36.357000 audit[2434]: NETFILTER_CFG table=nat:102 family=10 entries=2 op=nft_register_chain pid=2434 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:36.357000 audit[2434]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=fffff6e28100 a2=0 a3=ffff96f466c0 items=0 ppid=2248 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.357000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:55:36.363000 audit[2438]: NETFILTER_CFG table=filter:103 family=10 entries=3 op=nft_register_rule pid=2438 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:55:36.363000 audit[2438]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffec7d2110 a2=0 a3=ffff9997c6c0 items=0 ppid=2248 pid=2438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.363000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:55:36.363000 audit[2438]: NETFILTER_CFG table=nat:104 family=10 entries=10 op=nft_register_chain pid=2438 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:55:36.363000 audit[2438]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffec7d2110 a2=0 a3=ffff9997c6c0 items=0 ppid=2248 pid=2438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:36.363000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:55:37.014142 kubelet[2036]: E1002 19:55:37.013813 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:37.195209 kubelet[2036]: I1002 19:55:37.195169 2036 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-kh82s" podStartSLOduration=2.195116734 pod.CreationTimestamp="2023-10-02 19:55:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:55:37.194053314 +0000 UTC m=+15.352488800" watchObservedRunningTime="2023-10-02 19:55:37.195116734 +0000 UTC m=+15.353552220" Oct 2 19:55:39.807601 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3706528470.mount: Deactivated successfully. Oct 2 19:55:42.035199 kubelet[2036]: I1002 19:55:42.035152 2036 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:55:42.035199 kubelet[2036]: I1002 19:55:42.035208 2036 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:55:42.037179 kubelet[2036]: I1002 19:55:42.037085 2036 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:55:42.038932 kubelet[2036]: I1002 19:55:42.038903 2036 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0" size=13423150 Oct 2 19:55:42.039227 env[1143]: time="2023-10-02T19:55:42.039188219Z" level=info msg="RemoveImage \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 19:55:42.215884 env[1143]: time="2023-10-02T19:55:42.215713661Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns:v1.9.3,XXX_unrecognized:[],}" Oct 2 19:55:42.232888 env[1143]: time="2023-10-02T19:55:42.232844797Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,XXX_unrecognized:[],}" Oct 2 19:55:42.233545 env[1143]: time="2023-10-02T19:55:42.233522367Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,XXX_unrecognized:[],}" Oct 2 19:55:42.245290 env[1143]: time="2023-10-02T19:55:42.245223582Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:42.248335 env[1143]: time="2023-10-02T19:55:42.248290068Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:42.249955 env[1143]: time="2023-10-02T19:55:42.249919972Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:42.250733 env[1143]: time="2023-10-02T19:55:42.250699544Z" level=info msg="RemoveImage \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\" returns successfully" Oct 2 19:55:42.251224 kubelet[2036]: I1002 19:55:42.251137 2036 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e" size=253553 Oct 2 19:55:42.251509 env[1143]: time="2023-10-02T19:55:42.251391994Z" level=info msg="RemoveImage \"sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e\"" Oct 2 19:55:42.251509 env[1143]: time="2023-10-02T19:55:42.251443115Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 19:55:42.252412 env[1143]: time="2023-10-02T19:55:42.252216167Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:55:42.252497 env[1143]: time="2023-10-02T19:55:42.252428250Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause:3.6,XXX_unrecognized:[],}" Oct 2 19:55:42.253497 env[1143]: time="2023-10-02T19:55:42.253464905Z" level=info msg="CreateContainer within sandbox \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:55:42.255461 env[1143]: time="2023-10-02T19:55:42.255416375Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,XXX_unrecognized:[],}" Oct 2 19:55:42.256431 env[1143]: time="2023-10-02T19:55:42.256406429Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,XXX_unrecognized:[],}" Oct 2 19:55:42.268168 env[1143]: time="2023-10-02T19:55:42.268088444Z" level=info msg="RemoveImage \"sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e\" returns successfully" Oct 2 19:55:42.268459 kubelet[2036]: I1002 19:55:42.268418 2036 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb" size=80539316 Oct 2 19:55:42.268820 env[1143]: time="2023-10-02T19:55:42.268784255Z" level=info msg="RemoveImage \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\"" Oct 2 19:55:42.272609 env[1143]: time="2023-10-02T19:55:42.272572271Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd:3.5.6-0,XXX_unrecognized:[],}" Oct 2 19:55:42.273722 env[1143]: time="2023-10-02T19:55:42.273692928Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,XXX_unrecognized:[],}" Oct 2 19:55:42.274935 env[1143]: time="2023-10-02T19:55:42.274458020Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb,XXX_unrecognized:[],}" Oct 2 19:55:42.276446 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2640557287.mount: Deactivated successfully. Oct 2 19:55:42.278307 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount177906517.mount: Deactivated successfully. Oct 2 19:55:42.289580 env[1143]: time="2023-10-02T19:55:42.289324962Z" level=info msg="CreateContainer within sandbox \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1\"" Oct 2 19:55:42.290448 env[1143]: time="2023-10-02T19:55:42.290118894Z" level=info msg="StartContainer for \"2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1\"" Oct 2 19:55:42.314764 systemd[1]: Started cri-containerd-2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1.scope. Oct 2 19:55:42.344255 env[1143]: time="2023-10-02T19:55:42.344201623Z" level=info msg="RemoveImage \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\" returns successfully" Oct 2 19:55:42.370050 systemd[1]: cri-containerd-2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1.scope: Deactivated successfully. Oct 2 19:55:42.579408 env[1143]: time="2023-10-02T19:55:42.579130099Z" level=info msg="shim disconnected" id=2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1 Oct 2 19:55:42.579408 env[1143]: time="2023-10-02T19:55:42.579202900Z" level=warning msg="cleaning up after shim disconnected" id=2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1 namespace=k8s.io Oct 2 19:55:42.579408 env[1143]: time="2023-10-02T19:55:42.579213260Z" level=info msg="cleaning up dead shim" Oct 2 19:55:42.602389 env[1143]: time="2023-10-02T19:55:42.602321286Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:55:42Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2465 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:55:42Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:55:42.602718 env[1143]: time="2023-10-02T19:55:42.602605370Z" level=error msg="copy shim log" error="read /proc/self/fd/58: file already closed" Oct 2 19:55:42.606257 env[1143]: time="2023-10-02T19:55:42.606208584Z" level=error msg="Failed to pipe stdout of container \"2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1\"" error="reading from a closed fifo" Oct 2 19:55:42.606343 env[1143]: time="2023-10-02T19:55:42.606288625Z" level=error msg="Failed to pipe stderr of container \"2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1\"" error="reading from a closed fifo" Oct 2 19:55:42.608007 env[1143]: time="2023-10-02T19:55:42.607942410Z" level=error msg="StartContainer for \"2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:55:42.609462 kubelet[2036]: E1002 19:55:42.609435 2036 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1" Oct 2 19:55:42.612087 kubelet[2036]: E1002 19:55:42.612048 2036 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:55:42.612087 kubelet[2036]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:55:42.612087 kubelet[2036]: rm /hostbin/cilium-mount Oct 2 19:55:42.612087 kubelet[2036]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rgscl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:55:42.612330 kubelet[2036]: E1002 19:55:42.612117 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:55:43.024891 kubelet[2036]: E1002 19:55:43.024858 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:43.030441 env[1143]: time="2023-10-02T19:55:43.030363995Z" level=info msg="CreateContainer within sandbox \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:55:43.053957 env[1143]: time="2023-10-02T19:55:43.053887092Z" level=info msg="CreateContainer within sandbox \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36\"" Oct 2 19:55:43.054906 env[1143]: time="2023-10-02T19:55:43.054872346Z" level=info msg="StartContainer for \"8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36\"" Oct 2 19:55:43.082176 systemd[1]: Started cri-containerd-8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36.scope. Oct 2 19:55:43.136846 systemd[1]: cri-containerd-8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36.scope: Deactivated successfully. Oct 2 19:55:43.194368 env[1143]: time="2023-10-02T19:55:43.194315305Z" level=info msg="shim disconnected" id=8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36 Oct 2 19:55:43.194368 env[1143]: time="2023-10-02T19:55:43.194367186Z" level=warning msg="cleaning up after shim disconnected" id=8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36 namespace=k8s.io Oct 2 19:55:43.194368 env[1143]: time="2023-10-02T19:55:43.194376506Z" level=info msg="cleaning up dead shim" Oct 2 19:55:43.205031 env[1143]: time="2023-10-02T19:55:43.204982498Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:55:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2502 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:55:43Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:55:43.205337 env[1143]: time="2023-10-02T19:55:43.205275822Z" level=error msg="copy shim log" error="read /proc/self/fd/58: file already closed" Oct 2 19:55:43.207118 env[1143]: time="2023-10-02T19:55:43.207006207Z" level=error msg="Failed to pipe stdout of container \"8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36\"" error="reading from a closed fifo" Oct 2 19:55:43.207118 env[1143]: time="2023-10-02T19:55:43.207006087Z" level=error msg="Failed to pipe stderr of container \"8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36\"" error="reading from a closed fifo" Oct 2 19:55:43.273673 systemd[1]: run-containerd-runc-k8s.io-2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1-runc.bXaFJM.mount: Deactivated successfully. Oct 2 19:55:43.273772 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1-rootfs.mount: Deactivated successfully. Oct 2 19:55:43.334196 env[1143]: time="2023-10-02T19:55:43.333704903Z" level=error msg="StartContainer for \"8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:55:43.334640 kubelet[2036]: E1002 19:55:43.334606 2036 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36" Oct 2 19:55:43.334912 kubelet[2036]: E1002 19:55:43.334752 2036 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:55:43.334912 kubelet[2036]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:55:43.334912 kubelet[2036]: rm /hostbin/cilium-mount Oct 2 19:55:43.334912 kubelet[2036]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rgscl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:55:43.335080 kubelet[2036]: E1002 19:55:43.334798 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:55:43.998291 env[1143]: time="2023-10-02T19:55:43.997540139Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:43.998979 env[1143]: time="2023-10-02T19:55:43.998913278Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:44.000900 env[1143]: time="2023-10-02T19:55:44.000863746Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:44.001480 env[1143]: time="2023-10-02T19:55:44.001441954Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 19:55:44.004142 env[1143]: time="2023-10-02T19:55:44.004102031Z" level=info msg="CreateContainer within sandbox \"695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:55:44.014479 env[1143]: time="2023-10-02T19:55:44.014429893Z" level=info msg="CreateContainer within sandbox \"695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa\"" Oct 2 19:55:44.015852 env[1143]: time="2023-10-02T19:55:44.014907779Z" level=info msg="StartContainer for \"cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa\"" Oct 2 19:55:44.028029 kubelet[2036]: I1002 19:55:44.027756 2036 scope.go:115] "RemoveContainer" containerID="2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1" Oct 2 19:55:44.028029 kubelet[2036]: I1002 19:55:44.027940 2036 scope.go:115] "RemoveContainer" containerID="2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1" Oct 2 19:55:44.032878 env[1143]: time="2023-10-02T19:55:44.032794225Z" level=info msg="RemoveContainer for \"2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1\"" Oct 2 19:55:44.040950 env[1143]: time="2023-10-02T19:55:44.040902537Z" level=info msg="RemoveContainer for \"2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1\"" Oct 2 19:55:44.041176 env[1143]: time="2023-10-02T19:55:44.041119100Z" level=error msg="RemoveContainer for \"2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1\" failed" error="failed to set removing state for container \"2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1\": container is already in removing state" Oct 2 19:55:44.041423 kubelet[2036]: E1002 19:55:44.041342 2036 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1\": container is already in removing state" containerID="2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1" Oct 2 19:55:44.041423 kubelet[2036]: E1002 19:55:44.041397 2036 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1": container is already in removing state; Skipping pod "cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)" Oct 2 19:55:44.041544 kubelet[2036]: E1002 19:55:44.041498 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:44.041747 kubelet[2036]: E1002 19:55:44.041728 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:55:44.045102 env[1143]: time="2023-10-02T19:55:44.043800017Z" level=info msg="RemoveContainer for \"2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1\" returns successfully" Oct 2 19:55:44.055449 systemd[1]: Started cri-containerd-cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa.scope. Oct 2 19:55:44.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.079468 kernel: kauditd_printk_skb: 357 callbacks suppressed Oct 2 19:55:44.079521 kernel: audit: type=1400 audit(1696276544.077:1077): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.082884 kernel: audit: type=1400 audit(1696276544.077:1078): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.083064 kernel: audit: type=1400 audit(1696276544.077:1079): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.086416 kernel: audit: type=1400 audit(1696276544.077:1080): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.086471 kernel: audit: type=1400 audit(1696276544.077:1081): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.088135 kernel: audit: type=1400 audit(1696276544.077:1082): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.090449 kernel: audit: type=1400 audit(1696276544.077:1083): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.093936 kernel: audit: type=1400 audit(1696276544.077:1084): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.093999 kernel: audit: type=1400 audit(1696276544.077:1085): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.095503 kernel: audit: type=1400 audit(1696276544.078:1086): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.078000 audit: BPF prog-id=124 op=LOAD Oct 2 19:55:44.084000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.084000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400020db38 a2=10 a3=0 items=0 ppid=2321 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:44.084000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364626437633063356162653933616338666663653639343837313930 Oct 2 19:55:44.084000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.084000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400020d5a0 a2=3c a3=0 items=0 ppid=2321 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:44.084000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364626437633063356162653933616338666663653639343837313930 Oct 2 19:55:44.084000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.084000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.084000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.084000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.084000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.084000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.084000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.084000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.084000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.084000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.084000 audit: BPF prog-id=125 op=LOAD Oct 2 19:55:44.084000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400020d8e0 a2=78 a3=0 items=0 ppid=2321 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:44.084000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364626437633063356162653933616338666663653639343837313930 Oct 2 19:55:44.085000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.085000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.085000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.085000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.085000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.085000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.085000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.085000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.085000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.085000 audit: BPF prog-id=126 op=LOAD Oct 2 19:55:44.085000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400020d670 a2=78 a3=0 items=0 ppid=2321 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:44.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364626437633063356162653933616338666663653639343837313930 Oct 2 19:55:44.087000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:55:44.087000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:55:44.087000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.087000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.087000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.087000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.087000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.087000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.087000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.087000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.087000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.087000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:44.087000 audit: BPF prog-id=127 op=LOAD Oct 2 19:55:44.087000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400020db40 a2=78 a3=0 items=0 ppid=2321 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:44.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364626437633063356162653933616338666663653639343837313930 Oct 2 19:55:44.111489 env[1143]: time="2023-10-02T19:55:44.111452026Z" level=info msg="StartContainer for \"cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa\" returns successfully" Oct 2 19:55:44.193000 audit[2533]: AVC avc: denied { map_create } for pid=2533 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c372,c380 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c372,c380 tclass=bpf permissive=0 Oct 2 19:55:44.193000 audit[2533]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=400063f768 a2=48 a3=0 items=0 ppid=2321 pid=2533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c372,c380 key=(null) Oct 2 19:55:44.193000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:55:44.273639 systemd[1]: run-containerd-runc-k8s.io-cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa-runc.lEIa5k.mount: Deactivated successfully. Oct 2 19:55:45.036041 kubelet[2036]: E1002 19:55:45.036013 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:45.038291 kubelet[2036]: E1002 19:55:45.038262 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:45.038495 kubelet[2036]: E1002 19:55:45.038474 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:55:45.046329 kubelet[2036]: I1002 19:55:45.046293 2036 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-2czkv" podStartSLOduration=-9.22337202680852e+09 pod.CreationTimestamp="2023-10-02 19:55:35 +0000 UTC" firstStartedPulling="2023-10-02 19:55:36.274128422 +0000 UTC m=+14.432563908" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:55:45.044819753 +0000 UTC m=+23.203255239" watchObservedRunningTime="2023-10-02 19:55:45.046255572 +0000 UTC m=+23.204691018" Oct 2 19:55:45.684260 kubelet[2036]: W1002 19:55:45.683141 2036 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod725cca0a_a446_473d_a797_961a298ab61a.slice/cri-containerd-2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1.scope WatchSource:0}: container "2c15e3f6cb170f68086ce8f92695924640129a353fce1afe5f3ff73b035325a1" in namespace "k8s.io": not found Oct 2 19:55:46.040278 kubelet[2036]: E1002 19:55:46.040240 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:48.791862 kubelet[2036]: W1002 19:55:48.791823 2036 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod725cca0a_a446_473d_a797_961a298ab61a.slice/cri-containerd-8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36.scope WatchSource:0}: task 8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36 not found: not found Oct 2 19:55:48.811320 kubelet[2036]: I1002 19:55:48.811288 2036 eviction_manager.go:352] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:55:58.981933 kubelet[2036]: E1002 19:55:58.981894 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:58.985842 env[1143]: time="2023-10-02T19:55:58.985800214Z" level=info msg="CreateContainer within sandbox \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:55:58.996517 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount949985368.mount: Deactivated successfully. Oct 2 19:55:59.104460 env[1143]: time="2023-10-02T19:55:59.104408396Z" level=info msg="CreateContainer within sandbox \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403\"" Oct 2 19:55:59.105050 env[1143]: time="2023-10-02T19:55:59.105028881Z" level=info msg="StartContainer for \"c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403\"" Oct 2 19:55:59.121796 systemd[1]: Started cri-containerd-c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403.scope. Oct 2 19:55:59.153356 systemd[1]: cri-containerd-c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403.scope: Deactivated successfully. Oct 2 19:55:59.249326 env[1143]: time="2023-10-02T19:55:59.249206871Z" level=info msg="shim disconnected" id=c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403 Oct 2 19:55:59.249570 env[1143]: time="2023-10-02T19:55:59.249551754Z" level=warning msg="cleaning up after shim disconnected" id=c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403 namespace=k8s.io Oct 2 19:55:59.249629 env[1143]: time="2023-10-02T19:55:59.249616394Z" level=info msg="cleaning up dead shim" Oct 2 19:55:59.258683 env[1143]: time="2023-10-02T19:55:59.258637549Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:55:59Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2582 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:55:59Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:55:59.259088 env[1143]: time="2023-10-02T19:55:59.259035312Z" level=error msg="copy shim log" error="read /proc/self/fd/62: file already closed" Oct 2 19:55:59.261545 env[1143]: time="2023-10-02T19:55:59.261493332Z" level=error msg="Failed to pipe stderr of container \"c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403\"" error="reading from a closed fifo" Oct 2 19:55:59.262257 env[1143]: time="2023-10-02T19:55:59.262225298Z" level=error msg="Failed to pipe stdout of container \"c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403\"" error="reading from a closed fifo" Oct 2 19:55:59.263821 env[1143]: time="2023-10-02T19:55:59.263773111Z" level=error msg="StartContainer for \"c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:55:59.264036 kubelet[2036]: E1002 19:55:59.264017 2036 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403" Oct 2 19:55:59.264148 kubelet[2036]: E1002 19:55:59.264127 2036 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:55:59.264148 kubelet[2036]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:55:59.264148 kubelet[2036]: rm /hostbin/cilium-mount Oct 2 19:55:59.264148 kubelet[2036]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rgscl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:55:59.265684 kubelet[2036]: E1002 19:55:59.264180 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:55:59.993234 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403-rootfs.mount: Deactivated successfully. Oct 2 19:56:00.068969 kubelet[2036]: I1002 19:56:00.068941 2036 scope.go:115] "RemoveContainer" containerID="8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36" Oct 2 19:56:00.069395 kubelet[2036]: I1002 19:56:00.069379 2036 scope.go:115] "RemoveContainer" containerID="8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36" Oct 2 19:56:00.071294 env[1143]: time="2023-10-02T19:56:00.071244958Z" level=info msg="RemoveContainer for \"8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36\"" Oct 2 19:56:00.073976 env[1143]: time="2023-10-02T19:56:00.073756338Z" level=info msg="RemoveContainer for \"8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36\"" Oct 2 19:56:00.073976 env[1143]: time="2023-10-02T19:56:00.073834939Z" level=error msg="RemoveContainer for \"8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36\" failed" error="failed to set removing state for container \"8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36\": container is already in removing state" Oct 2 19:56:00.074175 kubelet[2036]: E1002 19:56:00.073938 2036 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36\": container is already in removing state" containerID="8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36" Oct 2 19:56:00.074175 kubelet[2036]: E1002 19:56:00.073975 2036 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36": container is already in removing state; Skipping pod "cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)" Oct 2 19:56:00.074175 kubelet[2036]: E1002 19:56:00.074058 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:00.074285 kubelet[2036]: E1002 19:56:00.074262 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:56:00.090849 env[1143]: time="2023-10-02T19:56:00.090803275Z" level=info msg="RemoveContainer for \"8967831be5682c11715f888eb70e84de2df51ed7bf30dce4fddba14c2f119a36\" returns successfully" Oct 2 19:56:02.355237 kubelet[2036]: W1002 19:56:02.355188 2036 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod725cca0a_a446_473d_a797_961a298ab61a.slice/cri-containerd-c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403.scope WatchSource:0}: task c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403 not found: not found Oct 2 19:56:13.981786 kubelet[2036]: E1002 19:56:13.981748 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:13.982284 kubelet[2036]: E1002 19:56:13.981958 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:56:17.936000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:17.938389 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:56:17.938476 kernel: audit: type=1400 audit(1696276577.936:1097): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:17.936000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:17.942730 kernel: audit: type=1400 audit(1696276577.936:1096): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:17.942774 kernel: audit: type=1300 audit(1696276577.936:1096): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000faa920 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:56:17.936000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000faa920 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:56:17.936000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400113eb40 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:56:17.948843 kernel: audit: type=1300 audit(1696276577.936:1097): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400113eb40 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:56:17.948888 kernel: audit: type=1327 audit(1696276577.936:1097): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:17.936000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:17.936000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:17.953559 kernel: audit: type=1327 audit(1696276577.936:1096): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:18.644538 kernel: audit: type=1400 audit(1696276578.636:1098): avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:18.644671 kernel: audit: type=1300 audit(1696276578.636:1098): arch=c00000b7 syscall=27 success=no exit=-13 a0=57 a1=40082bb6e0 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:56:18.644712 kernel: audit: type=1327 audit(1696276578.636:1098): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:56:18.636000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:18.636000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=57 a1=40082bb6e0 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:56:18.636000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:56:18.647688 kernel: audit: type=1400 audit(1696276578.643:1099): avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7051 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:18.643000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7051 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:18.643000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:18.643000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=57 a1=40082bb740 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:56:18.643000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:56:18.643000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=4008278720 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:56:18.643000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:56:18.643000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:18.643000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=59 a1=400ac45440 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:56:18.643000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:56:18.644000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:18.644000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=400b494660 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:56:18.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:56:18.651000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:18.651000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=57 a1=40082bb830 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:56:18.651000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:56:22.413689 systemd[1]: Started sshd@7-10.0.0.7:22-10.0.0.1:44784.service. Oct 2 19:56:22.412000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.7:22-10.0.0.1:44784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:22.449000 audit[2601]: USER_ACCT pid=2601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:22.451248 sshd[2601]: Accepted publickey for core from 10.0.0.1 port 44784 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:56:22.451000 audit[2601]: CRED_ACQ pid=2601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:22.451000 audit[2601]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee6eec60 a2=3 a3=1 items=0 ppid=1 pid=2601 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:22.451000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:22.453211 sshd[2601]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:22.456973 systemd-logind[1130]: New session 8 of user core. Oct 2 19:56:22.457470 systemd[1]: Started session-8.scope. Oct 2 19:56:22.459000 audit[2601]: USER_START pid=2601 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:22.461000 audit[2603]: CRED_ACQ pid=2603 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:22.597807 sshd[2601]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:22.598000 audit[2601]: USER_END pid=2601 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:22.598000 audit[2601]: CRED_DISP pid=2601 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:22.600858 systemd[1]: sshd@7-10.0.0.7:22-10.0.0.1:44784.service: Deactivated successfully. Oct 2 19:56:22.599000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.7:22-10.0.0.1:44784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:22.601627 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:56:22.602383 systemd-logind[1130]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:56:22.603124 systemd-logind[1130]: Removed session 8. Oct 2 19:56:25.982111 kubelet[2036]: E1002 19:56:25.982075 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:25.984975 env[1143]: time="2023-10-02T19:56:25.984933479Z" level=info msg="CreateContainer within sandbox \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:56:25.993939 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount707132993.mount: Deactivated successfully. Oct 2 19:56:25.997791 env[1143]: time="2023-10-02T19:56:25.997749549Z" level=info msg="CreateContainer within sandbox \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d\"" Oct 2 19:56:25.998253 env[1143]: time="2023-10-02T19:56:25.998220197Z" level=info msg="StartContainer for \"d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d\"" Oct 2 19:56:26.018392 systemd[1]: Started cri-containerd-d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d.scope. Oct 2 19:56:26.044733 systemd[1]: cri-containerd-d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d.scope: Deactivated successfully. Oct 2 19:56:26.064061 env[1143]: time="2023-10-02T19:56:26.064007951Z" level=info msg="shim disconnected" id=d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d Oct 2 19:56:26.064254 env[1143]: time="2023-10-02T19:56:26.064062392Z" level=warning msg="cleaning up after shim disconnected" id=d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d namespace=k8s.io Oct 2 19:56:26.064254 env[1143]: time="2023-10-02T19:56:26.064074152Z" level=info msg="cleaning up dead shim" Oct 2 19:56:26.072998 env[1143]: time="2023-10-02T19:56:26.072956508Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:56:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2638 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:56:26Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:56:26.073266 env[1143]: time="2023-10-02T19:56:26.073217032Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 19:56:26.073467 env[1143]: time="2023-10-02T19:56:26.073421436Z" level=error msg="Failed to pipe stdout of container \"d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d\"" error="reading from a closed fifo" Oct 2 19:56:26.073531 env[1143]: time="2023-10-02T19:56:26.073511718Z" level=error msg="Failed to pipe stderr of container \"d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d\"" error="reading from a closed fifo" Oct 2 19:56:26.075263 env[1143]: time="2023-10-02T19:56:26.075218747Z" level=error msg="StartContainer for \"d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:56:26.075784 kubelet[2036]: E1002 19:56:26.075492 2036 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d" Oct 2 19:56:26.075784 kubelet[2036]: E1002 19:56:26.075580 2036 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:56:26.075784 kubelet[2036]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:56:26.075784 kubelet[2036]: rm /hostbin/cilium-mount Oct 2 19:56:26.075958 kubelet[2036]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rgscl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:56:26.076014 kubelet[2036]: E1002 19:56:26.075613 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:56:26.112559 kubelet[2036]: I1002 19:56:26.112535 2036 scope.go:115] "RemoveContainer" containerID="c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403" Oct 2 19:56:26.114202 kubelet[2036]: I1002 19:56:26.113185 2036 scope.go:115] "RemoveContainer" containerID="c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403" Oct 2 19:56:26.116873 env[1143]: time="2023-10-02T19:56:26.116827437Z" level=info msg="RemoveContainer for \"c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403\"" Oct 2 19:56:26.117599 env[1143]: time="2023-10-02T19:56:26.117522769Z" level=info msg="RemoveContainer for \"c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403\"" Oct 2 19:56:26.117885 env[1143]: time="2023-10-02T19:56:26.117809574Z" level=error msg="RemoveContainer for \"c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403\" failed" error="failed to set removing state for container \"c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403\": container is already in removing state" Oct 2 19:56:26.118202 kubelet[2036]: E1002 19:56:26.118182 2036 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403\": container is already in removing state" containerID="c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403" Oct 2 19:56:26.118320 kubelet[2036]: E1002 19:56:26.118216 2036 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403": container is already in removing state; Skipping pod "cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)" Oct 2 19:56:26.118320 kubelet[2036]: E1002 19:56:26.118276 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:26.118514 kubelet[2036]: E1002 19:56:26.118497 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:56:26.119760 env[1143]: time="2023-10-02T19:56:26.119730847Z" level=info msg="RemoveContainer for \"c4a457bdbc66e385da7b9d952875dddf6141e76d95c13b5d53a2a6fbb1997403\" returns successfully" Oct 2 19:56:26.991780 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d-rootfs.mount: Deactivated successfully. Oct 2 19:56:29.168893 kubelet[2036]: W1002 19:56:29.168846 2036 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod725cca0a_a446_473d_a797_961a298ab61a.slice/cri-containerd-d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d.scope WatchSource:0}: task d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d not found: not found Oct 2 19:56:31.774000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:31.776463 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:56:31.776548 kernel: audit: type=1400 audit(1696276591.774:1113): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:31.774000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:31.780599 kernel: audit: type=1400 audit(1696276591.774:1114): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:31.780682 kernel: audit: type=1300 audit(1696276591.774:1114): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40026c0000 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:56:31.774000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40026c0000 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:56:31.783428 kernel: audit: type=1327 audit(1696276591.774:1114): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:31.774000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:31.774000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028a82c0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:56:31.788567 kernel: audit: type=1300 audit(1696276591.774:1113): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028a82c0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:56:31.788618 kernel: audit: type=1327 audit(1696276591.774:1113): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:31.774000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:31.790788 kernel: audit: type=1400 audit(1696276591.777:1115): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:31.777000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:31.792832 kernel: audit: type=1300 audit(1696276591.777:1115): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40024e1680 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:56:31.777000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40024e1680 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:56:31.795626 kernel: audit: type=1327 audit(1696276591.777:1115): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:31.777000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:31.778000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:31.800228 kernel: audit: type=1400 audit(1696276591.778:1116): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:31.778000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40016ab320 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:56:31.778000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:32.602000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.7:22-10.0.0.1:56768 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:32.603153 systemd[1]: Started sshd@8-10.0.0.7:22-10.0.0.1:56768.service. Oct 2 19:56:32.636000 audit[2651]: USER_ACCT pid=2651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:32.637940 sshd[2651]: Accepted publickey for core from 10.0.0.1 port 56768 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:56:32.637000 audit[2651]: CRED_ACQ pid=2651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:32.637000 audit[2651]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc663bb00 a2=3 a3=1 items=0 ppid=1 pid=2651 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:32.637000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:32.639066 sshd[2651]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:32.642797 systemd-logind[1130]: New session 9 of user core. Oct 2 19:56:32.643195 systemd[1]: Started session-9.scope. Oct 2 19:56:32.645000 audit[2651]: USER_START pid=2651 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:32.647000 audit[2653]: CRED_ACQ pid=2653 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:32.756734 sshd[2651]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:32.756000 audit[2651]: USER_END pid=2651 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:32.756000 audit[2651]: CRED_DISP pid=2651 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:32.759261 systemd-logind[1130]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:56:32.759418 systemd[1]: sshd@8-10.0.0.7:22-10.0.0.1:56768.service: Deactivated successfully. Oct 2 19:56:32.758000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.7:22-10.0.0.1:56768 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:32.760126 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:56:32.760835 systemd-logind[1130]: Removed session 9. Oct 2 19:56:32.982209 kubelet[2036]: E1002 19:56:32.982092 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:39.982374 kubelet[2036]: E1002 19:56:39.982335 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:40.981362 kubelet[2036]: E1002 19:56:40.981334 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:40.981568 kubelet[2036]: E1002 19:56:40.981551 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:56:42.762101 systemd[1]: Started sshd@9-10.0.0.7:22-10.0.0.1:60736.service. Oct 2 19:56:42.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.7:22-10.0.0.1:60736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:42.764749 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:56:42.764815 kernel: audit: type=1130 audit(1696276602.762:1126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.7:22-10.0.0.1:60736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:42.797000 audit[2668]: USER_ACCT pid=2668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:42.797490 sshd[2668]: Accepted publickey for core from 10.0.0.1 port 60736 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:56:42.799000 audit[2668]: CRED_ACQ pid=2668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:42.799983 sshd[2668]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:42.801668 kernel: audit: type=1101 audit(1696276602.797:1127): pid=2668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:42.801726 kernel: audit: type=1103 audit(1696276602.799:1128): pid=2668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:42.801749 kernel: audit: type=1006 audit(1696276602.799:1129): pid=2668 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:56:42.799000 audit[2668]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe375f80 a2=3 a3=1 items=0 ppid=1 pid=2668 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:42.806196 kernel: audit: type=1300 audit(1696276602.799:1129): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe375f80 a2=3 a3=1 items=0 ppid=1 pid=2668 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:42.806250 kernel: audit: type=1327 audit(1696276602.799:1129): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:42.799000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:42.805403 systemd[1]: Started session-10.scope. Oct 2 19:56:42.806061 systemd-logind[1130]: New session 10 of user core. Oct 2 19:56:42.810000 audit[2668]: USER_START pid=2668 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:42.812000 audit[2670]: CRED_ACQ pid=2670 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:42.816059 kernel: audit: type=1105 audit(1696276602.810:1130): pid=2668 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:42.816145 kernel: audit: type=1103 audit(1696276602.812:1131): pid=2670 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:42.935895 sshd[2668]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:42.936000 audit[2668]: USER_END pid=2668 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:42.936000 audit[2668]: CRED_DISP pid=2668 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:42.938838 systemd[1]: sshd@9-10.0.0.7:22-10.0.0.1:60736.service: Deactivated successfully. Oct 2 19:56:42.939795 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:56:42.941480 systemd-logind[1130]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:56:42.942140 kernel: audit: type=1106 audit(1696276602.936:1132): pid=2668 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:42.942279 kernel: audit: type=1104 audit(1696276602.936:1133): pid=2668 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:42.938000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.7:22-10.0.0.1:60736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:42.942695 systemd-logind[1130]: Removed session 10. Oct 2 19:56:45.982482 kubelet[2036]: E1002 19:56:45.982449 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:52.939000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.7:22-10.0.0.1:35860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:52.940643 systemd[1]: Started sshd@10-10.0.0.7:22-10.0.0.1:35860.service. Oct 2 19:56:52.941370 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:56:52.941412 kernel: audit: type=1130 audit(1696276612.939:1135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.7:22-10.0.0.1:35860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:52.976000 audit[2682]: USER_ACCT pid=2682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:52.978293 sshd[2682]: Accepted publickey for core from 10.0.0.1 port 35860 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:56:52.979048 sshd[2682]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:52.977000 audit[2682]: CRED_ACQ pid=2682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:52.982180 kernel: audit: type=1101 audit(1696276612.976:1136): pid=2682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:52.982247 kernel: audit: type=1103 audit(1696276612.977:1137): pid=2682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:52.982266 kernel: audit: type=1006 audit(1696276612.977:1138): pid=2682 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:56:52.982857 systemd-logind[1130]: New session 11 of user core. Oct 2 19:56:52.983366 kernel: audit: type=1300 audit(1696276612.977:1138): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5ad6770 a2=3 a3=1 items=0 ppid=1 pid=2682 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:52.977000 audit[2682]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5ad6770 a2=3 a3=1 items=0 ppid=1 pid=2682 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:52.983747 systemd[1]: Started session-11.scope. Oct 2 19:56:52.985912 kernel: audit: type=1327 audit(1696276612.977:1138): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:52.977000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:52.987000 audit[2682]: USER_START pid=2682 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:52.988000 audit[2684]: CRED_ACQ pid=2684 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:52.993204 kernel: audit: type=1105 audit(1696276612.987:1139): pid=2682 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:52.993247 kernel: audit: type=1103 audit(1696276612.988:1140): pid=2684 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:53.103335 sshd[2682]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:53.103000 audit[2682]: USER_END pid=2682 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:53.103000 audit[2682]: CRED_DISP pid=2682 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:53.108200 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:56:53.108682 kernel: audit: type=1106 audit(1696276613.103:1141): pid=2682 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:53.108748 kernel: audit: type=1104 audit(1696276613.103:1142): pid=2682 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:53.108852 systemd-logind[1130]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:56:53.108990 systemd[1]: sshd@10-10.0.0.7:22-10.0.0.1:35860.service: Deactivated successfully. Oct 2 19:56:53.108000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.7:22-10.0.0.1:35860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:53.110056 systemd-logind[1130]: Removed session 11. Oct 2 19:56:53.982023 kubelet[2036]: E1002 19:56:53.981978 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:53.982354 kubelet[2036]: E1002 19:56:53.982220 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:56:53.982602 kubelet[2036]: E1002 19:56:53.982568 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:57:03.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.7:22-10.0.0.1:51330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:03.109262 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:03.109305 kernel: audit: type=1130 audit(1696276623.107:1144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.7:22-10.0.0.1:51330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:03.108577 systemd[1]: Started sshd@11-10.0.0.7:22-10.0.0.1:51330.service. Oct 2 19:57:03.143000 audit[2697]: USER_ACCT pid=2697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:03.144719 sshd[2697]: Accepted publickey for core from 10.0.0.1 port 51330 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:57:03.146351 sshd[2697]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:03.144000 audit[2697]: CRED_ACQ pid=2697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:03.148970 kernel: audit: type=1101 audit(1696276623.143:1145): pid=2697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:03.149040 kernel: audit: type=1103 audit(1696276623.144:1146): pid=2697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:03.149067 kernel: audit: type=1006 audit(1696276623.144:1147): pid=2697 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:57:03.150430 kernel: audit: type=1300 audit(1696276623.144:1147): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdefaaae0 a2=3 a3=1 items=0 ppid=1 pid=2697 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:03.144000 audit[2697]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdefaaae0 a2=3 a3=1 items=0 ppid=1 pid=2697 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:03.150125 systemd-logind[1130]: New session 12 of user core. Oct 2 19:57:03.150595 systemd[1]: Started session-12.scope. Oct 2 19:57:03.144000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:03.153240 kernel: audit: type=1327 audit(1696276623.144:1147): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:03.153000 audit[2697]: USER_START pid=2697 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:03.154000 audit[2699]: CRED_ACQ pid=2699 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:03.159029 kernel: audit: type=1105 audit(1696276623.153:1148): pid=2697 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:03.159079 kernel: audit: type=1103 audit(1696276623.154:1149): pid=2699 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:03.263670 sshd[2697]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:03.263000 audit[2697]: USER_END pid=2697 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:03.266290 systemd[1]: sshd@11-10.0.0.7:22-10.0.0.1:51330.service: Deactivated successfully. Oct 2 19:57:03.267048 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:57:03.263000 audit[2697]: CRED_DISP pid=2697 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:03.267593 systemd-logind[1130]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:57:03.268233 systemd-logind[1130]: Removed session 12. Oct 2 19:57:03.269485 kernel: audit: type=1106 audit(1696276623.263:1150): pid=2697 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:03.269550 kernel: audit: type=1104 audit(1696276623.263:1151): pid=2697 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:03.265000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.7:22-10.0.0.1:51330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:05.982056 kubelet[2036]: E1002 19:57:05.982019 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:57:08.981357 kubelet[2036]: E1002 19:57:08.981315 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:57:08.983209 env[1143]: time="2023-10-02T19:57:08.983148932Z" level=info msg="CreateContainer within sandbox \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:57:08.996783 env[1143]: time="2023-10-02T19:57:08.996408455Z" level=info msg="CreateContainer within sandbox \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95\"" Oct 2 19:57:08.997773 env[1143]: time="2023-10-02T19:57:08.996988020Z" level=info msg="StartContainer for \"48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95\"" Oct 2 19:57:09.016517 systemd[1]: Started cri-containerd-48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95.scope. Oct 2 19:57:09.039417 systemd[1]: cri-containerd-48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95.scope: Deactivated successfully. Oct 2 19:57:09.051717 env[1143]: time="2023-10-02T19:57:09.051662723Z" level=info msg="shim disconnected" id=48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95 Oct 2 19:57:09.051717 env[1143]: time="2023-10-02T19:57:09.051711683Z" level=warning msg="cleaning up after shim disconnected" id=48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95 namespace=k8s.io Oct 2 19:57:09.051717 env[1143]: time="2023-10-02T19:57:09.051729323Z" level=info msg="cleaning up dead shim" Oct 2 19:57:09.062252 env[1143]: time="2023-10-02T19:57:09.061688335Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:57:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2737 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:57:09Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:57:09.062252 env[1143]: time="2023-10-02T19:57:09.061946457Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 19:57:09.062408 env[1143]: time="2023-10-02T19:57:09.062244780Z" level=error msg="Failed to pipe stderr of container \"48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95\"" error="reading from a closed fifo" Oct 2 19:57:09.062536 env[1143]: time="2023-10-02T19:57:09.062491342Z" level=error msg="Failed to pipe stdout of container \"48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95\"" error="reading from a closed fifo" Oct 2 19:57:09.064950 env[1143]: time="2023-10-02T19:57:09.064893604Z" level=error msg="StartContainer for \"48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:57:09.065161 kubelet[2036]: E1002 19:57:09.065123 2036 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95" Oct 2 19:57:09.065283 kubelet[2036]: E1002 19:57:09.065251 2036 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:57:09.065283 kubelet[2036]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:57:09.065283 kubelet[2036]: rm /hostbin/cilium-mount Oct 2 19:57:09.065283 kubelet[2036]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rgscl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:57:09.065421 kubelet[2036]: E1002 19:57:09.065292 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:57:09.181883 kubelet[2036]: I1002 19:57:09.181150 2036 scope.go:115] "RemoveContainer" containerID="d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d" Oct 2 19:57:09.181883 kubelet[2036]: I1002 19:57:09.181493 2036 scope.go:115] "RemoveContainer" containerID="d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d" Oct 2 19:57:09.185317 env[1143]: time="2023-10-02T19:57:09.184725865Z" level=info msg="RemoveContainer for \"d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d\"" Oct 2 19:57:09.185855 env[1143]: time="2023-10-02T19:57:09.185827756Z" level=info msg="RemoveContainer for \"d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d\"" Oct 2 19:57:09.186082 env[1143]: time="2023-10-02T19:57:09.186048238Z" level=error msg="RemoveContainer for \"d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d\" failed" error="failed to set removing state for container \"d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d\": container is already in removing state" Oct 2 19:57:09.187523 env[1143]: time="2023-10-02T19:57:09.187494491Z" level=info msg="RemoveContainer for \"d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d\" returns successfully" Oct 2 19:57:09.191837 kubelet[2036]: E1002 19:57:09.191329 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:57:09.191837 kubelet[2036]: E1002 19:57:09.191544 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:57:09.191837 kubelet[2036]: E1002 19:57:09.191754 2036 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d\": container is already in removing state" containerID="d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d" Oct 2 19:57:09.191837 kubelet[2036]: I1002 19:57:09.191782 2036 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d} err="rpc error: code = Unknown desc = failed to set removing state for container \"d345ed70a9e2dd54e481072916ca3985c7beb8c5f98b5b80ea0e65bae356aa8d\": container is already in removing state" Oct 2 19:57:09.989560 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95-rootfs.mount: Deactivated successfully. Oct 2 19:57:12.157051 kubelet[2036]: W1002 19:57:12.157006 2036 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod725cca0a_a446_473d_a797_961a298ab61a.slice/cri-containerd-48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95.scope WatchSource:0}: task 48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95 not found: not found Oct 2 19:57:13.268783 systemd[1]: Started sshd@12-10.0.0.7:22-10.0.0.1:60912.service. Oct 2 19:57:13.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.7:22-10.0.0.1:60912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:13.269428 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:13.269490 kernel: audit: type=1130 audit(1696276633.267:1153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.7:22-10.0.0.1:60912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:13.304000 audit[2751]: USER_ACCT pid=2751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:13.305468 sshd[2751]: Accepted publickey for core from 10.0.0.1 port 60912 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:57:13.307013 sshd[2751]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:13.305000 audit[2751]: CRED_ACQ pid=2751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:13.309956 kernel: audit: type=1101 audit(1696276633.304:1154): pid=2751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:13.310012 kernel: audit: type=1103 audit(1696276633.305:1155): pid=2751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:13.310033 kernel: audit: type=1006 audit(1696276633.305:1156): pid=2751 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:57:13.305000 audit[2751]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd97adc20 a2=3 a3=1 items=0 ppid=1 pid=2751 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:13.311355 systemd[1]: Started session-13.scope. Oct 2 19:57:13.311753 systemd-logind[1130]: New session 13 of user core. Oct 2 19:57:13.313551 kernel: audit: type=1300 audit(1696276633.305:1156): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd97adc20 a2=3 a3=1 items=0 ppid=1 pid=2751 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:13.313619 kernel: audit: type=1327 audit(1696276633.305:1156): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:13.305000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:13.316000 audit[2751]: USER_START pid=2751 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:13.317000 audit[2753]: CRED_ACQ pid=2753 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:13.321901 kernel: audit: type=1105 audit(1696276633.316:1157): pid=2751 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:13.321981 kernel: audit: type=1103 audit(1696276633.317:1158): pid=2753 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:13.425702 sshd[2751]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:13.425000 audit[2751]: USER_END pid=2751 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:13.428485 systemd[1]: sshd@12-10.0.0.7:22-10.0.0.1:60912.service: Deactivated successfully. Oct 2 19:57:13.429248 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:57:13.425000 audit[2751]: CRED_DISP pid=2751 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:13.429869 systemd-logind[1130]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:57:13.430507 systemd-logind[1130]: Removed session 13. Oct 2 19:57:13.431337 kernel: audit: type=1106 audit(1696276633.425:1159): pid=2751 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:13.431410 kernel: audit: type=1104 audit(1696276633.425:1160): pid=2751 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:13.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.7:22-10.0.0.1:60912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:17.937000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:17.937000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002632db0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:57:17.937000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:17.937000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:17.937000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400295d960 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:57:17.937000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:18.637000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:18.639314 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:57:18.639361 kernel: audit: type=1400 audit(1696276638.637:1164): avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:18.637000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4008a59a40 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:57:18.644211 kernel: audit: type=1300 audit(1696276638.637:1164): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4008a59a40 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:57:18.644267 kernel: audit: type=1327 audit(1696276638.637:1164): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:57:18.637000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:57:18.644000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7051 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:18.648662 kernel: audit: type=1400 audit(1696276638.644:1165): avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7051 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:18.648715 kernel: audit: type=1400 audit(1696276638.644:1166): avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:18.644000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:18.644000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40089e5c50 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:57:18.653421 kernel: audit: type=1300 audit(1696276638.644:1165): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40089e5c50 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:57:18.653464 kernel: audit: type=1300 audit(1696276638.644:1166): arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=4008a59aa0 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:57:18.644000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=4008a59aa0 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:57:18.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:57:18.658408 kernel: audit: type=1327 audit(1696276638.644:1165): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:57:18.658438 kernel: audit: type=1327 audit(1696276638.644:1166): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:57:18.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:57:18.644000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:18.662799 kernel: audit: type=1400 audit(1696276638.644:1167): avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:18.644000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4002b55d00 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:57:18.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:57:18.644000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:18.644000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4002b55d40 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:57:18.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:57:18.651000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:18.651000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4008a3cf30 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:57:18.651000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:57:21.982251 kubelet[2036]: E1002 19:57:21.982208 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:57:21.982572 kubelet[2036]: E1002 19:57:21.982461 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:57:22.006469 kubelet[2036]: E1002 19:57:22.006439 2036 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:57:22.020216 kubelet[2036]: E1002 19:57:22.020192 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:23.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.7:22-10.0.0.1:42698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:23.430954 systemd[1]: Started sshd@13-10.0.0.7:22-10.0.0.1:42698.service. Oct 2 19:57:23.464000 audit[2768]: USER_ACCT pid=2768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:23.465751 sshd[2768]: Accepted publickey for core from 10.0.0.1 port 42698 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:57:23.465000 audit[2768]: CRED_ACQ pid=2768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:23.465000 audit[2768]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda699460 a2=3 a3=1 items=0 ppid=1 pid=2768 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:23.465000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:23.466930 sshd[2768]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:23.470899 systemd-logind[1130]: New session 14 of user core. Oct 2 19:57:23.471573 systemd[1]: Started session-14.scope. Oct 2 19:57:23.475000 audit[2768]: USER_START pid=2768 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:23.479000 audit[2770]: CRED_ACQ pid=2770 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:23.603755 sshd[2768]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:23.604000 audit[2768]: USER_END pid=2768 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:23.604000 audit[2768]: CRED_DISP pid=2768 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:23.607317 systemd[1]: sshd@13-10.0.0.7:22-10.0.0.1:42698.service: Deactivated successfully. Oct 2 19:57:23.608266 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:57:23.606000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.7:22-10.0.0.1:42698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:23.609080 systemd-logind[1130]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:57:23.609778 systemd-logind[1130]: Removed session 14. Oct 2 19:57:27.021395 kubelet[2036]: E1002 19:57:27.021361 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:31.776000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:31.780060 kernel: kauditd_printk_skb: 19 callbacks suppressed Oct 2 19:57:31.780217 kernel: audit: type=1400 audit(1696276651.776:1179): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:31.780249 kernel: audit: type=1300 audit(1696276651.776:1179): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012a0d80 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:57:31.776000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012a0d80 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:57:31.776000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:31.785208 kernel: audit: type=1327 audit(1696276651.776:1179): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:31.785263 kernel: audit: type=1400 audit(1696276651.776:1180): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:31.776000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:31.788702 kernel: audit: type=1300 audit(1696276651.776:1180): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400153a480 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:57:31.776000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400153a480 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:57:31.776000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:31.792503 kernel: audit: type=1327 audit(1696276651.776:1180): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:31.792551 kernel: audit: type=1400 audit(1696276651.777:1181): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:31.777000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:31.777000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40013f94c0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:57:31.797366 kernel: audit: type=1300 audit(1696276651.777:1181): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40013f94c0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:57:31.797426 kernel: audit: type=1327 audit(1696276651.777:1181): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:31.777000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:31.779000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:31.801791 kernel: audit: type=1400 audit(1696276651.779:1182): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:31.779000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012a1340 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:57:31.779000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:32.022004 kubelet[2036]: E1002 19:57:32.021980 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:33.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.7:22-10.0.0.1:54250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:33.608363 systemd[1]: Started sshd@14-10.0.0.7:22-10.0.0.1:54250.service. Oct 2 19:57:33.643000 audit[2782]: USER_ACCT pid=2782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:33.645391 sshd[2782]: Accepted publickey for core from 10.0.0.1 port 54250 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:57:33.645000 audit[2782]: CRED_ACQ pid=2782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:33.645000 audit[2782]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe34f9940 a2=3 a3=1 items=0 ppid=1 pid=2782 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:33.645000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:33.646740 sshd[2782]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:33.650927 systemd-logind[1130]: New session 15 of user core. Oct 2 19:57:33.651186 systemd[1]: Started session-15.scope. Oct 2 19:57:33.653000 audit[2782]: USER_START pid=2782 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:33.655000 audit[2784]: CRED_ACQ pid=2784 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:33.763919 sshd[2782]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:33.763000 audit[2782]: USER_END pid=2782 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:33.764000 audit[2782]: CRED_DISP pid=2782 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:33.766609 systemd[1]: sshd@14-10.0.0.7:22-10.0.0.1:54250.service: Deactivated successfully. Oct 2 19:57:33.767454 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:57:33.765000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.7:22-10.0.0.1:54250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:33.768111 systemd-logind[1130]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:57:33.768768 systemd-logind[1130]: Removed session 15. Oct 2 19:57:35.981557 kubelet[2036]: E1002 19:57:35.981522 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:57:35.981902 kubelet[2036]: E1002 19:57:35.981739 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:57:37.024142 kubelet[2036]: E1002 19:57:37.024103 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:42.026095 kubelet[2036]: E1002 19:57:42.026046 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:43.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.7:22-10.0.0.1:42384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:43.769595 systemd[1]: Started sshd@15-10.0.0.7:22-10.0.0.1:42384.service. Oct 2 19:57:43.770276 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:57:43.770313 kernel: audit: type=1130 audit(1696276663.768:1192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.7:22-10.0.0.1:42384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:43.803000 audit[2798]: USER_ACCT pid=2798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:43.804961 sshd[2798]: Accepted publickey for core from 10.0.0.1 port 42384 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:57:43.804000 audit[2798]: CRED_ACQ pid=2798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:43.806412 sshd[2798]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:43.809288 kernel: audit: type=1101 audit(1696276663.803:1193): pid=2798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:43.809374 kernel: audit: type=1103 audit(1696276663.804:1194): pid=2798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:43.809402 kernel: audit: type=1006 audit(1696276663.804:1195): pid=2798 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:57:43.810505 kernel: audit: type=1300 audit(1696276663.804:1195): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5cff6c0 a2=3 a3=1 items=0 ppid=1 pid=2798 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:43.804000 audit[2798]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5cff6c0 a2=3 a3=1 items=0 ppid=1 pid=2798 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:43.810993 systemd-logind[1130]: New session 16 of user core. Oct 2 19:57:43.811267 systemd[1]: Started session-16.scope. Oct 2 19:57:43.804000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:43.813503 kernel: audit: type=1327 audit(1696276663.804:1195): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:43.814000 audit[2798]: USER_START pid=2798 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:43.818193 kernel: audit: type=1105 audit(1696276663.814:1196): pid=2798 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:43.818277 kernel: audit: type=1103 audit(1696276663.815:1197): pid=2800 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:43.815000 audit[2800]: CRED_ACQ pid=2800 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:43.928782 sshd[2798]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:43.928000 audit[2798]: USER_END pid=2798 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:43.930830 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:57:43.931412 systemd-logind[1130]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:57:43.931541 systemd[1]: sshd@15-10.0.0.7:22-10.0.0.1:42384.service: Deactivated successfully. Oct 2 19:57:43.928000 audit[2798]: CRED_DISP pid=2798 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:43.932569 systemd-logind[1130]: Removed session 16. Oct 2 19:57:43.934463 kernel: audit: type=1106 audit(1696276663.928:1198): pid=2798 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:43.934540 kernel: audit: type=1104 audit(1696276663.928:1199): pid=2798 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:43.928000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.7:22-10.0.0.1:42384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:47.027607 kubelet[2036]: E1002 19:57:47.027529 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:50.981842 kubelet[2036]: E1002 19:57:50.981806 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:57:50.982153 kubelet[2036]: E1002 19:57:50.982030 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:57:52.028879 kubelet[2036]: E1002 19:57:52.028855 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:53.932709 systemd[1]: Started sshd@16-10.0.0.7:22-10.0.0.1:54562.service. Oct 2 19:57:53.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.7:22-10.0.0.1:54562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:53.933427 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:53.933480 kernel: audit: type=1130 audit(1696276673.931:1201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.7:22-10.0.0.1:54562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:53.965000 audit[2813]: USER_ACCT pid=2813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:53.967230 sshd[2813]: Accepted publickey for core from 10.0.0.1 port 54562 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:57:53.968885 sshd[2813]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:53.967000 audit[2813]: CRED_ACQ pid=2813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:53.972106 kernel: audit: type=1101 audit(1696276673.965:1202): pid=2813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:53.972166 kernel: audit: type=1103 audit(1696276673.967:1203): pid=2813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:53.972193 kernel: audit: type=1006 audit(1696276673.967:1204): pid=2813 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:57:53.973270 systemd[1]: Started session-17.scope. Oct 2 19:57:53.967000 audit[2813]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb418a30 a2=3 a3=1 items=0 ppid=1 pid=2813 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:53.973958 systemd-logind[1130]: New session 17 of user core. Oct 2 19:57:53.975992 kernel: audit: type=1300 audit(1696276673.967:1204): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb418a30 a2=3 a3=1 items=0 ppid=1 pid=2813 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:53.976356 kernel: audit: type=1327 audit(1696276673.967:1204): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:53.967000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:53.979000 audit[2813]: USER_START pid=2813 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:53.981000 audit[2815]: CRED_ACQ pid=2815 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:53.984172 kernel: audit: type=1105 audit(1696276673.979:1205): pid=2813 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:53.987181 kernel: audit: type=1103 audit(1696276673.981:1206): pid=2815 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:54.112422 sshd[2813]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:54.114000 audit[2813]: USER_END pid=2813 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:54.114000 audit[2813]: CRED_DISP pid=2813 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:54.118356 systemd[1]: Started sshd@17-10.0.0.7:22-10.0.0.1:54564.service. Oct 2 19:57:54.118961 systemd[1]: sshd@16-10.0.0.7:22-10.0.0.1:54562.service: Deactivated successfully. Oct 2 19:57:54.119931 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:57:54.120591 kernel: audit: type=1106 audit(1696276674.114:1207): pid=2813 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:54.120648 kernel: audit: type=1104 audit(1696276674.114:1208): pid=2813 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:54.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.7:22-10.0.0.1:54564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:54.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.7:22-10.0.0.1:54562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:54.120962 systemd-logind[1130]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:57:54.122309 systemd-logind[1130]: Removed session 17. Oct 2 19:57:54.151000 audit[2826]: USER_ACCT pid=2826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:54.153293 sshd[2826]: Accepted publickey for core from 10.0.0.1 port 54564 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:57:54.153000 audit[2826]: CRED_ACQ pid=2826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:54.153000 audit[2826]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa665d40 a2=3 a3=1 items=0 ppid=1 pid=2826 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:54.153000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:54.154524 sshd[2826]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:54.158366 systemd-logind[1130]: New session 18 of user core. Oct 2 19:57:54.158799 systemd[1]: Started session-18.scope. Oct 2 19:57:54.162000 audit[2826]: USER_START pid=2826 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:54.163000 audit[2829]: CRED_ACQ pid=2829 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:54.943631 sshd[2826]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:54.943000 audit[2826]: USER_END pid=2826 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:54.943000 audit[2826]: CRED_DISP pid=2826 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:54.946227 systemd[1]: Started sshd@18-10.0.0.7:22-10.0.0.1:54572.service. Oct 2 19:57:54.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.7:22-10.0.0.1:54572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:54.949883 systemd-logind[1130]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:57:54.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.7:22-10.0.0.1:54564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:54.950954 systemd[1]: sshd@17-10.0.0.7:22-10.0.0.1:54564.service: Deactivated successfully. Oct 2 19:57:54.951742 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:57:54.957238 systemd-logind[1130]: Removed session 18. Oct 2 19:57:54.981702 kubelet[2036]: E1002 19:57:54.981674 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:57:54.982000 audit[2838]: USER_ACCT pid=2838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:54.983580 sshd[2838]: Accepted publickey for core from 10.0.0.1 port 54572 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:57:54.984000 audit[2838]: CRED_ACQ pid=2838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:54.984000 audit[2838]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1874160 a2=3 a3=1 items=0 ppid=1 pid=2838 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:54.984000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:54.986233 sshd[2838]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:54.990952 systemd[1]: Started session-19.scope. Oct 2 19:57:54.991376 systemd-logind[1130]: New session 19 of user core. Oct 2 19:57:54.994000 audit[2838]: USER_START pid=2838 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:54.995000 audit[2841]: CRED_ACQ pid=2841 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:55.104134 sshd[2838]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:55.103000 audit[2838]: USER_END pid=2838 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:55.104000 audit[2838]: CRED_DISP pid=2838 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:55.106576 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:57:55.107193 systemd-logind[1130]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:57:55.107503 systemd[1]: sshd@18-10.0.0.7:22-10.0.0.1:54572.service: Deactivated successfully. Oct 2 19:57:55.106000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.7:22-10.0.0.1:54572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:55.108409 systemd-logind[1130]: Removed session 19. Oct 2 19:57:57.030427 kubelet[2036]: E1002 19:57:57.030396 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:02.031875 kubelet[2036]: E1002 19:58:02.031851 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:04.981819 kubelet[2036]: E1002 19:58:04.981782 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:58:04.982189 kubelet[2036]: E1002 19:58:04.982045 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:58:05.109313 systemd[1]: Started sshd@19-10.0.0.7:22-10.0.0.1:39526.service. Oct 2 19:58:05.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.7:22-10.0.0.1:39526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:05.110254 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:58:05.110328 kernel: audit: type=1130 audit(1696276685.108:1228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.7:22-10.0.0.1:39526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:05.142000 audit[2852]: USER_ACCT pid=2852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:05.143667 sshd[2852]: Accepted publickey for core from 10.0.0.1 port 39526 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:58:05.145196 sshd[2852]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:05.143000 audit[2852]: CRED_ACQ pid=2852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:05.148001 kernel: audit: type=1101 audit(1696276685.142:1229): pid=2852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:05.148076 kernel: audit: type=1103 audit(1696276685.143:1230): pid=2852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:05.148099 kernel: audit: type=1006 audit(1696276685.143:1231): pid=2852 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:58:05.143000 audit[2852]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1a5e390 a2=3 a3=1 items=0 ppid=1 pid=2852 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:05.149483 systemd-logind[1130]: New session 20 of user core. Oct 2 19:58:05.149881 systemd[1]: Started session-20.scope. Oct 2 19:58:05.151520 kernel: audit: type=1300 audit(1696276685.143:1231): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1a5e390 a2=3 a3=1 items=0 ppid=1 pid=2852 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:05.151588 kernel: audit: type=1327 audit(1696276685.143:1231): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:05.143000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:05.152000 audit[2852]: USER_START pid=2852 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:05.154000 audit[2854]: CRED_ACQ pid=2854 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:05.158782 kernel: audit: type=1105 audit(1696276685.152:1232): pid=2852 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:05.158832 kernel: audit: type=1103 audit(1696276685.154:1233): pid=2854 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:05.259437 sshd[2852]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:05.259000 audit[2852]: USER_END pid=2852 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:05.262253 systemd[1]: sshd@19-10.0.0.7:22-10.0.0.1:39526.service: Deactivated successfully. Oct 2 19:58:05.262995 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:58:05.259000 audit[2852]: CRED_DISP pid=2852 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:05.263537 systemd-logind[1130]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:58:05.264228 systemd-logind[1130]: Removed session 20. Oct 2 19:58:05.265624 kernel: audit: type=1106 audit(1696276685.259:1234): pid=2852 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:05.265678 kernel: audit: type=1104 audit(1696276685.259:1235): pid=2852 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:05.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.7:22-10.0.0.1:39526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:06.981483 kubelet[2036]: E1002 19:58:06.981434 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:58:07.033847 kubelet[2036]: E1002 19:58:07.033806 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:11.981842 kubelet[2036]: E1002 19:58:11.981805 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:58:12.035279 kubelet[2036]: E1002 19:58:12.035237 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:13.981679 kubelet[2036]: E1002 19:58:13.981648 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:58:15.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.7:22-10.0.0.1:58616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:15.264690 systemd[1]: Started sshd@20-10.0.0.7:22-10.0.0.1:58616.service. Oct 2 19:58:15.265432 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:15.265468 kernel: audit: type=1130 audit(1696276695.263:1237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.7:22-10.0.0.1:58616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:15.313000 audit[2867]: USER_ACCT pid=2867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:15.315364 sshd[2867]: Accepted publickey for core from 10.0.0.1 port 58616 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:58:15.316670 sshd[2867]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:15.322120 kernel: audit: type=1101 audit(1696276695.313:1238): pid=2867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:15.322210 kernel: audit: type=1103 audit(1696276695.315:1239): pid=2867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:15.322240 kernel: audit: type=1006 audit(1696276695.315:1240): pid=2867 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:58:15.322259 kernel: audit: type=1300 audit(1696276695.315:1240): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe21365a0 a2=3 a3=1 items=0 ppid=1 pid=2867 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:15.315000 audit[2867]: CRED_ACQ pid=2867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:15.315000 audit[2867]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe21365a0 a2=3 a3=1 items=0 ppid=1 pid=2867 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:15.322873 kernel: audit: type=1327 audit(1696276695.315:1240): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:15.315000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:15.324809 systemd-logind[1130]: New session 21 of user core. Oct 2 19:58:15.325279 systemd[1]: Started session-21.scope. Oct 2 19:58:15.331000 audit[2867]: USER_START pid=2867 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:15.332000 audit[2869]: CRED_ACQ pid=2869 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:15.336890 kernel: audit: type=1105 audit(1696276695.331:1241): pid=2867 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:15.336954 kernel: audit: type=1103 audit(1696276695.332:1242): pid=2869 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:15.448798 sshd[2867]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:15.449000 audit[2867]: USER_END pid=2867 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:15.452260 systemd[1]: sshd@20-10.0.0.7:22-10.0.0.1:58616.service: Deactivated successfully. Oct 2 19:58:15.453058 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:58:15.449000 audit[2867]: CRED_DISP pid=2867 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:15.453838 systemd-logind[1130]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:58:15.454681 systemd-logind[1130]: Removed session 21. Oct 2 19:58:15.455537 kernel: audit: type=1106 audit(1696276695.449:1243): pid=2867 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:15.455601 kernel: audit: type=1104 audit(1696276695.449:1244): pid=2867 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:15.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.7:22-10.0.0.1:58616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:15.981359 kubelet[2036]: E1002 19:58:15.981320 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:58:15.981678 kubelet[2036]: E1002 19:58:15.981555 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:58:17.036359 kubelet[2036]: E1002 19:58:17.036321 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:17.938000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:17.938000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400238b0e0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:58:17.938000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:17.938000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:17.938000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400113eb70 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:58:17.938000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:18.638000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:18.638000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400b4d0db0 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:58:18.638000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:58:18.644000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:18.644000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4002bc3620 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:58:18.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:58:18.644000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:18.644000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4002a80b40 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:58:18.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:58:18.644000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:18.644000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400b4d0de0 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:58:18.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:58:18.644000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7051 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:18.644000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400b357590 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:58:18.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:58:18.652000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:18.652000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400b866420 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:58:18.652000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:58:22.037849 kubelet[2036]: E1002 19:58:22.037814 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:22.982828 kubelet[2036]: E1002 19:58:22.982795 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:58:25.453101 systemd[1]: Started sshd@21-10.0.0.7:22-10.0.0.1:52174.service. Oct 2 19:58:25.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.7:22-10.0.0.1:52174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:25.455932 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:58:25.456030 kernel: audit: type=1130 audit(1696276705.452:1254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.7:22-10.0.0.1:52174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:25.487000 audit[2882]: USER_ACCT pid=2882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:25.489255 sshd[2882]: Accepted publickey for core from 10.0.0.1 port 52174 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:58:25.490428 sshd[2882]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:25.488000 audit[2882]: CRED_ACQ pid=2882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:25.493736 kernel: audit: type=1101 audit(1696276705.487:1255): pid=2882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:25.493807 kernel: audit: type=1103 audit(1696276705.488:1256): pid=2882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:25.494886 kernel: audit: type=1006 audit(1696276705.488:1257): pid=2882 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:58:25.494478 systemd-logind[1130]: New session 22 of user core. Oct 2 19:58:25.495110 kernel: audit: type=1300 audit(1696276705.488:1257): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3783ed0 a2=3 a3=1 items=0 ppid=1 pid=2882 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:25.488000 audit[2882]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3783ed0 a2=3 a3=1 items=0 ppid=1 pid=2882 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:25.494920 systemd[1]: Started session-22.scope. Oct 2 19:58:25.488000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:25.498575 kernel: audit: type=1327 audit(1696276705.488:1257): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:25.500041 kernel: audit: type=1105 audit(1696276705.498:1258): pid=2882 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:25.498000 audit[2882]: USER_START pid=2882 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:25.500000 audit[2884]: CRED_ACQ pid=2884 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:25.504323 kernel: audit: type=1103 audit(1696276705.500:1259): pid=2884 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:25.624219 sshd[2882]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:25.624000 audit[2882]: USER_END pid=2882 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:25.627190 systemd-logind[1130]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:58:25.627351 systemd[1]: sshd@21-10.0.0.7:22-10.0.0.1:52174.service: Deactivated successfully. Oct 2 19:58:25.624000 audit[2882]: CRED_DISP pid=2882 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:25.628080 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:58:25.629425 systemd-logind[1130]: Removed session 22. Oct 2 19:58:25.630086 kernel: audit: type=1106 audit(1696276705.624:1260): pid=2882 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:25.630237 kernel: audit: type=1104 audit(1696276705.624:1261): pid=2882 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:25.626000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.7:22-10.0.0.1:52174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:27.038907 kubelet[2036]: E1002 19:58:27.038876 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:28.982171 kubelet[2036]: E1002 19:58:28.982131 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:58:28.982480 kubelet[2036]: E1002 19:58:28.982366 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:58:31.777000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:31.781261 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:31.781311 kernel: audit: type=1400 audit(1696276711.777:1263): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:31.781338 kernel: audit: type=1400 audit(1696276711.777:1264): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:31.777000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:31.783342 kernel: audit: type=1300 audit(1696276711.777:1264): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40026c12e0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:58:31.777000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40026c12e0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:58:31.786206 kernel: audit: type=1300 audit(1696276711.777:1263): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40024e0300 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:58:31.777000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40024e0300 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:58:31.777000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:31.791399 kernel: audit: type=1327 audit(1696276711.777:1264): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:31.791474 kernel: audit: type=1327 audit(1696276711.777:1263): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:31.777000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:31.778000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:31.795828 kernel: audit: type=1400 audit(1696276711.778:1265): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:31.795882 kernel: audit: type=1300 audit(1696276711.778:1265): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40024e0320 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:58:31.778000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40024e0320 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:58:31.798653 kernel: audit: type=1327 audit(1696276711.778:1265): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:31.778000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:31.800995 kernel: audit: type=1400 audit(1696276711.779:1266): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:31.779000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:31.779000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002358420 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:58:31.779000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:32.041521 kubelet[2036]: E1002 19:58:32.040725 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:35.628811 systemd[1]: Started sshd@22-10.0.0.7:22-10.0.0.1:55764.service. Oct 2 19:58:35.627000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.7:22-10.0.0.1:55764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:35.664000 audit[2895]: USER_ACCT pid=2895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:35.665962 sshd[2895]: Accepted publickey for core from 10.0.0.1 port 55764 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:58:35.665000 audit[2895]: CRED_ACQ pid=2895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:35.665000 audit[2895]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffffce1b80 a2=3 a3=1 items=0 ppid=1 pid=2895 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:35.665000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:35.667262 sshd[2895]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:35.670602 systemd-logind[1130]: New session 23 of user core. Oct 2 19:58:35.671496 systemd[1]: Started session-23.scope. Oct 2 19:58:35.674000 audit[2895]: USER_START pid=2895 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:35.676000 audit[2897]: CRED_ACQ pid=2897 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:35.787617 sshd[2895]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:35.787000 audit[2895]: USER_END pid=2895 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:35.787000 audit[2895]: CRED_DISP pid=2895 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:35.790132 systemd[1]: sshd@22-10.0.0.7:22-10.0.0.1:55764.service: Deactivated successfully. Oct 2 19:58:35.789000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.7:22-10.0.0.1:55764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:35.790869 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:58:35.791536 systemd-logind[1130]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:58:35.792168 systemd-logind[1130]: Removed session 23. Oct 2 19:58:37.043017 kubelet[2036]: E1002 19:58:37.042984 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:42.044588 kubelet[2036]: E1002 19:58:42.044537 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:43.981941 kubelet[2036]: E1002 19:58:43.981906 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:58:43.983967 env[1143]: time="2023-10-02T19:58:43.983927476Z" level=info msg="CreateContainer within sandbox \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:58:43.992516 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2808476564.mount: Deactivated successfully. Oct 2 19:58:43.995284 env[1143]: time="2023-10-02T19:58:43.995244615Z" level=info msg="CreateContainer within sandbox \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"2aaf6b0de29cae1f927cd4a9b6e5961a3986c5da10ebdb1783abbea03f7b4f1c\"" Oct 2 19:58:43.995812 env[1143]: time="2023-10-02T19:58:43.995771615Z" level=info msg="StartContainer for \"2aaf6b0de29cae1f927cd4a9b6e5961a3986c5da10ebdb1783abbea03f7b4f1c\"" Oct 2 19:58:44.012546 systemd[1]: Started cri-containerd-2aaf6b0de29cae1f927cd4a9b6e5961a3986c5da10ebdb1783abbea03f7b4f1c.scope. Oct 2 19:58:44.042734 systemd[1]: cri-containerd-2aaf6b0de29cae1f927cd4a9b6e5961a3986c5da10ebdb1783abbea03f7b4f1c.scope: Deactivated successfully. Oct 2 19:58:44.053432 env[1143]: time="2023-10-02T19:58:44.053302991Z" level=info msg="shim disconnected" id=2aaf6b0de29cae1f927cd4a9b6e5961a3986c5da10ebdb1783abbea03f7b4f1c Oct 2 19:58:44.053432 env[1143]: time="2023-10-02T19:58:44.053354671Z" level=warning msg="cleaning up after shim disconnected" id=2aaf6b0de29cae1f927cd4a9b6e5961a3986c5da10ebdb1783abbea03f7b4f1c namespace=k8s.io Oct 2 19:58:44.053432 env[1143]: time="2023-10-02T19:58:44.053365231Z" level=info msg="cleaning up dead shim" Oct 2 19:58:44.061922 env[1143]: time="2023-10-02T19:58:44.061878885Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:58:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2935 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:58:44Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2aaf6b0de29cae1f927cd4a9b6e5961a3986c5da10ebdb1783abbea03f7b4f1c/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:58:44.062217 env[1143]: time="2023-10-02T19:58:44.062129325Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 19:58:44.062398 env[1143]: time="2023-10-02T19:58:44.062352726Z" level=error msg="Failed to pipe stderr of container \"2aaf6b0de29cae1f927cd4a9b6e5961a3986c5da10ebdb1783abbea03f7b4f1c\"" error="reading from a closed fifo" Oct 2 19:58:44.062398 env[1143]: time="2023-10-02T19:58:44.062350566Z" level=error msg="Failed to pipe stdout of container \"2aaf6b0de29cae1f927cd4a9b6e5961a3986c5da10ebdb1783abbea03f7b4f1c\"" error="reading from a closed fifo" Oct 2 19:58:44.063782 env[1143]: time="2023-10-02T19:58:44.063731048Z" level=error msg="StartContainer for \"2aaf6b0de29cae1f927cd4a9b6e5961a3986c5da10ebdb1783abbea03f7b4f1c\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:58:44.064057 kubelet[2036]: E1002 19:58:44.063991 2036 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2aaf6b0de29cae1f927cd4a9b6e5961a3986c5da10ebdb1783abbea03f7b4f1c" Oct 2 19:58:44.064180 kubelet[2036]: E1002 19:58:44.064088 2036 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:58:44.064180 kubelet[2036]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:58:44.064180 kubelet[2036]: rm /hostbin/cilium-mount Oct 2 19:58:44.064180 kubelet[2036]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rgscl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:58:44.064309 kubelet[2036]: E1002 19:58:44.064122 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:58:44.352724 kubelet[2036]: I1002 19:58:44.352696 2036 scope.go:115] "RemoveContainer" containerID="48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95" Oct 2 19:58:44.353187 kubelet[2036]: I1002 19:58:44.353050 2036 scope.go:115] "RemoveContainer" containerID="48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95" Oct 2 19:58:44.355089 env[1143]: time="2023-10-02T19:58:44.355010972Z" level=info msg="RemoveContainer for \"48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95\"" Oct 2 19:58:44.357110 env[1143]: time="2023-10-02T19:58:44.357056896Z" level=info msg="RemoveContainer for \"48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95\" returns successfully" Oct 2 19:58:44.358315 env[1143]: time="2023-10-02T19:58:44.358283658Z" level=info msg="RemoveContainer for \"48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95\"" Oct 2 19:58:44.358396 env[1143]: time="2023-10-02T19:58:44.358316098Z" level=info msg="RemoveContainer for \"48ff8a43b136305e58aacc2471513ca71eba95866ed7514bcb8e4919d3db5d95\" returns successfully" Oct 2 19:58:44.358585 kubelet[2036]: E1002 19:58:44.358564 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:58:44.358914 kubelet[2036]: E1002 19:58:44.358901 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:58:44.990092 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2aaf6b0de29cae1f927cd4a9b6e5961a3986c5da10ebdb1783abbea03f7b4f1c-rootfs.mount: Deactivated successfully. Oct 2 19:58:45.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.7:22-10.0.0.1:32914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:45.792000 systemd[1]: Started sshd@23-10.0.0.7:22-10.0.0.1:32914.service. Oct 2 19:58:45.794575 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:58:45.794675 kernel: audit: type=1130 audit(1696276725.790:1276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.7:22-10.0.0.1:32914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:45.826000 audit[2948]: USER_ACCT pid=2948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:45.827865 sshd[2948]: Accepted publickey for core from 10.0.0.1 port 32914 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:58:45.829456 sshd[2948]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:45.827000 audit[2948]: CRED_ACQ pid=2948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:45.832469 kernel: audit: type=1101 audit(1696276725.826:1277): pid=2948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:45.832544 kernel: audit: type=1103 audit(1696276725.827:1278): pid=2948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:45.832571 kernel: audit: type=1006 audit(1696276725.828:1279): pid=2948 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:58:45.833047 systemd-logind[1130]: New session 24 of user core. Oct 2 19:58:45.828000 audit[2948]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc3e08d0 a2=3 a3=1 items=0 ppid=1 pid=2948 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:45.833931 systemd[1]: Started session-24.scope. Oct 2 19:58:45.836408 kernel: audit: type=1300 audit(1696276725.828:1279): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc3e08d0 a2=3 a3=1 items=0 ppid=1 pid=2948 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:45.836463 kernel: audit: type=1327 audit(1696276725.828:1279): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:45.828000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:45.836000 audit[2948]: USER_START pid=2948 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:45.838000 audit[2950]: CRED_ACQ pid=2950 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:45.842962 kernel: audit: type=1105 audit(1696276725.836:1280): pid=2948 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:45.843018 kernel: audit: type=1103 audit(1696276725.838:1281): pid=2950 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:45.946465 sshd[2948]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:45.946000 audit[2948]: USER_END pid=2948 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:45.949004 systemd[1]: sshd@23-10.0.0.7:22-10.0.0.1:32914.service: Deactivated successfully. Oct 2 19:58:45.949861 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:58:45.950296 kernel: audit: type=1106 audit(1696276725.946:1282): pid=2948 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:45.950349 kernel: audit: type=1104 audit(1696276725.946:1283): pid=2948 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:45.946000 audit[2948]: CRED_DISP pid=2948 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:45.950525 systemd-logind[1130]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:58:45.951189 systemd-logind[1130]: Removed session 24. Oct 2 19:58:45.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.7:22-10.0.0.1:32914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:47.045754 kubelet[2036]: E1002 19:58:47.045724 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:47.158523 kubelet[2036]: W1002 19:58:47.158485 2036 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod725cca0a_a446_473d_a797_961a298ab61a.slice/cri-containerd-2aaf6b0de29cae1f927cd4a9b6e5961a3986c5da10ebdb1783abbea03f7b4f1c.scope WatchSource:0}: task 2aaf6b0de29cae1f927cd4a9b6e5961a3986c5da10ebdb1783abbea03f7b4f1c not found: not found Oct 2 19:58:52.047139 kubelet[2036]: E1002 19:58:52.047104 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:55.951789 systemd[1]: Started sshd@24-10.0.0.7:22-10.0.0.1:35130.service. Oct 2 19:58:55.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.7:22-10.0.0.1:35130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:55.952632 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:55.952697 kernel: audit: type=1130 audit(1696276735.951:1285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.7:22-10.0.0.1:35130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:55.982130 kubelet[2036]: E1002 19:58:55.982102 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:58:55.983023 kubelet[2036]: E1002 19:58:55.983005 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:58:55.987000 audit[2962]: USER_ACCT pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:55.987617 sshd[2962]: Accepted publickey for core from 10.0.0.1 port 35130 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:58:55.991184 kernel: audit: type=1101 audit(1696276735.987:1286): pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:55.991000 audit[2962]: CRED_ACQ pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:55.991649 sshd[2962]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:55.994529 kernel: audit: type=1103 audit(1696276735.991:1287): pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:55.994610 kernel: audit: type=1006 audit(1696276735.991:1288): pid=2962 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:58:55.994633 kernel: audit: type=1300 audit(1696276735.991:1288): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc87a3320 a2=3 a3=1 items=0 ppid=1 pid=2962 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:55.991000 audit[2962]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc87a3320 a2=3 a3=1 items=0 ppid=1 pid=2962 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:55.996087 systemd[1]: Started session-25.scope. Oct 2 19:58:55.991000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:55.997669 kernel: audit: type=1327 audit(1696276735.991:1288): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:55.997798 systemd-logind[1130]: New session 25 of user core. Oct 2 19:58:56.001000 audit[2962]: USER_START pid=2962 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:56.003000 audit[2964]: CRED_ACQ pid=2964 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:56.005822 kernel: audit: type=1105 audit(1696276736.001:1289): pid=2962 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:56.005875 kernel: audit: type=1103 audit(1696276736.003:1290): pid=2964 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:56.113289 sshd[2962]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:56.114000 audit[2962]: USER_END pid=2962 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:56.116387 systemd[1]: sshd@24-10.0.0.7:22-10.0.0.1:35130.service: Deactivated successfully. Oct 2 19:58:56.114000 audit[2962]: CRED_DISP pid=2962 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:56.117141 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:58:56.117718 systemd-logind[1130]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:58:56.118385 systemd-logind[1130]: Removed session 25. Oct 2 19:58:56.118691 kernel: audit: type=1106 audit(1696276736.114:1291): pid=2962 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:56.118737 kernel: audit: type=1104 audit(1696276736.114:1292): pid=2962 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:56.116000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.7:22-10.0.0.1:35130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:57.048223 kubelet[2036]: E1002 19:58:57.048189 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:02.049811 kubelet[2036]: E1002 19:59:02.049781 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:06.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.7:22-10.0.0.1:57138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:06.118265 systemd[1]: Started sshd@25-10.0.0.7:22-10.0.0.1:57138.service. Oct 2 19:59:06.120869 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:59:06.120940 kernel: audit: type=1130 audit(1696276746.118:1294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.7:22-10.0.0.1:57138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:06.153000 audit[2978]: USER_ACCT pid=2978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:06.153362 sshd[2978]: Accepted publickey for core from 10.0.0.1 port 57138 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:59:06.154416 sshd[2978]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:06.153000 audit[2978]: CRED_ACQ pid=2978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:06.159172 kernel: audit: type=1101 audit(1696276746.153:1295): pid=2978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:06.159239 kernel: audit: type=1103 audit(1696276746.153:1296): pid=2978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:06.159265 kernel: audit: type=1006 audit(1696276746.153:1297): pid=2978 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:59:06.159284 kernel: audit: type=1300 audit(1696276746.153:1297): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc052370 a2=3 a3=1 items=0 ppid=1 pid=2978 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:06.153000 audit[2978]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc052370 a2=3 a3=1 items=0 ppid=1 pid=2978 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:06.158537 systemd[1]: Started session-26.scope. Oct 2 19:59:06.158846 systemd-logind[1130]: New session 26 of user core. Oct 2 19:59:06.161226 kernel: audit: type=1327 audit(1696276746.153:1297): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:06.153000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:06.163000 audit[2978]: USER_START pid=2978 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:06.164000 audit[2980]: CRED_ACQ pid=2980 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:06.168006 kernel: audit: type=1105 audit(1696276746.163:1298): pid=2978 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:06.168058 kernel: audit: type=1103 audit(1696276746.164:1299): pid=2980 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:06.271379 sshd[2978]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:06.272000 audit[2978]: USER_END pid=2978 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:06.273834 systemd[1]: sshd@25-10.0.0.7:22-10.0.0.1:57138.service: Deactivated successfully. Oct 2 19:59:06.274585 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:59:06.275209 kernel: audit: type=1106 audit(1696276746.272:1300): pid=2978 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:06.275266 kernel: audit: type=1104 audit(1696276746.272:1301): pid=2978 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:06.272000 audit[2978]: CRED_DISP pid=2978 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:06.275365 systemd-logind[1130]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:59:06.276076 systemd-logind[1130]: Removed session 26. Oct 2 19:59:06.273000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.7:22-10.0.0.1:57138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:06.982069 kubelet[2036]: E1002 19:59:06.982034 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:06.982634 kubelet[2036]: E1002 19:59:06.982614 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:59:07.050834 kubelet[2036]: E1002 19:59:07.050814 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:12.051751 kubelet[2036]: E1002 19:59:12.051722 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:15.982622 kubelet[2036]: E1002 19:59:15.982589 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:16.276335 systemd[1]: Started sshd@26-10.0.0.7:22-10.0.0.1:52556.service. Oct 2 19:59:16.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.7:22-10.0.0.1:52556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:16.278845 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:59:16.278911 kernel: audit: type=1130 audit(1696276756.276:1303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.7:22-10.0.0.1:52556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:16.310000 audit[2991]: USER_ACCT pid=2991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:16.310796 sshd[2991]: Accepted publickey for core from 10.0.0.1 port 52556 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:59:16.312475 sshd[2991]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:16.311000 audit[2991]: CRED_ACQ pid=2991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:16.314886 kernel: audit: type=1101 audit(1696276756.310:1304): pid=2991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:16.315920 kernel: audit: type=1103 audit(1696276756.311:1305): pid=2991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:16.317684 kernel: audit: type=1006 audit(1696276756.312:1306): pid=2991 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:59:16.317730 kernel: audit: type=1300 audit(1696276756.312:1306): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1743480 a2=3 a3=1 items=0 ppid=1 pid=2991 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:16.312000 audit[2991]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1743480 a2=3 a3=1 items=0 ppid=1 pid=2991 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:16.316534 systemd-logind[1130]: New session 27 of user core. Oct 2 19:59:16.317354 systemd[1]: Started session-27.scope. Oct 2 19:59:16.318441 kernel: audit: type=1327 audit(1696276756.312:1306): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:16.312000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:16.321000 audit[2991]: USER_START pid=2991 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:16.322000 audit[2993]: CRED_ACQ pid=2993 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:16.325894 kernel: audit: type=1105 audit(1696276756.321:1307): pid=2991 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:16.325938 kernel: audit: type=1103 audit(1696276756.322:1308): pid=2993 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:16.429316 sshd[2991]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:16.430000 audit[2991]: USER_END pid=2991 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:16.431619 systemd[1]: sshd@26-10.0.0.7:22-10.0.0.1:52556.service: Deactivated successfully. Oct 2 19:59:16.432375 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:59:16.430000 audit[2991]: CRED_DISP pid=2991 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:16.432903 systemd-logind[1130]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:59:16.433605 systemd-logind[1130]: Removed session 27. Oct 2 19:59:16.434783 kernel: audit: type=1106 audit(1696276756.430:1309): pid=2991 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:16.434826 kernel: audit: type=1104 audit(1696276756.430:1310): pid=2991 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:16.431000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.7:22-10.0.0.1:52556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:16.981805 kubelet[2036]: E1002 19:59:16.981694 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:17.052893 kubelet[2036]: E1002 19:59:17.052865 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:17.939000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:17.939000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40013126c0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:59:17.939000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:17.940000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:17.940000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400249d020 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:59:17.940000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:18.639000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:18.639000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400d6d0e70 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:59:18.639000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:59:18.646000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:18.646000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4004d06a00 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:59:18.646000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:59:18.646000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:18.646000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4004637da0 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:59:18.646000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:59:18.646000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7051 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:18.646000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400fa517d0 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:59:18.646000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:59:18.647000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:18.647000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400d8fdec0 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:59:18.647000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:59:18.654000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:18.654000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400fa68150 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 19:59:18.654000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:59:21.982623 kubelet[2036]: E1002 19:59:21.982195 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:21.982623 kubelet[2036]: E1002 19:59:21.982410 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-wkz2w_kube-system(725cca0a-a446-473d-a797-961a298ab61a)\"" pod="kube-system/cilium-wkz2w" podUID=725cca0a-a446-473d-a797-961a298ab61a Oct 2 19:59:22.054379 kubelet[2036]: E1002 19:59:22.054347 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:23.972298 update_engine[1134]: I1002 19:59:23.972249 1134 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 19:59:23.972298 update_engine[1134]: I1002 19:59:23.972286 1134 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 19:59:23.972850 update_engine[1134]: I1002 19:59:23.972836 1134 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 19:59:23.973194 update_engine[1134]: I1002 19:59:23.973177 1134 omaha_request_params.cc:62] Current group set to lts Oct 2 19:59:23.973323 update_engine[1134]: I1002 19:59:23.973311 1134 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 19:59:23.973323 update_engine[1134]: I1002 19:59:23.973320 1134 update_attempter.cc:638] Scheduling an action processor start. Oct 2 19:59:23.973373 update_engine[1134]: I1002 19:59:23.973335 1134 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 19:59:23.973373 update_engine[1134]: I1002 19:59:23.973359 1134 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 19:59:23.973674 update_engine[1134]: I1002 19:59:23.973647 1134 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 19:59:23.973674 update_engine[1134]: I1002 19:59:23.973663 1134 omaha_request_action.cc:269] Request: Oct 2 19:59:23.973674 update_engine[1134]: Oct 2 19:59:23.973674 update_engine[1134]: Oct 2 19:59:23.973674 update_engine[1134]: Oct 2 19:59:23.973674 update_engine[1134]: Oct 2 19:59:23.973674 update_engine[1134]: Oct 2 19:59:23.973674 update_engine[1134]: Oct 2 19:59:23.973674 update_engine[1134]: Oct 2 19:59:23.973674 update_engine[1134]: Oct 2 19:59:23.973674 update_engine[1134]: I1002 19:59:23.973668 1134 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 19:59:23.974618 locksmithd[1173]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 19:59:23.974784 update_engine[1134]: I1002 19:59:23.974673 1134 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 19:59:23.974827 update_engine[1134]: I1002 19:59:23.974812 1134 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 19:59:25.125885 update_engine[1134]: I1002 19:59:25.125838 1134 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 19:59:25.126227 update_engine[1134]: I1002 19:59:25.126109 1134 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 19:59:25.126327 update_engine[1134]: I1002 19:59:25.126302 1134 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 19:59:25.424345 update_engine[1134]: I1002 19:59:25.424234 1134 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 19:59:25.426078 update_engine[1134]: I1002 19:59:25.426043 1134 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 19:59:25.426078 update_engine[1134]: I1002 19:59:25.426067 1134 omaha_request_action.cc:619] Omaha request response: Oct 2 19:59:25.426078 update_engine[1134]: Oct 2 19:59:25.428404 update_engine[1134]: I1002 19:59:25.428381 1134 omaha_request_action.cc:409] No update. Oct 2 19:59:25.428404 update_engine[1134]: I1002 19:59:25.428406 1134 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 19:59:25.428404 update_engine[1134]: I1002 19:59:25.428409 1134 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 19:59:25.428519 update_engine[1134]: I1002 19:59:25.428412 1134 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 19:59:25.428519 update_engine[1134]: I1002 19:59:25.428416 1134 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 19:59:25.428519 update_engine[1134]: I1002 19:59:25.428419 1134 update_attempter.cc:302] Processing Done. Oct 2 19:59:25.428519 update_engine[1134]: I1002 19:59:25.428431 1134 update_attempter.cc:338] No update. Oct 2 19:59:25.428519 update_engine[1134]: I1002 19:59:25.428442 1134 update_check_scheduler.cc:74] Next update check in 42m10s Oct 2 19:59:25.428756 locksmithd[1173]: LastCheckedTime=1696276765 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 19:59:26.434578 systemd[1]: Started sshd@27-10.0.0.7:22-10.0.0.1:47430.service. Oct 2 19:59:26.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.7:22-10.0.0.1:47430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:26.435214 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:59:26.435285 kernel: audit: type=1130 audit(1696276766.434:1320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.7:22-10.0.0.1:47430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:26.472000 audit[3007]: USER_ACCT pid=3007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:26.472455 sshd[3007]: Accepted publickey for core from 10.0.0.1 port 47430 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:59:26.474085 sshd[3007]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:26.473000 audit[3007]: CRED_ACQ pid=3007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:26.477196 kernel: audit: type=1101 audit(1696276766.472:1321): pid=3007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:26.477272 kernel: audit: type=1103 audit(1696276766.473:1322): pid=3007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:26.478750 kernel: audit: type=1006 audit(1696276766.473:1323): pid=3007 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:59:26.478813 kernel: audit: type=1300 audit(1696276766.473:1323): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc13865b0 a2=3 a3=1 items=0 ppid=1 pid=3007 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:26.473000 audit[3007]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc13865b0 a2=3 a3=1 items=0 ppid=1 pid=3007 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:26.479092 systemd[1]: Started session-28.scope. Oct 2 19:59:26.479434 systemd-logind[1130]: New session 28 of user core. Oct 2 19:59:26.481191 kernel: audit: type=1327 audit(1696276766.473:1323): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:26.473000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:26.486000 audit[3007]: USER_START pid=3007 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:26.488000 audit[3010]: CRED_ACQ pid=3010 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:26.491344 kernel: audit: type=1105 audit(1696276766.486:1324): pid=3007 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:26.491394 kernel: audit: type=1103 audit(1696276766.488:1325): pid=3010 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:26.597692 sshd[3007]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:26.598000 audit[3007]: USER_END pid=3007 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:26.598000 audit[3007]: CRED_DISP pid=3007 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:26.604326 kernel: audit: type=1106 audit(1696276766.598:1326): pid=3007 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:26.604389 kernel: audit: type=1104 audit(1696276766.598:1327): pid=3007 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:26.605009 systemd[1]: sshd@27-10.0.0.7:22-10.0.0.1:47430.service: Deactivated successfully. Oct 2 19:59:26.604000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.7:22-10.0.0.1:47430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:26.605657 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:59:26.606391 systemd-logind[1130]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:59:26.607559 systemd[1]: Started sshd@28-10.0.0.7:22-10.0.0.1:47438.service. Oct 2 19:59:26.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.7:22-10.0.0.1:47438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:26.609305 systemd-logind[1130]: Removed session 28. Oct 2 19:59:26.645000 audit[3022]: USER_ACCT pid=3022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:26.646056 sshd[3022]: Accepted publickey for core from 10.0.0.1 port 47438 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:59:26.647000 audit[3022]: CRED_ACQ pid=3022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:26.647000 audit[3022]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeed20fe0 a2=3 a3=1 items=0 ppid=1 pid=3022 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:26.647000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:26.648224 sshd[3022]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:26.652344 systemd-logind[1130]: New session 29 of user core. Oct 2 19:59:26.653270 systemd[1]: Started session-29.scope. Oct 2 19:59:26.659000 audit[3022]: USER_START pid=3022 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:26.661000 audit[3025]: CRED_ACQ pid=3025 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:27.055787 kubelet[2036]: E1002 19:59:27.055668 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:27.983562 kubelet[2036]: E1002 19:59:27.983522 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:28.727010 env[1143]: time="2023-10-02T19:59:28.726962663Z" level=info msg="StopPodSandbox for \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\"" Oct 2 19:59:28.727440 env[1143]: time="2023-10-02T19:59:28.727035543Z" level=info msg="Container to stop \"2aaf6b0de29cae1f927cd4a9b6e5961a3986c5da10ebdb1783abbea03f7b4f1c\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:59:28.728601 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993-shm.mount: Deactivated successfully. Oct 2 19:59:28.737363 systemd[1]: cri-containerd-1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993.scope: Deactivated successfully. Oct 2 19:59:28.737000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:59:28.740044 env[1143]: time="2023-10-02T19:59:28.740006271Z" level=info msg="StopContainer for \"cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa\" with timeout 30 (s)" Oct 2 19:59:28.740477 env[1143]: time="2023-10-02T19:59:28.740410233Z" level=info msg="Stop container \"cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa\" with signal terminated" Oct 2 19:59:28.743000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:59:28.755140 systemd[1]: cri-containerd-cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa.scope: Deactivated successfully. Oct 2 19:59:28.755000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:59:28.760000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:59:28.770281 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993-rootfs.mount: Deactivated successfully. Oct 2 19:59:28.778388 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa-rootfs.mount: Deactivated successfully. Oct 2 19:59:28.781987 env[1143]: time="2023-10-02T19:59:28.781936866Z" level=info msg="shim disconnected" id=1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993 Oct 2 19:59:28.782143 env[1143]: time="2023-10-02T19:59:28.781992226Z" level=warning msg="cleaning up after shim disconnected" id=1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993 namespace=k8s.io Oct 2 19:59:28.782143 env[1143]: time="2023-10-02T19:59:28.782005346Z" level=info msg="cleaning up dead shim" Oct 2 19:59:28.785628 env[1143]: time="2023-10-02T19:59:28.785589280Z" level=info msg="shim disconnected" id=cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa Oct 2 19:59:28.785628 env[1143]: time="2023-10-02T19:59:28.785628080Z" level=warning msg="cleaning up after shim disconnected" id=cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa namespace=k8s.io Oct 2 19:59:28.785800 env[1143]: time="2023-10-02T19:59:28.785637040Z" level=info msg="cleaning up dead shim" Oct 2 19:59:28.791750 env[1143]: time="2023-10-02T19:59:28.791709022Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3070 runtime=io.containerd.runc.v2\n" Oct 2 19:59:28.792056 env[1143]: time="2023-10-02T19:59:28.792027983Z" level=info msg="TearDown network for sandbox \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" successfully" Oct 2 19:59:28.792118 env[1143]: time="2023-10-02T19:59:28.792057224Z" level=info msg="StopPodSandbox for \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" returns successfully" Oct 2 19:59:28.797949 env[1143]: time="2023-10-02T19:59:28.797888285Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3079 runtime=io.containerd.runc.v2\n" Oct 2 19:59:28.799515 env[1143]: time="2023-10-02T19:59:28.799481411Z" level=info msg="StopContainer for \"cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa\" returns successfully" Oct 2 19:59:28.799871 env[1143]: time="2023-10-02T19:59:28.799843172Z" level=info msg="StopPodSandbox for \"695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9\"" Oct 2 19:59:28.799911 env[1143]: time="2023-10-02T19:59:28.799899293Z" level=info msg="Container to stop \"cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:59:28.801213 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9-shm.mount: Deactivated successfully. Oct 2 19:59:28.808168 systemd[1]: cri-containerd-695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9.scope: Deactivated successfully. Oct 2 19:59:28.808000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:59:28.814000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:59:28.831528 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9-rootfs.mount: Deactivated successfully. Oct 2 19:59:28.838811 env[1143]: time="2023-10-02T19:59:28.838769836Z" level=info msg="shim disconnected" id=695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9 Oct 2 19:59:28.839104 env[1143]: time="2023-10-02T19:59:28.838817636Z" level=warning msg="cleaning up after shim disconnected" id=695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9 namespace=k8s.io Oct 2 19:59:28.839104 env[1143]: time="2023-10-02T19:59:28.838828716Z" level=info msg="cleaning up dead shim" Oct 2 19:59:28.844394 kubelet[2036]: I1002 19:59:28.844365 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-rgscl\" (UniqueName: \"kubernetes.io/projected/725cca0a-a446-473d-a797-961a298ab61a-kube-api-access-rgscl\") pod \"725cca0a-a446-473d-a797-961a298ab61a\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " Oct 2 19:59:28.844690 kubelet[2036]: I1002 19:59:28.844408 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/725cca0a-a446-473d-a797-961a298ab61a-cilium-config-path\") pod \"725cca0a-a446-473d-a797-961a298ab61a\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " Oct 2 19:59:28.844690 kubelet[2036]: I1002 19:59:28.844428 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/725cca0a-a446-473d-a797-961a298ab61a-hubble-tls\") pod \"725cca0a-a446-473d-a797-961a298ab61a\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " Oct 2 19:59:28.844690 kubelet[2036]: I1002 19:59:28.844449 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-host-proc-sys-kernel\") pod \"725cca0a-a446-473d-a797-961a298ab61a\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " Oct 2 19:59:28.844690 kubelet[2036]: I1002 19:59:28.844465 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-cilium-run\") pod \"725cca0a-a446-473d-a797-961a298ab61a\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " Oct 2 19:59:28.844690 kubelet[2036]: I1002 19:59:28.844483 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-lib-modules\") pod \"725cca0a-a446-473d-a797-961a298ab61a\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " Oct 2 19:59:28.844690 kubelet[2036]: I1002 19:59:28.844503 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-cni-path\") pod \"725cca0a-a446-473d-a797-961a298ab61a\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " Oct 2 19:59:28.844847 kubelet[2036]: I1002 19:59:28.844522 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-xtables-lock\") pod \"725cca0a-a446-473d-a797-961a298ab61a\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " Oct 2 19:59:28.844847 kubelet[2036]: I1002 19:59:28.844540 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-bpf-maps\") pod \"725cca0a-a446-473d-a797-961a298ab61a\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " Oct 2 19:59:28.844847 kubelet[2036]: I1002 19:59:28.844558 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-cilium-cgroup\") pod \"725cca0a-a446-473d-a797-961a298ab61a\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " Oct 2 19:59:28.844847 kubelet[2036]: I1002 19:59:28.844579 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/725cca0a-a446-473d-a797-961a298ab61a-clustermesh-secrets\") pod \"725cca0a-a446-473d-a797-961a298ab61a\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " Oct 2 19:59:28.844847 kubelet[2036]: I1002 19:59:28.844595 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-hostproc\") pod \"725cca0a-a446-473d-a797-961a298ab61a\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " Oct 2 19:59:28.844847 kubelet[2036]: I1002 19:59:28.844611 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-host-proc-sys-net\") pod \"725cca0a-a446-473d-a797-961a298ab61a\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " Oct 2 19:59:28.845085 kubelet[2036]: I1002 19:59:28.844628 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-etc-cni-netd\") pod \"725cca0a-a446-473d-a797-961a298ab61a\" (UID: \"725cca0a-a446-473d-a797-961a298ab61a\") " Oct 2 19:59:28.848865 kubelet[2036]: I1002 19:59:28.848417 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-cni-path" (OuterVolumeSpecName: "cni-path") pod "725cca0a-a446-473d-a797-961a298ab61a" (UID: "725cca0a-a446-473d-a797-961a298ab61a"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:28.848865 kubelet[2036]: I1002 19:59:28.848474 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "725cca0a-a446-473d-a797-961a298ab61a" (UID: "725cca0a-a446-473d-a797-961a298ab61a"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:28.848865 kubelet[2036]: I1002 19:59:28.848504 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "725cca0a-a446-473d-a797-961a298ab61a" (UID: "725cca0a-a446-473d-a797-961a298ab61a"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:28.848865 kubelet[2036]: W1002 19:59:28.848660 2036 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/725cca0a-a446-473d-a797-961a298ab61a/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:59:28.849053 kubelet[2036]: I1002 19:59:28.848896 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "725cca0a-a446-473d-a797-961a298ab61a" (UID: "725cca0a-a446-473d-a797-961a298ab61a"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:28.849053 kubelet[2036]: I1002 19:59:28.848955 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "725cca0a-a446-473d-a797-961a298ab61a" (UID: "725cca0a-a446-473d-a797-961a298ab61a"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:28.849053 kubelet[2036]: I1002 19:59:28.848975 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "725cca0a-a446-473d-a797-961a298ab61a" (UID: "725cca0a-a446-473d-a797-961a298ab61a"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:28.849053 kubelet[2036]: I1002 19:59:28.848991 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "725cca0a-a446-473d-a797-961a298ab61a" (UID: "725cca0a-a446-473d-a797-961a298ab61a"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:28.849533 kubelet[2036]: I1002 19:59:28.849506 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-hostproc" (OuterVolumeSpecName: "hostproc") pod "725cca0a-a446-473d-a797-961a298ab61a" (UID: "725cca0a-a446-473d-a797-961a298ab61a"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:28.849605 kubelet[2036]: I1002 19:59:28.849544 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "725cca0a-a446-473d-a797-961a298ab61a" (UID: "725cca0a-a446-473d-a797-961a298ab61a"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:28.851312 kubelet[2036]: I1002 19:59:28.851285 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/725cca0a-a446-473d-a797-961a298ab61a-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "725cca0a-a446-473d-a797-961a298ab61a" (UID: "725cca0a-a446-473d-a797-961a298ab61a"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:59:28.851496 kubelet[2036]: I1002 19:59:28.851470 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "725cca0a-a446-473d-a797-961a298ab61a" (UID: "725cca0a-a446-473d-a797-961a298ab61a"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:28.851585 kubelet[2036]: I1002 19:59:28.851530 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/725cca0a-a446-473d-a797-961a298ab61a-kube-api-access-rgscl" (OuterVolumeSpecName: "kube-api-access-rgscl") pod "725cca0a-a446-473d-a797-961a298ab61a" (UID: "725cca0a-a446-473d-a797-961a298ab61a"). InnerVolumeSpecName "kube-api-access-rgscl". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:59:28.852646 kubelet[2036]: I1002 19:59:28.852624 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/725cca0a-a446-473d-a797-961a298ab61a-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "725cca0a-a446-473d-a797-961a298ab61a" (UID: "725cca0a-a446-473d-a797-961a298ab61a"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:59:28.853259 kubelet[2036]: I1002 19:59:28.853232 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/725cca0a-a446-473d-a797-961a298ab61a-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "725cca0a-a446-473d-a797-961a298ab61a" (UID: "725cca0a-a446-473d-a797-961a298ab61a"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:59:28.856320 env[1143]: time="2023-10-02T19:59:28.856272221Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3114 runtime=io.containerd.runc.v2\n" Oct 2 19:59:28.856597 env[1143]: time="2023-10-02T19:59:28.856572022Z" level=info msg="TearDown network for sandbox \"695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9\" successfully" Oct 2 19:59:28.856649 env[1143]: time="2023-10-02T19:59:28.856597382Z" level=info msg="StopPodSandbox for \"695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9\" returns successfully" Oct 2 19:59:28.945354 kubelet[2036]: I1002 19:59:28.945315 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-ps6d2\" (UniqueName: \"kubernetes.io/projected/57fce457-4eb1-480f-b467-93b7a2b9613c-kube-api-access-ps6d2\") pod \"57fce457-4eb1-480f-b467-93b7a2b9613c\" (UID: \"57fce457-4eb1-480f-b467-93b7a2b9613c\") " Oct 2 19:59:28.945354 kubelet[2036]: I1002 19:59:28.945361 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/57fce457-4eb1-480f-b467-93b7a2b9613c-cilium-config-path\") pod \"57fce457-4eb1-480f-b467-93b7a2b9613c\" (UID: \"57fce457-4eb1-480f-b467-93b7a2b9613c\") " Oct 2 19:59:28.945585 kubelet[2036]: I1002 19:59:28.945398 2036 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:28.945585 kubelet[2036]: I1002 19:59:28.945410 2036 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:28.945585 kubelet[2036]: I1002 19:59:28.945420 2036 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:28.945585 kubelet[2036]: I1002 19:59:28.945431 2036 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:28.945585 kubelet[2036]: I1002 19:59:28.945440 2036 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:28.945585 kubelet[2036]: I1002 19:59:28.945449 2036 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/725cca0a-a446-473d-a797-961a298ab61a-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:28.945585 kubelet[2036]: I1002 19:59:28.945459 2036 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:28.945585 kubelet[2036]: I1002 19:59:28.945468 2036 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:28.945816 kubelet[2036]: I1002 19:59:28.945478 2036 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:28.945816 kubelet[2036]: I1002 19:59:28.945487 2036 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/725cca0a-a446-473d-a797-961a298ab61a-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:28.945816 kubelet[2036]: I1002 19:59:28.945495 2036 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/725cca0a-a446-473d-a797-961a298ab61a-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:28.945816 kubelet[2036]: I1002 19:59:28.945504 2036 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-rgscl\" (UniqueName: \"kubernetes.io/projected/725cca0a-a446-473d-a797-961a298ab61a-kube-api-access-rgscl\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:28.945816 kubelet[2036]: I1002 19:59:28.945513 2036 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:28.945816 kubelet[2036]: I1002 19:59:28.945521 2036 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/725cca0a-a446-473d-a797-961a298ab61a-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:28.945816 kubelet[2036]: W1002 19:59:28.945752 2036 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/57fce457-4eb1-480f-b467-93b7a2b9613c/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:59:28.947508 kubelet[2036]: I1002 19:59:28.947479 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/57fce457-4eb1-480f-b467-93b7a2b9613c-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "57fce457-4eb1-480f-b467-93b7a2b9613c" (UID: "57fce457-4eb1-480f-b467-93b7a2b9613c"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:59:28.948988 kubelet[2036]: I1002 19:59:28.948957 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/57fce457-4eb1-480f-b467-93b7a2b9613c-kube-api-access-ps6d2" (OuterVolumeSpecName: "kube-api-access-ps6d2") pod "57fce457-4eb1-480f-b467-93b7a2b9613c" (UID: "57fce457-4eb1-480f-b467-93b7a2b9613c"). InnerVolumeSpecName "kube-api-access-ps6d2". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:59:28.982430 kubelet[2036]: E1002 19:59:28.982228 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:29.046685 kubelet[2036]: I1002 19:59:29.046618 2036 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/57fce457-4eb1-480f-b467-93b7a2b9613c-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:29.046685 kubelet[2036]: I1002 19:59:29.046655 2036 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-ps6d2\" (UniqueName: \"kubernetes.io/projected/57fce457-4eb1-480f-b467-93b7a2b9613c-kube-api-access-ps6d2\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:29.423475 kubelet[2036]: I1002 19:59:29.423383 2036 scope.go:115] "RemoveContainer" containerID="2aaf6b0de29cae1f927cd4a9b6e5961a3986c5da10ebdb1783abbea03f7b4f1c" Oct 2 19:59:29.425577 env[1143]: time="2023-10-02T19:59:29.425510577Z" level=info msg="RemoveContainer for \"2aaf6b0de29cae1f927cd4a9b6e5961a3986c5da10ebdb1783abbea03f7b4f1c\"" Oct 2 19:59:29.428283 systemd[1]: Removed slice kubepods-burstable-pod725cca0a_a446_473d_a797_961a298ab61a.slice. Oct 2 19:59:29.429726 env[1143]: time="2023-10-02T19:59:29.429403912Z" level=info msg="RemoveContainer for \"2aaf6b0de29cae1f927cd4a9b6e5961a3986c5da10ebdb1783abbea03f7b4f1c\" returns successfully" Oct 2 19:59:29.429860 kubelet[2036]: I1002 19:59:29.429835 2036 scope.go:115] "RemoveContainer" containerID="cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa" Oct 2 19:59:29.432784 systemd[1]: Removed slice kubepods-besteffort-pod57fce457_4eb1_480f_b467_93b7a2b9613c.slice. Oct 2 19:59:29.434210 env[1143]: time="2023-10-02T19:59:29.434150089Z" level=info msg="RemoveContainer for \"cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa\"" Oct 2 19:59:29.437743 env[1143]: time="2023-10-02T19:59:29.437701142Z" level=info msg="RemoveContainer for \"cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa\" returns successfully" Oct 2 19:59:29.438070 kubelet[2036]: I1002 19:59:29.438040 2036 scope.go:115] "RemoveContainer" containerID="cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa" Oct 2 19:59:29.438348 env[1143]: time="2023-10-02T19:59:29.438257745Z" level=error msg="ContainerStatus for \"cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa\": not found" Oct 2 19:59:29.438549 kubelet[2036]: E1002 19:59:29.438514 2036 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa\": not found" containerID="cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa" Oct 2 19:59:29.438692 kubelet[2036]: I1002 19:59:29.438676 2036 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa} err="failed to get container status \"cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa\": rpc error: code = NotFound desc = an error occurred when try to find container \"cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa\": not found" Oct 2 19:59:29.728460 systemd[1]: var-lib-kubelet-pods-57fce457\x2d4eb1\x2d480f\x2db467\x2d93b7a2b9613c-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dps6d2.mount: Deactivated successfully. Oct 2 19:59:29.728580 systemd[1]: var-lib-kubelet-pods-725cca0a\x2da446\x2d473d\x2da797\x2d961a298ab61a-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2drgscl.mount: Deactivated successfully. Oct 2 19:59:29.728638 systemd[1]: var-lib-kubelet-pods-725cca0a\x2da446\x2d473d\x2da797\x2d961a298ab61a-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:59:29.728698 systemd[1]: var-lib-kubelet-pods-725cca0a\x2da446\x2d473d\x2da797\x2d961a298ab61a-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:59:29.982754 env[1143]: time="2023-10-02T19:59:29.982506932Z" level=info msg="StopPodSandbox for \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\"" Oct 2 19:59:29.982754 env[1143]: time="2023-10-02T19:59:29.982599573Z" level=info msg="TearDown network for sandbox \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" successfully" Oct 2 19:59:29.982754 env[1143]: time="2023-10-02T19:59:29.982630973Z" level=info msg="StopPodSandbox for \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" returns successfully" Oct 2 19:59:29.982754 env[1143]: time="2023-10-02T19:59:29.982532412Z" level=info msg="StopContainer for \"cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa\" with timeout 1 (s)" Oct 2 19:59:29.982754 env[1143]: time="2023-10-02T19:59:29.982703093Z" level=error msg="StopContainer for \"cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa\": not found" Oct 2 19:59:29.983303 kubelet[2036]: E1002 19:59:29.983277 2036 remote_runtime.go:349] "StopContainer from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa\": not found" containerID="cdbd7c0c5abe93ac8ffce694871905c876f5c3a7fe96b951c1b52428fc503caa" Oct 2 19:59:29.983761 env[1143]: time="2023-10-02T19:59:29.983623696Z" level=info msg="StopPodSandbox for \"695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9\"" Oct 2 19:59:29.983761 env[1143]: time="2023-10-02T19:59:29.983693617Z" level=info msg="TearDown network for sandbox \"695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9\" successfully" Oct 2 19:59:29.983761 env[1143]: time="2023-10-02T19:59:29.983747857Z" level=info msg="StopPodSandbox for \"695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9\" returns successfully" Oct 2 19:59:29.984741 kubelet[2036]: I1002 19:59:29.984704 2036 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=57fce457-4eb1-480f-b467-93b7a2b9613c path="/var/lib/kubelet/pods/57fce457-4eb1-480f-b467-93b7a2b9613c/volumes" Oct 2 19:59:29.985196 kubelet[2036]: I1002 19:59:29.985084 2036 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=725cca0a-a446-473d-a797-961a298ab61a path="/var/lib/kubelet/pods/725cca0a-a446-473d-a797-961a298ab61a/volumes" Oct 2 19:59:30.688169 sshd[3022]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:30.692000 audit[3022]: USER_END pid=3022 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:30.692000 audit[3022]: CRED_DISP pid=3022 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:30.692385 systemd[1]: Started sshd@29-10.0.0.7:22-10.0.0.1:47446.service. Oct 2 19:59:30.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.7:22-10.0.0.1:47446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:30.693704 systemd[1]: sshd@28-10.0.0.7:22-10.0.0.1:47438.service: Deactivated successfully. Oct 2 19:59:30.693000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.7:22-10.0.0.1:47438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:30.694419 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:59:30.694599 systemd[1]: session-29.scope: Consumed 1.373s CPU time. Oct 2 19:59:30.695042 systemd-logind[1130]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:59:30.696523 systemd-logind[1130]: Removed session 29. Oct 2 19:59:30.728000 audit[3134]: USER_ACCT pid=3134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:30.728559 sshd[3134]: Accepted publickey for core from 10.0.0.1 port 47446 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:59:30.729000 audit[3134]: CRED_ACQ pid=3134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:30.729000 audit[3134]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff55a78e0 a2=3 a3=1 items=0 ppid=1 pid=3134 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:30.729000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:30.729715 sshd[3134]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:30.733865 systemd-logind[1130]: New session 30 of user core. Oct 2 19:59:30.734553 systemd[1]: Started session-30.scope. Oct 2 19:59:30.737000 audit[3134]: USER_START pid=3134 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:30.739000 audit[3137]: CRED_ACQ pid=3137 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:31.725087 kubelet[2036]: I1002 19:59:31.725031 2036 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:59:31.725087 kubelet[2036]: E1002 19:59:31.725091 2036 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="725cca0a-a446-473d-a797-961a298ab61a" containerName="mount-cgroup" Oct 2 19:59:31.725087 kubelet[2036]: E1002 19:59:31.725101 2036 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="725cca0a-a446-473d-a797-961a298ab61a" containerName="mount-cgroup" Oct 2 19:59:31.725497 kubelet[2036]: E1002 19:59:31.725109 2036 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="57fce457-4eb1-480f-b467-93b7a2b9613c" containerName="cilium-operator" Oct 2 19:59:31.725497 kubelet[2036]: E1002 19:59:31.725117 2036 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="725cca0a-a446-473d-a797-961a298ab61a" containerName="mount-cgroup" Oct 2 19:59:31.725497 kubelet[2036]: E1002 19:59:31.725124 2036 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="725cca0a-a446-473d-a797-961a298ab61a" containerName="mount-cgroup" Oct 2 19:59:31.725497 kubelet[2036]: I1002 19:59:31.725143 2036 memory_manager.go:346] "RemoveStaleState removing state" podUID="725cca0a-a446-473d-a797-961a298ab61a" containerName="mount-cgroup" Oct 2 19:59:31.725497 kubelet[2036]: I1002 19:59:31.725149 2036 memory_manager.go:346] "RemoveStaleState removing state" podUID="725cca0a-a446-473d-a797-961a298ab61a" containerName="mount-cgroup" Oct 2 19:59:31.725497 kubelet[2036]: I1002 19:59:31.725167 2036 memory_manager.go:346] "RemoveStaleState removing state" podUID="57fce457-4eb1-480f-b467-93b7a2b9613c" containerName="cilium-operator" Oct 2 19:59:31.725497 kubelet[2036]: I1002 19:59:31.725174 2036 memory_manager.go:346] "RemoveStaleState removing state" podUID="725cca0a-a446-473d-a797-961a298ab61a" containerName="mount-cgroup" Oct 2 19:59:31.725497 kubelet[2036]: I1002 19:59:31.725180 2036 memory_manager.go:346] "RemoveStaleState removing state" podUID="725cca0a-a446-473d-a797-961a298ab61a" containerName="mount-cgroup" Oct 2 19:59:31.725497 kubelet[2036]: E1002 19:59:31.725195 2036 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="725cca0a-a446-473d-a797-961a298ab61a" containerName="mount-cgroup" Oct 2 19:59:31.725497 kubelet[2036]: E1002 19:59:31.725202 2036 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="725cca0a-a446-473d-a797-961a298ab61a" containerName="mount-cgroup" Oct 2 19:59:31.725497 kubelet[2036]: I1002 19:59:31.725216 2036 memory_manager.go:346] "RemoveStaleState removing state" podUID="725cca0a-a446-473d-a797-961a298ab61a" containerName="mount-cgroup" Oct 2 19:59:31.725497 kubelet[2036]: I1002 19:59:31.725222 2036 memory_manager.go:346] "RemoveStaleState removing state" podUID="725cca0a-a446-473d-a797-961a298ab61a" containerName="mount-cgroup" Oct 2 19:59:31.730414 systemd[1]: Created slice kubepods-burstable-pod3aec5d39_b75c_44f2_beb8_f5fb6e2025ce.slice. Oct 2 19:59:31.779000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:31.781207 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 19:59:31.781262 kernel: audit: type=1400 audit(1696276771.779:1350): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:31.779000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000faa000 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:59:31.786691 kernel: audit: type=1300 audit(1696276771.779:1350): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000faa000 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:59:31.786753 kernel: audit: type=1327 audit(1696276771.779:1350): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:31.779000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:31.779000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:31.791420 kernel: audit: type=1400 audit(1696276771.779:1351): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:31.791506 kernel: audit: type=1300 audit(1696276771.779:1351): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e7a3a0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:59:31.779000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e7a3a0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:59:31.779000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:31.797554 kernel: audit: type=1327 audit(1696276771.779:1351): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:31.797603 kernel: audit: type=1400 audit(1696276771.780:1352): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:31.780000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:31.780000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000fb6e80 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:59:31.803979 kernel: audit: type=1300 audit(1696276771.780:1352): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000fb6e80 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:59:31.804039 kernel: audit: type=1327 audit(1696276771.780:1352): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:31.780000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:31.780000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:31.808899 kernel: audit: type=1400 audit(1696276771.780:1353): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:31.780000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000ea9ea0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 19:59:31.780000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:31.864506 kubelet[2036]: I1002 19:59:31.864456 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cilium-cgroup\") pod \"cilium-49d48\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " pod="kube-system/cilium-49d48" Oct 2 19:59:31.864506 kubelet[2036]: I1002 19:59:31.864510 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cilium-config-path\") pod \"cilium-49d48\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " pod="kube-system/cilium-49d48" Oct 2 19:59:31.864737 kubelet[2036]: I1002 19:59:31.864533 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-hostproc\") pod \"cilium-49d48\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " pod="kube-system/cilium-49d48" Oct 2 19:59:31.864737 kubelet[2036]: I1002 19:59:31.864556 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-xtables-lock\") pod \"cilium-49d48\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " pod="kube-system/cilium-49d48" Oct 2 19:59:31.864737 kubelet[2036]: I1002 19:59:31.864589 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cilium-ipsec-secrets\") pod \"cilium-49d48\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " pod="kube-system/cilium-49d48" Oct 2 19:59:31.864737 kubelet[2036]: I1002 19:59:31.864609 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-host-proc-sys-net\") pod \"cilium-49d48\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " pod="kube-system/cilium-49d48" Oct 2 19:59:31.864737 kubelet[2036]: I1002 19:59:31.864630 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-host-proc-sys-kernel\") pod \"cilium-49d48\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " pod="kube-system/cilium-49d48" Oct 2 19:59:31.864737 kubelet[2036]: I1002 19:59:31.864658 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-hubble-tls\") pod \"cilium-49d48\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " pod="kube-system/cilium-49d48" Oct 2 19:59:31.864926 kubelet[2036]: I1002 19:59:31.864678 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-bpf-maps\") pod \"cilium-49d48\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " pod="kube-system/cilium-49d48" Oct 2 19:59:31.864926 kubelet[2036]: I1002 19:59:31.864697 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cni-path\") pod \"cilium-49d48\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " pod="kube-system/cilium-49d48" Oct 2 19:59:31.864926 kubelet[2036]: I1002 19:59:31.864724 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-lib-modules\") pod \"cilium-49d48\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " pod="kube-system/cilium-49d48" Oct 2 19:59:31.864926 kubelet[2036]: I1002 19:59:31.864746 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-clustermesh-secrets\") pod \"cilium-49d48\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " pod="kube-system/cilium-49d48" Oct 2 19:59:31.864926 kubelet[2036]: I1002 19:59:31.864772 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cilium-run\") pod \"cilium-49d48\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " pod="kube-system/cilium-49d48" Oct 2 19:59:31.865038 kubelet[2036]: I1002 19:59:31.864973 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-etc-cni-netd\") pod \"cilium-49d48\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " pod="kube-system/cilium-49d48" Oct 2 19:59:31.865038 kubelet[2036]: I1002 19:59:31.865002 2036 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-c6kxd\" (UniqueName: \"kubernetes.io/projected/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-kube-api-access-c6kxd\") pod \"cilium-49d48\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " pod="kube-system/cilium-49d48" Oct 2 19:59:32.033656 kubelet[2036]: E1002 19:59:32.033625 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:32.034820 env[1143]: time="2023-10-02T19:59:32.034760715Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-49d48,Uid:3aec5d39-b75c-44f2-beb8-f5fb6e2025ce,Namespace:kube-system,Attempt:0,}" Oct 2 19:59:32.058983 kubelet[2036]: E1002 19:59:32.058904 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:32.418433 env[1143]: time="2023-10-02T19:59:32.418321260Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:59:32.420454 env[1143]: time="2023-10-02T19:59:32.420413068Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:59:32.422067 env[1143]: time="2023-10-02T19:59:32.422038474Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:59:32.423843 env[1143]: time="2023-10-02T19:59:32.423798561Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:59:32.439981 env[1143]: time="2023-10-02T19:59:32.439905062Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:59:32.440165 env[1143]: time="2023-10-02T19:59:32.439955942Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:59:32.440165 env[1143]: time="2023-10-02T19:59:32.439969223Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:59:32.440259 env[1143]: time="2023-10-02T19:59:32.440193143Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8 pid=3156 runtime=io.containerd.runc.v2 Oct 2 19:59:32.455303 systemd[1]: Started cri-containerd-213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8.scope. Oct 2 19:59:32.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.477000 audit: BPF prog-id=128 op=LOAD Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { bpf } for pid=3167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3156 pid=3167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:32.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231333739386331643036393931653135613563323465393436663632 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { perfmon } for pid=3167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3156 pid=3167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:32.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231333739386331643036393931653135613563323465393436663632 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { bpf } for pid=3167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { bpf } for pid=3167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { bpf } for pid=3167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { perfmon } for pid=3167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { perfmon } for pid=3167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { perfmon } for pid=3167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { perfmon } for pid=3167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { perfmon } for pid=3167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { bpf } for pid=3167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { bpf } for pid=3167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit: BPF prog-id=129 op=LOAD Oct 2 19:59:32.478000 audit[3167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3156 pid=3167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:32.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231333739386331643036393931653135613563323465393436663632 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { bpf } for pid=3167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { bpf } for pid=3167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { perfmon } for pid=3167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { perfmon } for pid=3167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { perfmon } for pid=3167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { perfmon } for pid=3167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { perfmon } for pid=3167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { bpf } for pid=3167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { bpf } for pid=3167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit: BPF prog-id=130 op=LOAD Oct 2 19:59:32.478000 audit[3167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3156 pid=3167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:32.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231333739386331643036393931653135613563323465393436663632 Oct 2 19:59:32.478000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:59:32.478000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { bpf } for pid=3167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { bpf } for pid=3167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { bpf } for pid=3167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { perfmon } for pid=3167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { perfmon } for pid=3167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { perfmon } for pid=3167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { perfmon } for pid=3167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { perfmon } for pid=3167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { bpf } for pid=3167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit[3167]: AVC avc: denied { bpf } for pid=3167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:32.478000 audit: BPF prog-id=131 op=LOAD Oct 2 19:59:32.478000 audit[3167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3156 pid=3167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:32.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231333739386331643036393931653135613563323465393436663632 Oct 2 19:59:32.492778 env[1143]: time="2023-10-02T19:59:32.492733664Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-49d48,Uid:3aec5d39-b75c-44f2-beb8-f5fb6e2025ce,Namespace:kube-system,Attempt:0,} returns sandbox id \"213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8\"" Oct 2 19:59:32.494190 kubelet[2036]: E1002 19:59:32.493631 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:32.496887 env[1143]: time="2023-10-02T19:59:32.495965796Z" level=info msg="CreateContainer within sandbox \"213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:59:32.515355 env[1143]: time="2023-10-02T19:59:32.515308070Z" level=info msg="CreateContainer within sandbox \"213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e\"" Oct 2 19:59:32.517492 env[1143]: time="2023-10-02T19:59:32.517435198Z" level=info msg="StartContainer for \"23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e\"" Oct 2 19:59:32.533033 systemd[1]: Started cri-containerd-23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e.scope. Oct 2 19:59:32.553536 systemd[1]: cri-containerd-23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e.scope: Deactivated successfully. Oct 2 19:59:32.570031 env[1143]: time="2023-10-02T19:59:32.569975679Z" level=info msg="shim disconnected" id=23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e Oct 2 19:59:32.570031 env[1143]: time="2023-10-02T19:59:32.570031959Z" level=warning msg="cleaning up after shim disconnected" id=23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e namespace=k8s.io Oct 2 19:59:32.570278 env[1143]: time="2023-10-02T19:59:32.570042359Z" level=info msg="cleaning up dead shim" Oct 2 19:59:32.578112 env[1143]: time="2023-10-02T19:59:32.578050710Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3215 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:59:32Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:59:32.578378 env[1143]: time="2023-10-02T19:59:32.578315831Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:59:32.578526 env[1143]: time="2023-10-02T19:59:32.578485551Z" level=error msg="Failed to pipe stdout of container \"23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e\"" error="reading from a closed fifo" Oct 2 19:59:32.578687 env[1143]: time="2023-10-02T19:59:32.578662312Z" level=error msg="Failed to pipe stderr of container \"23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e\"" error="reading from a closed fifo" Oct 2 19:59:32.581339 env[1143]: time="2023-10-02T19:59:32.581288122Z" level=error msg="StartContainer for \"23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:59:32.581674 kubelet[2036]: E1002 19:59:32.581654 2036 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e" Oct 2 19:59:32.581762 kubelet[2036]: E1002 19:59:32.581756 2036 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:59:32.581762 kubelet[2036]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:59:32.581762 kubelet[2036]: rm /hostbin/cilium-mount Oct 2 19:59:32.581762 kubelet[2036]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-c6kxd,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-49d48_kube-system(3aec5d39-b75c-44f2-beb8-f5fb6e2025ce): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:59:32.581912 kubelet[2036]: E1002 19:59:32.581790 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-49d48" podUID=3aec5d39-b75c-44f2-beb8-f5fb6e2025ce Oct 2 19:59:33.438804 kubelet[2036]: E1002 19:59:33.438478 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:33.442939 env[1143]: time="2023-10-02T19:59:33.442887065Z" level=info msg="CreateContainer within sandbox \"213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:59:33.451887 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3828234758.mount: Deactivated successfully. Oct 2 19:59:33.455134 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2049641589.mount: Deactivated successfully. Oct 2 19:59:33.460768 env[1143]: time="2023-10-02T19:59:33.460708654Z" level=info msg="CreateContainer within sandbox \"213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649\"" Oct 2 19:59:33.461368 env[1143]: time="2023-10-02T19:59:33.461339496Z" level=info msg="StartContainer for \"ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649\"" Oct 2 19:59:33.480302 systemd[1]: Started cri-containerd-ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649.scope. Oct 2 19:59:33.496086 systemd[1]: cri-containerd-ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649.scope: Deactivated successfully. Oct 2 19:59:33.503210 env[1143]: time="2023-10-02T19:59:33.503066097Z" level=info msg="shim disconnected" id=ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649 Oct 2 19:59:33.503210 env[1143]: time="2023-10-02T19:59:33.503189817Z" level=warning msg="cleaning up after shim disconnected" id=ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649 namespace=k8s.io Oct 2 19:59:33.503210 env[1143]: time="2023-10-02T19:59:33.503205777Z" level=info msg="cleaning up dead shim" Oct 2 19:59:33.511174 env[1143]: time="2023-10-02T19:59:33.511118168Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3252 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:59:33Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:59:33.511490 env[1143]: time="2023-10-02T19:59:33.511380529Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:59:33.511679 env[1143]: time="2023-10-02T19:59:33.511631289Z" level=error msg="Failed to pipe stdout of container \"ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649\"" error="reading from a closed fifo" Oct 2 19:59:33.513323 env[1143]: time="2023-10-02T19:59:33.513281736Z" level=error msg="Failed to pipe stderr of container \"ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649\"" error="reading from a closed fifo" Oct 2 19:59:33.514857 env[1143]: time="2023-10-02T19:59:33.514813902Z" level=error msg="StartContainer for \"ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:59:33.515076 kubelet[2036]: E1002 19:59:33.515052 2036 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649" Oct 2 19:59:33.515207 kubelet[2036]: E1002 19:59:33.515192 2036 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:59:33.515207 kubelet[2036]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:59:33.515207 kubelet[2036]: rm /hostbin/cilium-mount Oct 2 19:59:33.515207 kubelet[2036]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-c6kxd,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-49d48_kube-system(3aec5d39-b75c-44f2-beb8-f5fb6e2025ce): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:59:33.515362 kubelet[2036]: E1002 19:59:33.515233 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-49d48" podUID=3aec5d39-b75c-44f2-beb8-f5fb6e2025ce Oct 2 19:59:34.441901 kubelet[2036]: I1002 19:59:34.441494 2036 scope.go:115] "RemoveContainer" containerID="23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e" Oct 2 19:59:34.441901 kubelet[2036]: I1002 19:59:34.441862 2036 scope.go:115] "RemoveContainer" containerID="23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e" Oct 2 19:59:34.443363 env[1143]: time="2023-10-02T19:59:34.443326888Z" level=info msg="RemoveContainer for \"23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e\"" Oct 2 19:59:34.443910 env[1143]: time="2023-10-02T19:59:34.443882850Z" level=info msg="RemoveContainer for \"23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e\"" Oct 2 19:59:34.444113 env[1143]: time="2023-10-02T19:59:34.444078850Z" level=error msg="RemoveContainer for \"23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e\" failed" error="failed to set removing state for container \"23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e\": container is already in removing state" Oct 2 19:59:34.444343 kubelet[2036]: E1002 19:59:34.444325 2036 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e\": container is already in removing state" containerID="23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e" Oct 2 19:59:34.444415 kubelet[2036]: E1002 19:59:34.444357 2036 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e": container is already in removing state; Skipping pod "cilium-49d48_kube-system(3aec5d39-b75c-44f2-beb8-f5fb6e2025ce)" Oct 2 19:59:34.444415 kubelet[2036]: E1002 19:59:34.444414 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:34.445021 kubelet[2036]: E1002 19:59:34.444610 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-49d48_kube-system(3aec5d39-b75c-44f2-beb8-f5fb6e2025ce)\"" pod="kube-system/cilium-49d48" podUID=3aec5d39-b75c-44f2-beb8-f5fb6e2025ce Oct 2 19:59:34.445896 env[1143]: time="2023-10-02T19:59:34.445848777Z" level=info msg="RemoveContainer for \"23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e\" returns successfully" Oct 2 19:59:35.445233 kubelet[2036]: E1002 19:59:35.445189 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:35.445578 kubelet[2036]: E1002 19:59:35.445387 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-49d48_kube-system(3aec5d39-b75c-44f2-beb8-f5fb6e2025ce)\"" pod="kube-system/cilium-49d48" podUID=3aec5d39-b75c-44f2-beb8-f5fb6e2025ce Oct 2 19:59:35.678522 kubelet[2036]: W1002 19:59:35.678487 2036 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod3aec5d39_b75c_44f2_beb8_f5fb6e2025ce.slice/cri-containerd-23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e.scope WatchSource:0}: container "23a6d8d0d5f330ee34b50b8e47d5d7b9802124a662ff0ae0aeefab663a090f9e" in namespace "k8s.io": not found Oct 2 19:59:37.059985 kubelet[2036]: E1002 19:59:37.059905 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:38.784508 kubelet[2036]: W1002 19:59:38.784456 2036 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod3aec5d39_b75c_44f2_beb8_f5fb6e2025ce.slice/cri-containerd-ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649.scope WatchSource:0}: task ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649 not found: not found Oct 2 19:59:42.060534 kubelet[2036]: E1002 19:59:42.060500 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:47.061554 kubelet[2036]: E1002 19:59:47.061530 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:49.982223 kubelet[2036]: E1002 19:59:49.982188 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:49.985308 env[1143]: time="2023-10-02T19:59:49.985264488Z" level=info msg="CreateContainer within sandbox \"213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:59:49.995202 env[1143]: time="2023-10-02T19:59:49.995135851Z" level=info msg="CreateContainer within sandbox \"213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371\"" Oct 2 19:59:49.995528 env[1143]: time="2023-10-02T19:59:49.995508052Z" level=info msg="StartContainer for \"80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371\"" Oct 2 19:59:50.014219 systemd[1]: run-containerd-runc-k8s.io-80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371-runc.biLlt9.mount: Deactivated successfully. Oct 2 19:59:50.015593 systemd[1]: Started cri-containerd-80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371.scope. Oct 2 19:59:50.039959 systemd[1]: cri-containerd-80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371.scope: Deactivated successfully. Oct 2 19:59:50.048594 env[1143]: time="2023-10-02T19:59:50.048546319Z" level=info msg="shim disconnected" id=80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371 Oct 2 19:59:50.048820 env[1143]: time="2023-10-02T19:59:50.048803241Z" level=warning msg="cleaning up after shim disconnected" id=80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371 namespace=k8s.io Oct 2 19:59:50.048884 env[1143]: time="2023-10-02T19:59:50.048871001Z" level=info msg="cleaning up dead shim" Oct 2 19:59:50.057688 env[1143]: time="2023-10-02T19:59:50.057647799Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3292 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:59:50Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:59:50.058066 env[1143]: time="2023-10-02T19:59:50.058012520Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:59:50.058294 env[1143]: time="2023-10-02T19:59:50.058248841Z" level=error msg="Failed to pipe stdout of container \"80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371\"" error="reading from a closed fifo" Oct 2 19:59:50.058347 env[1143]: time="2023-10-02T19:59:50.058280841Z" level=error msg="Failed to pipe stderr of container \"80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371\"" error="reading from a closed fifo" Oct 2 19:59:50.059995 env[1143]: time="2023-10-02T19:59:50.059948608Z" level=error msg="StartContainer for \"80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:59:50.060381 kubelet[2036]: E1002 19:59:50.060179 2036 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371" Oct 2 19:59:50.060381 kubelet[2036]: E1002 19:59:50.060301 2036 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:59:50.060381 kubelet[2036]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:59:50.060381 kubelet[2036]: rm /hostbin/cilium-mount Oct 2 19:59:50.060573 kubelet[2036]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-c6kxd,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-49d48_kube-system(3aec5d39-b75c-44f2-beb8-f5fb6e2025ce): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:59:50.060633 kubelet[2036]: E1002 19:59:50.060363 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-49d48" podUID=3aec5d39-b75c-44f2-beb8-f5fb6e2025ce Oct 2 19:59:50.477192 kubelet[2036]: I1002 19:59:50.476282 2036 scope.go:115] "RemoveContainer" containerID="ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649" Oct 2 19:59:50.477192 kubelet[2036]: I1002 19:59:50.476398 2036 scope.go:115] "RemoveContainer" containerID="ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649" Oct 2 19:59:50.478705 env[1143]: time="2023-10-02T19:59:50.478645204Z" level=info msg="RemoveContainer for \"ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649\"" Oct 2 19:59:50.479866 env[1143]: time="2023-10-02T19:59:50.479834489Z" level=info msg="RemoveContainer for \"ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649\"" Oct 2 19:59:50.480136 env[1143]: time="2023-10-02T19:59:50.480064530Z" level=error msg="RemoveContainer for \"ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649\" failed" error="failed to set removing state for container \"ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649\": container is already in removing state" Oct 2 19:59:50.483172 kubelet[2036]: E1002 19:59:50.480576 2036 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649\": container is already in removing state" containerID="ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649" Oct 2 19:59:50.483172 kubelet[2036]: E1002 19:59:50.480606 2036 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649": container is already in removing state; Skipping pod "cilium-49d48_kube-system(3aec5d39-b75c-44f2-beb8-f5fb6e2025ce)" Oct 2 19:59:50.483172 kubelet[2036]: E1002 19:59:50.480660 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:50.483172 kubelet[2036]: E1002 19:59:50.480853 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-49d48_kube-system(3aec5d39-b75c-44f2-beb8-f5fb6e2025ce)\"" pod="kube-system/cilium-49d48" podUID=3aec5d39-b75c-44f2-beb8-f5fb6e2025ce Oct 2 19:59:50.483385 env[1143]: time="2023-10-02T19:59:50.481198775Z" level=info msg="RemoveContainer for \"ef082bae08c7dd62fd3b7e7e063dd7234d5d83e211ee5fca7f7ee641ecb15649\" returns successfully" Oct 2 19:59:50.992396 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371-rootfs.mount: Deactivated successfully. Oct 2 19:59:52.063354 kubelet[2036]: E1002 19:59:52.063320 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:53.153176 kubelet[2036]: W1002 19:59:53.153104 2036 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod3aec5d39_b75c_44f2_beb8_f5fb6e2025ce.slice/cri-containerd-80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371.scope WatchSource:0}: task 80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371 not found: not found Oct 2 19:59:57.064349 kubelet[2036]: E1002 19:59:57.064315 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:02.065678 kubelet[2036]: E1002 20:00:02.065636 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:04.981484 kubelet[2036]: E1002 20:00:04.981450 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:00:04.981808 kubelet[2036]: E1002 20:00:04.981675 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-49d48_kube-system(3aec5d39-b75c-44f2-beb8-f5fb6e2025ce)\"" pod="kube-system/cilium-49d48" podUID=3aec5d39-b75c-44f2-beb8-f5fb6e2025ce Oct 2 20:00:07.066483 kubelet[2036]: E1002 20:00:07.066455 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:12.067476 kubelet[2036]: E1002 20:00:12.067436 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:16.981348 kubelet[2036]: E1002 20:00:16.981318 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:00:16.983507 env[1143]: time="2023-10-02T20:00:16.983463143Z" level=info msg="CreateContainer within sandbox \"213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:00:16.991992 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3956592413.mount: Deactivated successfully. Oct 2 20:00:16.994449 env[1143]: time="2023-10-02T20:00:16.994384796Z" level=info msg="CreateContainer within sandbox \"213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"4ccd0c159f0d557fe470b8aa13c3890599ff957fc967b9d174ba7a6e81b4d20d\"" Oct 2 20:00:16.994893 env[1143]: time="2023-10-02T20:00:16.994834518Z" level=info msg="StartContainer for \"4ccd0c159f0d557fe470b8aa13c3890599ff957fc967b9d174ba7a6e81b4d20d\"" Oct 2 20:00:17.011984 systemd[1]: Started cri-containerd-4ccd0c159f0d557fe470b8aa13c3890599ff957fc967b9d174ba7a6e81b4d20d.scope. Oct 2 20:00:17.025303 systemd[1]: cri-containerd-4ccd0c159f0d557fe470b8aa13c3890599ff957fc967b9d174ba7a6e81b4d20d.scope: Deactivated successfully. Oct 2 20:00:17.029301 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4ccd0c159f0d557fe470b8aa13c3890599ff957fc967b9d174ba7a6e81b4d20d-rootfs.mount: Deactivated successfully. Oct 2 20:00:17.036964 env[1143]: time="2023-10-02T20:00:17.036908559Z" level=info msg="shim disconnected" id=4ccd0c159f0d557fe470b8aa13c3890599ff957fc967b9d174ba7a6e81b4d20d Oct 2 20:00:17.037224 env[1143]: time="2023-10-02T20:00:17.036965479Z" level=warning msg="cleaning up after shim disconnected" id=4ccd0c159f0d557fe470b8aa13c3890599ff957fc967b9d174ba7a6e81b4d20d namespace=k8s.io Oct 2 20:00:17.037224 env[1143]: time="2023-10-02T20:00:17.036982639Z" level=info msg="cleaning up dead shim" Oct 2 20:00:17.046767 env[1143]: time="2023-10-02T20:00:17.046718086Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:17Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3331 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:00:17Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/4ccd0c159f0d557fe470b8aa13c3890599ff957fc967b9d174ba7a6e81b4d20d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:00:17.047037 env[1143]: time="2023-10-02T20:00:17.046985247Z" level=error msg="copy shim log" error="read /proc/self/fd/40: file already closed" Oct 2 20:00:17.047531 env[1143]: time="2023-10-02T20:00:17.047472170Z" level=error msg="Failed to pipe stderr of container \"4ccd0c159f0d557fe470b8aa13c3890599ff957fc967b9d174ba7a6e81b4d20d\"" error="reading from a closed fifo" Oct 2 20:00:17.048296 env[1143]: time="2023-10-02T20:00:17.048250693Z" level=error msg="Failed to pipe stdout of container \"4ccd0c159f0d557fe470b8aa13c3890599ff957fc967b9d174ba7a6e81b4d20d\"" error="reading from a closed fifo" Oct 2 20:00:17.051084 env[1143]: time="2023-10-02T20:00:17.051034787Z" level=error msg="StartContainer for \"4ccd0c159f0d557fe470b8aa13c3890599ff957fc967b9d174ba7a6e81b4d20d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:00:17.051628 kubelet[2036]: E1002 20:00:17.051455 2036 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="4ccd0c159f0d557fe470b8aa13c3890599ff957fc967b9d174ba7a6e81b4d20d" Oct 2 20:00:17.051628 kubelet[2036]: E1002 20:00:17.051565 2036 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:00:17.051628 kubelet[2036]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:00:17.051628 kubelet[2036]: rm /hostbin/cilium-mount Oct 2 20:00:17.051826 kubelet[2036]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-c6kxd,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-49d48_kube-system(3aec5d39-b75c-44f2-beb8-f5fb6e2025ce): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:00:17.051884 kubelet[2036]: E1002 20:00:17.051601 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-49d48" podUID=3aec5d39-b75c-44f2-beb8-f5fb6e2025ce Oct 2 20:00:17.068889 kubelet[2036]: E1002 20:00:17.068865 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:17.524502 kubelet[2036]: I1002 20:00:17.524474 2036 scope.go:115] "RemoveContainer" containerID="80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371" Oct 2 20:00:17.525104 kubelet[2036]: I1002 20:00:17.524788 2036 scope.go:115] "RemoveContainer" containerID="80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371" Oct 2 20:00:17.527414 env[1143]: time="2023-10-02T20:00:17.527376307Z" level=info msg="RemoveContainer for \"80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371\"" Oct 2 20:00:17.528123 env[1143]: time="2023-10-02T20:00:17.528089830Z" level=info msg="RemoveContainer for \"80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371\"" Oct 2 20:00:17.528224 env[1143]: time="2023-10-02T20:00:17.528176151Z" level=error msg="RemoveContainer for \"80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371\" failed" error="failed to set removing state for container \"80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371\": container is already in removing state" Oct 2 20:00:17.529351 kubelet[2036]: E1002 20:00:17.529291 2036 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371\": container is already in removing state" containerID="80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371" Oct 2 20:00:17.529351 kubelet[2036]: I1002 20:00:17.529324 2036 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371} err="rpc error: code = Unknown desc = failed to set removing state for container \"80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371\": container is already in removing state" Oct 2 20:00:17.530459 env[1143]: time="2023-10-02T20:00:17.530426481Z" level=info msg="RemoveContainer for \"80635bb68c518bbc8163909b0ced454479f429e04a54bc6993c1ee7e78e06371\" returns successfully" Oct 2 20:00:17.530752 kubelet[2036]: E1002 20:00:17.530735 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:00:17.530994 kubelet[2036]: E1002 20:00:17.530977 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-49d48_kube-system(3aec5d39-b75c-44f2-beb8-f5fb6e2025ce)\"" pod="kube-system/cilium-49d48" podUID=3aec5d39-b75c-44f2-beb8-f5fb6e2025ce Oct 2 20:00:17.940000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:17.944405 kernel: kauditd_printk_skb: 59 callbacks suppressed Oct 2 20:00:17.944558 kernel: audit: type=1400 audit(1696276817.940:1372): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:17.944592 kernel: audit: type=1300 audit(1696276817.940:1372): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40018efd70 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 20:00:17.940000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40018efd70 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 20:00:17.940000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:17.954435 kernel: audit: type=1327 audit(1696276817.940:1372): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:17.954498 kernel: audit: type=1400 audit(1696276817.941:1373): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:17.941000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:17.941000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000cddce0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 20:00:17.963384 kernel: audit: type=1300 audit(1696276817.941:1373): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000cddce0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 20:00:17.963430 kernel: audit: type=1327 audit(1696276817.941:1373): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:17.941000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:18.640000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:18.640000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400cf98c60 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 20:00:18.645471 kernel: audit: type=1400 audit(1696276818.640:1374): avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:18.645533 kernel: audit: type=1300 audit(1696276818.640:1374): arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400cf98c60 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 20:00:18.645553 kernel: audit: type=1327 audit(1696276818.640:1374): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:00:18.640000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:00:18.647626 kernel: audit: type=1400 audit(1696276818.646:1375): avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:18.646000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:18.646000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=40030f6c60 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 20:00:18.646000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:18.646000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:00:18.646000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=4002f1fde0 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 20:00:18.646000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:00:18.646000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7051 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:18.646000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400d126210 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 20:00:18.646000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:00:18.646000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7049 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:18.646000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400d39af60 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 20:00:18.646000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:00:18.653000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:18.653000 audit[1929]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400cf98cf0 a2=fc6 a3=0 items=0 ppid=1764 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c222,c700 key=(null) Oct 2 20:00:18.653000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:00:20.145270 kubelet[2036]: W1002 20:00:20.145226 2036 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod3aec5d39_b75c_44f2_beb8_f5fb6e2025ce.slice/cri-containerd-4ccd0c159f0d557fe470b8aa13c3890599ff957fc967b9d174ba7a6e81b4d20d.scope WatchSource:0}: task 4ccd0c159f0d557fe470b8aa13c3890599ff957fc967b9d174ba7a6e81b4d20d not found: not found Oct 2 20:00:21.947139 env[1143]: time="2023-10-02T20:00:21.947103165Z" level=info msg="StopPodSandbox for \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\"" Oct 2 20:00:21.947620 env[1143]: time="2023-10-02T20:00:21.947574687Z" level=info msg="TearDown network for sandbox \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" successfully" Oct 2 20:00:21.947693 env[1143]: time="2023-10-02T20:00:21.947676408Z" level=info msg="StopPodSandbox for \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" returns successfully" Oct 2 20:00:21.948302 env[1143]: time="2023-10-02T20:00:21.948275931Z" level=info msg="RemovePodSandbox for \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\"" Oct 2 20:00:21.948428 env[1143]: time="2023-10-02T20:00:21.948394131Z" level=info msg="Forcibly stopping sandbox \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\"" Oct 2 20:00:21.948529 env[1143]: time="2023-10-02T20:00:21.948510452Z" level=info msg="TearDown network for sandbox \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" successfully" Oct 2 20:00:21.951099 env[1143]: time="2023-10-02T20:00:21.951068584Z" level=info msg="RemovePodSandbox \"1247d548fbccbb758bb5d0580243497facbcd47258a5e295cf234f2546021993\" returns successfully" Oct 2 20:00:21.951550 env[1143]: time="2023-10-02T20:00:21.951514826Z" level=info msg="StopPodSandbox for \"695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9\"" Oct 2 20:00:21.951632 env[1143]: time="2023-10-02T20:00:21.951598347Z" level=info msg="TearDown network for sandbox \"695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9\" successfully" Oct 2 20:00:21.951632 env[1143]: time="2023-10-02T20:00:21.951627907Z" level=info msg="StopPodSandbox for \"695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9\" returns successfully" Oct 2 20:00:21.951931 env[1143]: time="2023-10-02T20:00:21.951909548Z" level=info msg="RemovePodSandbox for \"695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9\"" Oct 2 20:00:21.951997 env[1143]: time="2023-10-02T20:00:21.951933228Z" level=info msg="Forcibly stopping sandbox \"695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9\"" Oct 2 20:00:21.952033 env[1143]: time="2023-10-02T20:00:21.952000869Z" level=info msg="TearDown network for sandbox \"695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9\" successfully" Oct 2 20:00:21.953871 env[1143]: time="2023-10-02T20:00:21.953832478Z" level=info msg="RemovePodSandbox \"695cf4f6dcf37ea26ad60d16d7a0ddf8026f8ce286f7811a1fc3008ac7efd9e9\" returns successfully" Oct 2 20:00:21.986077 kubelet[2036]: W1002 20:00:21.986042 2036 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 20:00:22.070039 kubelet[2036]: E1002 20:00:22.070012 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:27.071345 kubelet[2036]: E1002 20:00:27.071314 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:29.982180 kubelet[2036]: E1002 20:00:29.982133 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:00:29.982517 kubelet[2036]: E1002 20:00:29.982365 2036 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-49d48_kube-system(3aec5d39-b75c-44f2-beb8-f5fb6e2025ce)\"" pod="kube-system/cilium-49d48" podUID=3aec5d39-b75c-44f2-beb8-f5fb6e2025ce Oct 2 20:00:31.780000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:31.783715 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:00:31.783774 kernel: audit: type=1400 audit(1696276831.780:1380): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:31.783805 kernel: audit: type=1300 audit(1696276831.780:1380): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028a8f80 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 20:00:31.780000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028a8f80 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 20:00:31.780000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:31.788606 kernel: audit: type=1327 audit(1696276831.780:1380): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:31.788665 kernel: audit: type=1400 audit(1696276831.780:1381): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:31.780000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:31.790566 kernel: audit: type=1300 audit(1696276831.780:1381): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40026bff80 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 20:00:31.780000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40026bff80 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 20:00:31.780000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:31.795737 kernel: audit: type=1327 audit(1696276831.780:1381): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:31.795782 kernel: audit: type=1400 audit(1696276831.781:1382): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:31.781000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:31.797717 kernel: audit: type=1300 audit(1696276831.781:1382): arch=c00000b7 syscall=27 success=no exit=-13 a0=d a1=4002a230a0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 20:00:31.781000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=d a1=4002a230a0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 20:00:31.781000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:31.803033 kernel: audit: type=1327 audit(1696276831.781:1382): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:31.803089 kernel: audit: type=1400 audit(1696276831.780:1383): avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:31.780000 audit[1914]: AVC avc: denied { watch } for pid=1914 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:31.780000 audit[1914]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40012a16e0 a2=fc6 a3=0 items=0 ppid=1751 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c855 key=(null) Oct 2 20:00:31.780000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:31.981948 kubelet[2036]: E1002 20:00:31.981916 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:00:32.072116 kubelet[2036]: E1002 20:00:32.072005 2036 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:32.864337 env[1143]: time="2023-10-02T20:00:32.864287495Z" level=info msg="StopPodSandbox for \"213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8\"" Oct 2 20:00:32.864659 env[1143]: time="2023-10-02T20:00:32.864362296Z" level=info msg="Container to stop \"4ccd0c159f0d557fe470b8aa13c3890599ff957fc967b9d174ba7a6e81b4d20d\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:00:32.868307 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8-shm.mount: Deactivated successfully. Oct 2 20:00:32.877416 systemd[1]: cri-containerd-213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8.scope: Deactivated successfully. Oct 2 20:00:32.876000 audit: BPF prog-id=128 op=UNLOAD Oct 2 20:00:32.881000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:00:32.897627 sshd[3134]: pam_unix(sshd:session): session closed for user core Oct 2 20:00:32.897000 audit[3134]: USER_END pid=3134 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:00:32.897000 audit[3134]: CRED_DISP pid=3134 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:00:32.899000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.7:22-10.0.0.1:47446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:00:32.900399 systemd[1]: sshd@29-10.0.0.7:22-10.0.0.1:47446.service: Deactivated successfully. Oct 2 20:00:32.902100 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8-rootfs.mount: Deactivated successfully. Oct 2 20:00:32.902577 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 20:00:32.902758 systemd[1]: session-30.scope: Consumed 1.231s CPU time. Oct 2 20:00:32.903268 systemd-logind[1130]: Session 30 logged out. Waiting for processes to exit. Oct 2 20:00:32.904591 systemd-logind[1130]: Removed session 30. Oct 2 20:00:32.921726 env[1143]: time="2023-10-02T20:00:32.921672981Z" level=info msg="shim disconnected" id=213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8 Oct 2 20:00:32.921726 env[1143]: time="2023-10-02T20:00:32.921720701Z" level=warning msg="cleaning up after shim disconnected" id=213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8 namespace=k8s.io Oct 2 20:00:32.921726 env[1143]: time="2023-10-02T20:00:32.921731542Z" level=info msg="cleaning up dead shim" Oct 2 20:00:32.929921 env[1143]: time="2023-10-02T20:00:32.929863342Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3366 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:00:32Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Oct 2 20:00:32.930233 env[1143]: time="2023-10-02T20:00:32.930203184Z" level=info msg="TearDown network for sandbox \"213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8\" successfully" Oct 2 20:00:32.930275 env[1143]: time="2023-10-02T20:00:32.930232944Z" level=info msg="StopPodSandbox for \"213798c1d06991e15a5c24e946f62b08f90afc407bbb7837ce146d5980c5dea8\" returns successfully" Oct 2 20:00:32.999784 kubelet[2036]: I1002 20:00:32.999752 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-c6kxd\" (UniqueName: \"kubernetes.io/projected/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-kube-api-access-c6kxd\") pod \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " Oct 2 20:00:33.000228 kubelet[2036]: I1002 20:00:33.000209 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-hubble-tls\") pod \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " Oct 2 20:00:33.000339 kubelet[2036]: I1002 20:00:33.000327 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cilium-ipsec-secrets\") pod \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " Oct 2 20:00:33.000421 kubelet[2036]: I1002 20:00:33.000410 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-host-proc-sys-net\") pod \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " Oct 2 20:00:33.000506 kubelet[2036]: I1002 20:00:33.000497 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-bpf-maps\") pod \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " Oct 2 20:00:33.000594 kubelet[2036]: I1002 20:00:33.000556 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce" (UID: "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:33.000594 kubelet[2036]: I1002 20:00:33.000535 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce" (UID: "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:33.000594 kubelet[2036]: I1002 20:00:33.000572 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-xtables-lock\") pod \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " Oct 2 20:00:33.000716 kubelet[2036]: I1002 20:00:33.000695 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cilium-run\") pod \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " Oct 2 20:00:33.000754 kubelet[2036]: I1002 20:00:33.000709 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce" (UID: "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:33.000754 kubelet[2036]: I1002 20:00:33.000725 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cni-path\") pod \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " Oct 2 20:00:33.000754 kubelet[2036]: I1002 20:00:33.000744 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce" (UID: "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:33.000754 kubelet[2036]: I1002 20:00:33.000752 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-clustermesh-secrets\") pod \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " Oct 2 20:00:33.000854 kubelet[2036]: I1002 20:00:33.000771 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-lib-modules\") pod \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " Oct 2 20:00:33.000854 kubelet[2036]: I1002 20:00:33.000791 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-host-proc-sys-kernel\") pod \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " Oct 2 20:00:33.000854 kubelet[2036]: I1002 20:00:33.000812 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cilium-config-path\") pod \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " Oct 2 20:00:33.000922 kubelet[2036]: I1002 20:00:33.000868 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-etc-cni-netd\") pod \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " Oct 2 20:00:33.000922 kubelet[2036]: I1002 20:00:33.000893 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cilium-cgroup\") pod \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " Oct 2 20:00:33.000922 kubelet[2036]: I1002 20:00:33.000911 2036 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-hostproc\") pod \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\" (UID: \"3aec5d39-b75c-44f2-beb8-f5fb6e2025ce\") " Oct 2 20:00:33.001010 kubelet[2036]: I1002 20:00:33.000963 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce" (UID: "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:33.001010 kubelet[2036]: I1002 20:00:33.000985 2036 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:33.001010 kubelet[2036]: I1002 20:00:33.000991 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce" (UID: "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:33.001010 kubelet[2036]: I1002 20:00:33.000768 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cni-path" (OuterVolumeSpecName: "cni-path") pod "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce" (UID: "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:33.001010 kubelet[2036]: I1002 20:00:33.001002 2036 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:33.001127 kubelet[2036]: I1002 20:00:33.001014 2036 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:33.001127 kubelet[2036]: I1002 20:00:33.001013 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce" (UID: "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:33.001127 kubelet[2036]: I1002 20:00:33.001030 2036 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:33.001127 kubelet[2036]: I1002 20:00:33.001055 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-hostproc" (OuterVolumeSpecName: "hostproc") pod "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce" (UID: "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:33.001127 kubelet[2036]: I1002 20:00:33.001076 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce" (UID: "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:33.001264 kubelet[2036]: W1002 20:00:33.001127 2036 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:00:33.004087 kubelet[2036]: I1002 20:00:33.002920 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce" (UID: "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:00:33.003992 systemd[1]: var-lib-kubelet-pods-3aec5d39\x2db75c\x2d44f2\x2dbeb8\x2df5fb6e2025ce-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dc6kxd.mount: Deactivated successfully. Oct 2 20:00:33.005907 systemd[1]: var-lib-kubelet-pods-3aec5d39\x2db75c\x2d44f2\x2dbeb8\x2df5fb6e2025ce-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:00:33.007245 kubelet[2036]: I1002 20:00:33.007214 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce" (UID: "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:00:33.007242 systemd[1]: var-lib-kubelet-pods-3aec5d39\x2db75c\x2d44f2\x2dbeb8\x2df5fb6e2025ce-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:00:33.007360 kubelet[2036]: I1002 20:00:33.007288 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-kube-api-access-c6kxd" (OuterVolumeSpecName: "kube-api-access-c6kxd") pod "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce" (UID: "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce"). InnerVolumeSpecName "kube-api-access-c6kxd". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:00:33.007445 kubelet[2036]: I1002 20:00:33.007423 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce" (UID: "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:00:33.007992 kubelet[2036]: I1002 20:00:33.007947 2036 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce" (UID: "3aec5d39-b75c-44f2-beb8-f5fb6e2025ce"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:00:33.101239 kubelet[2036]: I1002 20:00:33.101190 2036 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:33.101239 kubelet[2036]: I1002 20:00:33.101226 2036 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:33.101239 kubelet[2036]: I1002 20:00:33.101238 2036 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:33.101239 kubelet[2036]: I1002 20:00:33.101247 2036 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:33.101239 kubelet[2036]: I1002 20:00:33.101257 2036 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:33.101473 kubelet[2036]: I1002 20:00:33.101266 2036 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:33.101473 kubelet[2036]: I1002 20:00:33.101277 2036 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-c6kxd\" (UniqueName: \"kubernetes.io/projected/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-kube-api-access-c6kxd\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:33.101473 kubelet[2036]: I1002 20:00:33.101289 2036 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cilium-ipsec-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:33.101473 kubelet[2036]: I1002 20:00:33.101299 2036 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:33.101473 kubelet[2036]: I1002 20:00:33.101309 2036 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:33.101473 kubelet[2036]: I1002 20:00:33.101317 2036 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:33.557089 kubelet[2036]: I1002 20:00:33.557058 2036 scope.go:115] "RemoveContainer" containerID="4ccd0c159f0d557fe470b8aa13c3890599ff957fc967b9d174ba7a6e81b4d20d" Oct 2 20:00:33.559755 env[1143]: time="2023-10-02T20:00:33.559715968Z" level=info msg="RemoveContainer for \"4ccd0c159f0d557fe470b8aa13c3890599ff957fc967b9d174ba7a6e81b4d20d\"" Oct 2 20:00:33.562376 systemd[1]: Removed slice kubepods-burstable-pod3aec5d39_b75c_44f2_beb8_f5fb6e2025ce.slice. Oct 2 20:00:33.565212 env[1143]: time="2023-10-02T20:00:33.565140715Z" level=info msg="RemoveContainer for \"4ccd0c159f0d557fe470b8aa13c3890599ff957fc967b9d174ba7a6e81b4d20d\" returns successfully" Oct 2 20:00:33.868366 systemd[1]: var-lib-kubelet-pods-3aec5d39\x2db75c\x2d44f2\x2dbeb8\x2df5fb6e2025ce-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:00:33.981943 kubelet[2036]: E1002 20:00:33.981897 2036 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:00:33.986426 kubelet[2036]: I1002 20:00:33.986401 2036 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=3aec5d39-b75c-44f2-beb8-f5fb6e2025ce path="/var/lib/kubelet/pods/3aec5d39-b75c-44f2-beb8-f5fb6e2025ce/volumes"