Oct 2 19:54:39.736850 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 19:54:39.736868 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 19:54:39.736875 kernel: efi: EFI v2.70 by EDK II Oct 2 19:54:39.736881 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Oct 2 19:54:39.736886 kernel: random: crng init done Oct 2 19:54:39.736891 kernel: ACPI: Early table checksum verification disabled Oct 2 19:54:39.736897 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Oct 2 19:54:39.736903 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Oct 2 19:54:39.736909 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:54:39.736914 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:54:39.736920 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:54:39.736925 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:54:39.736930 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:54:39.736936 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:54:39.736944 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:54:39.736949 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:54:39.736955 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:54:39.736961 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Oct 2 19:54:39.736966 kernel: NUMA: Failed to initialise from firmware Oct 2 19:54:39.736972 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:54:39.736978 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Oct 2 19:54:39.736984 kernel: Zone ranges: Oct 2 19:54:39.736990 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:54:39.736996 kernel: DMA32 empty Oct 2 19:54:39.737002 kernel: Normal empty Oct 2 19:54:39.737007 kernel: Movable zone start for each node Oct 2 19:54:39.737013 kernel: Early memory node ranges Oct 2 19:54:39.737018 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Oct 2 19:54:39.737024 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Oct 2 19:54:39.737030 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Oct 2 19:54:39.737035 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Oct 2 19:54:39.737041 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Oct 2 19:54:39.737046 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Oct 2 19:54:39.737052 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Oct 2 19:54:39.737058 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:54:39.737065 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Oct 2 19:54:39.737070 kernel: psci: probing for conduit method from ACPI. Oct 2 19:54:39.737076 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 19:54:39.737081 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 19:54:39.737087 kernel: psci: Trusted OS migration not required Oct 2 19:54:39.737095 kernel: psci: SMC Calling Convention v1.1 Oct 2 19:54:39.737101 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Oct 2 19:54:39.737109 kernel: ACPI: SRAT not present Oct 2 19:54:39.737115 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 19:54:39.737121 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 19:54:39.737127 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Oct 2 19:54:39.737133 kernel: Detected PIPT I-cache on CPU0 Oct 2 19:54:39.737139 kernel: CPU features: detected: GIC system register CPU interface Oct 2 19:54:39.737145 kernel: CPU features: detected: Hardware dirty bit management Oct 2 19:54:39.737151 kernel: CPU features: detected: Spectre-v4 Oct 2 19:54:39.737157 kernel: CPU features: detected: Spectre-BHB Oct 2 19:54:39.737164 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 19:54:39.737170 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 19:54:39.737176 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 19:54:39.737182 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Oct 2 19:54:39.737188 kernel: Policy zone: DMA Oct 2 19:54:39.737195 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:54:39.737201 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:54:39.737207 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:54:39.737213 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:54:39.737220 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:54:39.737226 kernel: Memory: 2459280K/2572288K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 113008K reserved, 0K cma-reserved) Oct 2 19:54:39.737233 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 19:54:39.737239 kernel: trace event string verifier disabled Oct 2 19:54:39.737245 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 19:54:39.737252 kernel: rcu: RCU event tracing is enabled. Oct 2 19:54:39.737258 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 19:54:39.737264 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 19:54:39.737270 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:54:39.737276 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:54:39.737282 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 19:54:39.737288 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 19:54:39.737294 kernel: GICv3: 256 SPIs implemented Oct 2 19:54:39.737301 kernel: GICv3: 0 Extended SPIs implemented Oct 2 19:54:39.737307 kernel: GICv3: Distributor has no Range Selector support Oct 2 19:54:39.737313 kernel: Root IRQ handler: gic_handle_irq Oct 2 19:54:39.737319 kernel: GICv3: 16 PPIs implemented Oct 2 19:54:39.737325 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Oct 2 19:54:39.737331 kernel: ACPI: SRAT not present Oct 2 19:54:39.737337 kernel: ITS [mem 0x08080000-0x0809ffff] Oct 2 19:54:39.737343 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 19:54:39.737355 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Oct 2 19:54:39.737362 kernel: GICv3: using LPI property table @0x00000000400d0000 Oct 2 19:54:39.737368 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Oct 2 19:54:39.737374 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:54:39.737381 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 19:54:39.737388 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 19:54:39.737394 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 19:54:39.737400 kernel: arm-pv: using stolen time PV Oct 2 19:54:39.737406 kernel: Console: colour dummy device 80x25 Oct 2 19:54:39.737412 kernel: ACPI: Core revision 20210730 Oct 2 19:54:39.737419 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 19:54:39.737425 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:54:39.737432 kernel: LSM: Security Framework initializing Oct 2 19:54:39.737438 kernel: SELinux: Initializing. Oct 2 19:54:39.737446 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:54:39.737452 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:54:39.737458 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:54:39.737464 kernel: Platform MSI: ITS@0x8080000 domain created Oct 2 19:54:39.737471 kernel: PCI/MSI: ITS@0x8080000 domain created Oct 2 19:54:39.737477 kernel: Remapping and enabling EFI services. Oct 2 19:54:39.737483 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:54:39.737489 kernel: Detected PIPT I-cache on CPU1 Oct 2 19:54:39.737495 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Oct 2 19:54:39.737503 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Oct 2 19:54:39.737509 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:54:39.737515 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 19:54:39.737522 kernel: Detected PIPT I-cache on CPU2 Oct 2 19:54:39.737528 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Oct 2 19:54:39.737534 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Oct 2 19:54:39.737540 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:54:39.737547 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Oct 2 19:54:39.737553 kernel: Detected PIPT I-cache on CPU3 Oct 2 19:54:39.737559 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Oct 2 19:54:39.737566 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Oct 2 19:54:39.737573 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:54:39.737579 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Oct 2 19:54:39.737585 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 19:54:39.737595 kernel: SMP: Total of 4 processors activated. Oct 2 19:54:39.737603 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 19:54:39.737609 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 19:54:39.737616 kernel: CPU features: detected: Common not Private translations Oct 2 19:54:39.737622 kernel: CPU features: detected: CRC32 instructions Oct 2 19:54:39.737629 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 19:54:39.737635 kernel: CPU features: detected: LSE atomic instructions Oct 2 19:54:39.737642 kernel: CPU features: detected: Privileged Access Never Oct 2 19:54:39.737650 kernel: CPU features: detected: RAS Extension Support Oct 2 19:54:39.737656 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Oct 2 19:54:39.737663 kernel: CPU: All CPU(s) started at EL1 Oct 2 19:54:39.737676 kernel: alternatives: patching kernel code Oct 2 19:54:39.737684 kernel: devtmpfs: initialized Oct 2 19:54:39.737690 kernel: KASLR enabled Oct 2 19:54:39.737697 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:54:39.737703 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 19:54:39.737710 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:54:39.737716 kernel: SMBIOS 3.0.0 present. Oct 2 19:54:39.737723 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Oct 2 19:54:39.737729 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:54:39.737736 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 19:54:39.737742 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 19:54:39.737750 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 19:54:39.737756 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:54:39.737763 kernel: audit: type=2000 audit(0.031:1): state=initialized audit_enabled=0 res=1 Oct 2 19:54:39.737769 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:54:39.737776 kernel: cpuidle: using governor menu Oct 2 19:54:39.737782 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 19:54:39.737789 kernel: ASID allocator initialised with 32768 entries Oct 2 19:54:39.737796 kernel: ACPI: bus type PCI registered Oct 2 19:54:39.737802 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:54:39.737810 kernel: Serial: AMBA PL011 UART driver Oct 2 19:54:39.737817 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:54:39.737823 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 19:54:39.737830 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:54:39.737836 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 19:54:39.737842 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:54:39.737849 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 19:54:39.737856 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:54:39.737862 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:54:39.737870 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:54:39.737876 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:54:39.737883 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:54:39.737893 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:54:39.737900 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:54:39.737906 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:54:39.737913 kernel: ACPI: Interpreter enabled Oct 2 19:54:39.737919 kernel: ACPI: Using GIC for interrupt routing Oct 2 19:54:39.737926 kernel: ACPI: MCFG table detected, 1 entries Oct 2 19:54:39.737934 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Oct 2 19:54:39.737940 kernel: printk: console [ttyAMA0] enabled Oct 2 19:54:39.737947 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:54:39.738086 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:54:39.738151 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 19:54:39.738212 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 19:54:39.738269 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Oct 2 19:54:39.738341 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Oct 2 19:54:39.738357 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Oct 2 19:54:39.738364 kernel: PCI host bridge to bus 0000:00 Oct 2 19:54:39.738440 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Oct 2 19:54:39.738493 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 19:54:39.738545 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Oct 2 19:54:39.738597 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:54:39.738701 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Oct 2 19:54:39.738774 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:54:39.738837 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Oct 2 19:54:39.738896 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Oct 2 19:54:39.738953 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 19:54:39.739011 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 19:54:39.739070 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Oct 2 19:54:39.739131 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Oct 2 19:54:39.739183 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Oct 2 19:54:39.739235 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 19:54:39.739287 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Oct 2 19:54:39.739296 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 19:54:39.739302 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 19:54:39.739309 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 19:54:39.739317 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 19:54:39.739324 kernel: iommu: Default domain type: Translated Oct 2 19:54:39.739330 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 19:54:39.739337 kernel: vgaarb: loaded Oct 2 19:54:39.739343 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:54:39.739355 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it> Oct 2 19:54:39.739362 kernel: PTP clock support registered Oct 2 19:54:39.739369 kernel: Registered efivars operations Oct 2 19:54:39.739375 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 19:54:39.739382 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:54:39.739390 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:54:39.739396 kernel: pnp: PnP ACPI init Oct 2 19:54:39.739466 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Oct 2 19:54:39.739476 kernel: pnp: PnP ACPI: found 1 devices Oct 2 19:54:39.739483 kernel: NET: Registered PF_INET protocol family Oct 2 19:54:39.739490 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:54:39.739496 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:54:39.739503 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:54:39.739512 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:54:39.739518 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:54:39.739525 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:54:39.739531 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:54:39.739538 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:54:39.739544 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:54:39.739551 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:54:39.739557 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Oct 2 19:54:39.739565 kernel: kvm [1]: HYP mode not available Oct 2 19:54:39.739572 kernel: Initialise system trusted keyrings Oct 2 19:54:39.739578 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:54:39.739585 kernel: Key type asymmetric registered Oct 2 19:54:39.739591 kernel: Asymmetric key parser 'x509' registered Oct 2 19:54:39.739598 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:54:39.739604 kernel: io scheduler mq-deadline registered Oct 2 19:54:39.739611 kernel: io scheduler kyber registered Oct 2 19:54:39.739617 kernel: io scheduler bfq registered Oct 2 19:54:39.739624 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 19:54:39.739631 kernel: ACPI: button: Power Button [PWRB] Oct 2 19:54:39.739638 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 19:54:39.739714 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Oct 2 19:54:39.739723 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:54:39.739730 kernel: thunder_xcv, ver 1.0 Oct 2 19:54:39.739736 kernel: thunder_bgx, ver 1.0 Oct 2 19:54:39.739743 kernel: nicpf, ver 1.0 Oct 2 19:54:39.739749 kernel: nicvf, ver 1.0 Oct 2 19:54:39.739814 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 19:54:39.739871 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T19:54:39 UTC (1696276479) Oct 2 19:54:39.739879 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:54:39.739886 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:54:39.739893 kernel: Segment Routing with IPv6 Oct 2 19:54:39.739899 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:54:39.739905 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:54:39.739912 kernel: Key type dns_resolver registered Oct 2 19:54:39.739918 kernel: registered taskstats version 1 Oct 2 19:54:39.739927 kernel: Loading compiled-in X.509 certificates Oct 2 19:54:39.739933 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 19:54:39.739940 kernel: Key type .fscrypt registered Oct 2 19:54:39.739946 kernel: Key type fscrypt-provisioning registered Oct 2 19:54:39.739952 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:54:39.739959 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:54:39.739965 kernel: ima: No architecture policies found Oct 2 19:54:39.739972 kernel: Freeing unused kernel memory: 34560K Oct 2 19:54:39.739978 kernel: Run /init as init process Oct 2 19:54:39.739986 kernel: with arguments: Oct 2 19:54:39.739992 kernel: /init Oct 2 19:54:39.739998 kernel: with environment: Oct 2 19:54:39.740005 kernel: HOME=/ Oct 2 19:54:39.740011 kernel: TERM=linux Oct 2 19:54:39.740017 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:54:39.740026 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:54:39.740034 systemd[1]: Detected virtualization kvm. Oct 2 19:54:39.740043 systemd[1]: Detected architecture arm64. Oct 2 19:54:39.740049 systemd[1]: Running in initrd. Oct 2 19:54:39.740056 systemd[1]: No hostname configured, using default hostname. Oct 2 19:54:39.740063 systemd[1]: Hostname set to <localhost>. Oct 2 19:54:39.740070 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:54:39.740077 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:54:39.740084 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:54:39.740091 systemd[1]: Reached target cryptsetup.target. Oct 2 19:54:39.740099 systemd[1]: Reached target paths.target. Oct 2 19:54:39.740106 systemd[1]: Reached target slices.target. Oct 2 19:54:39.740113 systemd[1]: Reached target swap.target. Oct 2 19:54:39.740119 systemd[1]: Reached target timers.target. Oct 2 19:54:39.740127 systemd[1]: Listening on iscsid.socket. Oct 2 19:54:39.740133 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:54:39.740141 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:54:39.740149 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:54:39.740156 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:54:39.740163 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:54:39.740170 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:54:39.740177 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:54:39.740184 systemd[1]: Reached target sockets.target. Oct 2 19:54:39.740191 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:54:39.740198 systemd[1]: Finished network-cleanup.service. Oct 2 19:54:39.740205 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:54:39.740213 systemd[1]: Starting systemd-journald.service... Oct 2 19:54:39.740220 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:54:39.740227 systemd[1]: Starting systemd-resolved.service... Oct 2 19:54:39.740234 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:54:39.740241 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:54:39.740248 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:54:39.740255 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:54:39.740261 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:54:39.740269 kernel: audit: type=1130 audit(1696276479.735:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.740277 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:54:39.740287 systemd-journald[290]: Journal started Oct 2 19:54:39.740322 systemd-journald[290]: Runtime Journal (/run/log/journal/f60fd92c9ea6440382d6166dbcf304c7) is 6.0M, max 48.7M, 42.6M free. Oct 2 19:54:39.740356 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:54:39.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.732952 systemd-modules-load[291]: Inserted module 'overlay' Oct 2 19:54:39.751219 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:54:39.755751 systemd-modules-load[291]: Inserted module 'br_netfilter' Oct 2 19:54:39.756679 kernel: Bridge firewalling registered Oct 2 19:54:39.764417 kernel: audit: type=1130 audit(1696276479.759:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.764451 systemd[1]: Started systemd-journald.service. Oct 2 19:54:39.764464 kernel: audit: type=1130 audit(1696276479.763:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.759416 systemd-resolved[292]: Positive Trust Anchors: Oct 2 19:54:39.769971 kernel: SCSI subsystem initialized Oct 2 19:54:39.769989 kernel: audit: type=1130 audit(1696276479.768:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.759427 systemd-resolved[292]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:54:39.759454 systemd-resolved[292]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:54:39.767046 systemd-resolved[292]: Defaulting to hostname 'linux'. Oct 2 19:54:39.783118 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:54:39.783143 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:54:39.783152 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:54:39.767936 systemd[1]: Started systemd-resolved.service. Oct 2 19:54:39.769250 systemd[1]: Reached target nss-lookup.target. Oct 2 19:54:39.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.783353 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:54:39.790570 kernel: audit: type=1130 audit(1696276479.785:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.787033 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:54:39.789166 systemd-modules-load[291]: Inserted module 'dm_multipath' Oct 2 19:54:39.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.791402 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:54:39.797258 kernel: audit: type=1130 audit(1696276479.791:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.793336 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:54:39.801742 dracut-cmdline[310]: dracut-dracut-053 Oct 2 19:54:39.802419 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:54:39.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.806698 kernel: audit: type=1130 audit(1696276479.802:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.807435 dracut-cmdline[310]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:54:39.875693 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:54:39.884686 kernel: iscsi: registered transport (tcp) Oct 2 19:54:39.897870 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:54:39.897887 kernel: QLogic iSCSI HBA Driver Oct 2 19:54:39.948736 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:54:39.952730 kernel: audit: type=1130 audit(1696276479.948:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.950529 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:54:40.001699 kernel: raid6: neonx8 gen() 13643 MB/s Oct 2 19:54:40.018690 kernel: raid6: neonx8 xor() 10703 MB/s Oct 2 19:54:40.035695 kernel: raid6: neonx4 gen() 13376 MB/s Oct 2 19:54:40.052689 kernel: raid6: neonx4 xor() 11052 MB/s Oct 2 19:54:40.069692 kernel: raid6: neonx2 gen() 12896 MB/s Oct 2 19:54:40.086685 kernel: raid6: neonx2 xor() 10230 MB/s Oct 2 19:54:40.103694 kernel: raid6: neonx1 gen() 10500 MB/s Oct 2 19:54:40.120686 kernel: raid6: neonx1 xor() 8723 MB/s Oct 2 19:54:40.137686 kernel: raid6: int64x8 gen() 6287 MB/s Oct 2 19:54:40.154686 kernel: raid6: int64x8 xor() 3511 MB/s Oct 2 19:54:40.171692 kernel: raid6: int64x4 gen() 7168 MB/s Oct 2 19:54:40.188685 kernel: raid6: int64x4 xor() 3819 MB/s Oct 2 19:54:40.205684 kernel: raid6: int64x2 gen() 6115 MB/s Oct 2 19:54:40.222690 kernel: raid6: int64x2 xor() 3294 MB/s Oct 2 19:54:40.239691 kernel: raid6: int64x1 gen() 4996 MB/s Oct 2 19:54:40.256851 kernel: raid6: int64x1 xor() 2614 MB/s Oct 2 19:54:40.256872 kernel: raid6: using algorithm neonx8 gen() 13643 MB/s Oct 2 19:54:40.256889 kernel: raid6: .... xor() 10703 MB/s, rmw enabled Oct 2 19:54:40.257973 kernel: raid6: using neon recovery algorithm Oct 2 19:54:40.269848 kernel: xor: measuring software checksum speed Oct 2 19:54:40.269880 kernel: 8regs : 17304 MB/sec Oct 2 19:54:40.270861 kernel: 32regs : 20765 MB/sec Oct 2 19:54:40.271736 kernel: arm64_neon : 27826 MB/sec Oct 2 19:54:40.271747 kernel: xor: using function: arm64_neon (27826 MB/sec) Oct 2 19:54:40.326696 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 19:54:40.339064 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:54:40.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.341229 systemd[1]: Starting systemd-udevd.service... Oct 2 19:54:40.344639 kernel: audit: type=1130 audit(1696276480.339:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.340000 audit: BPF prog-id=7 op=LOAD Oct 2 19:54:40.340000 audit: BPF prog-id=8 op=LOAD Oct 2 19:54:40.357389 systemd-udevd[493]: Using default interface naming scheme 'v252'. Oct 2 19:54:40.360772 systemd[1]: Started systemd-udevd.service. Oct 2 19:54:40.360000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.363096 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:54:40.378603 dracut-pre-trigger[501]: rd.md=0: removing MD RAID activation Oct 2 19:54:40.410002 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:54:40.411000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.412060 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:54:40.447370 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:54:40.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:40.482685 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 19:54:40.486907 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:54:40.496687 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (547) Oct 2 19:54:40.501674 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:54:40.502696 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:54:40.507778 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:54:40.512625 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:54:40.518113 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:54:40.521741 systemd[1]: Starting disk-uuid.service... Oct 2 19:54:40.530690 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:54:41.543228 disk-uuid[567]: The operation has completed successfully. Oct 2 19:54:41.544283 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:54:41.568748 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:54:41.568848 systemd[1]: Finished disk-uuid.service. Oct 2 19:54:41.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:41.568000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:41.570492 systemd[1]: Starting verity-setup.service... Oct 2 19:54:41.591697 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 19:54:41.612050 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:54:41.614197 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:54:41.616968 systemd[1]: Finished verity-setup.service. Oct 2 19:54:41.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:41.663700 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:54:41.664196 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:54:41.665034 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:54:41.665766 systemd[1]: Starting ignition-setup.service... Oct 2 19:54:41.668081 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:54:41.675196 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:54:41.675231 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:54:41.675248 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:54:41.685582 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:54:41.691551 systemd[1]: Finished ignition-setup.service. Oct 2 19:54:41.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:41.693172 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:54:41.770861 ignition[642]: Ignition 2.14.0 Oct 2 19:54:41.770870 ignition[642]: Stage: fetch-offline Oct 2 19:54:41.770908 ignition[642]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:54:41.770916 ignition[642]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:54:41.771043 ignition[642]: parsed url from cmdline: "" Oct 2 19:54:41.771046 ignition[642]: no config URL provided Oct 2 19:54:41.771051 ignition[642]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:54:41.771058 ignition[642]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:54:41.771075 ignition[642]: op(1): [started] loading QEMU firmware config module Oct 2 19:54:41.771079 ignition[642]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 19:54:41.776435 ignition[642]: op(1): [finished] loading QEMU firmware config module Oct 2 19:54:41.776455 ignition[642]: QEMU firmware config was not found. Ignoring... Oct 2 19:54:41.781538 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:54:41.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:41.782000 audit: BPF prog-id=9 op=LOAD Oct 2 19:54:41.783557 systemd[1]: Starting systemd-networkd.service... Oct 2 19:54:41.806424 systemd-networkd[744]: lo: Link UP Oct 2 19:54:41.806433 systemd-networkd[744]: lo: Gained carrier Oct 2 19:54:41.807023 systemd-networkd[744]: Enumeration completed Oct 2 19:54:41.807392 systemd-networkd[744]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:54:41.809048 systemd-networkd[744]: eth0: Link UP Oct 2 19:54:41.809052 systemd-networkd[744]: eth0: Gained carrier Oct 2 19:54:41.811234 systemd[1]: Started systemd-networkd.service. Oct 2 19:54:41.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:41.813042 systemd[1]: Reached target network.target. Oct 2 19:54:41.815143 systemd[1]: Starting iscsiuio.service... Oct 2 19:54:41.823482 ignition[642]: parsing config with SHA512: 30bcf9463c3e8a0cb1900a59061bf581e52f38038fb295c81b496bf4b569d2d679ed7bf84679e3440c35c1b46349c68bbe2c7ca833adafa914b5680d86106e2d Oct 2 19:54:41.826409 systemd[1]: Started iscsiuio.service. Oct 2 19:54:41.827000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:41.828104 systemd[1]: Starting iscsid.service... Oct 2 19:54:41.834193 iscsid[749]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:54:41.834193 iscsid[749]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.<reversed domain name>[:identifier]. Oct 2 19:54:41.834193 iscsid[749]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:54:41.834193 iscsid[749]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:54:41.834193 iscsid[749]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:54:41.834193 iscsid[749]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:54:41.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:41.835742 systemd[1]: Started iscsid.service. Oct 2 19:54:41.842289 systemd-networkd[744]: eth0: DHCPv4 address 10.0.0.9/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:54:41.842811 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:54:41.856112 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:54:41.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:41.857024 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:54:41.858920 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:54:41.860473 systemd[1]: Reached target remote-fs.target. Oct 2 19:54:41.862506 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:54:41.871932 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:54:41.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:41.873328 ignition[642]: fetch-offline: fetch-offline passed Oct 2 19:54:41.872888 unknown[642]: fetched base config from "system" Oct 2 19:54:41.873399 ignition[642]: Ignition finished successfully Oct 2 19:54:41.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:41.872895 unknown[642]: fetched user config from "qemu" Oct 2 19:54:41.875363 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:54:41.876951 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 19:54:41.877699 systemd[1]: Starting ignition-kargs.service... Oct 2 19:54:41.888093 ignition[763]: Ignition 2.14.0 Oct 2 19:54:41.888103 ignition[763]: Stage: kargs Oct 2 19:54:41.888199 ignition[763]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:54:41.891369 systemd[1]: Finished ignition-kargs.service. Oct 2 19:54:41.892000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:41.888208 ignition[763]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:54:41.889196 ignition[763]: kargs: kargs passed Oct 2 19:54:41.893743 systemd[1]: Starting ignition-disks.service... Oct 2 19:54:41.889245 ignition[763]: Ignition finished successfully Oct 2 19:54:41.901792 ignition[769]: Ignition 2.14.0 Oct 2 19:54:41.901802 ignition[769]: Stage: disks Oct 2 19:54:41.901896 ignition[769]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:54:41.901905 ignition[769]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:54:41.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:41.903563 systemd[1]: Finished ignition-disks.service. Oct 2 19:54:41.902793 ignition[769]: disks: disks passed Oct 2 19:54:41.904811 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:54:41.902837 ignition[769]: Ignition finished successfully Oct 2 19:54:41.906425 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:54:41.907749 systemd[1]: Reached target local-fs.target. Oct 2 19:54:41.908920 systemd[1]: Reached target sysinit.target. Oct 2 19:54:41.910601 systemd[1]: Reached target basic.target. Oct 2 19:54:41.912753 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:54:41.926273 systemd-fsck[777]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 19:54:41.931168 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:54:41.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:41.933860 systemd[1]: Mounting sysroot.mount... Oct 2 19:54:41.942505 systemd[1]: Mounted sysroot.mount. Oct 2 19:54:41.943776 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:54:41.943313 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:54:41.945562 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:54:41.946489 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:54:41.946571 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:54:41.946596 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:54:41.949119 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:54:41.951900 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:54:41.958070 initrd-setup-root[787]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:54:41.962581 initrd-setup-root[795]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:54:41.967562 initrd-setup-root[803]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:54:41.973013 initrd-setup-root[811]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:54:42.004565 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:54:42.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:42.006288 systemd[1]: Starting ignition-mount.service... Oct 2 19:54:42.007641 systemd[1]: Starting sysroot-boot.service... Oct 2 19:54:42.013425 bash[828]: umount: /sysroot/usr/share/oem: not mounted. Oct 2 19:54:42.025569 ignition[830]: INFO : Ignition 2.14.0 Oct 2 19:54:42.025569 ignition[830]: INFO : Stage: mount Oct 2 19:54:42.027311 ignition[830]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:54:42.027311 ignition[830]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:54:42.027311 ignition[830]: INFO : mount: mount passed Oct 2 19:54:42.027311 ignition[830]: INFO : Ignition finished successfully Oct 2 19:54:42.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:42.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:42.027369 systemd[1]: Finished sysroot-boot.service. Oct 2 19:54:42.028379 systemd[1]: Finished ignition-mount.service. Oct 2 19:54:42.180984 systemd-resolved[292]: Detected conflict on linux IN A 10.0.0.9 Oct 2 19:54:42.180998 systemd-resolved[292]: Hostname conflict, changing published hostname from 'linux' to 'linux7'. Oct 2 19:54:42.502494 systemd-resolved[292]: Detected conflict on linux7 IN A 10.0.0.9 Oct 2 19:54:42.502509 systemd-resolved[292]: Hostname conflict, changing published hostname from 'linux7' to 'linux15'. Oct 2 19:54:42.623997 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:54:42.630680 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (839) Oct 2 19:54:42.632241 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:54:42.632254 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:54:42.632263 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:54:42.635932 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:54:42.637463 systemd[1]: Starting ignition-files.service... Oct 2 19:54:42.654793 ignition[859]: INFO : Ignition 2.14.0 Oct 2 19:54:42.654793 ignition[859]: INFO : Stage: files Oct 2 19:54:42.656308 ignition[859]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:54:42.656308 ignition[859]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:54:42.658392 ignition[859]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:54:42.659482 ignition[859]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:54:42.659482 ignition[859]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:54:42.662223 ignition[859]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:54:42.663575 ignition[859]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:54:42.665371 unknown[859]: wrote ssh authorized keys file for user: core Oct 2 19:54:42.666503 ignition[859]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:54:42.666503 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 19:54:42.666503 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Oct 2 19:54:42.908187 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:54:43.096086 systemd-networkd[744]: eth0: Gained IPv6LL Oct 2 19:54:43.163999 ignition[859]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Oct 2 19:54:43.166689 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 19:54:43.168444 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 19:54:43.168444 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Oct 2 19:54:43.449241 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:54:43.639123 ignition[859]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Oct 2 19:54:43.639123 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 19:54:43.643770 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:54:43.643770 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubeadm: attempt #1 Oct 2 19:54:43.689019 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:54:44.043266 ignition[859]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 45b3100984c979ba0f1c0df8f4211474c2d75ebe916e677dff5fc8e3b3697cf7a953da94e356f39684cc860dff6878b772b7514c55651c2f866d9efeef23f970 Oct 2 19:54:44.045961 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:54:44.045961 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:54:44.045961 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubelet: attempt #1 Oct 2 19:54:44.103946 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:54:44.878948 ignition[859]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 71857ff499ae135fa478e1827a0ed8865e578a8d2b1e25876e914fd0beba03733801c0654bcd4c0567bafeb16887dafb2dbbe8d1116e6ea28dcd8366c142d348 Oct 2 19:54:44.881887 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:54:44.881887 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:54:44.881887 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubectl: attempt #1 Oct 2 19:54:44.917768 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:54:45.271912 ignition[859]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 14be61ec35669a27acf2df0380afb85b9b42311d50ca1165718421c5f605df1119ec9ae314696a674051712e80deeaa65e62d2d62ed4d107fe99d0aaf419dafc Oct 2 19:54:45.271912 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:54:45.276118 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:54:45.276118 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:54:45.276118 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:54:45.276118 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 19:54:45.421105 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 19:54:45.465783 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:54:45.467581 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:54:45.467581 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:54:45.467581 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:54:45.467581 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:54:45.467581 ignition[859]: INFO : files: op(c): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:54:45.467581 ignition[859]: INFO : files: op(c): op(d): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:54:45.467581 ignition[859]: INFO : files: op(c): op(d): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:54:45.467581 ignition[859]: INFO : files: op(c): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:54:45.467581 ignition[859]: INFO : files: op(e): [started] processing unit "prepare-critools.service" Oct 2 19:54:45.467581 ignition[859]: INFO : files: op(e): op(f): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:54:45.467581 ignition[859]: INFO : files: op(e): op(f): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:54:45.467581 ignition[859]: INFO : files: op(e): [finished] processing unit "prepare-critools.service" Oct 2 19:54:45.467581 ignition[859]: INFO : files: op(10): [started] processing unit "coreos-metadata.service" Oct 2 19:54:45.467581 ignition[859]: INFO : files: op(10): op(11): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:54:45.467581 ignition[859]: INFO : files: op(10): op(11): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:54:45.467581 ignition[859]: INFO : files: op(10): [finished] processing unit "coreos-metadata.service" Oct 2 19:54:45.467581 ignition[859]: INFO : files: op(12): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:54:45.467581 ignition[859]: INFO : files: op(12): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:54:45.497581 ignition[859]: INFO : files: op(13): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:54:45.497581 ignition[859]: INFO : files: op(13): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:54:45.497581 ignition[859]: INFO : files: op(14): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 19:54:45.497581 ignition[859]: INFO : files: op(14): op(15): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:54:45.526751 ignition[859]: INFO : files: op(14): op(15): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:54:45.528371 ignition[859]: INFO : files: op(14): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 19:54:45.528371 ignition[859]: INFO : files: createResultFile: createFiles: op(16): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:54:45.528371 ignition[859]: INFO : files: createResultFile: createFiles: op(16): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:54:45.528371 ignition[859]: INFO : files: files passed Oct 2 19:54:45.528371 ignition[859]: INFO : Ignition finished successfully Oct 2 19:54:45.540195 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:54:45.540219 kernel: audit: type=1130 audit(1696276485.530:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.529271 systemd[1]: Finished ignition-files.service. Oct 2 19:54:45.531692 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:54:45.547503 kernel: audit: type=1130 audit(1696276485.541:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.547524 kernel: audit: type=1131 audit(1696276485.541:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.541000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.541000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.547661 initrd-setup-root-after-ignition[884]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 19:54:45.552528 kernel: audit: type=1130 audit(1696276485.547:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.536387 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:54:45.555087 initrd-setup-root-after-ignition[886]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:54:45.537222 systemd[1]: Starting ignition-quench.service... Oct 2 19:54:45.540591 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:54:45.540798 systemd[1]: Finished ignition-quench.service. Oct 2 19:54:45.547620 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:54:45.548753 systemd[1]: Reached target ignition-complete.target. Oct 2 19:54:45.554022 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:54:45.568306 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:54:45.568408 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:54:45.569000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.569000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.570087 systemd[1]: Reached target initrd-fs.target. Oct 2 19:54:45.576783 kernel: audit: type=1130 audit(1696276485.569:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.576805 kernel: audit: type=1131 audit(1696276485.569:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.576142 systemd[1]: Reached target initrd.target. Oct 2 19:54:45.577486 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:54:45.578322 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:54:45.590235 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:54:45.590000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.592022 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:54:45.595523 kernel: audit: type=1130 audit(1696276485.590:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.601403 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:54:45.602322 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:54:45.603768 systemd[1]: Stopped target timers.target. Oct 2 19:54:45.605173 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:54:45.605000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.605283 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:54:45.611085 kernel: audit: type=1131 audit(1696276485.605:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.606660 systemd[1]: Stopped target initrd.target. Oct 2 19:54:45.610512 systemd[1]: Stopped target basic.target. Oct 2 19:54:45.611874 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:54:45.613312 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:54:45.614734 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:54:45.616308 systemd[1]: Stopped target remote-fs.target. Oct 2 19:54:45.617730 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:54:45.619277 systemd[1]: Stopped target sysinit.target. Oct 2 19:54:45.620542 systemd[1]: Stopped target local-fs.target. Oct 2 19:54:45.621949 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:54:45.623334 systemd[1]: Stopped target swap.target. Oct 2 19:54:45.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.624556 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:54:45.630447 kernel: audit: type=1131 audit(1696276485.625:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.624687 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:54:45.631000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.626068 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:54:45.636373 kernel: audit: type=1131 audit(1696276485.631:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.635000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.629628 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:54:45.629756 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:54:45.631309 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:54:45.631412 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:54:45.635857 systemd[1]: Stopped target paths.target. Oct 2 19:54:45.637110 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:54:45.640697 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:54:45.642179 systemd[1]: Stopped target slices.target. Oct 2 19:54:45.643801 systemd[1]: Stopped target sockets.target. Oct 2 19:54:45.645000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.645233 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:54:45.647000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.645358 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:54:45.646719 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:54:45.651725 iscsid[749]: iscsid shutting down. Oct 2 19:54:45.646811 systemd[1]: Stopped ignition-files.service. Oct 2 19:54:45.648867 systemd[1]: Stopping ignition-mount.service... Oct 2 19:54:45.652000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.654000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.649746 systemd[1]: Stopping iscsid.service... Oct 2 19:54:45.651655 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:54:45.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.652345 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:54:45.652486 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:54:45.662185 ignition[899]: INFO : Ignition 2.14.0 Oct 2 19:54:45.662185 ignition[899]: INFO : Stage: umount Oct 2 19:54:45.662185 ignition[899]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:54:45.662185 ignition[899]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:54:45.662185 ignition[899]: INFO : umount: umount passed Oct 2 19:54:45.662185 ignition[899]: INFO : Ignition finished successfully Oct 2 19:54:45.662000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.664000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.664000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.666000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.653724 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:54:45.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.653817 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:54:45.672000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.656342 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:54:45.674000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.656471 systemd[1]: Stopped iscsid.service. Oct 2 19:54:45.657609 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:54:45.657707 systemd[1]: Closed iscsid.socket. Oct 2 19:54:45.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.658718 systemd[1]: Stopping iscsiuio.service... Oct 2 19:54:45.679000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.661556 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:54:45.661651 systemd[1]: Stopped iscsiuio.service. Oct 2 19:54:45.663066 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:54:45.663149 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:54:45.665195 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:54:45.665604 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:54:45.685000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.665729 systemd[1]: Stopped ignition-mount.service. Oct 2 19:54:45.686000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.667572 systemd[1]: Stopped target network.target. Oct 2 19:54:45.688000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:54:45.668523 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:54:45.668555 systemd[1]: Closed iscsiuio.socket. Oct 2 19:54:45.669782 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:54:45.691000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.669828 systemd[1]: Stopped ignition-disks.service. Oct 2 19:54:45.692000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.671222 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:54:45.695000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.671264 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:54:45.672767 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:54:45.672806 systemd[1]: Stopped ignition-setup.service. Oct 2 19:54:45.674242 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:54:45.675635 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:54:45.676960 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:54:45.677040 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:54:45.704000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.678244 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:54:45.678282 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:54:45.683728 systemd-networkd[744]: eth0: DHCPv6 lease lost Oct 2 19:54:45.706000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:54:45.683815 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:54:45.708000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.683901 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:54:45.685812 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:54:45.685892 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:54:45.712000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.687256 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:54:45.714000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.687282 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:54:45.714000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.689149 systemd[1]: Stopping network-cleanup.service... Oct 2 19:54:45.690619 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:54:45.690704 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:54:45.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.692177 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:54:45.721000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.692220 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:54:45.721000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.694254 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:54:45.694296 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:54:45.725000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.725000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.695345 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:54:45.699261 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:54:45.702803 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:54:45.702889 systemd[1]: Stopped network-cleanup.service. Oct 2 19:54:45.706957 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:54:45.707068 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:54:45.708661 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:54:45.708724 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:54:45.710030 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:54:45.710060 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:54:45.711353 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:54:45.711399 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:54:45.712914 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:54:45.712956 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:54:45.714220 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:54:45.714260 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:54:45.716445 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:54:45.717870 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:54:45.717930 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:54:45.720271 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:54:45.720318 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:54:45.721194 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:54:45.721234 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:54:45.723549 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 19:54:45.723992 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:54:45.724071 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:54:45.725449 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:54:45.727517 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:54:45.735185 systemd[1]: Switching root. Oct 2 19:54:45.754286 systemd-journald[290]: Journal stopped Oct 2 19:54:47.939052 systemd-journald[290]: Received SIGTERM from PID 1 (n/a). Oct 2 19:54:47.939166 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:54:47.939181 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:54:47.939192 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:54:47.939203 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:54:47.939213 kernel: SELinux: policy capability open_perms=1 Oct 2 19:54:47.939222 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:54:47.939232 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:54:47.939252 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:54:47.939262 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:54:47.939273 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:54:47.939283 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:54:47.939293 systemd[1]: Successfully loaded SELinux policy in 34.253ms. Oct 2 19:54:47.939323 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.284ms. Oct 2 19:54:47.939347 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:54:47.939358 systemd[1]: Detected virtualization kvm. Oct 2 19:54:47.939369 systemd[1]: Detected architecture arm64. Oct 2 19:54:47.939379 systemd[1]: Detected first boot. Oct 2 19:54:47.939391 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:54:47.939401 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:54:47.939412 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:54:47.939424 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:54:47.939436 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:54:47.939448 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:54:47.939459 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:54:47.939471 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:54:47.939481 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:54:47.939491 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:54:47.939501 systemd[1]: Created slice system-getty.slice. Oct 2 19:54:47.939512 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:54:47.939522 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:54:47.939532 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:54:47.939542 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:54:47.939554 systemd[1]: Created slice user.slice. Oct 2 19:54:47.939565 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:54:47.939576 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:54:47.939586 systemd[1]: Set up automount boot.automount. Oct 2 19:54:47.939596 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:54:47.939607 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:54:47.939617 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:54:47.939627 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:54:47.939639 systemd[1]: Reached target integritysetup.target. Oct 2 19:54:47.939649 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:54:47.939660 systemd[1]: Reached target remote-fs.target. Oct 2 19:54:47.939681 systemd[1]: Reached target slices.target. Oct 2 19:54:47.939693 systemd[1]: Reached target swap.target. Oct 2 19:54:47.939703 systemd[1]: Reached target torcx.target. Oct 2 19:54:47.939714 systemd[1]: Reached target veritysetup.target. Oct 2 19:54:47.939724 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:54:47.939734 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:54:47.939746 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:54:47.939757 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:54:47.939767 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:54:47.939778 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:54:47.939798 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:54:47.939810 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:54:47.939820 systemd[1]: Mounting media.mount... Oct 2 19:54:47.939830 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:54:47.939841 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:54:47.939852 systemd[1]: Mounting tmp.mount... Oct 2 19:54:47.939864 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:54:47.939875 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:54:47.939885 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:54:47.939895 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:54:47.939907 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:54:47.939917 systemd[1]: Starting modprobe@drm.service... Oct 2 19:54:47.939927 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:54:47.939937 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:54:47.939948 systemd[1]: Starting modprobe@loop.service... Oct 2 19:54:47.939959 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:54:47.939970 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:54:47.939980 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:54:47.939990 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:54:47.940000 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:54:47.940010 systemd[1]: Stopped systemd-journald.service. Oct 2 19:54:47.940020 kernel: fuse: init (API version 7.34) Oct 2 19:54:47.940030 systemd[1]: Starting systemd-journald.service... Oct 2 19:54:47.940040 kernel: loop: module loaded Oct 2 19:54:47.940051 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:54:47.940061 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:54:47.940071 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:54:47.940082 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:54:47.940091 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:54:47.940103 systemd[1]: Stopped verity-setup.service. Oct 2 19:54:47.940113 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:54:47.940123 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:54:47.940133 systemd[1]: Mounted media.mount. Oct 2 19:54:47.940145 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:54:47.940155 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:54:47.940165 systemd[1]: Mounted tmp.mount. Oct 2 19:54:47.940175 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:54:47.940186 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:54:47.940198 systemd-journald[1001]: Journal started Oct 2 19:54:47.940244 systemd-journald[1001]: Runtime Journal (/run/log/journal/f60fd92c9ea6440382d6166dbcf304c7) is 6.0M, max 48.7M, 42.6M free. Oct 2 19:54:45.822000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:54:46.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:54:46.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:54:46.034000 audit: BPF prog-id=10 op=LOAD Oct 2 19:54:46.034000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:54:46.034000 audit: BPF prog-id=11 op=LOAD Oct 2 19:54:46.034000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:54:47.809000 audit: BPF prog-id=12 op=LOAD Oct 2 19:54:47.809000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:54:47.809000 audit: BPF prog-id=13 op=LOAD Oct 2 19:54:47.809000 audit: BPF prog-id=14 op=LOAD Oct 2 19:54:47.809000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:54:47.810000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:54:47.810000 audit: BPF prog-id=15 op=LOAD Oct 2 19:54:47.810000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:54:47.810000 audit: BPF prog-id=16 op=LOAD Oct 2 19:54:47.810000 audit: BPF prog-id=17 op=LOAD Oct 2 19:54:47.810000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:54:47.810000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:54:47.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.814000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.823000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:54:47.903000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.906000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.907000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.908000 audit: BPF prog-id=18 op=LOAD Oct 2 19:54:47.908000 audit: BPF prog-id=19 op=LOAD Oct 2 19:54:47.908000 audit: BPF prog-id=20 op=LOAD Oct 2 19:54:47.908000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:54:47.908000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:54:47.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.937000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:54:47.937000 audit[1001]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=ffffe661def0 a2=4000 a3=1 items=0 ppid=1 pid=1001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:47.937000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:54:47.937000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.808628 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:54:46.079544 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:46Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:54:47.808643 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:54:46.080071 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:46Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:54:47.811635 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:54:46.080091 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:46Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:54:46.080124 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:46Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:54:46.080134 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:46Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:54:46.080165 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:46Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:54:46.080177 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:46Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:54:46.080385 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:46Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:54:46.080421 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:46Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:54:46.080433 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:46Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:54:46.080851 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:46Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:54:46.080885 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:46Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:54:46.080902 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:46Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:54:46.080916 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:46Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:54:46.080933 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:46Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:54:46.080946 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:46Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:54:47.548842 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:47Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:54:47.943724 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:54:47.549111 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:47Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:54:47.549203 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:47Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:54:47.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.943000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.549370 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:47Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:54:47.549422 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:47Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:54:47.549484 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T19:54:47Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:54:47.945366 systemd[1]: Started systemd-journald.service. Oct 2 19:54:47.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.946087 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:54:47.946211 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:54:47.946000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.946000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.947303 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:54:47.947506 systemd[1]: Finished modprobe@drm.service. Oct 2 19:54:47.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.948637 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:54:47.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.949728 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:54:47.949874 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:54:47.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.950942 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:54:47.951091 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:54:47.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.951000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.952190 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:54:47.952339 systemd[1]: Finished modprobe@loop.service. Oct 2 19:54:47.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.953000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.953557 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:54:47.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.954726 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:54:47.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.956005 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:54:47.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.957371 systemd[1]: Reached target network-pre.target. Oct 2 19:54:47.959309 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:54:47.961232 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:54:47.961997 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:54:47.964209 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:54:47.966090 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:54:47.967031 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:54:47.968016 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:54:47.968889 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:54:47.969988 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:54:47.971851 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:54:47.976813 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:54:47.978063 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:54:47.979456 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:54:47.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.981542 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:54:47.984266 systemd-journald[1001]: Time spent on flushing to /var/log/journal/f60fd92c9ea6440382d6166dbcf304c7 is 21.113ms for 1008 entries. Oct 2 19:54:47.984266 systemd-journald[1001]: System Journal (/var/log/journal/f60fd92c9ea6440382d6166dbcf304c7) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:54:48.022443 systemd-journald[1001]: Received client request to flush runtime journal. Oct 2 19:54:48.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.007000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.000687 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:54:48.022879 udevadm[1032]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:54:48.001779 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:54:48.006462 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:54:48.008234 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:54:48.010355 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:54:48.024404 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:54:48.025000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.037492 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:54:48.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.377362 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:54:48.379563 systemd[1]: Starting systemd-udevd.service... Oct 2 19:54:48.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.378000 audit: BPF prog-id=21 op=LOAD Oct 2 19:54:48.378000 audit: BPF prog-id=22 op=LOAD Oct 2 19:54:48.378000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:54:48.378000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:54:48.399111 systemd-udevd[1037]: Using default interface naming scheme 'v252'. Oct 2 19:54:48.411794 systemd[1]: Started systemd-udevd.service. Oct 2 19:54:48.411000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.412000 audit: BPF prog-id=23 op=LOAD Oct 2 19:54:48.416254 systemd[1]: Starting systemd-networkd.service... Oct 2 19:54:48.422000 audit: BPF prog-id=24 op=LOAD Oct 2 19:54:48.422000 audit: BPF prog-id=25 op=LOAD Oct 2 19:54:48.422000 audit: BPF prog-id=26 op=LOAD Oct 2 19:54:48.423782 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:54:48.433302 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 19:54:48.461802 systemd[1]: Started systemd-userdbd.service. Oct 2 19:54:48.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.471786 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:54:48.513081 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:54:48.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.515107 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:54:48.515907 systemd-networkd[1046]: lo: Link UP Oct 2 19:54:48.515918 systemd-networkd[1046]: lo: Gained carrier Oct 2 19:54:48.516248 systemd-networkd[1046]: Enumeration completed Oct 2 19:54:48.516334 systemd[1]: Started systemd-networkd.service. Oct 2 19:54:48.516448 systemd-networkd[1046]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:54:48.517000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.519635 systemd-networkd[1046]: eth0: Link UP Oct 2 19:54:48.519642 systemd-networkd[1046]: eth0: Gained carrier Oct 2 19:54:48.535743 lvm[1070]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:54:48.544785 systemd-networkd[1046]: eth0: DHCPv4 address 10.0.0.9/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:54:48.570619 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:54:48.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.571688 systemd[1]: Reached target cryptsetup.target. Oct 2 19:54:48.573631 systemd[1]: Starting lvm2-activation.service... Oct 2 19:54:48.577498 lvm[1071]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:54:48.604514 systemd[1]: Finished lvm2-activation.service. Oct 2 19:54:48.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.605514 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:54:48.606395 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:54:48.606426 systemd[1]: Reached target local-fs.target. Oct 2 19:54:48.607205 systemd[1]: Reached target machines.target. Oct 2 19:54:48.609170 systemd[1]: Starting ldconfig.service... Oct 2 19:54:48.610522 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:54:48.610576 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:54:48.611592 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:54:48.613543 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:54:48.615609 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:54:48.617519 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:54:48.617577 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:54:48.618561 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:54:48.619861 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1073 (bootctl) Oct 2 19:54:48.622138 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:54:48.643298 systemd-tmpfiles[1076]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:54:48.646936 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:54:48.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.691638 systemd-tmpfiles[1076]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:54:48.693239 systemd-tmpfiles[1076]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:54:48.726548 systemd-fsck[1082]: fsck.fat 4.2 (2021-01-31) Oct 2 19:54:48.726548 systemd-fsck[1082]: /dev/vda1: 236 files, 113463/258078 clusters Oct 2 19:54:48.730484 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:54:48.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.734079 systemd[1]: Mounting boot.mount... Oct 2 19:54:48.785124 systemd[1]: Mounted boot.mount. Oct 2 19:54:48.808839 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:54:48.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.817017 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:54:48.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.842306 ldconfig[1072]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:54:48.845686 systemd[1]: Finished ldconfig.service. Oct 2 19:54:48.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.870524 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:54:48.870000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.872856 systemd[1]: Starting audit-rules.service... Oct 2 19:54:48.874612 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:54:48.876504 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:54:48.879000 audit: BPF prog-id=27 op=LOAD Oct 2 19:54:48.880988 systemd[1]: Starting systemd-resolved.service... Oct 2 19:54:48.883000 audit: BPF prog-id=28 op=LOAD Oct 2 19:54:48.885180 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:54:48.887035 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:54:48.888377 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:54:48.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.890822 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:54:48.895000 audit[1096]: SYSTEM_BOOT pid=1096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.898239 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:54:48.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.903763 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:54:48.906262 systemd[1]: Starting systemd-update-done.service... Oct 2 19:54:48.913340 systemd[1]: Finished systemd-update-done.service. Oct 2 19:54:48.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:48.920000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:54:48.920000 audit[1106]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdb3adfb0 a2=420 a3=0 items=0 ppid=1085 pid=1106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:48.920000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:54:48.921327 augenrules[1106]: No rules Oct 2 19:54:48.921993 systemd[1]: Finished audit-rules.service. Oct 2 19:54:48.927750 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:54:48.932834 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:54:49.346775 systemd-timesyncd[1091]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 19:54:49.346823 systemd-timesyncd[1091]: Initial clock synchronization to Mon 2023-10-02 19:54:49.346699 UTC. Oct 2 19:54:49.346937 systemd[1]: Reached target time-set.target. Oct 2 19:54:49.355512 systemd-resolved[1089]: Positive Trust Anchors: Oct 2 19:54:49.355781 systemd-resolved[1089]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:54:49.355860 systemd-resolved[1089]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:54:49.365680 systemd-resolved[1089]: Defaulting to hostname 'linux'. Oct 2 19:54:49.367282 systemd[1]: Started systemd-resolved.service. Oct 2 19:54:49.368242 systemd[1]: Reached target network.target. Oct 2 19:54:49.369036 systemd[1]: Reached target nss-lookup.target. Oct 2 19:54:49.369843 systemd[1]: Reached target sysinit.target. Oct 2 19:54:49.370698 systemd[1]: Started motdgen.path. Oct 2 19:54:49.371536 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:54:49.372760 systemd[1]: Started logrotate.timer. Oct 2 19:54:49.373603 systemd[1]: Started mdadm.timer. Oct 2 19:54:49.374265 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:54:49.375143 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:54:49.375178 systemd[1]: Reached target paths.target. Oct 2 19:54:49.375915 systemd[1]: Reached target timers.target. Oct 2 19:54:49.381441 systemd[1]: Listening on dbus.socket. Oct 2 19:54:49.383246 systemd[1]: Starting docker.socket... Oct 2 19:54:49.386565 systemd[1]: Listening on sshd.socket. Oct 2 19:54:49.387381 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:54:49.387798 systemd[1]: Listening on docker.socket. Oct 2 19:54:49.388626 systemd[1]: Reached target sockets.target. Oct 2 19:54:49.389381 systemd[1]: Reached target basic.target. Oct 2 19:54:49.390135 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:54:49.390166 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:54:49.391158 systemd[1]: Starting containerd.service... Oct 2 19:54:49.392871 systemd[1]: Starting dbus.service... Oct 2 19:54:49.394451 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:54:49.396444 systemd[1]: Starting extend-filesystems.service... Oct 2 19:54:49.397345 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:54:49.398477 systemd[1]: Starting motdgen.service... Oct 2 19:54:49.400198 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:54:49.403785 systemd[1]: Starting prepare-critools.service... Oct 2 19:54:49.405817 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:54:49.406244 jq[1116]: false Oct 2 19:54:49.407942 systemd[1]: Starting sshd-keygen.service... Oct 2 19:54:49.410672 systemd[1]: Starting systemd-logind.service... Oct 2 19:54:49.411873 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:54:49.411929 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:54:49.412793 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:54:49.415598 systemd[1]: Starting update-engine.service... Oct 2 19:54:49.417707 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:54:49.421028 jq[1135]: true Oct 2 19:54:49.421237 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:54:49.421422 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:54:49.423351 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:54:49.423457 extend-filesystems[1117]: Found vda Oct 2 19:54:49.423553 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:54:49.425586 extend-filesystems[1117]: Found vda1 Oct 2 19:54:49.426319 extend-filesystems[1117]: Found vda2 Oct 2 19:54:49.426319 extend-filesystems[1117]: Found vda3 Oct 2 19:54:49.426319 extend-filesystems[1117]: Found usr Oct 2 19:54:49.426319 extend-filesystems[1117]: Found vda4 Oct 2 19:54:49.429165 extend-filesystems[1117]: Found vda6 Oct 2 19:54:49.429165 extend-filesystems[1117]: Found vda7 Oct 2 19:54:49.429165 extend-filesystems[1117]: Found vda9 Oct 2 19:54:49.429165 extend-filesystems[1117]: Checking size of /dev/vda9 Oct 2 19:54:49.436161 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:54:49.437136 tar[1138]: ./ Oct 2 19:54:49.437136 tar[1138]: ./loopback Oct 2 19:54:49.436311 systemd[1]: Finished motdgen.service. Oct 2 19:54:49.439346 tar[1139]: crictl Oct 2 19:54:49.440747 jq[1140]: true Oct 2 19:54:49.462247 extend-filesystems[1117]: Old size kept for /dev/vda9 Oct 2 19:54:49.462278 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:54:49.462565 systemd[1]: Finished extend-filesystems.service. Oct 2 19:54:49.464584 dbus-daemon[1115]: [system] SELinux support is enabled Oct 2 19:54:49.465637 systemd[1]: Started dbus.service. Oct 2 19:54:49.469652 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:54:49.469677 systemd[1]: Reached target system-config.target. Oct 2 19:54:49.470610 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:54:49.470633 systemd[1]: Reached target user-config.target. Oct 2 19:54:49.495183 systemd-logind[1127]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 19:54:49.497293 systemd-logind[1127]: New seat seat0. Oct 2 19:54:49.508837 systemd[1]: Started systemd-logind.service. Oct 2 19:54:49.513922 tar[1138]: ./bandwidth Oct 2 19:54:49.520708 bash[1166]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:54:49.521506 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:54:49.523818 update_engine[1134]: I1002 19:54:49.523592 1134 main.cc:92] Flatcar Update Engine starting Oct 2 19:54:49.528085 systemd[1]: Started update-engine.service. Oct 2 19:54:49.528183 update_engine[1134]: I1002 19:54:49.528123 1134 update_check_scheduler.cc:74] Next update check in 2m12s Oct 2 19:54:49.530744 systemd[1]: Started locksmithd.service. Oct 2 19:54:49.545143 tar[1138]: ./ptp Oct 2 19:54:49.567659 env[1141]: time="2023-10-02T19:54:49.567564169Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:54:49.576963 tar[1138]: ./vlan Oct 2 19:54:49.591019 env[1141]: time="2023-10-02T19:54:49.590959049Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:54:49.591493 env[1141]: time="2023-10-02T19:54:49.591469529Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:54:49.593629 env[1141]: time="2023-10-02T19:54:49.593596009Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:54:49.593745 env[1141]: time="2023-10-02T19:54:49.593722529Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:54:49.594002 env[1141]: time="2023-10-02T19:54:49.593980489Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:54:49.594092 env[1141]: time="2023-10-02T19:54:49.594076889Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:54:49.594158 env[1141]: time="2023-10-02T19:54:49.594143569Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:54:49.594209 env[1141]: time="2023-10-02T19:54:49.594196889Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:54:49.594337 env[1141]: time="2023-10-02T19:54:49.594321409Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:54:49.594741 env[1141]: time="2023-10-02T19:54:49.594719289Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:54:49.594939 env[1141]: time="2023-10-02T19:54:49.594919929Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:54:49.595001 env[1141]: time="2023-10-02T19:54:49.594987889Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:54:49.595143 env[1141]: time="2023-10-02T19:54:49.595123809Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:54:49.595209 env[1141]: time="2023-10-02T19:54:49.595194809Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:54:49.601227 env[1141]: time="2023-10-02T19:54:49.598647329Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:54:49.601227 env[1141]: time="2023-10-02T19:54:49.598681049Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:54:49.601227 env[1141]: time="2023-10-02T19:54:49.598693809Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:54:49.601227 env[1141]: time="2023-10-02T19:54:49.598724889Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:54:49.601227 env[1141]: time="2023-10-02T19:54:49.598739889Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:54:49.601227 env[1141]: time="2023-10-02T19:54:49.598753409Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:54:49.601227 env[1141]: time="2023-10-02T19:54:49.598767009Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:54:49.601227 env[1141]: time="2023-10-02T19:54:49.599115849Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:54:49.601227 env[1141]: time="2023-10-02T19:54:49.599138369Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:54:49.601227 env[1141]: time="2023-10-02T19:54:49.599151489Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:54:49.601227 env[1141]: time="2023-10-02T19:54:49.599163449Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:54:49.601227 env[1141]: time="2023-10-02T19:54:49.599175089Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:54:49.601227 env[1141]: time="2023-10-02T19:54:49.599281609Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:54:49.601227 env[1141]: time="2023-10-02T19:54:49.599351449Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:54:49.601567 env[1141]: time="2023-10-02T19:54:49.599604289Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:54:49.601567 env[1141]: time="2023-10-02T19:54:49.599630089Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:54:49.601567 env[1141]: time="2023-10-02T19:54:49.599646569Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:54:49.601567 env[1141]: time="2023-10-02T19:54:49.599752929Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:54:49.601567 env[1141]: time="2023-10-02T19:54:49.599765649Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:54:49.601567 env[1141]: time="2023-10-02T19:54:49.599777849Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:54:49.601567 env[1141]: time="2023-10-02T19:54:49.599788849Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:54:49.601567 env[1141]: time="2023-10-02T19:54:49.599800649Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:54:49.601567 env[1141]: time="2023-10-02T19:54:49.599812249Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:54:49.601567 env[1141]: time="2023-10-02T19:54:49.599824409Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:54:49.601567 env[1141]: time="2023-10-02T19:54:49.599835329Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:54:49.601567 env[1141]: time="2023-10-02T19:54:49.599848009Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:54:49.601567 env[1141]: time="2023-10-02T19:54:49.599962929Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:54:49.601567 env[1141]: time="2023-10-02T19:54:49.599981929Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:54:49.601567 env[1141]: time="2023-10-02T19:54:49.599994289Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:54:49.601827 env[1141]: time="2023-10-02T19:54:49.600014089Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:54:49.601827 env[1141]: time="2023-10-02T19:54:49.600029049Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:54:49.601827 env[1141]: time="2023-10-02T19:54:49.600039729Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:54:49.601827 env[1141]: time="2023-10-02T19:54:49.600057009Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:54:49.601827 env[1141]: time="2023-10-02T19:54:49.600092849Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:54:49.601923 env[1141]: time="2023-10-02T19:54:49.600291529Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:54:49.601923 env[1141]: time="2023-10-02T19:54:49.600345769Z" level=info msg="Connect containerd service" Oct 2 19:54:49.601923 env[1141]: time="2023-10-02T19:54:49.600412809Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:54:49.601923 env[1141]: time="2023-10-02T19:54:49.600968889Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:54:49.604390 env[1141]: time="2023-10-02T19:54:49.602389169Z" level=info msg="Start subscribing containerd event" Oct 2 19:54:49.604390 env[1141]: time="2023-10-02T19:54:49.602444609Z" level=info msg="Start recovering state" Oct 2 19:54:49.604531 env[1141]: time="2023-10-02T19:54:49.604508089Z" level=info msg="Start event monitor" Oct 2 19:54:49.604631 env[1141]: time="2023-10-02T19:54:49.604617889Z" level=info msg="Start snapshots syncer" Oct 2 19:54:49.604687 env[1141]: time="2023-10-02T19:54:49.604675009Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:54:49.604749 env[1141]: time="2023-10-02T19:54:49.604736889Z" level=info msg="Start streaming server" Oct 2 19:54:49.604861 env[1141]: time="2023-10-02T19:54:49.604312649Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:54:49.604961 env[1141]: time="2023-10-02T19:54:49.604923369Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:54:49.605009 env[1141]: time="2023-10-02T19:54:49.604995169Z" level=info msg="containerd successfully booted in 0.038168s" Oct 2 19:54:49.605088 systemd[1]: Started containerd.service. Oct 2 19:54:49.620898 tar[1138]: ./host-device Oct 2 19:54:49.652691 tar[1138]: ./tuning Oct 2 19:54:49.682620 tar[1138]: ./vrf Oct 2 19:54:49.704805 locksmithd[1169]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:54:49.713597 tar[1138]: ./sbr Oct 2 19:54:49.743445 tar[1138]: ./tap Oct 2 19:54:49.777903 tar[1138]: ./dhcp Oct 2 19:54:49.862168 tar[1138]: ./static Oct 2 19:54:49.873402 systemd[1]: Finished prepare-critools.service. Oct 2 19:54:49.885838 tar[1138]: ./firewall Oct 2 19:54:49.917643 tar[1138]: ./macvlan Oct 2 19:54:49.946731 tar[1138]: ./dummy Oct 2 19:54:49.975480 tar[1138]: ./bridge Oct 2 19:54:50.010238 tar[1138]: ./ipvlan Oct 2 19:54:50.039009 tar[1138]: ./portmap Oct 2 19:54:50.066387 tar[1138]: ./host-local Oct 2 19:54:50.103051 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:54:50.181149 sshd_keygen[1137]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:54:50.200138 systemd[1]: Finished sshd-keygen.service. Oct 2 19:54:50.202470 systemd[1]: Starting issuegen.service... Oct 2 19:54:50.207694 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:54:50.207844 systemd[1]: Finished issuegen.service. Oct 2 19:54:50.210128 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:54:50.218654 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:54:50.220869 systemd[1]: Started getty@tty1.service. Oct 2 19:54:50.222960 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 19:54:50.223996 systemd[1]: Reached target getty.target. Oct 2 19:54:50.224886 systemd[1]: Reached target multi-user.target. Oct 2 19:54:50.226940 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:54:50.233956 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:54:50.234121 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:54:50.235215 systemd[1]: Startup finished in 608ms (kernel) + 6.207s (initrd) + 4.037s (userspace) = 10.853s. Oct 2 19:54:50.868592 systemd-networkd[1046]: eth0: Gained IPv6LL Oct 2 19:54:53.900271 systemd[1]: Created slice system-sshd.slice. Oct 2 19:54:53.901345 systemd[1]: Started sshd@0-10.0.0.9:22-10.0.0.1:52690.service. Oct 2 19:54:53.945326 sshd[1198]: Accepted publickey for core from 10.0.0.1 port 52690 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:54:53.947498 sshd[1198]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:53.959210 systemd[1]: Created slice user-500.slice. Oct 2 19:54:53.960428 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:54:53.962002 systemd-logind[1127]: New session 1 of user core. Oct 2 19:54:53.968817 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:54:53.970131 systemd[1]: Starting user@500.service... Oct 2 19:54:53.973906 (systemd)[1201]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:54.034041 systemd[1201]: Queued start job for default target default.target. Oct 2 19:54:54.034522 systemd[1201]: Reached target paths.target. Oct 2 19:54:54.034543 systemd[1201]: Reached target sockets.target. Oct 2 19:54:54.034555 systemd[1201]: Reached target timers.target. Oct 2 19:54:54.034565 systemd[1201]: Reached target basic.target. Oct 2 19:54:54.034612 systemd[1201]: Reached target default.target. Oct 2 19:54:54.034634 systemd[1201]: Startup finished in 54ms. Oct 2 19:54:54.034853 systemd[1]: Started user@500.service. Oct 2 19:54:54.035772 systemd[1]: Started session-1.scope. Oct 2 19:54:54.086835 systemd[1]: Started sshd@1-10.0.0.9:22-10.0.0.1:52706.service. Oct 2 19:54:54.130238 sshd[1210]: Accepted publickey for core from 10.0.0.1 port 52706 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:54:54.132047 sshd[1210]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:54.136402 systemd[1]: Started session-2.scope. Oct 2 19:54:54.136667 systemd-logind[1127]: New session 2 of user core. Oct 2 19:54:54.196054 sshd[1210]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:54.199701 systemd[1]: Started sshd@2-10.0.0.9:22-10.0.0.1:52710.service. Oct 2 19:54:54.202466 systemd[1]: sshd@1-10.0.0.9:22-10.0.0.1:52706.service: Deactivated successfully. Oct 2 19:54:54.203055 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:54:54.203567 systemd-logind[1127]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:54:54.204444 systemd-logind[1127]: Removed session 2. Oct 2 19:54:54.232119 sshd[1215]: Accepted publickey for core from 10.0.0.1 port 52710 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:54:54.233272 sshd[1215]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:54.236712 systemd-logind[1127]: New session 3 of user core. Oct 2 19:54:54.237076 systemd[1]: Started session-3.scope. Oct 2 19:54:54.288526 sshd[1215]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:54.291309 systemd[1]: sshd@2-10.0.0.9:22-10.0.0.1:52710.service: Deactivated successfully. Oct 2 19:54:54.291883 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:54:54.292380 systemd-logind[1127]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:54:54.293429 systemd[1]: Started sshd@3-10.0.0.9:22-10.0.0.1:52796.service. Oct 2 19:54:54.293990 systemd-logind[1127]: Removed session 3. Oct 2 19:54:54.327222 sshd[1222]: Accepted publickey for core from 10.0.0.1 port 52796 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:54:54.328524 sshd[1222]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:54.331782 systemd-logind[1127]: New session 4 of user core. Oct 2 19:54:54.332610 systemd[1]: Started session-4.scope. Oct 2 19:54:54.388412 sshd[1222]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:54.391925 systemd[1]: Started sshd@4-10.0.0.9:22-10.0.0.1:52806.service. Oct 2 19:54:54.392455 systemd[1]: sshd@3-10.0.0.9:22-10.0.0.1:52796.service: Deactivated successfully. Oct 2 19:54:54.393119 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:54:54.393675 systemd-logind[1127]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:54:54.394756 systemd-logind[1127]: Removed session 4. Oct 2 19:54:54.424993 sshd[1227]: Accepted publickey for core from 10.0.0.1 port 52806 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:54:54.426538 sshd[1227]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:54.429650 systemd-logind[1127]: New session 5 of user core. Oct 2 19:54:54.430449 systemd[1]: Started session-5.scope. Oct 2 19:54:54.495939 sudo[1231]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:54:54.496156 sudo[1231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:54:54.508564 dbus-daemon[1115]: avc: received setenforce notice (enforcing=1) Oct 2 19:54:54.510343 sudo[1231]: pam_unix(sudo:session): session closed for user root Oct 2 19:54:54.512265 sshd[1227]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:54.515067 systemd[1]: sshd@4-10.0.0.9:22-10.0.0.1:52806.service: Deactivated successfully. Oct 2 19:54:54.515646 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:54:54.516178 systemd-logind[1127]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:54:54.517249 systemd[1]: Started sshd@5-10.0.0.9:22-10.0.0.1:52820.service. Oct 2 19:54:54.517879 systemd-logind[1127]: Removed session 5. Oct 2 19:54:54.550756 sshd[1235]: Accepted publickey for core from 10.0.0.1 port 52820 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:54:54.551999 sshd[1235]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:54.555194 systemd-logind[1127]: New session 6 of user core. Oct 2 19:54:54.556008 systemd[1]: Started session-6.scope. Oct 2 19:54:54.609965 sudo[1239]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:54:54.610181 sudo[1239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:54:54.612925 sudo[1239]: pam_unix(sudo:session): session closed for user root Oct 2 19:54:54.618023 sudo[1238]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:54:54.618217 sudo[1238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:54:54.627232 systemd[1]: Stopping audit-rules.service... Oct 2 19:54:54.627000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:54:54.628692 auditctl[1242]: No rules Oct 2 19:54:54.629622 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:54:54.629781 systemd[1]: Stopped audit-rules.service. Oct 2 19:54:54.631071 kernel: kauditd_printk_skb: 123 callbacks suppressed Oct 2 19:54:54.631129 kernel: audit: type=1305 audit(1696276494.627:163): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:54:54.631147 kernel: audit: type=1300 audit(1696276494.627:163): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc6d02850 a2=420 a3=0 items=0 ppid=1 pid=1242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.627000 audit[1242]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc6d02850 a2=420 a3=0 items=0 ppid=1 pid=1242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.631277 systemd[1]: Starting audit-rules.service... Oct 2 19:54:54.627000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:54:54.635752 kernel: audit: type=1327 audit(1696276494.627:163): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:54:54.635796 kernel: audit: type=1131 audit(1696276494.627:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:54.627000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:54.651552 augenrules[1259]: No rules Oct 2 19:54:54.652458 systemd[1]: Finished audit-rules.service. Oct 2 19:54:54.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:54.655377 kernel: audit: type=1130 audit(1696276494.651:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:54.655494 sudo[1238]: pam_unix(sudo:session): session closed for user root Oct 2 19:54:54.654000 audit[1238]: USER_END pid=1238 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:54.657028 sshd[1235]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:54.654000 audit[1238]: CRED_DISP pid=1238 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:54.661848 systemd[1]: sshd@5-10.0.0.9:22-10.0.0.1:52820.service: Deactivated successfully. Oct 2 19:54:54.662299 kernel: audit: type=1106 audit(1696276494.654:166): pid=1238 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:54.662394 kernel: audit: type=1104 audit(1696276494.654:167): pid=1238 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:54.662420 kernel: audit: type=1106 audit(1696276494.654:168): pid=1235 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:54:54.654000 audit[1235]: USER_END pid=1235 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:54:54.662438 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:54:54.662928 systemd-logind[1127]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:54:54.663981 systemd[1]: Started sshd@6-10.0.0.9:22-10.0.0.1:52822.service. Oct 2 19:54:54.664640 systemd-logind[1127]: Removed session 6. Oct 2 19:54:54.654000 audit[1235]: CRED_DISP pid=1235 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:54:54.668593 kernel: audit: type=1104 audit(1696276494.654:169): pid=1235 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:54:54.668635 kernel: audit: type=1131 audit(1696276494.658:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.9:22-10.0.0.1:52820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:54.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.9:22-10.0.0.1:52820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:54.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.9:22-10.0.0.1:52822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:54.695000 audit[1265]: USER_ACCT pid=1265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:54:54.697352 sshd[1265]: Accepted publickey for core from 10.0.0.1 port 52822 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:54:54.697000 audit[1265]: CRED_ACQ pid=1265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:54:54.697000 audit[1265]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0c48640 a2=3 a3=1 items=0 ppid=1 pid=1265 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:54.697000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:54:54.699061 sshd[1265]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:54.702308 systemd-logind[1127]: New session 7 of user core. Oct 2 19:54:54.703192 systemd[1]: Started session-7.scope. Oct 2 19:54:54.704000 audit[1265]: USER_START pid=1265 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:54:54.706000 audit[1267]: CRED_ACQ pid=1267 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:54:54.754000 audit[1268]: USER_ACCT pid=1268 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:54.754000 audit[1268]: CRED_REFR pid=1268 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:54.755919 sudo[1268]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:54:54.756138 sudo[1268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:54:54.756000 audit[1268]: USER_START pid=1268 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:55.334498 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:54:55.341440 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:54:55.345000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:55.347232 systemd[1]: Reached target network-online.target. Oct 2 19:54:55.348624 systemd[1]: Starting docker.service... Oct 2 19:54:55.443879 env[1286]: time="2023-10-02T19:54:55.443819449Z" level=info msg="Starting up" Oct 2 19:54:55.445728 env[1286]: time="2023-10-02T19:54:55.445701929Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:54:55.445820 env[1286]: time="2023-10-02T19:54:55.445805889Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:54:55.445885 env[1286]: time="2023-10-02T19:54:55.445869089Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock <nil> 0 <nil>}] <nil> <nil>}" module=grpc Oct 2 19:54:55.445936 env[1286]: time="2023-10-02T19:54:55.445924369Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:54:55.450339 env[1286]: time="2023-10-02T19:54:55.450080969Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:54:55.450339 env[1286]: time="2023-10-02T19:54:55.450101809Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:54:55.450339 env[1286]: time="2023-10-02T19:54:55.450118089Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock <nil> 0 <nil>}] <nil> <nil>}" module=grpc Oct 2 19:54:55.450339 env[1286]: time="2023-10-02T19:54:55.450126489Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:54:55.607020 env[1286]: time="2023-10-02T19:54:55.606548489Z" level=info msg="Loading containers: start." Oct 2 19:54:55.676000 audit[1320]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1320 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.676000 audit[1320]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc077fdd0 a2=0 a3=1 items=0 ppid=1286 pid=1320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.676000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:54:55.678000 audit[1322]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1322 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.678000 audit[1322]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffeb77e270 a2=0 a3=1 items=0 ppid=1286 pid=1322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.678000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:54:55.681000 audit[1324]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1324 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.681000 audit[1324]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe5fd7680 a2=0 a3=1 items=0 ppid=1286 pid=1324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.681000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:54:55.683000 audit[1326]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.683000 audit[1326]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff94f81a0 a2=0 a3=1 items=0 ppid=1286 pid=1326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.683000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:54:55.685000 audit[1328]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1328 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.685000 audit[1328]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff51cded0 a2=0 a3=1 items=0 ppid=1286 pid=1328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.685000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:54:55.713000 audit[1333]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1333 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.713000 audit[1333]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffdadf9570 a2=0 a3=1 items=0 ppid=1286 pid=1333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.713000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:54:55.787000 audit[1335]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1335 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.787000 audit[1335]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffce99b4d0 a2=0 a3=1 items=0 ppid=1286 pid=1335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.787000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:54:55.789000 audit[1337]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1337 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.789000 audit[1337]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffe3999250 a2=0 a3=1 items=0 ppid=1286 pid=1337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.789000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:54:55.792000 audit[1339]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1339 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.792000 audit[1339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffe6ffffc0 a2=0 a3=1 items=0 ppid=1286 pid=1339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.792000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:55.805000 audit[1343]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1343 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.805000 audit[1343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffdb543a60 a2=0 a3=1 items=0 ppid=1286 pid=1343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.805000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:55.806000 audit[1344]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1344 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.806000 audit[1344]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffed0adf40 a2=0 a3=1 items=0 ppid=1286 pid=1344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.806000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:55.815132 kernel: Initializing XFRM netlink socket Oct 2 19:54:55.843195 env[1286]: time="2023-10-02T19:54:55.843115289Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:54:55.858000 audit[1352]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1352 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.858000 audit[1352]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffffa52d660 a2=0 a3=1 items=0 ppid=1286 pid=1352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.858000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:54:55.876000 audit[1355]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1355 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.876000 audit[1355]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc51b23a0 a2=0 a3=1 items=0 ppid=1286 pid=1355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.876000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:54:55.880000 audit[1358]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1358 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.880000 audit[1358]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff97ebe30 a2=0 a3=1 items=0 ppid=1286 pid=1358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.880000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:54:55.882000 audit[1360]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1360 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.882000 audit[1360]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd042b250 a2=0 a3=1 items=0 ppid=1286 pid=1360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.882000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:54:55.884000 audit[1362]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1362 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.884000 audit[1362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd84f5ab0 a2=0 a3=1 items=0 ppid=1286 pid=1362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.884000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:54:55.886000 audit[1364]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1364 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.886000 audit[1364]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffff449b9b0 a2=0 a3=1 items=0 ppid=1286 pid=1364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.886000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:54:55.888000 audit[1366]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1366 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.888000 audit[1366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffffaf257a0 a2=0 a3=1 items=0 ppid=1286 pid=1366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.888000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:54:55.895000 audit[1369]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1369 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.895000 audit[1369]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=fffff8eb2790 a2=0 a3=1 items=0 ppid=1286 pid=1369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.895000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:54:55.897000 audit[1371]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1371 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.897000 audit[1371]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffd9ba19c0 a2=0 a3=1 items=0 ppid=1286 pid=1371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.897000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:54:55.899000 audit[1373]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1373 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.899000 audit[1373]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=fffffbc51ef0 a2=0 a3=1 items=0 ppid=1286 pid=1373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.899000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:54:55.901000 audit[1375]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1375 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.901000 audit[1375]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff840a740 a2=0 a3=1 items=0 ppid=1286 pid=1375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.901000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:54:55.903706 systemd-networkd[1046]: docker0: Link UP Oct 2 19:54:55.909000 audit[1379]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1379 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.909000 audit[1379]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe3864a00 a2=0 a3=1 items=0 ppid=1286 pid=1379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.909000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:55.910000 audit[1380]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1380 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:55.910000 audit[1380]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd21ca4f0 a2=0 a3=1 items=0 ppid=1286 pid=1380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:55.910000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:55.912200 env[1286]: time="2023-10-02T19:54:55.912165929Z" level=info msg="Loading containers: done." Oct 2 19:54:55.936762 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1900998350-merged.mount: Deactivated successfully. Oct 2 19:54:55.939819 env[1286]: time="2023-10-02T19:54:55.939774209Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:54:55.939992 env[1286]: time="2023-10-02T19:54:55.939956009Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:54:55.940089 env[1286]: time="2023-10-02T19:54:55.940063689Z" level=info msg="Daemon has completed initialization" Oct 2 19:54:55.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:55.957276 systemd[1]: Started docker.service. Oct 2 19:54:55.961123 env[1286]: time="2023-10-02T19:54:55.961083089Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:54:55.986789 systemd[1]: Reloading. Oct 2 19:54:56.030085 /usr/lib/systemd/system-generators/torcx-generator[1428]: time="2023-10-02T19:54:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:54:56.030419 /usr/lib/systemd/system-generators/torcx-generator[1428]: time="2023-10-02T19:54:56Z" level=info msg="torcx already run" Oct 2 19:54:56.095111 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:54:56.095131 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:54:56.115145 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:54:56.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.167000 audit: BPF prog-id=34 op=LOAD Oct 2 19:54:56.167000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit: BPF prog-id=35 op=LOAD Oct 2 19:54:56.168000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit: BPF prog-id=36 op=LOAD Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.168000 audit: BPF prog-id=37 op=LOAD Oct 2 19:54:56.168000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:54:56.168000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:54:56.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.169000 audit: BPF prog-id=38 op=LOAD Oct 2 19:54:56.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.169000 audit: BPF prog-id=39 op=LOAD Oct 2 19:54:56.169000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:54:56.169000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit: BPF prog-id=40 op=LOAD Oct 2 19:54:56.172000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit: BPF prog-id=41 op=LOAD Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.172000 audit: BPF prog-id=42 op=LOAD Oct 2 19:54:56.172000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:54:56.172000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit: BPF prog-id=43 op=LOAD Oct 2 19:54:56.173000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.173000 audit: BPF prog-id=44 op=LOAD Oct 2 19:54:56.173000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:54:56.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.174000 audit: BPF prog-id=45 op=LOAD Oct 2 19:54:56.174000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit: BPF prog-id=46 op=LOAD Oct 2 19:54:56.175000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit: BPF prog-id=47 op=LOAD Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:56.175000 audit: BPF prog-id=48 op=LOAD Oct 2 19:54:56.175000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:54:56.175000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:54:56.182872 systemd[1]: Started kubelet.service. Oct 2 19:54:56.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:56.312156 kubelet[1464]: E1002 19:54:56.312100 1464 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:54:56.314649 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:54:56.314775 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:54:56.313000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:54:56.544900 env[1141]: time="2023-10-02T19:54:56.544794609Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 19:54:57.293824 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3919127694.mount: Deactivated successfully. Oct 2 19:55:00.023537 env[1141]: time="2023-10-02T19:55:00.023459449Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:00.026267 env[1141]: time="2023-10-02T19:55:00.026201569Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:84fc12f356926a06f93f99d06ff6b5c8df1d39c609ddaae4aaf09048dc816c36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:00.028029 env[1141]: time="2023-10-02T19:55:00.027990609Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:00.030762 env[1141]: time="2023-10-02T19:55:00.030724409Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:00.031511 env[1141]: time="2023-10-02T19:55:00.031478649Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:84fc12f356926a06f93f99d06ff6b5c8df1d39c609ddaae4aaf09048dc816c36\"" Oct 2 19:55:00.043736 env[1141]: time="2023-10-02T19:55:00.043695009Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 19:55:02.851666 env[1141]: time="2023-10-02T19:55:02.851573489Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:02.852684 env[1141]: time="2023-10-02T19:55:02.852646089Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:66b19e3051492d4e2377e15803f07d9bd2a4578c7e26e5fa088582d59e08884b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:02.854877 env[1141]: time="2023-10-02T19:55:02.854847129Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:02.856577 env[1141]: time="2023-10-02T19:55:02.856537569Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:02.858161 env[1141]: time="2023-10-02T19:55:02.858106169Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:66b19e3051492d4e2377e15803f07d9bd2a4578c7e26e5fa088582d59e08884b\"" Oct 2 19:55:02.868457 env[1141]: time="2023-10-02T19:55:02.868414169Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 19:55:05.286464 env[1141]: time="2023-10-02T19:55:05.286390049Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:05.287669 env[1141]: time="2023-10-02T19:55:05.287640609Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1faa1d898c625343f7c70abbc8e9d160eb6dc3002ec2481cf8f4abd61dc34eed,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:05.289110 env[1141]: time="2023-10-02T19:55:05.289087969Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:05.291331 env[1141]: time="2023-10-02T19:55:05.291293129Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:05.292130 env[1141]: time="2023-10-02T19:55:05.292101249Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:1faa1d898c625343f7c70abbc8e9d160eb6dc3002ec2481cf8f4abd61dc34eed\"" Oct 2 19:55:05.302305 env[1141]: time="2023-10-02T19:55:05.302272809Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 19:55:06.376794 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2217018832.mount: Deactivated successfully. Oct 2 19:55:06.377591 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:55:06.377724 systemd[1]: Stopped kubelet.service. Oct 2 19:55:06.376000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:06.378532 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 19:55:06.378563 kernel: audit: type=1130 audit(1696276506.376:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:06.379131 systemd[1]: Started kubelet.service. Oct 2 19:55:06.376000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:06.383452 kernel: audit: type=1131 audit(1696276506.376:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:06.383518 kernel: audit: type=1130 audit(1696276506.377:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:06.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:06.426855 kubelet[1505]: E1002 19:55:06.426801 1505 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:55:06.429654 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:55:06.429787 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:55:06.428000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:55:06.433395 kernel: audit: type=1131 audit(1696276506.428:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:55:07.018378 env[1141]: time="2023-10-02T19:55:07.018308689Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:07.019396 env[1141]: time="2023-10-02T19:55:07.019348689Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:07.020998 env[1141]: time="2023-10-02T19:55:07.020960089Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:07.022193 env[1141]: time="2023-10-02T19:55:07.022169649Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:07.022626 env[1141]: time="2023-10-02T19:55:07.022603409Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af\"" Oct 2 19:55:07.033603 env[1141]: time="2023-10-02T19:55:07.033560929Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:55:07.476694 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount443258055.mount: Deactivated successfully. Oct 2 19:55:07.479415 env[1141]: time="2023-10-02T19:55:07.479355929Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:07.480796 env[1141]: time="2023-10-02T19:55:07.480754449Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:07.482009 env[1141]: time="2023-10-02T19:55:07.481975129Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:07.483191 env[1141]: time="2023-10-02T19:55:07.483155209Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:07.484457 env[1141]: time="2023-10-02T19:55:07.484423449Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 19:55:07.495428 env[1141]: time="2023-10-02T19:55:07.495393369Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 19:55:09.440422 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1425207059.mount: Deactivated successfully. Oct 2 19:55:11.110729 env[1141]: time="2023-10-02T19:55:11.110670489Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:11.111878 env[1141]: time="2023-10-02T19:55:11.111845329Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:11.113163 env[1141]: time="2023-10-02T19:55:11.113136569Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:11.115469 env[1141]: time="2023-10-02T19:55:11.115431489Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:11.115928 env[1141]: time="2023-10-02T19:55:11.115891169Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737\"" Oct 2 19:55:11.126649 env[1141]: time="2023-10-02T19:55:11.126615489Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:55:11.627396 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3785924512.mount: Deactivated successfully. Oct 2 19:55:12.147692 env[1141]: time="2023-10-02T19:55:12.147642569Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:12.149277 env[1141]: time="2023-10-02T19:55:12.149239209Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:12.150539 env[1141]: time="2023-10-02T19:55:12.150512409Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:12.152035 env[1141]: time="2023-10-02T19:55:12.152007769Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:12.152529 env[1141]: time="2023-10-02T19:55:12.152502769Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 19:55:16.604754 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:55:16.604944 systemd[1]: Stopped kubelet.service. Oct 2 19:55:16.612863 kernel: audit: type=1130 audit(1696276516.603:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:16.613005 kernel: audit: type=1131 audit(1696276516.603:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:16.613037 kernel: audit: type=1130 audit(1696276516.605:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:16.603000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:16.603000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:16.605000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:16.606389 systemd[1]: Started kubelet.service. Oct 2 19:55:16.665426 kubelet[1602]: E1002 19:55:16.665383 1602 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:55:16.668099 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:55:16.668234 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:55:16.667000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:55:16.671395 kernel: audit: type=1131 audit(1696276516.667:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:55:16.685130 systemd[1]: Stopped kubelet.service. Oct 2 19:55:16.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:16.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:16.690254 kernel: audit: type=1130 audit(1696276516.683:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:16.690329 kernel: audit: type=1131 audit(1696276516.683:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:16.704908 systemd[1]: Reloading. Oct 2 19:55:16.760769 /usr/lib/systemd/system-generators/torcx-generator[1633]: time="2023-10-02T19:55:16Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:55:16.760798 /usr/lib/systemd/system-generators/torcx-generator[1633]: time="2023-10-02T19:55:16Z" level=info msg="torcx already run" Oct 2 19:55:16.833782 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:55:16.833800 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:55:16.851726 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:55:16.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.903390 kernel: audit: type=1400 audit(1696276516.899:390): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.909024 kernel: audit: type=1400 audit(1696276516.902:391): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.909086 kernel: audit: type=1400 audit(1696276516.902:392): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.909122 kernel: audit: type=1400 audit(1696276516.902:393): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.902000 audit: BPF prog-id=49 op=LOAD Oct 2 19:55:16.902000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:55:16.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.905000 audit: BPF prog-id=50 op=LOAD Oct 2 19:55:16.905000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:55:16.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.908000 audit: BPF prog-id=51 op=LOAD Oct 2 19:55:16.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.910000 audit: BPF prog-id=52 op=LOAD Oct 2 19:55:16.910000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:55:16.910000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:55:16.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.911000 audit: BPF prog-id=53 op=LOAD Oct 2 19:55:16.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.911000 audit: BPF prog-id=54 op=LOAD Oct 2 19:55:16.911000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:55:16.911000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:55:16.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit: BPF prog-id=55 op=LOAD Oct 2 19:55:16.914000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit: BPF prog-id=56 op=LOAD Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit: BPF prog-id=57 op=LOAD Oct 2 19:55:16.914000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:55:16.914000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.915000 audit: BPF prog-id=58 op=LOAD Oct 2 19:55:16.915000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:55:16.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.915000 audit: BPF prog-id=59 op=LOAD Oct 2 19:55:16.915000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.916000 audit: BPF prog-id=60 op=LOAD Oct 2 19:55:16.916000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit: BPF prog-id=61 op=LOAD Oct 2 19:55:16.917000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit: BPF prog-id=62 op=LOAD Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:16.917000 audit: BPF prog-id=63 op=LOAD Oct 2 19:55:16.917000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:55:16.917000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:55:16.940565 systemd[1]: Started kubelet.service. Oct 2 19:55:16.939000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:16.985216 kubelet[1670]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:55:16.985216 kubelet[1670]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:55:16.985216 kubelet[1670]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:55:16.985579 kubelet[1670]: I1002 19:55:16.985298 1670 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:55:17.590676 kubelet[1670]: I1002 19:55:17.590627 1670 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:55:17.590676 kubelet[1670]: I1002 19:55:17.590663 1670 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:55:17.590918 kubelet[1670]: I1002 19:55:17.590903 1670 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:55:17.597878 kubelet[1670]: I1002 19:55:17.597792 1670 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:55:17.598195 kubelet[1670]: E1002 19:55:17.598171 1670 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.9:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.9:6443: connect: connection refused Oct 2 19:55:17.599910 kubelet[1670]: W1002 19:55:17.599882 1670 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:55:17.600731 kubelet[1670]: I1002 19:55:17.600708 1670 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:55:17.601067 kubelet[1670]: I1002 19:55:17.601052 1670 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:55:17.601213 kubelet[1670]: I1002 19:55:17.601199 1670 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity:<nil> Percentage:0.05} GracePeriod:0s MinReclaim:<nil>} {Signal:imagefs.available Operator:LessThan Value:{Quantity:<nil> Percentage:0.15} GracePeriod:0s MinReclaim:<nil>} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:<nil>} {Signal:nodefs.available Operator:LessThan Value:{Quantity:<nil> Percentage:0.1} GracePeriod:0s MinReclaim:<nil>}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:55:17.601349 kubelet[1670]: I1002 19:55:17.601337 1670 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:55:17.601458 kubelet[1670]: I1002 19:55:17.601447 1670 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:55:17.601622 kubelet[1670]: I1002 19:55:17.601608 1670 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:55:17.604821 kubelet[1670]: I1002 19:55:17.604802 1670 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:55:17.604916 kubelet[1670]: I1002 19:55:17.604828 1670 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:55:17.604916 kubelet[1670]: I1002 19:55:17.604865 1670 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:55:17.604916 kubelet[1670]: I1002 19:55:17.604877 1670 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:55:17.605601 kubelet[1670]: W1002 19:55:17.605549 1670 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.9:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused Oct 2 19:55:17.605676 kubelet[1670]: E1002 19:55:17.605605 1670 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.9:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused Oct 2 19:55:17.605676 kubelet[1670]: I1002 19:55:17.605619 1670 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:55:17.605822 kubelet[1670]: W1002 19:55:17.605785 1670 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.9:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused Oct 2 19:55:17.605904 kubelet[1670]: E1002 19:55:17.605884 1670 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.9:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused Oct 2 19:55:17.606097 kubelet[1670]: W1002 19:55:17.606080 1670 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:55:17.606826 kubelet[1670]: I1002 19:55:17.606795 1670 server.go:1168] "Started kubelet" Oct 2 19:55:17.606970 kubelet[1670]: I1002 19:55:17.606947 1670 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:55:17.607293 kubelet[1670]: I1002 19:55:17.607277 1670 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:55:17.607653 kubelet[1670]: I1002 19:55:17.607638 1670 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:55:17.607809 kubelet[1670]: E1002 19:55:17.607721 1670 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a628168c9e331", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:<nil>, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 55, 17, 606777649, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 55, 17, 606777649, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.9:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.9:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:55:17.608745 kubelet[1670]: E1002 19:55:17.608586 1670 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:55:17.608745 kubelet[1670]: E1002 19:55:17.608616 1670 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:55:17.608000 audit[1670]: AVC avc: denied { mac_admin } for pid=1670 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:17.608000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:55:17.608000 audit[1670]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400004bfb0 a1=40002c96c8 a2=400004bf80 a3=25 items=0 ppid=1 pid=1670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:17.608000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:55:17.608000 audit[1670]: AVC avc: denied { mac_admin } for pid=1670 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:17.608000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:55:17.608000 audit[1670]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c183c0 a1=40002c96e0 a2=4000c4a060 a3=25 items=0 ppid=1 pid=1670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:17.608000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:55:17.609853 kubelet[1670]: I1002 19:55:17.609507 1670 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:55:17.609853 kubelet[1670]: I1002 19:55:17.609563 1670 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:55:17.609853 kubelet[1670]: I1002 19:55:17.609623 1670 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:55:17.611203 kubelet[1670]: I1002 19:55:17.610963 1670 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:55:17.611203 kubelet[1670]: I1002 19:55:17.611119 1670 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:55:17.611670 kubelet[1670]: E1002 19:55:17.611651 1670 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.9:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.9:6443: connect: connection refused" interval="200ms" Oct 2 19:55:17.611754 kubelet[1670]: W1002 19:55:17.611704 1670 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.9:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused Oct 2 19:55:17.611797 kubelet[1670]: E1002 19:55:17.611766 1670 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.9:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused Oct 2 19:55:17.614000 audit[1682]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1682 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:17.614000 audit[1682]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe1c1cdf0 a2=0 a3=1 items=0 ppid=1670 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:17.614000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:55:17.615000 audit[1683]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1683 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:17.615000 audit[1683]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd606c2a0 a2=0 a3=1 items=0 ppid=1670 pid=1683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:17.615000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:55:17.617000 audit[1685]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1685 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:17.617000 audit[1685]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffeff1f5d0 a2=0 a3=1 items=0 ppid=1670 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:17.617000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:55:17.624000 audit[1689]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1689 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:17.624000 audit[1689]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffeb83e060 a2=0 a3=1 items=0 ppid=1670 pid=1689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:17.624000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:55:17.630200 kubelet[1670]: I1002 19:55:17.630180 1670 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:55:17.630323 kubelet[1670]: I1002 19:55:17.630311 1670 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:55:17.630427 kubelet[1670]: I1002 19:55:17.630417 1670 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:55:17.632000 audit[1696]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1696 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:17.632000 audit[1696]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffc0685230 a2=0 a3=1 items=0 ppid=1670 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:17.632000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:55:17.633882 kubelet[1670]: I1002 19:55:17.633847 1670 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:55:17.634038 kubelet[1670]: I1002 19:55:17.634017 1670 policy_none.go:49] "None policy: Start" Oct 2 19:55:17.633000 audit[1697]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1697 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:17.633000 audit[1697]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd213bcc0 a2=0 a3=1 items=0 ppid=1670 pid=1697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:17.633000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:55:17.635447 kubelet[1670]: I1002 19:55:17.635200 1670 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:55:17.635447 kubelet[1670]: I1002 19:55:17.635281 1670 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:55:17.634000 audit[1698]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:17.634000 audit[1698]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffccd81d30 a2=0 a3=1 items=0 ppid=1670 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:17.634000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:55:17.635700 kubelet[1670]: I1002 19:55:17.635563 1670 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:55:17.635700 kubelet[1670]: I1002 19:55:17.635598 1670 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:55:17.635700 kubelet[1670]: I1002 19:55:17.635620 1670 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:55:17.635700 kubelet[1670]: E1002 19:55:17.635668 1670 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:55:17.636148 kubelet[1670]: W1002 19:55:17.636115 1670 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.9:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused Oct 2 19:55:17.636148 kubelet[1670]: E1002 19:55:17.636150 1670 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.9:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused Oct 2 19:55:17.635000 audit[1700]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1700 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:17.635000 audit[1700]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe08c4f20 a2=0 a3=1 items=0 ppid=1670 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:17.635000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:55:17.636000 audit[1699]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=1699 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:17.636000 audit[1699]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffc030f00 a2=0 a3=1 items=0 ppid=1670 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:17.636000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:55:17.637000 audit[1701]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1701 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:17.637000 audit[1701]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffe0e81810 a2=0 a3=1 items=0 ppid=1670 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:17.637000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:55:17.637000 audit[1702]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=1702 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:17.637000 audit[1702]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe44c72f0 a2=0 a3=1 items=0 ppid=1670 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:17.637000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:55:17.638000 audit[1703]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1703 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:17.638000 audit[1703]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd2db33b0 a2=0 a3=1 items=0 ppid=1670 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:17.638000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:55:17.640520 systemd[1]: Created slice kubepods.slice. Oct 2 19:55:17.644622 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:55:17.647117 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:55:17.662644 kubelet[1670]: I1002 19:55:17.662192 1670 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:55:17.661000 audit[1670]: AVC avc: denied { mac_admin } for pid=1670 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:17.661000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:55:17.661000 audit[1670]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40002bb290 a1=40010a6078 a2=40002bb230 a3=25 items=0 ppid=1 pid=1670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:17.661000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:55:17.663237 kubelet[1670]: I1002 19:55:17.663094 1670 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:55:17.663773 kubelet[1670]: I1002 19:55:17.663758 1670 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:55:17.664422 kubelet[1670]: E1002 19:55:17.664404 1670 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 2 19:55:17.712510 kubelet[1670]: I1002 19:55:17.712480 1670 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:55:17.712931 kubelet[1670]: E1002 19:55:17.712910 1670 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.9:6443/api/v1/nodes\": dial tcp 10.0.0.9:6443: connect: connection refused" node="localhost" Oct 2 19:55:17.736125 kubelet[1670]: I1002 19:55:17.736095 1670 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:55:17.737300 kubelet[1670]: I1002 19:55:17.737276 1670 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:55:17.738358 kubelet[1670]: I1002 19:55:17.738332 1670 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:55:17.742300 systemd[1]: Created slice kubepods-burstable-pod80b8b8966aa7d1c422f3be2bfac9c13f.slice. Oct 2 19:55:17.755465 systemd[1]: Created slice kubepods-burstable-pod24fef87020af50fba838138f9686fc61.slice. Oct 2 19:55:17.759206 systemd[1]: Created slice kubepods-burstable-pod8051ce3f297b52438be36b63053c1569.slice. Oct 2 19:55:17.812637 kubelet[1670]: E1002 19:55:17.812587 1670 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.9:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.9:6443: connect: connection refused" interval="400ms" Oct 2 19:55:17.912095 kubelet[1670]: I1002 19:55:17.912030 1670 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:17.912095 kubelet[1670]: I1002 19:55:17.912074 1670 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:17.912095 kubelet[1670]: I1002 19:55:17.912097 1670 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8051ce3f297b52438be36b63053c1569-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"8051ce3f297b52438be36b63053c1569\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:55:17.912293 kubelet[1670]: I1002 19:55:17.912119 1670 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8051ce3f297b52438be36b63053c1569-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"8051ce3f297b52438be36b63053c1569\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:55:17.912293 kubelet[1670]: I1002 19:55:17.912139 1670 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8051ce3f297b52438be36b63053c1569-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"8051ce3f297b52438be36b63053c1569\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:55:17.912293 kubelet[1670]: I1002 19:55:17.912157 1670 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:17.912293 kubelet[1670]: I1002 19:55:17.912175 1670 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:17.912293 kubelet[1670]: I1002 19:55:17.912193 1670 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:17.912437 kubelet[1670]: I1002 19:55:17.912216 1670 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/24fef87020af50fba838138f9686fc61-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"24fef87020af50fba838138f9686fc61\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:55:17.914557 kubelet[1670]: I1002 19:55:17.914536 1670 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:55:17.914901 kubelet[1670]: E1002 19:55:17.914875 1670 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.9:6443/api/v1/nodes\": dial tcp 10.0.0.9:6443: connect: connection refused" node="localhost" Oct 2 19:55:18.054642 kubelet[1670]: E1002 19:55:18.054583 1670 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:18.055301 env[1141]: time="2023-10-02T19:55:18.055236969Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:80b8b8966aa7d1c422f3be2bfac9c13f,Namespace:kube-system,Attempt:0,}" Oct 2 19:55:18.059509 kubelet[1670]: E1002 19:55:18.059450 1670 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:18.060187 env[1141]: time="2023-10-02T19:55:18.059934409Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:24fef87020af50fba838138f9686fc61,Namespace:kube-system,Attempt:0,}" Oct 2 19:55:18.061104 kubelet[1670]: E1002 19:55:18.061081 1670 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:18.061564 env[1141]: time="2023-10-02T19:55:18.061435529Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:8051ce3f297b52438be36b63053c1569,Namespace:kube-system,Attempt:0,}" Oct 2 19:55:18.214072 kubelet[1670]: E1002 19:55:18.213944 1670 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.9:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.9:6443: connect: connection refused" interval="800ms" Oct 2 19:55:18.316542 kubelet[1670]: I1002 19:55:18.316503 1670 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:55:18.316831 kubelet[1670]: E1002 19:55:18.316803 1670 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.9:6443/api/v1/nodes\": dial tcp 10.0.0.9:6443: connect: connection refused" node="localhost" Oct 2 19:55:18.506498 kubelet[1670]: W1002 19:55:18.505311 1670 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.9:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused Oct 2 19:55:18.506498 kubelet[1670]: E1002 19:55:18.505396 1670 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.9:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused Oct 2 19:55:18.509591 kubelet[1670]: W1002 19:55:18.507632 1670 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.9:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused Oct 2 19:55:18.509591 kubelet[1670]: E1002 19:55:18.507661 1670 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.9:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused Oct 2 19:55:18.513638 kubelet[1670]: W1002 19:55:18.513583 1670 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.9:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused Oct 2 19:55:18.513638 kubelet[1670]: E1002 19:55:18.513635 1670 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.9:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused Oct 2 19:55:18.566401 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3978139517.mount: Deactivated successfully. Oct 2 19:55:18.569957 env[1141]: time="2023-10-02T19:55:18.569912769Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:18.574313 env[1141]: time="2023-10-02T19:55:18.574271449Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:18.575770 env[1141]: time="2023-10-02T19:55:18.575723569Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:18.577144 env[1141]: time="2023-10-02T19:55:18.577109449Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:18.582322 env[1141]: time="2023-10-02T19:55:18.582283329Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:18.584631 env[1141]: time="2023-10-02T19:55:18.584591969Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:18.588263 env[1141]: time="2023-10-02T19:55:18.588222889Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:18.588924 env[1141]: time="2023-10-02T19:55:18.588902849Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:18.589692 env[1141]: time="2023-10-02T19:55:18.589663049Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:18.590492 env[1141]: time="2023-10-02T19:55:18.590465489Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:18.594630 env[1141]: time="2023-10-02T19:55:18.594592489Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:18.595477 env[1141]: time="2023-10-02T19:55:18.595452009Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:18.634643 env[1141]: time="2023-10-02T19:55:18.634431649Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:55:18.634643 env[1141]: time="2023-10-02T19:55:18.634488089Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:55:18.634643 env[1141]: time="2023-10-02T19:55:18.634503369Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:55:18.634887 env[1141]: time="2023-10-02T19:55:18.634817089Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a3b359528dff8b506b719918835405407e940eac2117aac9c0cb986dfc1f9136 pid=1723 runtime=io.containerd.runc.v2 Oct 2 19:55:18.635188 env[1141]: time="2023-10-02T19:55:18.635134409Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:55:18.635243 env[1141]: time="2023-10-02T19:55:18.635173369Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:55:18.635243 env[1141]: time="2023-10-02T19:55:18.635184529Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:55:18.635502 env[1141]: time="2023-10-02T19:55:18.635466449Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/aab025943020498b2a2ccd8d77eda9254976f12a87158ba4b122576609f130df pid=1726 runtime=io.containerd.runc.v2 Oct 2 19:55:18.636676 env[1141]: time="2023-10-02T19:55:18.636599209Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:55:18.636676 env[1141]: time="2023-10-02T19:55:18.636645369Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:55:18.636793 env[1141]: time="2023-10-02T19:55:18.636656489Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:55:18.636872 env[1141]: time="2023-10-02T19:55:18.636835249Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3e40e2be7b09c33cfe393c5f0c88bf81d7f75afb3c2ffeeb8f927521acab041c pid=1729 runtime=io.containerd.runc.v2 Oct 2 19:55:18.651049 systemd[1]: Started cri-containerd-a3b359528dff8b506b719918835405407e940eac2117aac9c0cb986dfc1f9136.scope. Oct 2 19:55:18.652063 systemd[1]: Started cri-containerd-aab025943020498b2a2ccd8d77eda9254976f12a87158ba4b122576609f130df.scope. Oct 2 19:55:18.658029 systemd[1]: Started cri-containerd-3e40e2be7b09c33cfe393c5f0c88bf81d7f75afb3c2ffeeb8f927521acab041c.scope. Oct 2 19:55:18.687576 kubelet[1670]: W1002 19:55:18.686717 1670 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.9:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused Oct 2 19:55:18.687576 kubelet[1670]: E1002 19:55:18.686781 1670 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.9:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused Oct 2 19:55:18.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit: BPF prog-id=64 op=LOAD Oct 2 19:55:18.698000 audit[1750]: AVC avc: denied { bpf } for pid=1750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=1723 pid=1750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.698000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133623335393532386466663862353036623731393931383833353430 Oct 2 19:55:18.698000 audit[1750]: AVC avc: denied { perfmon } for pid=1750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=1723 pid=1750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.698000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133623335393532386466663862353036623731393931383833353430 Oct 2 19:55:18.698000 audit[1750]: AVC avc: denied { bpf } for pid=1750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1750]: AVC avc: denied { bpf } for pid=1750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1750]: AVC avc: denied { bpf } for pid=1750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1750]: AVC avc: denied { perfmon } for pid=1750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1750]: AVC avc: denied { perfmon } for pid=1750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1750]: AVC avc: denied { perfmon } for pid=1750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1750]: AVC avc: denied { perfmon } for pid=1750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1750]: AVC avc: denied { perfmon } for pid=1750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1750]: AVC avc: denied { bpf } for pid=1750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit[1750]: AVC avc: denied { bpf } for pid=1750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.698000 audit: BPF prog-id=65 op=LOAD Oct 2 19:55:18.698000 audit[1750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=1723 pid=1750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.698000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133623335393532386466663862353036623731393931383833353430 Oct 2 19:55:18.699000 audit[1750]: AVC avc: denied { bpf } for pid=1750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.699000 audit[1750]: AVC avc: denied { bpf } for pid=1750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.699000 audit[1750]: AVC avc: denied { perfmon } for pid=1750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.699000 audit[1750]: AVC avc: denied { perfmon } for pid=1750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.699000 audit[1750]: AVC avc: denied { perfmon } for pid=1750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.699000 audit[1750]: AVC avc: denied { perfmon } for pid=1750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.699000 audit[1750]: AVC avc: denied { perfmon } for pid=1750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.699000 audit[1750]: AVC avc: denied { bpf } for pid=1750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.699000 audit[1750]: AVC avc: denied { bpf } for pid=1750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.699000 audit: BPF prog-id=66 op=LOAD Oct 2 19:55:18.699000 audit[1750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=1723 pid=1750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133623335393532386466663862353036623731393931383833353430 Oct 2 19:55:18.700000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:55:18.700000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:55:18.700000 audit[1750]: AVC avc: denied { bpf } for pid=1750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.700000 audit[1750]: AVC avc: denied { bpf } for pid=1750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.700000 audit[1750]: AVC avc: denied { bpf } for pid=1750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.700000 audit[1750]: AVC avc: denied { perfmon } for pid=1750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.700000 audit[1750]: AVC avc: denied { perfmon } for pid=1750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.700000 audit[1750]: AVC avc: denied { perfmon } for pid=1750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.700000 audit[1750]: AVC avc: denied { perfmon } for pid=1750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.700000 audit[1750]: AVC avc: denied { perfmon } for pid=1750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.700000 audit[1750]: AVC avc: denied { bpf } for pid=1750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.700000 audit[1750]: AVC avc: denied { bpf } for pid=1750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.700000 audit: BPF prog-id=67 op=LOAD Oct 2 19:55:18.700000 audit[1750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=1723 pid=1750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133623335393532386466663862353036623731393931383833353430 Oct 2 19:55:18.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.705000 audit: BPF prog-id=68 op=LOAD Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { bpf } for pid=1756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1729 pid=1756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365343065326265376230396333336366653339336335663063383862 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { perfmon } for pid=1756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1729 pid=1756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365343065326265376230396333336366653339336335663063383862 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { bpf } for pid=1756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { bpf } for pid=1756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { bpf } for pid=1756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { perfmon } for pid=1756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { perfmon } for pid=1756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { perfmon } for pid=1756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { perfmon } for pid=1756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { perfmon } for pid=1756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { bpf } for pid=1756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { bpf } for pid=1756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit: BPF prog-id=69 op=LOAD Oct 2 19:55:18.706000 audit[1756]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1729 pid=1756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365343065326265376230396333336366653339336335663063383862 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { bpf } for pid=1756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { bpf } for pid=1756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { perfmon } for pid=1756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { perfmon } for pid=1756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { perfmon } for pid=1756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { perfmon } for pid=1756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { perfmon } for pid=1756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { bpf } for pid=1756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { bpf } for pid=1756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit: BPF prog-id=70 op=LOAD Oct 2 19:55:18.706000 audit[1756]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1729 pid=1756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365343065326265376230396333336366653339336335663063383862 Oct 2 19:55:18.706000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:55:18.706000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { bpf } for pid=1756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { bpf } for pid=1756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { bpf } for pid=1756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { perfmon } for pid=1756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { perfmon } for pid=1756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { perfmon } for pid=1756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { perfmon } for pid=1756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { perfmon } for pid=1756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { bpf } for pid=1756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit[1756]: AVC avc: denied { bpf } for pid=1756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.706000 audit: BPF prog-id=71 op=LOAD Oct 2 19:55:18.706000 audit[1756]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1729 pid=1756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365343065326265376230396333336366653339336335663063383862 Oct 2 19:55:18.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit: BPF prog-id=72 op=LOAD Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { bpf } for pid=1753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1726 pid=1753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.713000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161623032353934333032303439386232613263636438643737656461 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { perfmon } for pid=1753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1726 pid=1753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.713000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161623032353934333032303439386232613263636438643737656461 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { bpf } for pid=1753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { bpf } for pid=1753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { bpf } for pid=1753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { perfmon } for pid=1753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { perfmon } for pid=1753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { perfmon } for pid=1753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { perfmon } for pid=1753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { perfmon } for pid=1753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { bpf } for pid=1753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { bpf } for pid=1753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit: BPF prog-id=73 op=LOAD Oct 2 19:55:18.713000 audit[1753]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1726 pid=1753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.713000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161623032353934333032303439386232613263636438643737656461 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { bpf } for pid=1753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { bpf } for pid=1753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { perfmon } for pid=1753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { perfmon } for pid=1753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { perfmon } for pid=1753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { perfmon } for pid=1753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { perfmon } for pid=1753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { bpf } for pid=1753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { bpf } for pid=1753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit: BPF prog-id=74 op=LOAD Oct 2 19:55:18.713000 audit[1753]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1726 pid=1753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.713000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161623032353934333032303439386232613263636438643737656461 Oct 2 19:55:18.713000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:55:18.713000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { bpf } for pid=1753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { bpf } for pid=1753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { bpf } for pid=1753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { perfmon } for pid=1753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { perfmon } for pid=1753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { perfmon } for pid=1753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { perfmon } for pid=1753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { perfmon } for pid=1753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { bpf } for pid=1753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit[1753]: AVC avc: denied { bpf } for pid=1753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.713000 audit: BPF prog-id=75 op=LOAD Oct 2 19:55:18.713000 audit[1753]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1726 pid=1753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.713000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161623032353934333032303439386232613263636438643737656461 Oct 2 19:55:18.735944 env[1141]: time="2023-10-02T19:55:18.735881809Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:24fef87020af50fba838138f9686fc61,Namespace:kube-system,Attempt:0,} returns sandbox id \"a3b359528dff8b506b719918835405407e940eac2117aac9c0cb986dfc1f9136\"" Oct 2 19:55:18.737167 kubelet[1670]: E1002 19:55:18.737142 1670 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:18.739453 env[1141]: time="2023-10-02T19:55:18.739414049Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:8051ce3f297b52438be36b63053c1569,Namespace:kube-system,Attempt:0,} returns sandbox id \"3e40e2be7b09c33cfe393c5f0c88bf81d7f75afb3c2ffeeb8f927521acab041c\"" Oct 2 19:55:18.740940 env[1141]: time="2023-10-02T19:55:18.740901409Z" level=info msg="CreateContainer within sandbox \"a3b359528dff8b506b719918835405407e940eac2117aac9c0cb986dfc1f9136\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:55:18.741763 kubelet[1670]: E1002 19:55:18.741743 1670 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:18.744378 env[1141]: time="2023-10-02T19:55:18.744329289Z" level=info msg="CreateContainer within sandbox \"3e40e2be7b09c33cfe393c5f0c88bf81d7f75afb3c2ffeeb8f927521acab041c\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:55:18.746043 env[1141]: time="2023-10-02T19:55:18.746003849Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:80b8b8966aa7d1c422f3be2bfac9c13f,Namespace:kube-system,Attempt:0,} returns sandbox id \"aab025943020498b2a2ccd8d77eda9254976f12a87158ba4b122576609f130df\"" Oct 2 19:55:18.746688 kubelet[1670]: E1002 19:55:18.746665 1670 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:18.748485 env[1141]: time="2023-10-02T19:55:18.748454729Z" level=info msg="CreateContainer within sandbox \"aab025943020498b2a2ccd8d77eda9254976f12a87158ba4b122576609f130df\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:55:18.757489 env[1141]: time="2023-10-02T19:55:18.757380889Z" level=info msg="CreateContainer within sandbox \"a3b359528dff8b506b719918835405407e940eac2117aac9c0cb986dfc1f9136\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"729df8ad2ff9ac25570bd1f7357e71a3a92df61d00592ccb206e4c7f4028d17f\"" Oct 2 19:55:18.761219 env[1141]: time="2023-10-02T19:55:18.761179449Z" level=info msg="StartContainer for \"729df8ad2ff9ac25570bd1f7357e71a3a92df61d00592ccb206e4c7f4028d17f\"" Oct 2 19:55:18.764905 env[1141]: time="2023-10-02T19:55:18.764796209Z" level=info msg="CreateContainer within sandbox \"3e40e2be7b09c33cfe393c5f0c88bf81d7f75afb3c2ffeeb8f927521acab041c\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"6205e59ac0cc2b9472c18b2c0295f95c3b4171eaec197468d1182b8488e9de9c\"" Oct 2 19:55:18.765546 env[1141]: time="2023-10-02T19:55:18.765517969Z" level=info msg="StartContainer for \"6205e59ac0cc2b9472c18b2c0295f95c3b4171eaec197468d1182b8488e9de9c\"" Oct 2 19:55:18.768010 env[1141]: time="2023-10-02T19:55:18.767960049Z" level=info msg="CreateContainer within sandbox \"aab025943020498b2a2ccd8d77eda9254976f12a87158ba4b122576609f130df\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"2aa9a8476ab3a0df60da33b514adccf100b092e662e6bb94d60a52607d4b987a\"" Oct 2 19:55:18.768508 env[1141]: time="2023-10-02T19:55:18.768472129Z" level=info msg="StartContainer for \"2aa9a8476ab3a0df60da33b514adccf100b092e662e6bb94d60a52607d4b987a\"" Oct 2 19:55:18.779066 systemd[1]: Started cri-containerd-729df8ad2ff9ac25570bd1f7357e71a3a92df61d00592ccb206e4c7f4028d17f.scope. Oct 2 19:55:18.794990 systemd[1]: Started cri-containerd-6205e59ac0cc2b9472c18b2c0295f95c3b4171eaec197468d1182b8488e9de9c.scope. Oct 2 19:55:18.809620 systemd[1]: Started cri-containerd-2aa9a8476ab3a0df60da33b514adccf100b092e662e6bb94d60a52607d4b987a.scope. Oct 2 19:55:18.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.819000 audit: BPF prog-id=76 op=LOAD Oct 2 19:55:18.819000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.819000 audit[1837]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=1723 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732396466386164326666396163323535373062643166373335376537 Oct 2 19:55:18.819000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.819000 audit[1837]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=1723 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732396466386164326666396163323535373062643166373335376537 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit: BPF prog-id=77 op=LOAD Oct 2 19:55:18.820000 audit[1837]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=1723 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732396466386164326666396163323535373062643166373335376537 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit: BPF prog-id=78 op=LOAD Oct 2 19:55:18.820000 audit[1837]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=1723 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732396466386164326666396163323535373062643166373335376537 Oct 2 19:55:18.820000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:55:18.820000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { perfmon } for pid=1837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit[1837]: AVC avc: denied { bpf } for pid=1837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.820000 audit: BPF prog-id=79 op=LOAD Oct 2 19:55:18.820000 audit[1837]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=1723 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732396466386164326666396163323535373062643166373335376537 Oct 2 19:55:18.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit: BPF prog-id=80 op=LOAD Oct 2 19:55:18.821000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1855]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=1729 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632303565353961633063633262393437326331386232633032393566 Oct 2 19:55:18.821000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1855]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1729 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632303565353961633063633262393437326331386232633032393566 Oct 2 19:55:18.821000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.821000 audit: BPF prog-id=81 op=LOAD Oct 2 19:55:18.821000 audit[1855]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1729 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632303565353961633063633262393437326331386232633032393566 Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit: BPF prog-id=82 op=LOAD Oct 2 19:55:18.822000 audit[1855]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1729 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.822000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632303565353961633063633262393437326331386232633032393566 Oct 2 19:55:18.822000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:55:18.822000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.822000 audit: BPF prog-id=83 op=LOAD Oct 2 19:55:18.822000 audit[1855]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1729 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.822000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632303565353961633063633262393437326331386232633032393566 Oct 2 19:55:18.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.836000 audit: BPF prog-id=84 op=LOAD Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1726 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613961383437366162336130646636306461333362353134616463 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1726 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613961383437366162336130646636306461333362353134616463 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit: BPF prog-id=85 op=LOAD Oct 2 19:55:18.837000 audit[1857]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1726 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613961383437366162336130646636306461333362353134616463 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.837000 audit: BPF prog-id=86 op=LOAD Oct 2 19:55:18.837000 audit[1857]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1726 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613961383437366162336130646636306461333362353134616463 Oct 2 19:55:18.838000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:55:18.840000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:55:18.840000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.840000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.840000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.840000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.840000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.840000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.840000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.840000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.840000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.840000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:18.840000 audit: BPF prog-id=87 op=LOAD Oct 2 19:55:18.840000 audit[1857]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1726 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:18.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613961383437366162336130646636306461333362353134616463 Oct 2 19:55:18.860011 env[1141]: time="2023-10-02T19:55:18.859948049Z" level=info msg="StartContainer for \"6205e59ac0cc2b9472c18b2c0295f95c3b4171eaec197468d1182b8488e9de9c\" returns successfully" Oct 2 19:55:18.863629 env[1141]: time="2023-10-02T19:55:18.863556369Z" level=info msg="StartContainer for \"729df8ad2ff9ac25570bd1f7357e71a3a92df61d00592ccb206e4c7f4028d17f\" returns successfully" Oct 2 19:55:18.886912 env[1141]: time="2023-10-02T19:55:18.886842369Z" level=info msg="StartContainer for \"2aa9a8476ab3a0df60da33b514adccf100b092e662e6bb94d60a52607d4b987a\" returns successfully" Oct 2 19:55:19.014427 kubelet[1670]: E1002 19:55:19.014298 1670 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.9:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.9:6443: connect: connection refused" interval="1.6s" Oct 2 19:55:19.118103 kubelet[1670]: I1002 19:55:19.118061 1670 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:55:19.643222 kubelet[1670]: E1002 19:55:19.643187 1670 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:19.646695 kubelet[1670]: E1002 19:55:19.646669 1670 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:19.649772 kubelet[1670]: E1002 19:55:19.649745 1670 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:20.650525 kubelet[1670]: E1002 19:55:20.650494 1670 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:20.681000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:20.681000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4004f22060 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:55:20.681000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:55:20.681000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:20.681000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3e a1=40038d2030 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:55:20.681000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:55:20.682000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6782 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:20.682000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3e a1=400392a120 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:55:20.682000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:55:20.687000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6789 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:20.687000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=40038d2c90 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:55:20.687000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:55:20.724000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:20.724000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=5b a1=400992d6c0 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:55:20.724000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:55:20.724000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:20.724000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=5b a1=4003891f20 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:55:20.724000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:55:20.751628 kubelet[1670]: E1002 19:55:20.751601 1670 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Oct 2 19:55:20.837269 kubelet[1670]: I1002 19:55:20.837233 1670 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:55:20.852913 kubelet[1670]: E1002 19:55:20.852887 1670 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:55:20.953846 kubelet[1670]: E1002 19:55:20.953749 1670 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:55:21.054324 kubelet[1670]: E1002 19:55:21.054288 1670 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:55:21.154665 kubelet[1670]: E1002 19:55:21.154624 1670 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:55:21.255166 kubelet[1670]: E1002 19:55:21.255062 1670 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:55:21.355600 kubelet[1670]: E1002 19:55:21.355567 1670 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:55:21.445000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:21.445000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40002c7710 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:55:21.445000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:21.445000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:21.445000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40001cc880 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:55:21.445000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:21.607270 kubelet[1670]: I1002 19:55:21.607227 1670 apiserver.go:52] "Watching apiserver" Oct 2 19:55:21.611860 kubelet[1670]: I1002 19:55:21.611829 1670 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:55:21.635002 kubelet[1670]: I1002 19:55:21.634946 1670 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:55:23.043545 kubelet[1670]: E1002 19:55:23.043497 1670 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:23.640266 systemd[1]: Reloading. Oct 2 19:55:23.654140 kubelet[1670]: E1002 19:55:23.654096 1670 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:23.713513 /usr/lib/systemd/system-generators/torcx-generator[1968]: time="2023-10-02T19:55:23Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:55:23.713544 /usr/lib/systemd/system-generators/torcx-generator[1968]: time="2023-10-02T19:55:23Z" level=info msg="torcx already run" Oct 2 19:55:23.784754 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:55:23.784773 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:55:23.803416 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:55:23.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.862629 kernel: kauditd_printk_skb: 583 callbacks suppressed Oct 2 19:55:23.862698 kernel: audit: type=1400 audit(1696276523.860:694): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.867141 kernel: audit: type=1400 audit(1696276523.861:695): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.867182 kernel: audit: type=1400 audit(1696276523.861:696): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.869871 kernel: audit: type=1400 audit(1696276523.861:697): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.873964 kernel: audit: type=1400 audit(1696276523.861:698): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.874015 kernel: audit: type=1400 audit(1696276523.861:699): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.877915 kernel: audit: type=1400 audit(1696276523.861:700): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.877995 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:55:23.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.879453 kernel: audit: type=1400 audit(1696276523.861:701): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.881868 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:55:23.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.864000 audit: BPF prog-id=88 op=LOAD Oct 2 19:55:23.864000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:55:23.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.866000 audit: BPF prog-id=89 op=LOAD Oct 2 19:55:23.866000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:55:23.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.868000 audit: BPF prog-id=90 op=LOAD Oct 2 19:55:23.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.870000 audit: BPF prog-id=91 op=LOAD Oct 2 19:55:23.870000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:55:23.870000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:55:23.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.873000 audit: BPF prog-id=92 op=LOAD Oct 2 19:55:23.873000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:55:23.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.875000 audit: BPF prog-id=93 op=LOAD Oct 2 19:55:23.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.881000 audit: BPF prog-id=94 op=LOAD Oct 2 19:55:23.881000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:55:23.881000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:55:23.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.882000 audit: BPF prog-id=95 op=LOAD Oct 2 19:55:23.882000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:55:23.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.882000 audit: BPF prog-id=96 op=LOAD Oct 2 19:55:23.882000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:55:23.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.885000 audit: BPF prog-id=97 op=LOAD Oct 2 19:55:23.885000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:55:23.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit: BPF prog-id=98 op=LOAD Oct 2 19:55:23.886000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit: BPF prog-id=99 op=LOAD Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.886000 audit: BPF prog-id=100 op=LOAD Oct 2 19:55:23.886000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:55:23.886000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:55:23.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.887000 audit: BPF prog-id=101 op=LOAD Oct 2 19:55:23.887000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit: BPF prog-id=102 op=LOAD Oct 2 19:55:23.888000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.888000 audit: BPF prog-id=103 op=LOAD Oct 2 19:55:23.888000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:55:23.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.889000 audit: BPF prog-id=104 op=LOAD Oct 2 19:55:23.889000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit: BPF prog-id=105 op=LOAD Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit: BPF prog-id=106 op=LOAD Oct 2 19:55:23.890000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:55:23.890000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.891000 audit: BPF prog-id=107 op=LOAD Oct 2 19:55:23.891000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:55:23.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:23.893000 audit: BPF prog-id=108 op=LOAD Oct 2 19:55:23.893000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:55:23.916817 kubelet[1670]: I1002 19:55:23.916729 1670 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:55:23.916776 systemd[1]: Stopping kubelet.service... Oct 2 19:55:23.942150 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:55:23.942385 systemd[1]: Stopped kubelet.service. Oct 2 19:55:23.941000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:23.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:23.944766 systemd[1]: Started kubelet.service. Oct 2 19:55:24.014484 kubelet[2006]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:55:24.014484 kubelet[2006]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:55:24.014484 kubelet[2006]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:55:24.014829 kubelet[2006]: I1002 19:55:24.014506 2006 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:55:24.020420 kubelet[2006]: I1002 19:55:24.020393 2006 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:55:24.020547 kubelet[2006]: I1002 19:55:24.020536 2006 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:55:24.020884 kubelet[2006]: I1002 19:55:24.020860 2006 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:55:24.022537 kubelet[2006]: I1002 19:55:24.022512 2006 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:55:24.024278 kubelet[2006]: I1002 19:55:24.024167 2006 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:55:24.026651 kubelet[2006]: W1002 19:55:24.026632 2006 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:55:24.027000 audit[2019]: USER_ACCT pid=2019 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:55:24.029210 sudo[2019]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:55:24.028000 audit[2019]: CRED_REFR pid=2019 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:55:24.029525 sudo[2019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:55:24.029930 kubelet[2006]: I1002 19:55:24.029890 2006 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:55:24.030167 kubelet[2006]: I1002 19:55:24.030151 2006 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:55:24.030369 kubelet[2006]: I1002 19:55:24.030269 2006 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:<nil>} {Signal:nodefs.available Operator:LessThan Value:{Quantity:<nil> Percentage:0.1} GracePeriod:0s MinReclaim:<nil>} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity:<nil> Percentage:0.05} GracePeriod:0s MinReclaim:<nil>} {Signal:imagefs.available Operator:LessThan Value:{Quantity:<nil> Percentage:0.15} GracePeriod:0s MinReclaim:<nil>}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:55:24.030369 kubelet[2006]: I1002 19:55:24.030301 2006 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:55:24.030369 kubelet[2006]: I1002 19:55:24.030318 2006 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:55:24.030369 kubelet[2006]: I1002 19:55:24.030358 2006 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:55:24.031000 audit[2019]: USER_START pid=2019 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:55:24.035475 kubelet[2006]: I1002 19:55:24.035381 2006 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:55:24.035475 kubelet[2006]: I1002 19:55:24.035480 2006 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:55:24.035581 kubelet[2006]: I1002 19:55:24.035521 2006 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:55:24.035581 kubelet[2006]: I1002 19:55:24.035543 2006 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:55:24.036490 kubelet[2006]: I1002 19:55:24.036463 2006 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:55:24.042546 kubelet[2006]: I1002 19:55:24.042517 2006 server.go:1168] "Started kubelet" Oct 2 19:55:24.042000 audit[2006]: AVC avc: denied { mac_admin } for pid=2006 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:24.042000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:55:24.042000 audit[2006]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400097d590 a1=400011b740 a2=400097d560 a3=25 items=0 ppid=1 pid=2006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:24.042000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:55:24.043000 audit[2006]: AVC avc: denied { mac_admin } for pid=2006 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:24.043000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:55:24.043000 audit[2006]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40005ac960 a1=400011b758 a2=400097d620 a3=25 items=0 ppid=1 pid=2006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:24.043000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:55:24.044660 kubelet[2006]: I1002 19:55:24.044378 2006 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:55:24.044660 kubelet[2006]: I1002 19:55:24.044420 2006 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:55:24.044660 kubelet[2006]: I1002 19:55:24.044458 2006 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:55:24.054952 kubelet[2006]: E1002 19:55:24.046147 2006 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:55:24.054952 kubelet[2006]: E1002 19:55:24.046190 2006 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:55:24.054952 kubelet[2006]: I1002 19:55:24.047708 2006 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:55:24.054952 kubelet[2006]: I1002 19:55:24.048442 2006 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:55:24.054952 kubelet[2006]: I1002 19:55:24.049555 2006 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:55:24.054952 kubelet[2006]: I1002 19:55:24.049934 2006 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:55:24.054952 kubelet[2006]: I1002 19:55:24.050034 2006 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:55:24.054952 kubelet[2006]: E1002 19:55:24.050453 2006 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:55:24.087870 kubelet[2006]: I1002 19:55:24.087832 2006 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:55:24.088945 kubelet[2006]: I1002 19:55:24.088914 2006 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:55:24.088986 kubelet[2006]: I1002 19:55:24.088951 2006 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:55:24.088986 kubelet[2006]: I1002 19:55:24.088970 2006 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:55:24.089080 kubelet[2006]: E1002 19:55:24.089022 2006 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:55:24.108105 kubelet[2006]: I1002 19:55:24.108065 2006 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:55:24.108105 kubelet[2006]: I1002 19:55:24.108087 2006 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:55:24.108105 kubelet[2006]: I1002 19:55:24.108106 2006 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:55:24.108280 kubelet[2006]: I1002 19:55:24.108265 2006 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:55:24.108280 kubelet[2006]: I1002 19:55:24.108278 2006 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:55:24.108322 kubelet[2006]: I1002 19:55:24.108285 2006 policy_none.go:49] "None policy: Start" Oct 2 19:55:24.108934 kubelet[2006]: I1002 19:55:24.108914 2006 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:55:24.108975 kubelet[2006]: I1002 19:55:24.108945 2006 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:55:24.109081 kubelet[2006]: I1002 19:55:24.109069 2006 state_mem.go:75] "Updated machine memory state" Oct 2 19:55:24.112751 kubelet[2006]: I1002 19:55:24.112728 2006 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:55:24.111000 audit[2006]: AVC avc: denied { mac_admin } for pid=2006 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:24.111000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:55:24.111000 audit[2006]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40012c2b70 a1=4001293fc8 a2=40012c2b40 a3=25 items=0 ppid=1 pid=2006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:24.111000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:55:24.113015 kubelet[2006]: I1002 19:55:24.112790 2006 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:55:24.113015 kubelet[2006]: I1002 19:55:24.112998 2006 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:55:24.154986 kubelet[2006]: I1002 19:55:24.154879 2006 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:55:24.162425 kubelet[2006]: I1002 19:55:24.162313 2006 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Oct 2 19:55:24.162540 kubelet[2006]: I1002 19:55:24.162465 2006 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:55:24.189234 kubelet[2006]: I1002 19:55:24.189174 2006 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:55:24.189357 kubelet[2006]: I1002 19:55:24.189281 2006 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:55:24.189357 kubelet[2006]: I1002 19:55:24.189316 2006 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:55:24.198155 kubelet[2006]: E1002 19:55:24.198123 2006 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 19:55:24.351008 kubelet[2006]: I1002 19:55:24.350944 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:24.351008 kubelet[2006]: I1002 19:55:24.351015 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/24fef87020af50fba838138f9686fc61-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"24fef87020af50fba838138f9686fc61\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:55:24.351162 kubelet[2006]: I1002 19:55:24.351041 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8051ce3f297b52438be36b63053c1569-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"8051ce3f297b52438be36b63053c1569\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:55:24.351162 kubelet[2006]: I1002 19:55:24.351064 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8051ce3f297b52438be36b63053c1569-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"8051ce3f297b52438be36b63053c1569\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:55:24.351162 kubelet[2006]: I1002 19:55:24.351094 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:24.351162 kubelet[2006]: I1002 19:55:24.351118 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:24.351162 kubelet[2006]: I1002 19:55:24.351137 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8051ce3f297b52438be36b63053c1569-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"8051ce3f297b52438be36b63053c1569\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:55:24.351288 kubelet[2006]: I1002 19:55:24.351170 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:24.351288 kubelet[2006]: I1002 19:55:24.351192 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:24.499801 kubelet[2006]: E1002 19:55:24.499693 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:24.500431 kubelet[2006]: E1002 19:55:24.500411 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:24.502269 kubelet[2006]: E1002 19:55:24.502245 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:24.533296 sudo[2019]: pam_unix(sudo:session): session closed for user root Oct 2 19:55:24.531000 audit[2019]: USER_END pid=2019 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:55:24.532000 audit[2019]: CRED_DISP pid=2019 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:55:25.036926 kubelet[2006]: I1002 19:55:25.036891 2006 apiserver.go:52] "Watching apiserver" Oct 2 19:55:25.051060 kubelet[2006]: I1002 19:55:25.051021 2006 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:55:25.055464 kubelet[2006]: I1002 19:55:25.055430 2006 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:55:25.105203 kubelet[2006]: E1002 19:55:25.105171 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:25.142340 kubelet[2006]: E1002 19:55:25.142311 2006 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 19:55:25.143576 kubelet[2006]: E1002 19:55:25.143552 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:25.148555 kubelet[2006]: E1002 19:55:25.148519 2006 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:55:25.149107 kubelet[2006]: E1002 19:55:25.149088 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:25.169220 kubelet[2006]: I1002 19:55:25.169180 2006 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=2.169139032 podCreationTimestamp="2023-10-02 19:55:23 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:55:25.155864881 +0000 UTC m=+1.206707901" watchObservedRunningTime="2023-10-02 19:55:25.169139032 +0000 UTC m=+1.219982052" Oct 2 19:55:25.176520 kubelet[2006]: I1002 19:55:25.176484 2006 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.176440801 podCreationTimestamp="2023-10-02 19:55:24 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:55:25.169381829 +0000 UTC m=+1.220224849" watchObservedRunningTime="2023-10-02 19:55:25.176440801 +0000 UTC m=+1.227283821" Oct 2 19:55:25.185430 kubelet[2006]: I1002 19:55:25.185316 2006 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.185279914 podCreationTimestamp="2023-10-02 19:55:24 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:55:25.176784957 +0000 UTC m=+1.227627977" watchObservedRunningTime="2023-10-02 19:55:25.185279914 +0000 UTC m=+1.236122934" Oct 2 19:55:25.424000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32591 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:55:25.424000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000bd1480 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:55:25.424000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:26.106511 kubelet[2006]: E1002 19:55:26.106481 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:26.107673 kubelet[2006]: E1002 19:55:26.107651 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:27.030647 sudo[1268]: pam_unix(sudo:session): session closed for user root Oct 2 19:55:27.029000 audit[1268]: USER_END pid=1268 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:55:27.029000 audit[1268]: CRED_DISP pid=1268 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:55:27.032818 sshd[1265]: pam_unix(sshd:session): session closed for user core Oct 2 19:55:27.032000 audit[1265]: USER_END pid=1265 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:55:27.033000 audit[1265]: CRED_DISP pid=1265 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:55:27.036252 systemd[1]: sshd@6-10.0.0.9:22-10.0.0.1:52822.service: Deactivated successfully. Oct 2 19:55:27.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.9:22-10.0.0.1:52822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:27.037117 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:55:27.037302 systemd[1]: session-7.scope: Consumed 7.479s CPU time. Oct 2 19:55:27.038001 systemd-logind[1127]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:55:27.039244 systemd-logind[1127]: Removed session 7. Oct 2 19:55:27.107923 kubelet[2006]: E1002 19:55:27.107875 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:27.621744 kubelet[2006]: E1002 19:55:27.621710 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:28.002760 kubelet[2006]: E1002 19:55:28.002662 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:28.109639 kubelet[2006]: E1002 19:55:28.109614 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:31.311728 kubelet[2006]: E1002 19:55:31.311700 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:32.116120 kubelet[2006]: E1002 19:55:32.116089 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:33.118509 kubelet[2006]: E1002 19:55:33.118483 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:34.388801 update_engine[1134]: I1002 19:55:34.388432 1134 update_attempter.cc:505] Updating boot flags... Oct 2 19:55:37.630306 kubelet[2006]: E1002 19:55:37.630276 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:39.066000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:39.068918 kernel: kauditd_printk_skb: 263 callbacks suppressed Oct 2 19:55:39.068995 kernel: audit: type=1400 audit(1696276539.066:953): avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:39.066000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001372c00 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:55:39.077899 kernel: audit: type=1300 audit(1696276539.066:953): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001372c00 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:55:39.066000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:39.090074 kernel: audit: type=1327 audit(1696276539.066:953): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:39.090206 kernel: audit: type=1400 audit(1696276539.072:954): avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:39.072000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:39.072000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400035b3c0 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:55:39.096899 kernel: audit: type=1300 audit(1696276539.072:954): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400035b3c0 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:55:39.097001 kernel: audit: type=1327 audit(1696276539.072:954): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:39.072000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:39.072000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:39.102937 kernel: audit: type=1400 audit(1696276539.072:955): avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:39.103028 kernel: audit: type=1300 audit(1696276539.072:955): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001372c40 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:55:39.072000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001372c40 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:55:39.072000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:39.110042 kernel: audit: type=1327 audit(1696276539.072:955): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:39.110134 kernel: audit: type=1400 audit(1696276539.073:956): avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:39.073000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:39.073000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400035b7c0 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:55:39.073000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:39.221166 kubelet[2006]: I1002 19:55:39.221052 2006 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:55:39.221874 env[1141]: time="2023-10-02T19:55:39.221838134Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:55:39.222289 kubelet[2006]: I1002 19:55:39.222267 2006 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:55:39.238994 kubelet[2006]: I1002 19:55:39.238952 2006 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:55:39.250374 kubelet[2006]: I1002 19:55:39.250328 2006 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:55:39.254096 systemd[1]: Created slice kubepods-besteffort-podbfba2488_9719_4e6c_8a2b_b08291dda2cf.slice. Oct 2 19:55:39.260820 kubelet[2006]: I1002 19:55:39.260770 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/bfba2488-9719-4e6c-8a2b-b08291dda2cf-xtables-lock\") pod \"kube-proxy-x6qhr\" (UID: \"bfba2488-9719-4e6c-8a2b-b08291dda2cf\") " pod="kube-system/kube-proxy-x6qhr" Oct 2 19:55:39.260820 kubelet[2006]: I1002 19:55:39.260822 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-etc-cni-netd\") pod \"cilium-2xtrs\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " pod="kube-system/cilium-2xtrs" Oct 2 19:55:39.260995 kubelet[2006]: I1002 19:55:39.260845 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-xtables-lock\") pod \"cilium-2xtrs\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " pod="kube-system/cilium-2xtrs" Oct 2 19:55:39.260995 kubelet[2006]: I1002 19:55:39.260869 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c1162ff3-3689-4a8d-83dd-2fce27af323b-cilium-config-path\") pod \"cilium-2xtrs\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " pod="kube-system/cilium-2xtrs" Oct 2 19:55:39.260995 kubelet[2006]: I1002 19:55:39.260890 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-z5b8s\" (UniqueName: \"kubernetes.io/projected/c1162ff3-3689-4a8d-83dd-2fce27af323b-kube-api-access-z5b8s\") pod \"cilium-2xtrs\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " pod="kube-system/cilium-2xtrs" Oct 2 19:55:39.260995 kubelet[2006]: I1002 19:55:39.260908 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-cilium-cgroup\") pod \"cilium-2xtrs\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " pod="kube-system/cilium-2xtrs" Oct 2 19:55:39.260995 kubelet[2006]: I1002 19:55:39.260925 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/bfba2488-9719-4e6c-8a2b-b08291dda2cf-kube-proxy\") pod \"kube-proxy-x6qhr\" (UID: \"bfba2488-9719-4e6c-8a2b-b08291dda2cf\") " pod="kube-system/kube-proxy-x6qhr" Oct 2 19:55:39.261124 kubelet[2006]: I1002 19:55:39.260944 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-host-proc-sys-net\") pod \"cilium-2xtrs\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " pod="kube-system/cilium-2xtrs" Oct 2 19:55:39.261124 kubelet[2006]: I1002 19:55:39.260964 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-host-proc-sys-kernel\") pod \"cilium-2xtrs\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " pod="kube-system/cilium-2xtrs" Oct 2 19:55:39.261124 kubelet[2006]: I1002 19:55:39.260984 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/bfba2488-9719-4e6c-8a2b-b08291dda2cf-lib-modules\") pod \"kube-proxy-x6qhr\" (UID: \"bfba2488-9719-4e6c-8a2b-b08291dda2cf\") " pod="kube-system/kube-proxy-x6qhr" Oct 2 19:55:39.261124 kubelet[2006]: I1002 19:55:39.261007 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nttml\" (UniqueName: \"kubernetes.io/projected/bfba2488-9719-4e6c-8a2b-b08291dda2cf-kube-api-access-nttml\") pod \"kube-proxy-x6qhr\" (UID: \"bfba2488-9719-4e6c-8a2b-b08291dda2cf\") " pod="kube-system/kube-proxy-x6qhr" Oct 2 19:55:39.261124 kubelet[2006]: I1002 19:55:39.261026 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c1162ff3-3689-4a8d-83dd-2fce27af323b-clustermesh-secrets\") pod \"cilium-2xtrs\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " pod="kube-system/cilium-2xtrs" Oct 2 19:55:39.261241 kubelet[2006]: I1002 19:55:39.261043 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c1162ff3-3689-4a8d-83dd-2fce27af323b-hubble-tls\") pod \"cilium-2xtrs\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " pod="kube-system/cilium-2xtrs" Oct 2 19:55:39.261241 kubelet[2006]: I1002 19:55:39.261071 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-lib-modules\") pod \"cilium-2xtrs\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " pod="kube-system/cilium-2xtrs" Oct 2 19:55:39.261241 kubelet[2006]: I1002 19:55:39.261089 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-cilium-run\") pod \"cilium-2xtrs\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " pod="kube-system/cilium-2xtrs" Oct 2 19:55:39.261241 kubelet[2006]: I1002 19:55:39.261109 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-hostproc\") pod \"cilium-2xtrs\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " pod="kube-system/cilium-2xtrs" Oct 2 19:55:39.261241 kubelet[2006]: I1002 19:55:39.261128 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-bpf-maps\") pod \"cilium-2xtrs\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " pod="kube-system/cilium-2xtrs" Oct 2 19:55:39.261241 kubelet[2006]: I1002 19:55:39.261150 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-cni-path\") pod \"cilium-2xtrs\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " pod="kube-system/cilium-2xtrs" Oct 2 19:55:39.265994 systemd[1]: Created slice kubepods-burstable-podc1162ff3_3689_4a8d_83dd_2fce27af323b.slice. Oct 2 19:55:39.330345 kubelet[2006]: I1002 19:55:39.330239 2006 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:55:39.342188 systemd[1]: Created slice kubepods-besteffort-pode4a47875_bb55_41ff_acc4_a322d6a28acc.slice. Oct 2 19:55:39.361726 kubelet[2006]: I1002 19:55:39.361689 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kr7sv\" (UniqueName: \"kubernetes.io/projected/e4a47875-bb55-41ff-acc4-a322d6a28acc-kube-api-access-kr7sv\") pod \"cilium-operator-574c4bb98d-vgrnq\" (UID: \"e4a47875-bb55-41ff-acc4-a322d6a28acc\") " pod="kube-system/cilium-operator-574c4bb98d-vgrnq" Oct 2 19:55:39.361878 kubelet[2006]: I1002 19:55:39.361751 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e4a47875-bb55-41ff-acc4-a322d6a28acc-cilium-config-path\") pod \"cilium-operator-574c4bb98d-vgrnq\" (UID: \"e4a47875-bb55-41ff-acc4-a322d6a28acc\") " pod="kube-system/cilium-operator-574c4bb98d-vgrnq" Oct 2 19:55:39.563595 kubelet[2006]: E1002 19:55:39.563561 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:39.564217 env[1141]: time="2023-10-02T19:55:39.564183940Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-x6qhr,Uid:bfba2488-9719-4e6c-8a2b-b08291dda2cf,Namespace:kube-system,Attempt:0,}" Oct 2 19:55:39.570583 kubelet[2006]: E1002 19:55:39.570558 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:39.571151 env[1141]: time="2023-10-02T19:55:39.571112312Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-2xtrs,Uid:c1162ff3-3689-4a8d-83dd-2fce27af323b,Namespace:kube-system,Attempt:0,}" Oct 2 19:55:39.582096 env[1141]: time="2023-10-02T19:55:39.581748590Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:55:39.582096 env[1141]: time="2023-10-02T19:55:39.581789870Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:55:39.582096 env[1141]: time="2023-10-02T19:55:39.581801310Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:55:39.582872 env[1141]: time="2023-10-02T19:55:39.582449068Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ec72cb6b51b24731ba67d7baf222d495f42014ae2a881205a3aa1a130da706ec pid=2108 runtime=io.containerd.runc.v2 Oct 2 19:55:39.586848 env[1141]: time="2023-10-02T19:55:39.586779970Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:55:39.586848 env[1141]: time="2023-10-02T19:55:39.586818410Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:55:39.586848 env[1141]: time="2023-10-02T19:55:39.586829330Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:55:39.588070 env[1141]: time="2023-10-02T19:55:39.587980286Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df pid=2124 runtime=io.containerd.runc.v2 Oct 2 19:55:39.595067 systemd[1]: Started cri-containerd-ec72cb6b51b24731ba67d7baf222d495f42014ae2a881205a3aa1a130da706ec.scope. Oct 2 19:55:39.608976 systemd[1]: Started cri-containerd-ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df.scope. Oct 2 19:55:39.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit: BPF prog-id=109 op=LOAD Oct 2 19:55:39.624000 audit[2127]: AVC avc: denied { bpf } for pid=2127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[2127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2108 pid=2127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.624000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563373263623662353162323437333162613637643762616632323264 Oct 2 19:55:39.624000 audit[2127]: AVC avc: denied { perfmon } for pid=2127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[2127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2108 pid=2127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.624000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563373263623662353162323437333162613637643762616632323264 Oct 2 19:55:39.624000 audit[2127]: AVC avc: denied { bpf } for pid=2127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[2127]: AVC avc: denied { bpf } for pid=2127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[2127]: AVC avc: denied { bpf } for pid=2127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[2127]: AVC avc: denied { perfmon } for pid=2127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[2127]: AVC avc: denied { perfmon } for pid=2127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[2127]: AVC avc: denied { perfmon } for pid=2127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[2127]: AVC avc: denied { perfmon } for pid=2127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[2127]: AVC avc: denied { perfmon } for pid=2127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[2127]: AVC avc: denied { bpf } for pid=2127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit[2127]: AVC avc: denied { bpf } for pid=2127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.624000 audit: BPF prog-id=110 op=LOAD Oct 2 19:55:39.624000 audit[2127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2108 pid=2127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.624000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563373263623662353162323437333162613637643762616632323264 Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { bpf } for pid=2127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { bpf } for pid=2127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { perfmon } for pid=2127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { perfmon } for pid=2127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { perfmon } for pid=2127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { perfmon } for pid=2127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { perfmon } for pid=2127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { bpf } for pid=2127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { bpf } for pid=2127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit: BPF prog-id=111 op=LOAD Oct 2 19:55:39.626000 audit[2127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2108 pid=2127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563373263623662353162323437333162613637643762616632323264 Oct 2 19:55:39.626000 audit: BPF prog-id=111 op=UNLOAD Oct 2 19:55:39.626000 audit: BPF prog-id=110 op=UNLOAD Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { bpf } for pid=2127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { bpf } for pid=2127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { bpf } for pid=2127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { perfmon } for pid=2127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { perfmon } for pid=2127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { perfmon } for pid=2127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { perfmon } for pid=2127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { perfmon } for pid=2127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { bpf } for pid=2127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit[2127]: AVC avc: denied { bpf } for pid=2127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.626000 audit: BPF prog-id=112 op=LOAD Oct 2 19:55:39.626000 audit[2127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2108 pid=2127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563373263623662353162323437333162613637643762616632323264 Oct 2 19:55:39.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.638000 audit: BPF prog-id=113 op=LOAD Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2124 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165333134663439393537623937356635306264363230373165383864 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2124 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165333134663439393537623937356635306264363230373165383864 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit: BPF prog-id=114 op=LOAD Oct 2 19:55:39.639000 audit[2145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2124 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165333134663439393537623937356635306264363230373165383864 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit: BPF prog-id=115 op=LOAD Oct 2 19:55:39.639000 audit[2145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2124 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165333134663439393537623937356635306264363230373165383864 Oct 2 19:55:39.639000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:55:39.639000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { perfmon } for pid=2145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit[2145]: AVC avc: denied { bpf } for pid=2145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.639000 audit: BPF prog-id=116 op=LOAD Oct 2 19:55:39.639000 audit[2145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2124 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165333134663439393537623937356635306264363230373165383864 Oct 2 19:55:39.645229 kubelet[2006]: E1002 19:55:39.645203 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:39.645810 env[1141]: time="2023-10-02T19:55:39.645751657Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-vgrnq,Uid:e4a47875-bb55-41ff-acc4-a322d6a28acc,Namespace:kube-system,Attempt:0,}" Oct 2 19:55:39.649700 env[1141]: time="2023-10-02T19:55:39.649653322Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-x6qhr,Uid:bfba2488-9719-4e6c-8a2b-b08291dda2cf,Namespace:kube-system,Attempt:0,} returns sandbox id \"ec72cb6b51b24731ba67d7baf222d495f42014ae2a881205a3aa1a130da706ec\"" Oct 2 19:55:39.650923 kubelet[2006]: E1002 19:55:39.650490 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:39.653033 env[1141]: time="2023-10-02T19:55:39.652837789Z" level=info msg="CreateContainer within sandbox \"ec72cb6b51b24731ba67d7baf222d495f42014ae2a881205a3aa1a130da706ec\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:55:39.665064 env[1141]: time="2023-10-02T19:55:39.665018301Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-2xtrs,Uid:c1162ff3-3689-4a8d-83dd-2fce27af323b,Namespace:kube-system,Attempt:0,} returns sandbox id \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\"" Oct 2 19:55:39.665652 env[1141]: time="2023-10-02T19:55:39.665545659Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:55:39.665748 env[1141]: time="2023-10-02T19:55:39.665690898Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:55:39.665748 env[1141]: time="2023-10-02T19:55:39.665722938Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:55:39.665944 env[1141]: time="2023-10-02T19:55:39.665910337Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41 pid=2185 runtime=io.containerd.runc.v2 Oct 2 19:55:39.666214 kubelet[2006]: E1002 19:55:39.666195 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:39.667420 env[1141]: time="2023-10-02T19:55:39.667390492Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:55:39.680185 systemd[1]: Started cri-containerd-54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41.scope. Oct 2 19:55:39.706000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.706000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.706000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.706000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.706000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.706000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.706000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.706000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.706000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.706000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.706000 audit: BPF prog-id=117 op=LOAD Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2185 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534643231316466336635646138386336633264313235643030316136 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2185 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534643231316466336635646138386336633264313235643030316136 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit: BPF prog-id=118 op=LOAD Oct 2 19:55:39.707000 audit[2195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2185 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534643231316466336635646138386336633264313235643030316136 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit: BPF prog-id=119 op=LOAD Oct 2 19:55:39.707000 audit[2195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2185 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534643231316466336635646138386336633264313235643030316136 Oct 2 19:55:39.707000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:55:39.707000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.707000 audit: BPF prog-id=120 op=LOAD Oct 2 19:55:39.707000 audit[2195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2185 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534643231316466336635646138386336633264313235643030316136 Oct 2 19:55:39.728057 env[1141]: time="2023-10-02T19:55:39.728011852Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-vgrnq,Uid:e4a47875-bb55-41ff-acc4-a322d6a28acc,Namespace:kube-system,Attempt:0,} returns sandbox id \"54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41\"" Oct 2 19:55:39.729095 kubelet[2006]: E1002 19:55:39.728892 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:39.784142 env[1141]: time="2023-10-02T19:55:39.784096710Z" level=info msg="CreateContainer within sandbox \"ec72cb6b51b24731ba67d7baf222d495f42014ae2a881205a3aa1a130da706ec\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"24e8251ca6b12844688a005c0a67f56c083af521d4fe84a7348e2f31d1ede3e1\"" Oct 2 19:55:39.785008 env[1141]: time="2023-10-02T19:55:39.784977947Z" level=info msg="StartContainer for \"24e8251ca6b12844688a005c0a67f56c083af521d4fe84a7348e2f31d1ede3e1\"" Oct 2 19:55:39.805352 systemd[1]: Started cri-containerd-24e8251ca6b12844688a005c0a67f56c083af521d4fe84a7348e2f31d1ede3e1.scope. Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2108 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234653832353163613662313238343436383861303035633061363766 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit: BPF prog-id=121 op=LOAD Oct 2 19:55:39.832000 audit[2227]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2108 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234653832353163613662313238343436383861303035633061363766 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit: BPF prog-id=122 op=LOAD Oct 2 19:55:39.832000 audit[2227]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2108 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234653832353163613662313238343436383861303035633061363766 Oct 2 19:55:39.832000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:55:39.832000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:39.832000 audit: BPF prog-id=123 op=LOAD Oct 2 19:55:39.832000 audit[2227]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2108 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:39.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234653832353163613662313238343436383861303035633061363766 Oct 2 19:55:39.889791 env[1141]: time="2023-10-02T19:55:39.889724052Z" level=info msg="StartContainer for \"24e8251ca6b12844688a005c0a67f56c083af521d4fe84a7348e2f31d1ede3e1\" returns successfully" Oct 2 19:55:40.003000 audit[2279]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2279 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.003000 audit[2279]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd149e9f0 a2=0 a3=ffff9efe46c0 items=0 ppid=2238 pid=2279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.003000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:55:40.005000 audit[2278]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2278 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.005000 audit[2278]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd500bc80 a2=0 a3=ffff93a9c6c0 items=0 ppid=2238 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.005000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:55:40.006000 audit[2280]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2280 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.006000 audit[2280]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd7404c60 a2=0 a3=ffffb24d76c0 items=0 ppid=2238 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.006000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:55:40.009000 audit[2281]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2281 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.009000 audit[2281]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff0edaf50 a2=0 a3=ffff989b26c0 items=0 ppid=2238 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.009000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:55:40.009000 audit[2282]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2282 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.009000 audit[2282]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffec8d8b70 a2=0 a3=ffff8de156c0 items=0 ppid=2238 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.009000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:55:40.010000 audit[2283]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2283 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.010000 audit[2283]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd1d0fab0 a2=0 a3=ffff9bae86c0 items=0 ppid=2238 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.010000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:55:40.110000 audit[2284]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2284 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.110000 audit[2284]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe0514b10 a2=0 a3=ffff990e36c0 items=0 ppid=2238 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.110000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:55:40.113000 audit[2286]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2286 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.113000 audit[2286]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc2da2280 a2=0 a3=ffff992826c0 items=0 ppid=2238 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.113000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:55:40.117000 audit[2289]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.117000 audit[2289]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff2f34aa0 a2=0 a3=ffff8e1376c0 items=0 ppid=2238 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.117000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:55:40.118000 audit[2290]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.118000 audit[2290]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff7cd2fc0 a2=0 a3=ffffa1aea6c0 items=0 ppid=2238 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.118000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:55:40.120000 audit[2292]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2292 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.120000 audit[2292]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd58a8180 a2=0 a3=ffff9e7996c0 items=0 ppid=2238 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.120000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:55:40.122000 audit[2293]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2293 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.122000 audit[2293]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffffc394d0 a2=0 a3=ffffb310b6c0 items=0 ppid=2238 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.122000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:55:40.125000 audit[2295]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2295 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.125000 audit[2295]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd64df0b0 a2=0 a3=ffff814f46c0 items=0 ppid=2238 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.125000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:55:40.130000 audit[2298]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.130000 audit[2298]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdad678c0 a2=0 a3=ffff9bf1a6c0 items=0 ppid=2238 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.130000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:55:40.135912 kubelet[2006]: E1002 19:55:40.135886 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:40.135000 audit[2299]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2299 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.135000 audit[2299]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff236a560 a2=0 a3=ffffaa6d46c0 items=0 ppid=2238 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.135000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:55:40.139000 audit[2301]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2301 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.139000 audit[2301]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffeccbaed0 a2=0 a3=ffffb38216c0 items=0 ppid=2238 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.139000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:55:40.140000 audit[2302]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.140000 audit[2302]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffc3ebd60 a2=0 a3=ffffb22a56c0 items=0 ppid=2238 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.140000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:55:40.143000 audit[2304]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2304 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.143000 audit[2304]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe2df02b0 a2=0 a3=ffffa3e746c0 items=0 ppid=2238 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.143000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:55:40.147000 audit[2307]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2307 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.147000 audit[2307]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff623d7c0 a2=0 a3=ffffa85a56c0 items=0 ppid=2238 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.147000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:55:40.155000 audit[2310]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2310 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.155000 audit[2310]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd0514280 a2=0 a3=ffff973e16c0 items=0 ppid=2238 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.155000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:55:40.157000 audit[2311]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.157000 audit[2311]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdf2a19a0 a2=0 a3=ffff9c2bf6c0 items=0 ppid=2238 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.157000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:55:40.162000 audit[2313]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2313 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.162000 audit[2313]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffed52bad0 a2=0 a3=ffffad7d26c0 items=0 ppid=2238 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.162000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:55:40.168000 audit[2316]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2316 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.168000 audit[2316]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe1a49920 a2=0 a3=ffffaff7d6c0 items=0 ppid=2238 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.168000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:55:40.175000 audit[2321]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2321 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.175000 audit[2321]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd4489d80 a2=0 a3=ffff9fad36c0 items=0 ppid=2238 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.175000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:55:40.175000 audit[2323]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:40.175000 audit[2323]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffdde5fd20 a2=0 a3=ffff94c3f6c0 items=0 ppid=2238 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.175000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:55:40.190660 kubelet[2006]: I1002 19:55:40.190616 2006 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-x6qhr" podStartSLOduration=1.19054639 podCreationTimestamp="2023-10-02 19:55:39 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:55:40.186883363 +0000 UTC m=+16.237726383" watchObservedRunningTime="2023-10-02 19:55:40.19054639 +0000 UTC m=+16.241389370" Oct 2 19:55:40.196000 audit[2325]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2325 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:55:40.196000 audit[2325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffce271170 a2=0 a3=ffffa15686c0 items=0 ppid=2238 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.196000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:55:40.211000 audit[2325]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2325 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:55:40.211000 audit[2325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffce271170 a2=0 a3=ffffa15686c0 items=0 ppid=2238 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.211000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:55:40.213000 audit[2331]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2331 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.213000 audit[2331]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffde3f42f0 a2=0 a3=ffff8d9056c0 items=0 ppid=2238 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.213000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:55:40.216000 audit[2333]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2333 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.216000 audit[2333]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffffdfa2080 a2=0 a3=ffff80f436c0 items=0 ppid=2238 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.216000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:55:40.220000 audit[2336]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2336 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.220000 audit[2336]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe9509a30 a2=0 a3=ffff7fee26c0 items=0 ppid=2238 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.220000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:55:40.223000 audit[2337]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2337 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.223000 audit[2337]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcab23b60 a2=0 a3=ffffb50f46c0 items=0 ppid=2238 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.223000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:55:40.226000 audit[2339]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2339 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.226000 audit[2339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffeb8e9550 a2=0 a3=ffffb0d8c6c0 items=0 ppid=2238 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.226000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:55:40.227000 audit[2340]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2340 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.227000 audit[2340]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe65ee540 a2=0 a3=ffffa323f6c0 items=0 ppid=2238 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.227000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:55:40.230000 audit[2342]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2342 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.230000 audit[2342]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe16a5520 a2=0 a3=ffffa16456c0 items=0 ppid=2238 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.230000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:55:40.235000 audit[2345]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2345 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.235000 audit[2345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffeffca320 a2=0 a3=ffff868ac6c0 items=0 ppid=2238 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.235000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:55:40.236000 audit[2346]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2346 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.236000 audit[2346]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff5dc8b10 a2=0 a3=ffff99b996c0 items=0 ppid=2238 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.236000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:55:40.239000 audit[2348]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.239000 audit[2348]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffda5cf70 a2=0 a3=ffffb5abe6c0 items=0 ppid=2238 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.239000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:55:40.240000 audit[2349]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2349 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.240000 audit[2349]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe1e044c0 a2=0 a3=ffffba53a6c0 items=0 ppid=2238 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.240000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:55:40.244000 audit[2351]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2351 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.244000 audit[2351]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc544adf0 a2=0 a3=ffffb9a1e6c0 items=0 ppid=2238 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.244000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:55:40.250000 audit[2354]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.250000 audit[2354]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffa7a7210 a2=0 a3=ffffb44ea6c0 items=0 ppid=2238 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.250000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:55:40.256000 audit[2357]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2357 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.256000 audit[2357]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffeb743120 a2=0 a3=ffffa50e76c0 items=0 ppid=2238 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.256000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:55:40.257000 audit[2358]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2358 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.257000 audit[2358]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffeba61bb0 a2=0 a3=ffff87ef06c0 items=0 ppid=2238 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.257000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:55:40.260000 audit[2360]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2360 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.260000 audit[2360]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffd7fc2ee0 a2=0 a3=ffff8d0f76c0 items=0 ppid=2238 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.260000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:55:40.265000 audit[2363]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2363 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.265000 audit[2363]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffe534a8c0 a2=0 a3=ffff917286c0 items=0 ppid=2238 pid=2363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.265000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:55:40.267000 audit[2364]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=2364 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.267000 audit[2364]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd5d54250 a2=0 a3=ffffb827d6c0 items=0 ppid=2238 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.267000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:55:40.271000 audit[2366]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=2366 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.271000 audit[2366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd9550880 a2=0 a3=ffffb9d9e6c0 items=0 ppid=2238 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.271000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:55:40.279000 audit[2369]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=2369 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.279000 audit[2369]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc1e65b70 a2=0 a3=ffff8a55d6c0 items=0 ppid=2238 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.279000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:55:40.281000 audit[2370]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=2370 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.281000 audit[2370]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd8d00bb0 a2=0 a3=ffffaa6a06c0 items=0 ppid=2238 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.281000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:55:40.284000 audit[2372]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2372 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:40.284000 audit[2372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffd3cb7a10 a2=0 a3=ffff858c76c0 items=0 ppid=2238 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.284000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:55:40.288000 audit[2374]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2374 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:55:40.288000 audit[2374]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffe935c420 a2=0 a3=ffff865036c0 items=0 ppid=2238 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.288000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:55:40.288000 audit[2374]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2374 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:55:40.288000 audit[2374]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffe935c420 a2=0 a3=ffff865036c0 items=0 ppid=2238 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:40.288000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:55:43.313099 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount393968313.mount: Deactivated successfully. Oct 2 19:55:44.166112 kubelet[2006]: I1002 19:55:44.166068 2006 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:55:44.166112 kubelet[2006]: I1002 19:55:44.166104 2006 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:55:44.168583 kubelet[2006]: I1002 19:55:44.168480 2006 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:55:44.170010 kubelet[2006]: I1002 19:55:44.169981 2006 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737" size=80665728 Oct 2 19:55:44.170305 env[1141]: time="2023-10-02T19:55:44.170260791Z" level=info msg="RemoveImage \"sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737\"" Oct 2 19:55:44.171391 env[1141]: time="2023-10-02T19:55:44.171328268Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd:3.5.7-0,XXX_unrecognized:[],}" Oct 2 19:55:44.171973 env[1141]: time="2023-10-02T19:55:44.171942986Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,XXX_unrecognized:[],}" Oct 2 19:55:44.172483 env[1141]: time="2023-10-02T19:55:44.172450145Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737,XXX_unrecognized:[],}" Oct 2 19:55:44.227989 env[1141]: time="2023-10-02T19:55:44.227937426Z" level=info msg="RemoveImage \"sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737\" returns successfully" Oct 2 19:55:44.228468 kubelet[2006]: I1002 19:55:44.228439 2006 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108" size=14557471 Oct 2 19:55:44.228732 env[1141]: time="2023-10-02T19:55:44.228704943Z" level=info msg="RemoveImage \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 19:55:44.229819 env[1141]: time="2023-10-02T19:55:44.229785900Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns:v1.10.1,XXX_unrecognized:[],}" Oct 2 19:55:44.230494 env[1141]: time="2023-10-02T19:55:44.230461818Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,XXX_unrecognized:[],}" Oct 2 19:55:44.231074 env[1141]: time="2023-10-02T19:55:44.231048257Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,XXX_unrecognized:[],}" Oct 2 19:55:44.242165 env[1141]: time="2023-10-02T19:55:44.242114345Z" level=info msg="RemoveImage \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\" returns successfully" Oct 2 19:55:44.242558 kubelet[2006]: I1002 19:55:44.242444 2006 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e" size=253553 Oct 2 19:55:44.242804 env[1141]: time="2023-10-02T19:55:44.242758143Z" level=info msg="RemoveImage \"sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e\"" Oct 2 19:55:44.243564 env[1141]: time="2023-10-02T19:55:44.243536501Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause:3.6,XXX_unrecognized:[],}" Oct 2 19:55:44.244167 env[1141]: time="2023-10-02T19:55:44.244138619Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,XXX_unrecognized:[],}" Oct 2 19:55:44.244631 env[1141]: time="2023-10-02T19:55:44.244607658Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,XXX_unrecognized:[],}" Oct 2 19:55:44.246618 env[1141]: time="2023-10-02T19:55:44.246583092Z" level=info msg="RemoveImage \"sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e\" returns successfully" Oct 2 19:55:44.263281 kubelet[2006]: I1002 19:55:44.263255 2006 eviction_manager.go:353] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:55:45.869335 env[1141]: time="2023-10-02T19:55:45.869286080Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:45.871996 env[1141]: time="2023-10-02T19:55:45.871962993Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:45.874029 env[1141]: time="2023-10-02T19:55:45.873994828Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:45.874821 env[1141]: time="2023-10-02T19:55:45.874790546Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 19:55:45.876709 env[1141]: time="2023-10-02T19:55:45.876669141Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:55:45.877778 env[1141]: time="2023-10-02T19:55:45.877745858Z" level=info msg="CreateContainer within sandbox \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:55:45.887193 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2464761824.mount: Deactivated successfully. Oct 2 19:55:45.899557 env[1141]: time="2023-10-02T19:55:45.899493919Z" level=info msg="CreateContainer within sandbox \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766\"" Oct 2 19:55:45.901764 env[1141]: time="2023-10-02T19:55:45.900023558Z" level=info msg="StartContainer for \"fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766\"" Oct 2 19:55:45.920962 systemd[1]: Started cri-containerd-fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766.scope. Oct 2 19:55:45.946064 systemd[1]: cri-containerd-fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766.scope: Deactivated successfully. Oct 2 19:55:46.129934 env[1141]: time="2023-10-02T19:55:46.129813842Z" level=info msg="shim disconnected" id=fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766 Oct 2 19:55:46.129934 env[1141]: time="2023-10-02T19:55:46.129863122Z" level=warning msg="cleaning up after shim disconnected" id=fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766 namespace=k8s.io Oct 2 19:55:46.129934 env[1141]: time="2023-10-02T19:55:46.129872642Z" level=info msg="cleaning up dead shim" Oct 2 19:55:46.145502 env[1141]: time="2023-10-02T19:55:46.145440563Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:55:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2404 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:55:46Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:55:46.145830 env[1141]: time="2023-10-02T19:55:46.145719882Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 19:55:46.145997 env[1141]: time="2023-10-02T19:55:46.145951682Z" level=error msg="Failed to pipe stdout of container \"fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766\"" error="reading from a closed fifo" Oct 2 19:55:46.147926 env[1141]: time="2023-10-02T19:55:46.147888677Z" level=error msg="Failed to pipe stderr of container \"fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766\"" error="reading from a closed fifo" Oct 2 19:55:46.149751 env[1141]: time="2023-10-02T19:55:46.149688552Z" level=error msg="StartContainer for \"fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:55:46.150173 kubelet[2006]: E1002 19:55:46.150131 2006 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766" Oct 2 19:55:46.150490 kubelet[2006]: E1002 19:55:46.150284 2006 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:55:46.150490 kubelet[2006]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:55:46.150490 kubelet[2006]: rm /hostbin/cilium-mount Oct 2 19:55:46.150570 kubelet[2006]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-z5b8s,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:55:46.150570 kubelet[2006]: E1002 19:55:46.150337 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:55:46.164620 kubelet[2006]: E1002 19:55:46.164578 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:46.169212 env[1141]: time="2023-10-02T19:55:46.169167343Z" level=info msg="CreateContainer within sandbox \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:55:46.179325 env[1141]: time="2023-10-02T19:55:46.179252198Z" level=info msg="CreateContainer within sandbox \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586\"" Oct 2 19:55:46.183236 env[1141]: time="2023-10-02T19:55:46.183187748Z" level=info msg="StartContainer for \"2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586\"" Oct 2 19:55:46.199816 systemd[1]: Started cri-containerd-2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586.scope. Oct 2 19:55:46.218554 systemd[1]: cri-containerd-2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586.scope: Deactivated successfully. Oct 2 19:55:46.242133 env[1141]: time="2023-10-02T19:55:46.242076560Z" level=info msg="shim disconnected" id=2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586 Oct 2 19:55:46.242133 env[1141]: time="2023-10-02T19:55:46.242130240Z" level=warning msg="cleaning up after shim disconnected" id=2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586 namespace=k8s.io Oct 2 19:55:46.242482 env[1141]: time="2023-10-02T19:55:46.242142800Z" level=info msg="cleaning up dead shim" Oct 2 19:55:46.251644 env[1141]: time="2023-10-02T19:55:46.251587656Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:55:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2441 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:55:46Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:55:46.251923 env[1141]: time="2023-10-02T19:55:46.251865455Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 19:55:46.256681 env[1141]: time="2023-10-02T19:55:46.256618563Z" level=error msg="Failed to pipe stdout of container \"2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586\"" error="reading from a closed fifo" Oct 2 19:55:46.258622 env[1141]: time="2023-10-02T19:55:46.258571558Z" level=error msg="Failed to pipe stderr of container \"2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586\"" error="reading from a closed fifo" Oct 2 19:55:46.262743 env[1141]: time="2023-10-02T19:55:46.262681908Z" level=error msg="StartContainer for \"2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:55:46.262949 kubelet[2006]: E1002 19:55:46.262927 2006 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586" Oct 2 19:55:46.263052 kubelet[2006]: E1002 19:55:46.263035 2006 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:55:46.263052 kubelet[2006]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:55:46.263052 kubelet[2006]: rm /hostbin/cilium-mount Oct 2 19:55:46.263052 kubelet[2006]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-z5b8s,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:55:46.263312 kubelet[2006]: E1002 19:55:46.263075 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:55:46.883632 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766-rootfs.mount: Deactivated successfully. Oct 2 19:55:47.167190 kubelet[2006]: I1002 19:55:47.166545 2006 scope.go:115] "RemoveContainer" containerID="fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766" Oct 2 19:55:47.167190 kubelet[2006]: I1002 19:55:47.166934 2006 scope.go:115] "RemoveContainer" containerID="fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766" Oct 2 19:55:47.185451 env[1141]: time="2023-10-02T19:55:47.185396534Z" level=info msg="RemoveContainer for \"fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766\"" Oct 2 19:55:47.185803 env[1141]: time="2023-10-02T19:55:47.185763094Z" level=info msg="RemoveContainer for \"fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766\"" Oct 2 19:55:47.185926 env[1141]: time="2023-10-02T19:55:47.185835973Z" level=error msg="RemoveContainer for \"fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766\" failed" error="failed to set removing state for container \"fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766\": container is already in removing state" Oct 2 19:55:47.186140 kubelet[2006]: E1002 19:55:47.186103 2006 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766\": container is already in removing state" containerID="fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766" Oct 2 19:55:47.186209 kubelet[2006]: E1002 19:55:47.186149 2006 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766": container is already in removing state; Skipping pod "cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)" Oct 2 19:55:47.186283 kubelet[2006]: E1002 19:55:47.186222 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:47.186546 kubelet[2006]: E1002 19:55:47.186530 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:55:47.191983 env[1141]: time="2023-10-02T19:55:47.191464920Z" level=info msg="RemoveContainer for \"fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766\" returns successfully" Oct 2 19:55:47.269873 env[1141]: time="2023-10-02T19:55:47.269811055Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:47.271167 env[1141]: time="2023-10-02T19:55:47.271133492Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:47.272867 env[1141]: time="2023-10-02T19:55:47.272833128Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:47.273356 env[1141]: time="2023-10-02T19:55:47.273322047Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 19:55:47.275403 env[1141]: time="2023-10-02T19:55:47.275356242Z" level=info msg="CreateContainer within sandbox \"54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:55:47.286549 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount480413899.mount: Deactivated successfully. Oct 2 19:55:47.291394 env[1141]: time="2023-10-02T19:55:47.291335484Z" level=info msg="CreateContainer within sandbox \"54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a\"" Oct 2 19:55:47.292155 env[1141]: time="2023-10-02T19:55:47.292128523Z" level=info msg="StartContainer for \"b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a\"" Oct 2 19:55:47.309533 systemd[1]: Started cri-containerd-b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a.scope. Oct 2 19:55:47.334046 kernel: kauditd_printk_skb: 369 callbacks suppressed Oct 2 19:55:47.334170 kernel: audit: type=1400 audit(1696276547.331:1068): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.338753 kernel: audit: type=1400 audit(1696276547.331:1069): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.338835 kernel: audit: type=1400 audit(1696276547.331:1070): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.344089 kernel: audit: type=1400 audit(1696276547.331:1071): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.344140 kernel: audit: type=1400 audit(1696276547.331:1072): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.348928 kernel: audit: type=1400 audit(1696276547.331:1073): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.348998 kernel: audit: type=1400 audit(1696276547.331:1074): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.354103 kernel: audit: type=1400 audit(1696276547.331:1075): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.354174 kernel: audit: type=1400 audit(1696276547.331:1076): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.358769 kernel: audit: type=1400 audit(1696276547.332:1077): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.332000 audit: BPF prog-id=124 op=LOAD Oct 2 19:55:47.333000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.333000 audit[2461]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2185 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:47.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233313834633664353030303632646166653665306637313231383565 Oct 2 19:55:47.333000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.333000 audit[2461]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2185 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:47.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233313834633664353030303632646166653665306637313231383565 Oct 2 19:55:47.333000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.333000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.333000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.333000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.333000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.333000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.333000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.333000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.333000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.333000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.333000 audit: BPF prog-id=125 op=LOAD Oct 2 19:55:47.333000 audit[2461]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2185 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:47.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233313834633664353030303632646166653665306637313231383565 Oct 2 19:55:47.334000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.334000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.334000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.334000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.334000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.334000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.334000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.334000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.334000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.334000 audit: BPF prog-id=126 op=LOAD Oct 2 19:55:47.334000 audit[2461]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2185 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:47.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233313834633664353030303632646166653665306637313231383565 Oct 2 19:55:47.338000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:55:47.338000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:55:47.338000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.338000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.338000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.338000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.338000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.338000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.338000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.338000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.338000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.338000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:47.338000 audit: BPF prog-id=127 op=LOAD Oct 2 19:55:47.338000 audit[2461]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2185 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:47.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233313834633664353030303632646166653665306637313231383565 Oct 2 19:55:47.364456 env[1141]: time="2023-10-02T19:55:47.364414272Z" level=info msg="StartContainer for \"b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a\" returns successfully" Oct 2 19:55:47.426000 audit[2472]: AVC avc: denied { map_create } for pid=2472 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c423,c445 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c423,c445 tclass=bpf permissive=0 Oct 2 19:55:47.426000 audit[2472]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=40005bf768 a2=48 a3=0 items=0 ppid=2185 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c423,c445 key=(null) Oct 2 19:55:47.426000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:55:48.175718 kubelet[2006]: E1002 19:55:48.175687 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:48.177726 kubelet[2006]: E1002 19:55:48.177700 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:48.178344 kubelet[2006]: E1002 19:55:48.178324 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:55:48.186931 kubelet[2006]: I1002 19:55:48.186891 2006 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-574c4bb98d-vgrnq" podStartSLOduration=1.642460239 podCreationTimestamp="2023-10-02 19:55:39 +0000 UTC" firstStartedPulling="2023-10-02 19:55:39.729625085 +0000 UTC m=+15.780468105" lastFinishedPulling="2023-10-02 19:55:47.274023885 +0000 UTC m=+23.324866905" observedRunningTime="2023-10-02 19:55:48.18611556 +0000 UTC m=+24.236958580" watchObservedRunningTime="2023-10-02 19:55:48.186859039 +0000 UTC m=+24.237702059" Oct 2 19:55:49.179084 kubelet[2006]: E1002 19:55:49.179054 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:55:49.234336 kubelet[2006]: W1002 19:55:49.234302 2006 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc1162ff3_3689_4a8d_83dd_2fce27af323b.slice/cri-containerd-fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766.scope WatchSource:0}: container "fae3b3fe18dd27c6e035d3175b75800e8f0931c1d0a2467268f6e1bab842b766" in namespace "k8s.io": not found Oct 2 19:55:52.341503 kubelet[2006]: W1002 19:55:52.341469 2006 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc1162ff3_3689_4a8d_83dd_2fce27af323b.slice/cri-containerd-2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586.scope WatchSource:0}: task 2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586 not found: not found Oct 2 19:56:00.089798 kubelet[2006]: E1002 19:56:00.089759 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:00.097787 env[1141]: time="2023-10-02T19:56:00.097625991Z" level=info msg="CreateContainer within sandbox \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:56:00.124239 env[1141]: time="2023-10-02T19:56:00.124160684Z" level=info msg="CreateContainer within sandbox \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f\"" Oct 2 19:56:00.126185 env[1141]: time="2023-10-02T19:56:00.126148682Z" level=info msg="StartContainer for \"849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f\"" Oct 2 19:56:00.149176 systemd[1]: Started cri-containerd-849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f.scope. Oct 2 19:56:00.190623 systemd[1]: cri-containerd-849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f.scope: Deactivated successfully. Oct 2 19:56:00.195304 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f-rootfs.mount: Deactivated successfully. Oct 2 19:56:00.198370 env[1141]: time="2023-10-02T19:56:00.198312168Z" level=info msg="shim disconnected" id=849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f Oct 2 19:56:00.198582 env[1141]: time="2023-10-02T19:56:00.198558488Z" level=warning msg="cleaning up after shim disconnected" id=849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f namespace=k8s.io Oct 2 19:56:00.198665 env[1141]: time="2023-10-02T19:56:00.198650848Z" level=info msg="cleaning up dead shim" Oct 2 19:56:00.208006 env[1141]: time="2023-10-02T19:56:00.207947558Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:56:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2516 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:56:00Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:56:00.208469 env[1141]: time="2023-10-02T19:56:00.208411598Z" level=error msg="copy shim log" error="read /proc/self/fd/63: file already closed" Oct 2 19:56:00.212977 env[1141]: time="2023-10-02T19:56:00.212933873Z" level=error msg="Failed to pipe stdout of container \"849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f\"" error="reading from a closed fifo" Oct 2 19:56:00.213112 env[1141]: time="2023-10-02T19:56:00.212994553Z" level=error msg="Failed to pipe stderr of container \"849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f\"" error="reading from a closed fifo" Oct 2 19:56:00.215021 env[1141]: time="2023-10-02T19:56:00.214966911Z" level=error msg="StartContainer for \"849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:56:00.215309 kubelet[2006]: E1002 19:56:00.215274 2006 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f" Oct 2 19:56:00.215411 kubelet[2006]: E1002 19:56:00.215394 2006 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:56:00.215411 kubelet[2006]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:56:00.215411 kubelet[2006]: rm /hostbin/cilium-mount Oct 2 19:56:00.215411 kubelet[2006]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-z5b8s,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:56:00.215545 kubelet[2006]: E1002 19:56:00.215436 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:56:01.205264 kubelet[2006]: I1002 19:56:01.204928 2006 scope.go:115] "RemoveContainer" containerID="2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586" Oct 2 19:56:01.205264 kubelet[2006]: I1002 19:56:01.205229 2006 scope.go:115] "RemoveContainer" containerID="2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586" Oct 2 19:56:01.208411 env[1141]: time="2023-10-02T19:56:01.208373551Z" level=info msg="RemoveContainer for \"2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586\"" Oct 2 19:56:01.216575 env[1141]: time="2023-10-02T19:56:01.210734709Z" level=info msg="RemoveContainer for \"2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586\" returns successfully" Oct 2 19:56:01.216575 env[1141]: time="2023-10-02T19:56:01.212081907Z" level=info msg="RemoveContainer for \"2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586\"" Oct 2 19:56:01.216575 env[1141]: time="2023-10-02T19:56:01.212124947Z" level=info msg="RemoveContainer for \"2418d1799a40f4901c33dfb73fc59f983eda86424e89b9d95d667241dc485586\" returns successfully" Oct 2 19:56:01.216791 kubelet[2006]: E1002 19:56:01.212301 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:01.216791 kubelet[2006]: E1002 19:56:01.212563 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:56:03.303129 kubelet[2006]: W1002 19:56:03.303090 2006 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc1162ff3_3689_4a8d_83dd_2fce27af323b.slice/cri-containerd-849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f.scope WatchSource:0}: task 849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f not found: not found Oct 2 19:56:13.090047 kubelet[2006]: E1002 19:56:13.090000 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:13.090409 kubelet[2006]: E1002 19:56:13.090220 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:56:14.610951 systemd[1]: Started sshd@7-10.0.0.9:22-10.0.0.1:55358.service. Oct 2 19:56:14.615641 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:56:14.615766 kernel: audit: type=1130 audit(1696276574.609:1087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.9:22-10.0.0.1:55358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:14.609000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.9:22-10.0.0.1:55358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:14.649000 audit[2534]: USER_ACCT pid=2534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:14.651347 sshd[2534]: Accepted publickey for core from 10.0.0.1 port 55358 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:56:14.652980 sshd[2534]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:14.651000 audit[2534]: CRED_ACQ pid=2534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:14.657339 kernel: audit: type=1101 audit(1696276574.649:1088): pid=2534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:14.657433 kernel: audit: type=1103 audit(1696276574.651:1089): pid=2534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:14.657457 kernel: audit: type=1006 audit(1696276574.651:1090): pid=2534 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:56:14.658411 systemd-logind[1127]: New session 8 of user core. Oct 2 19:56:14.658886 systemd[1]: Started session-8.scope. Oct 2 19:56:14.651000 audit[2534]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2aa0310 a2=3 a3=1 items=0 ppid=1 pid=2534 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:14.662664 kernel: audit: type=1300 audit(1696276574.651:1090): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2aa0310 a2=3 a3=1 items=0 ppid=1 pid=2534 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:14.651000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:14.665149 kernel: audit: type=1327 audit(1696276574.651:1090): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:14.665210 kernel: audit: type=1105 audit(1696276574.662:1091): pid=2534 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:14.662000 audit[2534]: USER_START pid=2534 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:14.664000 audit[2536]: CRED_ACQ pid=2536 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:14.673821 kernel: audit: type=1103 audit(1696276574.664:1092): pid=2536 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:14.807516 sshd[2534]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:14.807000 audit[2534]: USER_END pid=2534 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:14.810157 systemd[1]: sshd@7-10.0.0.9:22-10.0.0.1:55358.service: Deactivated successfully. Oct 2 19:56:14.811054 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:56:14.811803 systemd-logind[1127]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:56:14.807000 audit[2534]: CRED_DISP pid=2534 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:14.812449 systemd-logind[1127]: Removed session 8. Oct 2 19:56:14.815094 kernel: audit: type=1106 audit(1696276574.807:1093): pid=2534 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:14.815169 kernel: audit: type=1104 audit(1696276574.807:1094): pid=2534 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:14.807000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.9:22-10.0.0.1:55358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:20.682000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:20.684388 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:56:20.684448 kernel: audit: type=1400 audit(1696276580.682:1096): avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:20.682000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4009c641e0 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:56:20.690905 kernel: audit: type=1300 audit(1696276580.682:1096): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4009c641e0 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:56:20.690972 kernel: audit: type=1327 audit(1696276580.682:1096): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:56:20.682000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:56:20.682000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:20.696947 kernel: audit: type=1400 audit(1696276580.682:1097): avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:20.696983 kernel: audit: type=1300 audit(1696276580.682:1097): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4003ef6300 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:56:20.682000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4003ef6300 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:56:20.682000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:56:20.704719 kernel: audit: type=1327 audit(1696276580.682:1097): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:56:20.704786 kernel: audit: type=1400 audit(1696276580.686:1098): avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6782 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:20.686000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6782 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:20.707653 kernel: audit: type=1300 audit(1696276580.686:1098): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40037d4150 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:56:20.686000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40037d4150 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:56:20.686000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:56:20.714781 kernel: audit: type=1327 audit(1696276580.686:1098): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:56:20.714839 kernel: audit: type=1400 audit(1696276580.687:1099): avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6789 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:20.687000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6789 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:20.687000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400427ac00 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:56:20.687000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:56:20.724000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:20.724000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40041688a0 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:56:20.724000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:56:20.724000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:20.724000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4009e72880 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:56:20.724000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:56:21.447000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:21.447000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012d1e90 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:56:21.447000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:21.447000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:21.447000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002691fe0 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:56:21.447000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:24.090254 kubelet[2006]: E1002 19:56:24.090217 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:24.093005 env[1141]: time="2023-10-02T19:56:24.092567660Z" level=info msg="CreateContainer within sandbox \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:56:24.105434 env[1141]: time="2023-10-02T19:56:24.105275137Z" level=info msg="CreateContainer within sandbox \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27\"" Oct 2 19:56:24.107586 env[1141]: time="2023-10-02T19:56:24.107545496Z" level=info msg="StartContainer for \"b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27\"" Oct 2 19:56:24.127179 systemd[1]: Started cri-containerd-b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27.scope. Oct 2 19:56:24.142866 systemd[1]: cri-containerd-b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27.scope: Deactivated successfully. Oct 2 19:56:24.146635 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27-rootfs.mount: Deactivated successfully. Oct 2 19:56:24.159285 env[1141]: time="2023-10-02T19:56:24.159224925Z" level=info msg="shim disconnected" id=b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27 Oct 2 19:56:24.159285 env[1141]: time="2023-10-02T19:56:24.159276245Z" level=warning msg="cleaning up after shim disconnected" id=b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27 namespace=k8s.io Oct 2 19:56:24.159285 env[1141]: time="2023-10-02T19:56:24.159286685Z" level=info msg="cleaning up dead shim" Oct 2 19:56:24.167627 env[1141]: time="2023-10-02T19:56:24.167554803Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:56:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2575 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:56:24Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:56:24.167896 env[1141]: time="2023-10-02T19:56:24.167846963Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 19:56:24.168133 env[1141]: time="2023-10-02T19:56:24.168025843Z" level=error msg="Failed to pipe stdout of container \"b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27\"" error="reading from a closed fifo" Oct 2 19:56:24.168848 env[1141]: time="2023-10-02T19:56:24.168793843Z" level=error msg="Failed to pipe stderr of container \"b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27\"" error="reading from a closed fifo" Oct 2 19:56:24.170192 env[1141]: time="2023-10-02T19:56:24.170148843Z" level=error msg="StartContainer for \"b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:56:24.170408 kubelet[2006]: E1002 19:56:24.170386 2006 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27" Oct 2 19:56:24.170518 kubelet[2006]: E1002 19:56:24.170503 2006 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:56:24.170518 kubelet[2006]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:56:24.170518 kubelet[2006]: rm /hostbin/cilium-mount Oct 2 19:56:24.170518 kubelet[2006]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-z5b8s,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:56:24.170646 kubelet[2006]: E1002 19:56:24.170543 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:56:24.247725 kubelet[2006]: I1002 19:56:24.247698 2006 scope.go:115] "RemoveContainer" containerID="849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f" Oct 2 19:56:24.248024 kubelet[2006]: I1002 19:56:24.247999 2006 scope.go:115] "RemoveContainer" containerID="849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f" Oct 2 19:56:24.252653 env[1141]: time="2023-10-02T19:56:24.252611425Z" level=info msg="RemoveContainer for \"849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f\"" Oct 2 19:56:24.253318 env[1141]: time="2023-10-02T19:56:24.253288585Z" level=info msg="RemoveContainer for \"849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f\"" Oct 2 19:56:24.253417 env[1141]: time="2023-10-02T19:56:24.253384585Z" level=error msg="RemoveContainer for \"849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f\" failed" error="failed to set removing state for container \"849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f\": container is already in removing state" Oct 2 19:56:24.253557 kubelet[2006]: E1002 19:56:24.253537 2006 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f\": container is already in removing state" containerID="849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f" Oct 2 19:56:24.253611 kubelet[2006]: E1002 19:56:24.253572 2006 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f": container is already in removing state; Skipping pod "cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)" Oct 2 19:56:24.253643 kubelet[2006]: E1002 19:56:24.253636 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:24.253900 kubelet[2006]: E1002 19:56:24.253865 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:56:24.254975 env[1141]: time="2023-10-02T19:56:24.254946664Z" level=info msg="RemoveContainer for \"849b2d99139eeb9e30738dd2406f2da9f708a8d6da87bf0cfbde1b44f154d27f\" returns successfully" Oct 2 19:56:24.812329 systemd[1]: Started sshd@8-10.0.0.9:22-10.0.0.1:47122.service. Oct 2 19:56:24.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.9:22-10.0.0.1:47122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:24.847000 audit[2589]: USER_ACCT pid=2589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:24.849293 sshd[2589]: Accepted publickey for core from 10.0.0.1 port 47122 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:56:24.849000 audit[2589]: CRED_ACQ pid=2589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:24.849000 audit[2589]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc22cdba0 a2=3 a3=1 items=0 ppid=1 pid=2589 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:24.849000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:24.851205 sshd[2589]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:24.855030 systemd-logind[1127]: New session 9 of user core. Oct 2 19:56:24.855853 systemd[1]: Started session-9.scope. Oct 2 19:56:24.857000 audit[2589]: USER_START pid=2589 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:24.859000 audit[2591]: CRED_ACQ pid=2591 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:24.979217 sshd[2589]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:24.978000 audit[2589]: USER_END pid=2589 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:24.978000 audit[2589]: CRED_DISP pid=2589 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:24.981673 systemd[1]: sshd@8-10.0.0.9:22-10.0.0.1:47122.service: Deactivated successfully. Oct 2 19:56:24.980000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.9:22-10.0.0.1:47122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:24.982575 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:56:24.983128 systemd-logind[1127]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:56:24.983787 systemd-logind[1127]: Removed session 9. Oct 2 19:56:27.264654 kubelet[2006]: W1002 19:56:27.264613 2006 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc1162ff3_3689_4a8d_83dd_2fce27af323b.slice/cri-containerd-b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27.scope WatchSource:0}: task b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27 not found: not found Oct 2 19:56:34.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.9:22-10.0.0.1:46902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:34.984092 systemd[1]: Started sshd@9-10.0.0.9:22-10.0.0.1:46902.service. Oct 2 19:56:34.985027 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:56:34.985090 kernel: audit: type=1130 audit(1696276594.982:1113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.9:22-10.0.0.1:46902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:35.018000 audit[2603]: USER_ACCT pid=2603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:35.019937 sshd[2603]: Accepted publickey for core from 10.0.0.1 port 46902 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:56:35.021881 sshd[2603]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:35.020000 audit[2603]: CRED_ACQ pid=2603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:35.026510 kernel: audit: type=1101 audit(1696276595.018:1114): pid=2603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:35.026730 kernel: audit: type=1103 audit(1696276595.020:1115): pid=2603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:35.026756 kernel: audit: type=1006 audit(1696276595.020:1116): pid=2603 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:56:35.020000 audit[2603]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd217d500 a2=3 a3=1 items=0 ppid=1 pid=2603 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:35.030331 systemd-logind[1127]: New session 10 of user core. Oct 2 19:56:35.031338 systemd[1]: Started session-10.scope. Oct 2 19:56:35.032189 kernel: audit: type=1300 audit(1696276595.020:1116): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd217d500 a2=3 a3=1 items=0 ppid=1 pid=2603 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:35.032250 kernel: audit: type=1327 audit(1696276595.020:1116): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:35.020000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:35.034000 audit[2603]: USER_START pid=2603 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:35.035000 audit[2605]: CRED_ACQ pid=2605 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:35.041803 kernel: audit: type=1105 audit(1696276595.034:1117): pid=2603 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:35.041854 kernel: audit: type=1103 audit(1696276595.035:1118): pid=2605 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:35.155315 sshd[2603]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:35.157000 audit[2603]: USER_END pid=2603 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:35.160428 systemd-logind[1127]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:56:35.160675 systemd[1]: sshd@9-10.0.0.9:22-10.0.0.1:46902.service: Deactivated successfully. Oct 2 19:56:35.161599 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:56:35.162221 systemd-logind[1127]: Removed session 10. Oct 2 19:56:35.157000 audit[2603]: CRED_DISP pid=2603 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:35.165923 kernel: audit: type=1106 audit(1696276595.157:1119): pid=2603 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:35.166075 kernel: audit: type=1104 audit(1696276595.157:1120): pid=2603 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:35.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.9:22-10.0.0.1:46902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:37.089917 kubelet[2006]: E1002 19:56:37.089882 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:37.090548 kubelet[2006]: E1002 19:56:37.090530 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:56:39.067000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:39.067000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c12420 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:56:39.067000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:39.072000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:39.072000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000aee660 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:56:39.072000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:39.073000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:39.073000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:39.073000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001b8b6c0 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:56:39.073000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:39.073000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000aee6a0 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:56:39.073000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:44.090430 kubelet[2006]: E1002 19:56:44.090394 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:45.090147 kubelet[2006]: E1002 19:56:45.090107 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:45.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.9:22-10.0.0.1:41068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:45.160676 systemd[1]: Started sshd@10-10.0.0.9:22-10.0.0.1:41068.service. Oct 2 19:56:45.161569 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:56:45.161639 kernel: audit: type=1130 audit(1696276605.159:1126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.9:22-10.0.0.1:41068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:45.197000 audit[2619]: USER_ACCT pid=2619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:45.199347 sshd[2619]: Accepted publickey for core from 10.0.0.1 port 41068 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:56:45.200451 sshd[2619]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:45.198000 audit[2619]: CRED_ACQ pid=2619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:45.204944 systemd[1]: Started session-11.scope. Oct 2 19:56:45.205268 systemd-logind[1127]: New session 11 of user core. Oct 2 19:56:45.205447 kernel: audit: type=1101 audit(1696276605.197:1127): pid=2619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:45.205479 kernel: audit: type=1103 audit(1696276605.198:1128): pid=2619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:45.205505 kernel: audit: type=1006 audit(1696276605.198:1129): pid=2619 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:56:45.198000 audit[2619]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcdfac770 a2=3 a3=1 items=0 ppid=1 pid=2619 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:45.210892 kernel: audit: type=1300 audit(1696276605.198:1129): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcdfac770 a2=3 a3=1 items=0 ppid=1 pid=2619 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:45.210964 kernel: audit: type=1327 audit(1696276605.198:1129): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:45.198000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:45.207000 audit[2619]: USER_START pid=2619 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:45.215294 kernel: audit: type=1105 audit(1696276605.207:1130): pid=2619 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:45.215410 kernel: audit: type=1103 audit(1696276605.209:1131): pid=2621 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:45.209000 audit[2621]: CRED_ACQ pid=2621 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:45.342630 sshd[2619]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:45.342000 audit[2619]: USER_END pid=2619 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:45.346155 systemd[1]: sshd@10-10.0.0.9:22-10.0.0.1:41068.service: Deactivated successfully. Oct 2 19:56:45.347143 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:56:45.347768 systemd-logind[1127]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:56:45.342000 audit[2619]: CRED_DISP pid=2619 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:45.348904 systemd-logind[1127]: Removed session 11. Oct 2 19:56:45.350714 kernel: audit: type=1106 audit(1696276605.342:1132): pid=2619 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:45.350821 kernel: audit: type=1104 audit(1696276605.342:1133): pid=2619 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:45.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.9:22-10.0.0.1:41068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:46.089972 kubelet[2006]: E1002 19:56:46.089935 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:49.090298 kubelet[2006]: E1002 19:56:49.090263 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:49.090921 kubelet[2006]: E1002 19:56:49.090899 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:56:55.090114 kubelet[2006]: E1002 19:56:55.090076 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:56:55.345000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.9:22-10.0.0.1:39876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:55.346619 systemd[1]: Started sshd@11-10.0.0.9:22-10.0.0.1:39876.service. Oct 2 19:56:55.347705 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:56:55.347746 kernel: audit: type=1130 audit(1696276615.345:1135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.9:22-10.0.0.1:39876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:55.381000 audit[2633]: USER_ACCT pid=2633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:55.383489 sshd[2633]: Accepted publickey for core from 10.0.0.1 port 39876 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:56:55.384681 sshd[2633]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:55.382000 audit[2633]: CRED_ACQ pid=2633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:55.388189 systemd-logind[1127]: New session 12 of user core. Oct 2 19:56:55.388800 kernel: audit: type=1101 audit(1696276615.381:1136): pid=2633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:55.388830 kernel: audit: type=1103 audit(1696276615.382:1137): pid=2633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:55.388848 kernel: audit: type=1006 audit(1696276615.382:1138): pid=2633 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:56:55.389033 systemd[1]: Started session-12.scope. Oct 2 19:56:55.390624 kernel: audit: type=1300 audit(1696276615.382:1138): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc27d80c0 a2=3 a3=1 items=0 ppid=1 pid=2633 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:55.382000 audit[2633]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc27d80c0 a2=3 a3=1 items=0 ppid=1 pid=2633 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:55.382000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:55.394693 kernel: audit: type=1327 audit(1696276615.382:1138): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:55.394727 kernel: audit: type=1105 audit(1696276615.389:1139): pid=2633 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:55.389000 audit[2633]: USER_START pid=2633 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:55.392000 audit[2635]: CRED_ACQ pid=2635 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:55.400805 kernel: audit: type=1103 audit(1696276615.392:1140): pid=2635 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:55.509620 sshd[2633]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:55.509000 audit[2633]: USER_END pid=2633 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:55.512398 systemd[1]: sshd@11-10.0.0.9:22-10.0.0.1:39876.service: Deactivated successfully. Oct 2 19:56:55.513199 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:56:55.513804 systemd-logind[1127]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:56:55.509000 audit[2633]: CRED_DISP pid=2633 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:55.514572 systemd-logind[1127]: Removed session 12. Oct 2 19:56:55.516891 kernel: audit: type=1106 audit(1696276615.509:1141): pid=2633 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:55.516954 kernel: audit: type=1104 audit(1696276615.509:1142): pid=2633 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:56:55.511000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.9:22-10.0.0.1:39876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:56.090950 kubelet[2006]: E1002 19:56:56.090917 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:57:01.387815 update_engine[1134]: I1002 19:57:01.387764 1134 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 19:57:01.387815 update_engine[1134]: I1002 19:57:01.387799 1134 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 19:57:01.388443 update_engine[1134]: I1002 19:57:01.388427 1134 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 19:57:01.388790 update_engine[1134]: I1002 19:57:01.388762 1134 omaha_request_params.cc:62] Current group set to lts Oct 2 19:57:01.388906 update_engine[1134]: I1002 19:57:01.388895 1134 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 19:57:01.388906 update_engine[1134]: I1002 19:57:01.388902 1134 update_attempter.cc:638] Scheduling an action processor start. Oct 2 19:57:01.388973 update_engine[1134]: I1002 19:57:01.388917 1134 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 19:57:01.388973 update_engine[1134]: I1002 19:57:01.388939 1134 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 19:57:01.389689 update_engine[1134]: I1002 19:57:01.389662 1134 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 19:57:01.389689 update_engine[1134]: I1002 19:57:01.389688 1134 omaha_request_action.cc:269] Request: <?xml version="1.0" encoding="UTF-8"?> Oct 2 19:57:01.389689 update_engine[1134]: <request protocol="3.0" version="update_engine-0.4.10" updaterversion="update_engine-0.4.10" installsource="scheduler" ismachine="1"> Oct 2 19:57:01.389689 update_engine[1134]: <os version="Chateau" platform="CoreOS" sp="3510.3.0_aarch64"></os> Oct 2 19:57:01.389689 update_engine[1134]: <app appid="{e96281a6-d1af-4bde-9a0a-97b76e56dc57}" version="3510.3.0" track="lts" bootid="{d50e355c-0bf1-40cb-82f2-b41abf7009f8}" oem="" oemversion="" alephversion="3510.3.0" machineid="f60fd92c9ea6440382d6166dbcf304c7" machinealias="" lang="en-US" board="arm64-usr" hardware_class="" delta_okay="false" > Oct 2 19:57:01.389689 update_engine[1134]: <ping active="1"></ping> Oct 2 19:57:01.389689 update_engine[1134]: <updatecheck></updatecheck> Oct 2 19:57:01.389689 update_engine[1134]: <event eventtype="3" eventresult="2" previousversion="0.0.0.0"></event> Oct 2 19:57:01.389689 update_engine[1134]: </app> Oct 2 19:57:01.389689 update_engine[1134]: </request> Oct 2 19:57:01.389981 update_engine[1134]: I1002 19:57:01.389693 1134 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 19:57:01.390006 locksmithd[1169]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 19:57:01.390694 update_engine[1134]: I1002 19:57:01.390677 1134 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 19:57:01.390840 update_engine[1134]: I1002 19:57:01.390827 1134 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 19:57:02.090029 kubelet[2006]: E1002 19:57:02.089999 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:57:02.090612 kubelet[2006]: E1002 19:57:02.090589 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:57:02.543533 update_engine[1134]: I1002 19:57:02.543473 1134 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 19:57:02.543852 update_engine[1134]: I1002 19:57:02.543749 1134 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 19:57:02.543939 update_engine[1134]: I1002 19:57:02.543926 1134 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 19:57:02.846405 update_engine[1134]: I1002 19:57:02.846282 1134 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 19:57:02.847868 update_engine[1134]: I1002 19:57:02.847836 1134 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 19:57:02.847868 update_engine[1134]: I1002 19:57:02.847859 1134 omaha_request_action.cc:619] Omaha request response: <?xml version="1.0" encoding="UTF-8"?> Oct 2 19:57:02.847868 update_engine[1134]: <response protocol="3.0" server="nebraska"><daystart elapsed_seconds="0"></daystart><app appid="{e96281a6-d1af-4bde-9a0a-97b76e56dc57}" status="ok"><ping status="ok"></ping><updatecheck status="noupdate"><urls></urls></updatecheck><event status="ok"></event></app></response> Oct 2 19:57:02.855500 update_engine[1134]: I1002 19:57:02.855471 1134 omaha_request_action.cc:409] No update. Oct 2 19:57:02.855500 update_engine[1134]: I1002 19:57:02.855501 1134 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 19:57:02.855500 update_engine[1134]: I1002 19:57:02.855508 1134 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 19:57:02.855624 update_engine[1134]: I1002 19:57:02.855512 1134 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 19:57:02.855624 update_engine[1134]: I1002 19:57:02.855515 1134 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 19:57:02.855624 update_engine[1134]: I1002 19:57:02.855520 1134 update_attempter.cc:302] Processing Done. Oct 2 19:57:02.855624 update_engine[1134]: I1002 19:57:02.855530 1134 update_attempter.cc:338] No update. Oct 2 19:57:02.855624 update_engine[1134]: I1002 19:57:02.855540 1134 update_check_scheduler.cc:74] Next update check in 49m16s Oct 2 19:57:02.855877 locksmithd[1169]: LastCheckedTime=1696276622 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 19:57:05.514187 systemd[1]: Started sshd@12-10.0.0.9:22-10.0.0.1:44178.service. Oct 2 19:57:05.512000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.9:22-10.0.0.1:44178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:05.517950 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:05.518029 kernel: audit: type=1130 audit(1696276625.512:1144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.9:22-10.0.0.1:44178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:05.550000 audit[2647]: USER_ACCT pid=2647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:05.551815 sshd[2647]: Accepted publickey for core from 10.0.0.1 port 44178 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:57:05.553312 sshd[2647]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:05.551000 audit[2647]: CRED_ACQ pid=2647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:05.558220 kernel: audit: type=1101 audit(1696276625.550:1145): pid=2647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:05.558279 kernel: audit: type=1103 audit(1696276625.551:1146): pid=2647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:05.558300 kernel: audit: type=1006 audit(1696276625.551:1147): pid=2647 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:57:05.557968 systemd[1]: Started session-13.scope. Oct 2 19:57:05.558726 systemd-logind[1127]: New session 13 of user core. Oct 2 19:57:05.551000 audit[2647]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb296400 a2=3 a3=1 items=0 ppid=1 pid=2647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:05.562594 kernel: audit: type=1300 audit(1696276625.551:1147): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb296400 a2=3 a3=1 items=0 ppid=1 pid=2647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:05.562656 kernel: audit: type=1327 audit(1696276625.551:1147): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:05.551000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:05.562000 audit[2647]: USER_START pid=2647 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:05.567233 kernel: audit: type=1105 audit(1696276625.562:1148): pid=2647 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:05.567286 kernel: audit: type=1103 audit(1696276625.564:1149): pid=2649 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:05.564000 audit[2649]: CRED_ACQ pid=2649 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:05.689845 sshd[2647]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:05.689000 audit[2647]: USER_END pid=2647 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:05.693072 systemd[1]: sshd@12-10.0.0.9:22-10.0.0.1:44178.service: Deactivated successfully. Oct 2 19:57:05.693951 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:57:05.694952 systemd-logind[1127]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:57:05.689000 audit[2647]: CRED_DISP pid=2647 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:05.696502 systemd-logind[1127]: Removed session 13. Oct 2 19:57:05.697801 kernel: audit: type=1106 audit(1696276625.689:1150): pid=2647 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:05.697865 kernel: audit: type=1104 audit(1696276625.689:1151): pid=2647 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:05.692000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.9:22-10.0.0.1:44178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:15.089801 kubelet[2006]: E1002 19:57:15.089750 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:57:15.091935 env[1141]: time="2023-10-02T19:57:15.091883122Z" level=info msg="CreateContainer within sandbox \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:57:15.104143 env[1141]: time="2023-10-02T19:57:15.104091674Z" level=info msg="CreateContainer within sandbox \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89\"" Oct 2 19:57:15.104535 env[1141]: time="2023-10-02T19:57:15.104502635Z" level=info msg="StartContainer for \"332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89\"" Oct 2 19:57:15.124933 systemd[1]: Started cri-containerd-332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89.scope. Oct 2 19:57:15.148583 systemd[1]: cri-containerd-332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89.scope: Deactivated successfully. Oct 2 19:57:15.153027 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89-rootfs.mount: Deactivated successfully. Oct 2 19:57:15.163565 env[1141]: time="2023-10-02T19:57:15.163482709Z" level=info msg="shim disconnected" id=332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89 Oct 2 19:57:15.163565 env[1141]: time="2023-10-02T19:57:15.163567390Z" level=warning msg="cleaning up after shim disconnected" id=332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89 namespace=k8s.io Oct 2 19:57:15.163785 env[1141]: time="2023-10-02T19:57:15.163578550Z" level=info msg="cleaning up dead shim" Oct 2 19:57:15.172198 env[1141]: time="2023-10-02T19:57:15.171992572Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:57:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2687 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:57:15Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:57:15.172616 env[1141]: time="2023-10-02T19:57:15.172554453Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 19:57:15.172954 env[1141]: time="2023-10-02T19:57:15.172907134Z" level=error msg="Failed to pipe stdout of container \"332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89\"" error="reading from a closed fifo" Oct 2 19:57:15.173016 env[1141]: time="2023-10-02T19:57:15.172962974Z" level=error msg="Failed to pipe stderr of container \"332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89\"" error="reading from a closed fifo" Oct 2 19:57:15.175666 env[1141]: time="2023-10-02T19:57:15.175617301Z" level=error msg="StartContainer for \"332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:57:15.176358 kubelet[2006]: E1002 19:57:15.175986 2006 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89" Oct 2 19:57:15.176358 kubelet[2006]: E1002 19:57:15.176083 2006 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:57:15.176358 kubelet[2006]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:57:15.176358 kubelet[2006]: rm /hostbin/cilium-mount Oct 2 19:57:15.176358 kubelet[2006]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-z5b8s,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:57:15.176358 kubelet[2006]: E1002 19:57:15.176123 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:57:15.335319 kubelet[2006]: I1002 19:57:15.335283 2006 scope.go:115] "RemoveContainer" containerID="b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27" Oct 2 19:57:15.335737 kubelet[2006]: I1002 19:57:15.335706 2006 scope.go:115] "RemoveContainer" containerID="b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27" Oct 2 19:57:15.336956 env[1141]: time="2023-10-02T19:57:15.336903403Z" level=info msg="RemoveContainer for \"b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27\"" Oct 2 19:57:15.337446 env[1141]: time="2023-10-02T19:57:15.337411644Z" level=info msg="RemoveContainer for \"b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27\"" Oct 2 19:57:15.337649 env[1141]: time="2023-10-02T19:57:15.337606725Z" level=error msg="RemoveContainer for \"b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27\" failed" error="failed to set removing state for container \"b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27\": container is already in removing state" Oct 2 19:57:15.337835 kubelet[2006]: E1002 19:57:15.337820 2006 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27\": container is already in removing state" containerID="b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27" Oct 2 19:57:15.337898 kubelet[2006]: E1002 19:57:15.337860 2006 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27": container is already in removing state; Skipping pod "cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)" Oct 2 19:57:15.337939 kubelet[2006]: E1002 19:57:15.337926 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:57:15.338341 kubelet[2006]: E1002 19:57:15.338212 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:57:15.342030 env[1141]: time="2023-10-02T19:57:15.341951856Z" level=info msg="RemoveContainer for \"b443500be645b15f6899f54cf9c75bb998e5e2f26e71914eaeae12143ecb5c27\" returns successfully" Oct 2 19:57:15.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.9:22-10.0.0.1:37234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:15.693822 systemd[1]: Started sshd@13-10.0.0.9:22-10.0.0.1:37234.service. Oct 2 19:57:15.694729 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:15.694797 kernel: audit: type=1130 audit(1696276635.692:1153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.9:22-10.0.0.1:37234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:15.731000 audit[2701]: USER_ACCT pid=2701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:15.733429 sshd[2701]: Accepted publickey for core from 10.0.0.1 port 37234 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:57:15.734605 sshd[2701]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:15.732000 audit[2701]: CRED_ACQ pid=2701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:15.739630 systemd[1]: Started session-14.scope. Oct 2 19:57:15.739674 systemd-logind[1127]: New session 14 of user core. Oct 2 19:57:15.741980 kernel: audit: type=1101 audit(1696276635.731:1154): pid=2701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:15.742055 kernel: audit: type=1103 audit(1696276635.732:1155): pid=2701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:15.742078 kernel: audit: type=1006 audit(1696276635.732:1156): pid=2701 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:57:15.732000 audit[2701]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffde8ae20 a2=3 a3=1 items=0 ppid=1 pid=2701 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:15.749626 kernel: audit: type=1300 audit(1696276635.732:1156): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffde8ae20 a2=3 a3=1 items=0 ppid=1 pid=2701 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:15.749717 kernel: audit: type=1327 audit(1696276635.732:1156): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:15.732000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:15.742000 audit[2701]: USER_START pid=2701 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:15.756091 kernel: audit: type=1105 audit(1696276635.742:1157): pid=2701 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:15.756173 kernel: audit: type=1103 audit(1696276635.744:1158): pid=2703 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:15.744000 audit[2703]: CRED_ACQ pid=2703 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:15.883427 sshd[2701]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:15.883000 audit[2701]: USER_END pid=2701 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:15.886018 systemd[1]: sshd@13-10.0.0.9:22-10.0.0.1:37234.service: Deactivated successfully. Oct 2 19:57:15.887117 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:57:15.887651 systemd-logind[1127]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:57:15.888250 systemd-logind[1127]: Removed session 14. Oct 2 19:57:15.883000 audit[2701]: CRED_DISP pid=2701 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:15.891164 kernel: audit: type=1106 audit(1696276635.883:1159): pid=2701 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:15.891223 kernel: audit: type=1104 audit(1696276635.883:1160): pid=2701 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:15.885000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.9:22-10.0.0.1:37234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:18.267847 kubelet[2006]: W1002 19:57:18.267800 2006 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc1162ff3_3689_4a8d_83dd_2fce27af323b.slice/cri-containerd-332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89.scope WatchSource:0}: task 332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89 not found: not found Oct 2 19:57:20.683000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:20.683000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:20.683000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400f4d3770 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:57:20.683000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400f1f1100 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:57:20.683000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:57:20.683000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:57:20.687000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6782 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:20.687000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c23db30 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:57:20.687000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:57:20.689000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6789 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:20.689000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400b97b5f0 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:57:20.689000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:57:20.725000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:20.730383 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:57:20.730459 kernel: audit: type=1400 audit(1696276640.725:1166): avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:20.730496 kernel: audit: type=1300 audit(1696276640.725:1166): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c5af3e0 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:57:20.725000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c5af3e0 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:57:20.725000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:57:20.737501 kernel: audit: type=1327 audit(1696276640.725:1166): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:57:20.737547 kernel: audit: type=1400 audit(1696276640.725:1167): avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:20.725000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:20.725000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400f281800 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:57:20.744166 kernel: audit: type=1300 audit(1696276640.725:1167): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400f281800 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:57:20.744227 kernel: audit: type=1327 audit(1696276640.725:1167): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:57:20.725000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:57:21.447000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:21.447000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001373e40 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:57:21.455999 kernel: audit: type=1400 audit(1696276641.447:1168): avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:21.456050 kernel: audit: type=1300 audit(1696276641.447:1168): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001373e40 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:57:21.456071 kernel: audit: type=1327 audit(1696276641.447:1168): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:21.447000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:21.447000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:21.462107 kernel: audit: type=1400 audit(1696276641.447:1169): avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:21.447000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001805d70 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:57:21.447000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:24.114356 kubelet[2006]: E1002 19:57:24.114316 2006 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:57:24.146606 kubelet[2006]: E1002 19:57:24.146573 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:25.888771 systemd[1]: Started sshd@14-10.0.0.9:22-10.0.0.1:50228.service. Oct 2 19:57:25.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.9:22-10.0.0.1:50228 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:25.892662 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:57:25.892741 kernel: audit: type=1130 audit(1696276645.887:1170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.9:22-10.0.0.1:50228 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:25.920000 audit[2717]: USER_ACCT pid=2717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:25.921651 sshd[2717]: Accepted publickey for core from 10.0.0.1 port 50228 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:57:25.922673 sshd[2717]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:25.920000 audit[2717]: CRED_ACQ pid=2717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:25.927413 kernel: audit: type=1101 audit(1696276645.920:1171): pid=2717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:25.927462 kernel: audit: type=1103 audit(1696276645.920:1172): pid=2717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:25.929565 kernel: audit: type=1006 audit(1696276645.921:1173): pid=2717 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:57:25.921000 audit[2717]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec252740 a2=3 a3=1 items=0 ppid=1 pid=2717 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:25.932193 systemd[1]: Started session-15.scope. Oct 2 19:57:25.932903 kernel: audit: type=1300 audit(1696276645.921:1173): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec252740 a2=3 a3=1 items=0 ppid=1 pid=2717 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:25.932948 systemd-logind[1127]: New session 15 of user core. Oct 2 19:57:25.921000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:25.934419 kernel: audit: type=1327 audit(1696276645.921:1173): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:25.935000 audit[2717]: USER_START pid=2717 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:25.937000 audit[2719]: CRED_ACQ pid=2719 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:25.943398 kernel: audit: type=1105 audit(1696276645.935:1174): pid=2717 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:25.943457 kernel: audit: type=1103 audit(1696276645.937:1175): pid=2719 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:26.050847 sshd[2717]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:26.050000 audit[2717]: USER_END pid=2717 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:26.053459 systemd[1]: sshd@14-10.0.0.9:22-10.0.0.1:50228.service: Deactivated successfully. Oct 2 19:57:26.054253 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:57:26.050000 audit[2717]: CRED_DISP pid=2717 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:26.058336 kernel: audit: type=1106 audit(1696276646.050:1176): pid=2717 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:26.058435 kernel: audit: type=1104 audit(1696276646.050:1177): pid=2717 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:26.058398 systemd-logind[1127]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:57:26.050000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.9:22-10.0.0.1:50228 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:26.059312 systemd-logind[1127]: Removed session 15. Oct 2 19:57:27.090130 kubelet[2006]: E1002 19:57:27.090093 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:57:27.090511 kubelet[2006]: E1002 19:57:27.090331 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:57:29.147540 kubelet[2006]: E1002 19:57:29.147507 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:34.148376 kubelet[2006]: E1002 19:57:34.148336 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:36.055413 systemd[1]: Started sshd@15-10.0.0.9:22-10.0.0.1:34106.service. Oct 2 19:57:36.054000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.9:22-10.0.0.1:34106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:36.056501 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:36.056568 kernel: audit: type=1130 audit(1696276656.054:1179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.9:22-10.0.0.1:34106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:36.090122 sshd[2731]: Accepted publickey for core from 10.0.0.1 port 34106 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:57:36.088000 audit[2731]: USER_ACCT pid=2731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:36.092620 sshd[2731]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:36.090000 audit[2731]: CRED_ACQ pid=2731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:36.096370 kernel: audit: type=1101 audit(1696276656.088:1180): pid=2731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:36.096440 kernel: audit: type=1103 audit(1696276656.090:1181): pid=2731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:36.096476 kernel: audit: type=1006 audit(1696276656.090:1182): pid=2731 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:57:36.090000 audit[2731]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd932fff0 a2=3 a3=1 items=0 ppid=1 pid=2731 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:36.103410 kernel: audit: type=1300 audit(1696276656.090:1182): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd932fff0 a2=3 a3=1 items=0 ppid=1 pid=2731 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:36.103501 kernel: audit: type=1327 audit(1696276656.090:1182): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:36.090000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:36.101778 systemd[1]: Started session-16.scope. Oct 2 19:57:36.103070 systemd-logind[1127]: New session 16 of user core. Oct 2 19:57:36.106000 audit[2731]: USER_START pid=2731 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:36.108000 audit[2733]: CRED_ACQ pid=2733 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:36.114194 kernel: audit: type=1105 audit(1696276656.106:1183): pid=2731 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:36.114286 kernel: audit: type=1103 audit(1696276656.108:1184): pid=2733 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:36.223801 sshd[2731]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:36.224000 audit[2731]: USER_END pid=2731 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:36.227294 systemd[1]: sshd@15-10.0.0.9:22-10.0.0.1:34106.service: Deactivated successfully. Oct 2 19:57:36.228107 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:57:36.224000 audit[2731]: CRED_DISP pid=2731 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:36.229740 systemd-logind[1127]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:57:36.230609 systemd-logind[1127]: Removed session 16. Oct 2 19:57:36.232261 kernel: audit: type=1106 audit(1696276656.224:1185): pid=2731 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:36.232329 kernel: audit: type=1104 audit(1696276656.224:1186): pid=2731 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:36.226000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.9:22-10.0.0.1:34106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:39.068000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:39.068000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40024b22e0 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:57:39.068000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:39.073000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:39.073000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a07f40 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:57:39.073000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:39.077000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:39.077000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a07fa0 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:57:39.077000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:39.077000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:39.077000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a07fc0 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:57:39.077000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:39.149235 kubelet[2006]: E1002 19:57:39.149209 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:40.090981 kubelet[2006]: E1002 19:57:40.090913 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:57:40.091262 kubelet[2006]: E1002 19:57:40.091225 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:57:44.150601 kubelet[2006]: E1002 19:57:44.150573 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:46.226000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.9:22-10.0.0.1:57528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:46.228095 systemd[1]: Started sshd@16-10.0.0.9:22-10.0.0.1:57528.service. Oct 2 19:57:46.229587 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:57:46.229654 kernel: audit: type=1130 audit(1696276666.226:1192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.9:22-10.0.0.1:57528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:46.293000 audit[2747]: USER_ACCT pid=2747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:46.295958 sshd[2747]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:46.297128 sshd[2747]: Accepted publickey for core from 10.0.0.1 port 57528 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:57:46.294000 audit[2747]: CRED_ACQ pid=2747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:46.299428 systemd-logind[1127]: New session 17 of user core. Oct 2 19:57:46.300330 systemd[1]: Started session-17.scope. Oct 2 19:57:46.301048 kernel: audit: type=1101 audit(1696276666.293:1193): pid=2747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:46.301097 kernel: audit: type=1103 audit(1696276666.294:1194): pid=2747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:46.301124 kernel: audit: type=1006 audit(1696276666.294:1195): pid=2747 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:57:46.294000 audit[2747]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcda84c50 a2=3 a3=1 items=0 ppid=1 pid=2747 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:46.306528 kernel: audit: type=1300 audit(1696276666.294:1195): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcda84c50 a2=3 a3=1 items=0 ppid=1 pid=2747 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:46.306594 kernel: audit: type=1327 audit(1696276666.294:1195): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:46.294000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:46.302000 audit[2747]: USER_START pid=2747 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:46.310950 kernel: audit: type=1105 audit(1696276666.302:1196): pid=2747 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:46.311002 kernel: audit: type=1103 audit(1696276666.304:1197): pid=2749 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:46.304000 audit[2749]: CRED_ACQ pid=2749 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:46.421002 sshd[2747]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:46.428872 kernel: audit: type=1106 audit(1696276666.420:1198): pid=2747 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:46.428976 kernel: audit: type=1104 audit(1696276666.420:1199): pid=2747 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:46.420000 audit[2747]: USER_END pid=2747 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:46.420000 audit[2747]: CRED_DISP pid=2747 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:46.427695 systemd[1]: sshd@16-10.0.0.9:22-10.0.0.1:57528.service: Deactivated successfully. Oct 2 19:57:46.428445 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:57:46.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.9:22-10.0.0.1:57528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:46.430615 systemd-logind[1127]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:57:46.431000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.9:22-10.0.0.1:57536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:46.433236 systemd[1]: Started sshd@17-10.0.0.9:22-10.0.0.1:57536.service. Oct 2 19:57:46.433791 systemd-logind[1127]: Removed session 17. Oct 2 19:57:46.466000 audit[2761]: USER_ACCT pid=2761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:46.467902 sshd[2761]: Accepted publickey for core from 10.0.0.1 port 57536 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:57:46.467000 audit[2761]: CRED_ACQ pid=2761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:46.467000 audit[2761]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff436270 a2=3 a3=1 items=0 ppid=1 pid=2761 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:46.467000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:46.469495 sshd[2761]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:46.472797 systemd-logind[1127]: New session 18 of user core. Oct 2 19:57:46.473961 systemd[1]: Started session-18.scope. Oct 2 19:57:46.476000 audit[2761]: USER_START pid=2761 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:46.477000 audit[2763]: CRED_ACQ pid=2763 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:47.200953 sshd[2761]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:47.201377 systemd[1]: Started sshd@18-10.0.0.9:22-10.0.0.1:57548.service. Oct 2 19:57:47.200000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.9:22-10.0.0.1:57548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:47.204000 audit[2761]: USER_END pid=2761 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:47.204000 audit[2761]: CRED_DISP pid=2761 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:47.208459 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:57:47.209204 systemd-logind[1127]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:57:47.209355 systemd[1]: sshd@17-10.0.0.9:22-10.0.0.1:57536.service: Deactivated successfully. Oct 2 19:57:47.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.9:22-10.0.0.1:57536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:47.212868 systemd-logind[1127]: Removed session 18. Oct 2 19:57:47.250000 audit[2772]: USER_ACCT pid=2772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:47.252252 sshd[2772]: Accepted publickey for core from 10.0.0.1 port 57548 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:57:47.251000 audit[2772]: CRED_ACQ pid=2772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:47.251000 audit[2772]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4282e90 a2=3 a3=1 items=0 ppid=1 pid=2772 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:47.251000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:47.253582 sshd[2772]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:47.257144 systemd-logind[1127]: New session 19 of user core. Oct 2 19:57:47.258042 systemd[1]: Started session-19.scope. Oct 2 19:57:47.260000 audit[2772]: USER_START pid=2772 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:47.263000 audit[2776]: CRED_ACQ pid=2776 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:47.389771 sshd[2772]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:47.389000 audit[2772]: USER_END pid=2772 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:47.389000 audit[2772]: CRED_DISP pid=2772 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:47.393265 systemd[1]: sshd@18-10.0.0.9:22-10.0.0.1:57548.service: Deactivated successfully. Oct 2 19:57:47.392000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.9:22-10.0.0.1:57548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:47.394004 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:57:47.394563 systemd-logind[1127]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:57:47.395174 systemd-logind[1127]: Removed session 19. Oct 2 19:57:49.155430 kubelet[2006]: E1002 19:57:49.151880 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:51.090204 kubelet[2006]: E1002 19:57:51.090168 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:57:51.090576 kubelet[2006]: E1002 19:57:51.090451 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:57:52.089890 kubelet[2006]: E1002 19:57:52.089849 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:57:53.090346 kubelet[2006]: E1002 19:57:53.090299 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:57:54.153114 kubelet[2006]: E1002 19:57:54.152981 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:55.090072 kubelet[2006]: E1002 19:57:55.090035 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:57:57.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.9:22-10.0.0.1:60882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:57.394565 systemd[1]: Started sshd@19-10.0.0.9:22-10.0.0.1:60882.service. Oct 2 19:57:57.398232 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:57:57.398319 kernel: audit: type=1130 audit(1696276677.393:1219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.9:22-10.0.0.1:60882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:57.426000 audit[2787]: USER_ACCT pid=2787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:57.427970 sshd[2787]: Accepted publickey for core from 10.0.0.1 port 60882 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:57:57.429146 sshd[2787]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:57.427000 audit[2787]: CRED_ACQ pid=2787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:57.433948 kernel: audit: type=1101 audit(1696276677.426:1220): pid=2787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:57.434061 kernel: audit: type=1103 audit(1696276677.427:1221): pid=2787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:57.434100 kernel: audit: type=1006 audit(1696276677.427:1222): pid=2787 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:57:57.433302 systemd[1]: Started session-20.scope. Oct 2 19:57:57.433629 systemd-logind[1127]: New session 20 of user core. Oct 2 19:57:57.427000 audit[2787]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6376960 a2=3 a3=1 items=0 ppid=1 pid=2787 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:57.438782 kernel: audit: type=1300 audit(1696276677.427:1222): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6376960 a2=3 a3=1 items=0 ppid=1 pid=2787 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:57.427000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:57.440160 kernel: audit: type=1327 audit(1696276677.427:1222): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:57.440222 kernel: audit: type=1105 audit(1696276677.436:1223): pid=2787 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:57.436000 audit[2787]: USER_START pid=2787 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:57.437000 audit[2789]: CRED_ACQ pid=2789 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:57.446403 kernel: audit: type=1103 audit(1696276677.437:1224): pid=2789 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:57.551934 sshd[2787]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:57.551000 audit[2787]: USER_END pid=2787 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:57.554794 systemd[1]: sshd@19-10.0.0.9:22-10.0.0.1:60882.service: Deactivated successfully. Oct 2 19:57:57.555524 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:57:57.556181 systemd-logind[1127]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:57:57.551000 audit[2787]: CRED_DISP pid=2787 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:57.557052 systemd-logind[1127]: Removed session 20. Oct 2 19:57:57.559379 kernel: audit: type=1106 audit(1696276677.551:1225): pid=2787 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:57.559440 kernel: audit: type=1104 audit(1696276677.551:1226): pid=2787 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:57:57.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.9:22-10.0.0.1:60882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:59.153961 kubelet[2006]: E1002 19:57:59.153928 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:02.090122 kubelet[2006]: E1002 19:58:02.090086 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:58:02.090467 kubelet[2006]: E1002 19:58:02.090340 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:58:03.090664 kubelet[2006]: E1002 19:58:03.090628 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:58:04.155088 kubelet[2006]: E1002 19:58:04.155050 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:07.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.9:22-10.0.0.1:34718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:07.556288 systemd[1]: Started sshd@20-10.0.0.9:22-10.0.0.1:34718.service. Oct 2 19:58:07.559726 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:07.559798 kernel: audit: type=1130 audit(1696276687.555:1228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.9:22-10.0.0.1:34718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:07.588000 audit[2800]: USER_ACCT pid=2800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:07.589942 sshd[2800]: Accepted publickey for core from 10.0.0.1 port 34718 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:58:07.591528 sshd[2800]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:07.589000 audit[2800]: CRED_ACQ pid=2800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:07.595677 kernel: audit: type=1101 audit(1696276687.588:1229): pid=2800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:07.595739 kernel: audit: type=1103 audit(1696276687.589:1230): pid=2800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:07.595769 kernel: audit: type=1006 audit(1696276687.589:1231): pid=2800 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:58:07.595354 systemd-logind[1127]: New session 21 of user core. Oct 2 19:58:07.595842 systemd[1]: Started session-21.scope. Oct 2 19:58:07.589000 audit[2800]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0359000 a2=3 a3=1 items=0 ppid=1 pid=2800 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:07.600424 kernel: audit: type=1300 audit(1696276687.589:1231): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0359000 a2=3 a3=1 items=0 ppid=1 pid=2800 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:07.600520 kernel: audit: type=1327 audit(1696276687.589:1231): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:07.589000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:07.599000 audit[2800]: USER_START pid=2800 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:07.604868 kernel: audit: type=1105 audit(1696276687.599:1232): pid=2800 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:07.601000 audit[2802]: CRED_ACQ pid=2802 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:07.607670 kernel: audit: type=1103 audit(1696276687.601:1233): pid=2802 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:07.709847 sshd[2800]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:07.709000 audit[2800]: USER_END pid=2800 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:07.712203 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:58:07.712787 systemd[1]: sshd@20-10.0.0.9:22-10.0.0.1:34718.service: Deactivated successfully. Oct 2 19:58:07.713721 systemd-logind[1127]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:58:07.714296 systemd-logind[1127]: Removed session 21. Oct 2 19:58:07.709000 audit[2800]: CRED_DISP pid=2800 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:07.717269 kernel: audit: type=1106 audit(1696276687.709:1234): pid=2800 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:07.717349 kernel: audit: type=1104 audit(1696276687.709:1235): pid=2800 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:07.711000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.9:22-10.0.0.1:34718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:09.156088 kubelet[2006]: E1002 19:58:09.156052 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:14.156721 kubelet[2006]: E1002 19:58:14.156692 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:15.092903 kubelet[2006]: E1002 19:58:15.092867 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:58:15.093325 kubelet[2006]: E1002 19:58:15.093308 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:58:17.714156 systemd[1]: Started sshd@21-10.0.0.9:22-10.0.0.1:38772.service. Oct 2 19:58:17.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.9:22-10.0.0.1:38772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:17.715017 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:17.715066 kernel: audit: type=1130 audit(1696276697.712:1237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.9:22-10.0.0.1:38772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:17.746000 audit[2815]: USER_ACCT pid=2815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:17.748224 sshd[2815]: Accepted publickey for core from 10.0.0.1 port 38772 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:58:17.749431 sshd[2815]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:17.747000 audit[2815]: CRED_ACQ pid=2815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:17.754893 kernel: audit: type=1101 audit(1696276697.746:1238): pid=2815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:17.754969 kernel: audit: type=1103 audit(1696276697.747:1239): pid=2815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:17.754989 kernel: audit: type=1006 audit(1696276697.747:1240): pid=2815 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:58:17.756162 systemd[1]: Started session-22.scope. Oct 2 19:58:17.756627 systemd-logind[1127]: New session 22 of user core. Oct 2 19:58:17.747000 audit[2815]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca314350 a2=3 a3=1 items=0 ppid=1 pid=2815 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:17.760905 kernel: audit: type=1300 audit(1696276697.747:1240): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca314350 a2=3 a3=1 items=0 ppid=1 pid=2815 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:17.747000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:17.763395 kernel: audit: type=1327 audit(1696276697.747:1240): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:17.759000 audit[2815]: USER_START pid=2815 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:17.768018 kernel: audit: type=1105 audit(1696276697.759:1241): pid=2815 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:17.768139 kernel: audit: type=1103 audit(1696276697.761:1242): pid=2817 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:17.761000 audit[2817]: CRED_ACQ pid=2817 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:17.879250 sshd[2815]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:17.878000 audit[2815]: USER_END pid=2815 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:17.882121 systemd[1]: sshd@21-10.0.0.9:22-10.0.0.1:38772.service: Deactivated successfully. Oct 2 19:58:17.882869 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:58:17.878000 audit[2815]: CRED_DISP pid=2815 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:17.883583 systemd-logind[1127]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:58:17.884375 systemd-logind[1127]: Removed session 22. Oct 2 19:58:17.886366 kernel: audit: type=1106 audit(1696276697.878:1243): pid=2815 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:17.886433 kernel: audit: type=1104 audit(1696276697.878:1244): pid=2815 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:17.878000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.9:22-10.0.0.1:38772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:19.157890 kubelet[2006]: E1002 19:58:19.157844 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:20.684000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:20.684000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400fa8d380 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:58:20.684000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:58:20.684000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:20.684000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40085ff080 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:58:20.684000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:58:20.687000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6782 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:20.687000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400fa8d3e0 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:58:20.687000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:58:20.690000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6789 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:20.690000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400fa8d410 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:58:20.690000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:58:20.726000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:20.726000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40085ff220 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:58:20.726000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:58:20.726000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:20.726000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400fa8d500 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:58:20.726000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:58:21.448000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:21.448000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400271e6e0 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:58:21.448000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:21.448000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:21.448000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001c20b10 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:58:21.448000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:23.089903 kubelet[2006]: E1002 19:58:23.089865 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:58:24.159310 kubelet[2006]: E1002 19:58:24.159277 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:26.090309 kubelet[2006]: E1002 19:58:26.090278 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:58:26.091300 kubelet[2006]: E1002 19:58:26.091272 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:58:27.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.9:22-10.0.0.1:41612 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:27.884358 systemd[1]: Started sshd@22-10.0.0.9:22-10.0.0.1:41612.service. Oct 2 19:58:27.885649 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:58:27.885721 kernel: audit: type=1130 audit(1696276707.883:1254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.9:22-10.0.0.1:41612 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:27.915000 audit[2830]: USER_ACCT pid=2830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:27.917658 sshd[2830]: Accepted publickey for core from 10.0.0.1 port 41612 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:58:27.918990 sshd[2830]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:27.917000 audit[2830]: CRED_ACQ pid=2830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:27.923684 kernel: audit: type=1101 audit(1696276707.915:1255): pid=2830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:27.923750 kernel: audit: type=1103 audit(1696276707.917:1256): pid=2830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:27.922909 systemd-logind[1127]: New session 23 of user core. Oct 2 19:58:27.923397 systemd[1]: Started session-23.scope. Oct 2 19:58:27.925591 kernel: audit: type=1006 audit(1696276707.917:1257): pid=2830 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:58:27.925664 kernel: audit: type=1300 audit(1696276707.917:1257): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce0e94d0 a2=3 a3=1 items=0 ppid=1 pid=2830 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:27.917000 audit[2830]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce0e94d0 a2=3 a3=1 items=0 ppid=1 pid=2830 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:27.917000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:27.929919 kernel: audit: type=1327 audit(1696276707.917:1257): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:27.929971 kernel: audit: type=1105 audit(1696276707.926:1258): pid=2830 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:27.926000 audit[2830]: USER_START pid=2830 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:27.927000 audit[2832]: CRED_ACQ pid=2832 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:27.935996 kernel: audit: type=1103 audit(1696276707.927:1259): pid=2832 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:28.037492 sshd[2830]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:28.036000 audit[2830]: USER_END pid=2830 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:28.040085 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:58:28.040702 systemd-logind[1127]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:58:28.040800 systemd[1]: sshd@22-10.0.0.9:22-10.0.0.1:41612.service: Deactivated successfully. Oct 2 19:58:28.041884 systemd-logind[1127]: Removed session 23. Oct 2 19:58:28.037000 audit[2830]: CRED_DISP pid=2830 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:28.044560 kernel: audit: type=1106 audit(1696276708.036:1260): pid=2830 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:28.044615 kernel: audit: type=1104 audit(1696276708.037:1261): pid=2830 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:28.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.9:22-10.0.0.1:41612 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:29.160043 kubelet[2006]: E1002 19:58:29.160002 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:34.161208 kubelet[2006]: E1002 19:58:34.161167 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:37.089739 kubelet[2006]: E1002 19:58:37.089699 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:58:37.092049 env[1141]: time="2023-10-02T19:58:37.091736642Z" level=info msg="CreateContainer within sandbox \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:58:37.106489 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount734966961.mount: Deactivated successfully. Oct 2 19:58:37.109172 env[1141]: time="2023-10-02T19:58:37.109112651Z" level=info msg="CreateContainer within sandbox \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"eed57abbd6c1d7988e275dcf37b572008e8c221b2b210e7f65954b22642a7774\"" Oct 2 19:58:37.110881 env[1141]: time="2023-10-02T19:58:37.110049178Z" level=info msg="StartContainer for \"eed57abbd6c1d7988e275dcf37b572008e8c221b2b210e7f65954b22642a7774\"" Oct 2 19:58:37.130181 systemd[1]: Started cri-containerd-eed57abbd6c1d7988e275dcf37b572008e8c221b2b210e7f65954b22642a7774.scope. Oct 2 19:58:37.156182 systemd[1]: cri-containerd-eed57abbd6c1d7988e275dcf37b572008e8c221b2b210e7f65954b22642a7774.scope: Deactivated successfully. Oct 2 19:58:37.160422 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-eed57abbd6c1d7988e275dcf37b572008e8c221b2b210e7f65954b22642a7774-rootfs.mount: Deactivated successfully. Oct 2 19:58:37.166732 env[1141]: time="2023-10-02T19:58:37.166675599Z" level=info msg="shim disconnected" id=eed57abbd6c1d7988e275dcf37b572008e8c221b2b210e7f65954b22642a7774 Oct 2 19:58:37.166732 env[1141]: time="2023-10-02T19:58:37.166726119Z" level=warning msg="cleaning up after shim disconnected" id=eed57abbd6c1d7988e275dcf37b572008e8c221b2b210e7f65954b22642a7774 namespace=k8s.io Oct 2 19:58:37.166913 env[1141]: time="2023-10-02T19:58:37.166737199Z" level=info msg="cleaning up dead shim" Oct 2 19:58:37.179323 env[1141]: time="2023-10-02T19:58:37.179265212Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:58:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2867 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:58:37Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/eed57abbd6c1d7988e275dcf37b572008e8c221b2b210e7f65954b22642a7774/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:58:37.179581 env[1141]: time="2023-10-02T19:58:37.179521814Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 19:58:37.179821 env[1141]: time="2023-10-02T19:58:37.179776296Z" level=error msg="Failed to pipe stderr of container \"eed57abbd6c1d7988e275dcf37b572008e8c221b2b210e7f65954b22642a7774\"" error="reading from a closed fifo" Oct 2 19:58:37.179947 env[1141]: time="2023-10-02T19:58:37.179907657Z" level=error msg="Failed to pipe stdout of container \"eed57abbd6c1d7988e275dcf37b572008e8c221b2b210e7f65954b22642a7774\"" error="reading from a closed fifo" Oct 2 19:58:37.181355 env[1141]: time="2023-10-02T19:58:37.181305067Z" level=error msg="StartContainer for \"eed57abbd6c1d7988e275dcf37b572008e8c221b2b210e7f65954b22642a7774\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:58:37.181616 kubelet[2006]: E1002 19:58:37.181582 2006 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="eed57abbd6c1d7988e275dcf37b572008e8c221b2b210e7f65954b22642a7774" Oct 2 19:58:37.181702 kubelet[2006]: E1002 19:58:37.181690 2006 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:58:37.181702 kubelet[2006]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:58:37.181702 kubelet[2006]: rm /hostbin/cilium-mount Oct 2 19:58:37.181702 kubelet[2006]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-z5b8s,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:58:37.181840 kubelet[2006]: E1002 19:58:37.181733 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:58:37.483425 kubelet[2006]: I1002 19:58:37.483338 2006 scope.go:115] "RemoveContainer" containerID="332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89" Oct 2 19:58:37.483709 kubelet[2006]: I1002 19:58:37.483674 2006 scope.go:115] "RemoveContainer" containerID="332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89" Oct 2 19:58:37.485176 env[1141]: time="2023-10-02T19:58:37.485057164Z" level=info msg="RemoveContainer for \"332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89\"" Oct 2 19:58:37.485176 env[1141]: time="2023-10-02T19:58:37.484827362Z" level=info msg="RemoveContainer for \"332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89\"" Oct 2 19:58:37.485320 env[1141]: time="2023-10-02T19:58:37.485276485Z" level=error msg="RemoveContainer for \"332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89\" failed" error="failed to set removing state for container \"332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89\": container is already in removing state" Oct 2 19:58:37.485519 kubelet[2006]: E1002 19:58:37.485480 2006 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89\": container is already in removing state" containerID="332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89" Oct 2 19:58:37.485519 kubelet[2006]: I1002 19:58:37.485516 2006 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89} err="rpc error: code = Unknown desc = failed to set removing state for container \"332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89\": container is already in removing state" Oct 2 19:58:37.488184 env[1141]: time="2023-10-02T19:58:37.488151147Z" level=info msg="RemoveContainer for \"332a305429d9c5c433e1f9f587fc828f7241a8fd1bc31e9acbbd53892f9d4f89\" returns successfully" Oct 2 19:58:37.488446 kubelet[2006]: E1002 19:58:37.488415 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:58:37.488681 kubelet[2006]: E1002 19:58:37.488669 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:58:38.045927 systemd[1]: Started sshd@23-10.0.0.9:22-10.0.0.1:45028.service. Oct 2 19:58:38.044000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.9:22-10.0.0.1:45028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:38.047018 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:38.047103 kernel: audit: type=1130 audit(1696276718.044:1263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.9:22-10.0.0.1:45028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:38.080000 audit[2881]: USER_ACCT pid=2881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:38.082389 sshd[2881]: Accepted publickey for core from 10.0.0.1 port 45028 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:58:38.083661 sshd[2881]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:38.081000 audit[2881]: CRED_ACQ pid=2881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:38.091005 kernel: audit: type=1101 audit(1696276718.080:1264): pid=2881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:38.091073 kernel: audit: type=1103 audit(1696276718.081:1265): pid=2881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:38.091096 kernel: audit: type=1006 audit(1696276718.081:1266): pid=2881 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:58:38.092516 systemd[1]: Started session-24.scope. Oct 2 19:58:38.081000 audit[2881]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5805340 a2=3 a3=1 items=0 ppid=1 pid=2881 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:38.093079 systemd-logind[1127]: New session 24 of user core. Oct 2 19:58:38.095999 kernel: audit: type=1300 audit(1696276718.081:1266): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5805340 a2=3 a3=1 items=0 ppid=1 pid=2881 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:38.081000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:38.097259 kernel: audit: type=1327 audit(1696276718.081:1266): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:38.104000 audit[2881]: USER_START pid=2881 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:38.108000 audit[2883]: CRED_ACQ pid=2883 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:38.113292 kernel: audit: type=1105 audit(1696276718.104:1267): pid=2881 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:38.113391 kernel: audit: type=1103 audit(1696276718.108:1268): pid=2883 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:38.225720 sshd[2881]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:38.225000 audit[2881]: USER_END pid=2881 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:38.225000 audit[2881]: CRED_DISP pid=2881 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:38.230656 systemd[1]: sshd@23-10.0.0.9:22-10.0.0.1:45028.service: Deactivated successfully. Oct 2 19:58:38.231410 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:58:38.232397 systemd-logind[1127]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:58:38.233241 kernel: audit: type=1106 audit(1696276718.225:1269): pid=2881 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:38.233306 kernel: audit: type=1104 audit(1696276718.225:1270): pid=2881 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:38.229000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.9:22-10.0.0.1:45028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:38.233600 systemd-logind[1127]: Removed session 24. Oct 2 19:58:39.068000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:39.068000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400271f9c0 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:58:39.068000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:39.074000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:39.074000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400111baa0 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:58:39.074000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:39.077000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:39.077000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002690c20 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:58:39.077000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:39.077000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:39.077000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400271f9e0 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:58:39.077000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:39.162143 kubelet[2006]: E1002 19:58:39.162097 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:40.271769 kubelet[2006]: W1002 19:58:40.271728 2006 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc1162ff3_3689_4a8d_83dd_2fce27af323b.slice/cri-containerd-eed57abbd6c1d7988e275dcf37b572008e8c221b2b210e7f65954b22642a7774.scope WatchSource:0}: task eed57abbd6c1d7988e275dcf37b572008e8c221b2b210e7f65954b22642a7774 not found: not found Oct 2 19:58:44.163940 kubelet[2006]: E1002 19:58:44.163877 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:48.230323 systemd[1]: Started sshd@24-10.0.0.9:22-10.0.0.1:48988.service. Oct 2 19:58:48.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.9:22-10.0.0.1:48988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:48.231513 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:58:48.231547 kernel: audit: type=1130 audit(1696276728.229:1276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.9:22-10.0.0.1:48988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:48.261000 audit[2896]: USER_ACCT pid=2896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:48.263075 sshd[2896]: Accepted publickey for core from 10.0.0.1 port 48988 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:58:48.264646 sshd[2896]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:48.262000 audit[2896]: CRED_ACQ pid=2896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:48.269213 kernel: audit: type=1101 audit(1696276728.261:1277): pid=2896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:48.269300 kernel: audit: type=1103 audit(1696276728.262:1278): pid=2896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:48.271281 kernel: audit: type=1006 audit(1696276728.262:1279): pid=2896 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:58:48.262000 audit[2896]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea2df600 a2=3 a3=1 items=0 ppid=1 pid=2896 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:48.274833 kernel: audit: type=1300 audit(1696276728.262:1279): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea2df600 a2=3 a3=1 items=0 ppid=1 pid=2896 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:48.262000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:48.276517 kernel: audit: type=1327 audit(1696276728.262:1279): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:48.277816 systemd[1]: Started session-25.scope. Oct 2 19:58:48.277902 systemd-logind[1127]: New session 25 of user core. Oct 2 19:58:48.282000 audit[2896]: USER_START pid=2896 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:48.287393 kernel: audit: type=1105 audit(1696276728.282:1280): pid=2896 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:48.286000 audit[2898]: CRED_ACQ pid=2898 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:48.291417 kernel: audit: type=1103 audit(1696276728.286:1281): pid=2898 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:48.405071 sshd[2896]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:48.404000 audit[2896]: USER_END pid=2896 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:48.407603 systemd[1]: sshd@24-10.0.0.9:22-10.0.0.1:48988.service: Deactivated successfully. Oct 2 19:58:48.408484 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:58:48.404000 audit[2896]: CRED_DISP pid=2896 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:48.410100 systemd-logind[1127]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:58:48.412805 kernel: audit: type=1106 audit(1696276728.404:1282): pid=2896 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:48.412882 kernel: audit: type=1104 audit(1696276728.404:1283): pid=2896 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:48.406000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.9:22-10.0.0.1:48988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:48.413196 systemd-logind[1127]: Removed session 25. Oct 2 19:58:49.090279 kubelet[2006]: E1002 19:58:49.090235 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:58:49.090622 kubelet[2006]: E1002 19:58:49.090580 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:58:49.165420 kubelet[2006]: E1002 19:58:49.165391 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:54.166076 kubelet[2006]: E1002 19:58:54.166051 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:58.409834 systemd[1]: Started sshd@25-10.0.0.9:22-10.0.0.1:51292.service. Oct 2 19:58:58.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.9:22-10.0.0.1:51292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:58.410731 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:58.410784 kernel: audit: type=1130 audit(1696276738.409:1285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.9:22-10.0.0.1:51292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:58.442000 audit[2909]: USER_ACCT pid=2909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:58.442960 sshd[2909]: Accepted publickey for core from 10.0.0.1 port 51292 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:58:58.444492 sshd[2909]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:58.443000 audit[2909]: CRED_ACQ pid=2909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:58.449016 kernel: audit: type=1101 audit(1696276738.442:1286): pid=2909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:58.449071 kernel: audit: type=1103 audit(1696276738.443:1287): pid=2909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:58.451112 kernel: audit: type=1006 audit(1696276738.443:1288): pid=2909 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:58:58.443000 audit[2909]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe913eef0 a2=3 a3=1 items=0 ppid=1 pid=2909 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:58.454419 kernel: audit: type=1300 audit(1696276738.443:1288): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe913eef0 a2=3 a3=1 items=0 ppid=1 pid=2909 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:58.443000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:58.455736 kernel: audit: type=1327 audit(1696276738.443:1288): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:58.457112 systemd[1]: Started session-26.scope. Oct 2 19:58:58.457419 systemd-logind[1127]: New session 26 of user core. Oct 2 19:58:58.460000 audit[2909]: USER_START pid=2909 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:58.464000 audit[2911]: CRED_ACQ pid=2911 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:58.467888 kernel: audit: type=1105 audit(1696276738.460:1289): pid=2909 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:58.467973 kernel: audit: type=1103 audit(1696276738.464:1290): pid=2911 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:58.572695 sshd[2909]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:58.573000 audit[2909]: USER_END pid=2909 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:58.575066 systemd[1]: sshd@25-10.0.0.9:22-10.0.0.1:51292.service: Deactivated successfully. Oct 2 19:58:58.575804 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:58:58.573000 audit[2909]: CRED_DISP pid=2909 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:58.580068 kernel: audit: type=1106 audit(1696276738.573:1291): pid=2909 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:58.580147 kernel: audit: type=1104 audit(1696276738.573:1292): pid=2909 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:58:58.580066 systemd-logind[1127]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:58:58.574000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.9:22-10.0.0.1:51292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:58.580747 systemd-logind[1127]: Removed session 26. Oct 2 19:58:59.167972 kubelet[2006]: E1002 19:58:59.167944 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:02.090850 kubelet[2006]: E1002 19:59:02.090812 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:02.091147 kubelet[2006]: E1002 19:59:02.091044 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:59:04.169437 kubelet[2006]: E1002 19:59:04.169400 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:07.090756 kubelet[2006]: E1002 19:59:07.090722 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:07.091095 kubelet[2006]: E1002 19:59:07.090780 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:08.090164 kubelet[2006]: E1002 19:59:08.090130 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:08.577000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.9:22-10.0.0.1:46156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:08.577868 systemd[1]: Started sshd@26-10.0.0.9:22-10.0.0.1:46156.service. Oct 2 19:59:08.578735 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:59:08.578790 kernel: audit: type=1130 audit(1696276748.577:1294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.9:22-10.0.0.1:46156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:08.610000 audit[2922]: USER_ACCT pid=2922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:08.610773 sshd[2922]: Accepted publickey for core from 10.0.0.1 port 46156 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:59:08.611842 sshd[2922]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:08.611000 audit[2922]: CRED_ACQ pid=2922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:08.618546 kernel: audit: type=1101 audit(1696276748.610:1295): pid=2922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:08.618622 kernel: audit: type=1103 audit(1696276748.611:1296): pid=2922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:08.618647 kernel: audit: type=1006 audit(1696276748.611:1297): pid=2922 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:59:08.617770 systemd-logind[1127]: New session 27 of user core. Oct 2 19:59:08.618251 systemd[1]: Started session-27.scope. Oct 2 19:59:08.611000 audit[2922]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4056b80 a2=3 a3=1 items=0 ppid=1 pid=2922 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:08.622442 kernel: audit: type=1300 audit(1696276748.611:1297): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4056b80 a2=3 a3=1 items=0 ppid=1 pid=2922 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:08.622512 kernel: audit: type=1327 audit(1696276748.611:1297): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:08.611000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:08.624407 kernel: audit: type=1105 audit(1696276748.622:1298): pid=2922 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:08.622000 audit[2922]: USER_START pid=2922 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:08.624000 audit[2924]: CRED_ACQ pid=2924 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:08.630296 kernel: audit: type=1103 audit(1696276748.624:1299): pid=2924 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:08.736243 sshd[2922]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:08.736000 audit[2922]: USER_END pid=2922 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:08.739043 systemd[1]: sshd@26-10.0.0.9:22-10.0.0.1:46156.service: Deactivated successfully. Oct 2 19:59:08.739826 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:59:08.740405 systemd-logind[1127]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:59:08.741090 systemd-logind[1127]: Removed session 27. Oct 2 19:59:08.737000 audit[2922]: CRED_DISP pid=2922 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:08.744014 kernel: audit: type=1106 audit(1696276748.736:1300): pid=2922 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:08.744058 kernel: audit: type=1104 audit(1696276748.737:1301): pid=2922 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:08.738000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.9:22-10.0.0.1:46156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:09.170834 kubelet[2006]: E1002 19:59:09.170777 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:14.171466 kubelet[2006]: E1002 19:59:14.171430 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:16.089619 kubelet[2006]: E1002 19:59:16.089574 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:16.089969 kubelet[2006]: E1002 19:59:16.089788 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-2xtrs_kube-system(c1162ff3-3689-4a8d-83dd-2fce27af323b)\"" pod="kube-system/cilium-2xtrs" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b Oct 2 19:59:18.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.9:22-10.0.0.1:45778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:18.740595 systemd[1]: Started sshd@27-10.0.0.9:22-10.0.0.1:45778.service. Oct 2 19:59:18.741488 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:59:18.741530 kernel: audit: type=1130 audit(1696276758.740:1303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.9:22-10.0.0.1:45778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:18.772000 audit[2937]: USER_ACCT pid=2937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:18.773240 sshd[2937]: Accepted publickey for core from 10.0.0.1 port 45778 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:59:18.774313 sshd[2937]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:18.773000 audit[2937]: CRED_ACQ pid=2937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:18.778649 systemd-logind[1127]: New session 28 of user core. Oct 2 19:59:18.779032 systemd[1]: Started session-28.scope. Oct 2 19:59:18.780024 kernel: audit: type=1101 audit(1696276758.772:1304): pid=2937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:18.780132 kernel: audit: type=1103 audit(1696276758.773:1305): pid=2937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:18.780160 kernel: audit: type=1006 audit(1696276758.773:1306): pid=2937 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:59:18.773000 audit[2937]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef26b950 a2=3 a3=1 items=0 ppid=1 pid=2937 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:18.785199 kernel: audit: type=1300 audit(1696276758.773:1306): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef26b950 a2=3 a3=1 items=0 ppid=1 pid=2937 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:18.785257 kernel: audit: type=1327 audit(1696276758.773:1306): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:18.773000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:18.782000 audit[2937]: USER_START pid=2937 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:18.791517 kernel: audit: type=1105 audit(1696276758.782:1307): pid=2937 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:18.791594 kernel: audit: type=1103 audit(1696276758.783:1308): pid=2940 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:18.783000 audit[2940]: CRED_ACQ pid=2940 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:18.894401 sshd[2937]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:18.896000 audit[2937]: USER_END pid=2937 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:18.898647 systemd[1]: Started sshd@28-10.0.0.9:22-10.0.0.1:45794.service. Oct 2 19:59:18.899495 systemd-logind[1127]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:59:18.899691 systemd[1]: sshd@27-10.0.0.9:22-10.0.0.1:45778.service: Deactivated successfully. Oct 2 19:59:18.900485 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:59:18.896000 audit[2937]: CRED_DISP pid=2937 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:18.901145 systemd-logind[1127]: Removed session 28. Oct 2 19:59:18.904040 kernel: audit: type=1106 audit(1696276758.896:1309): pid=2937 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:18.904117 kernel: audit: type=1104 audit(1696276758.896:1310): pid=2937 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:18.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.9:22-10.0.0.1:45794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:18.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.9:22-10.0.0.1:45778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:18.934000 audit[2953]: USER_ACCT pid=2953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:18.935172 sshd[2953]: Accepted publickey for core from 10.0.0.1 port 45794 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:59:18.935000 audit[2953]: CRED_ACQ pid=2953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:18.935000 audit[2953]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe999e660 a2=3 a3=1 items=0 ppid=1 pid=2953 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:18.935000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:18.936628 sshd[2953]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:18.940398 systemd-logind[1127]: New session 29 of user core. Oct 2 19:59:18.941307 systemd[1]: Started session-29.scope. Oct 2 19:59:18.944000 audit[2953]: USER_START pid=2953 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:18.945000 audit[2956]: CRED_ACQ pid=2956 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:19.172612 kubelet[2006]: E1002 19:59:19.172569 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:20.685000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:20.685000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400ec6ca80 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:59:20.685000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:59:20.685000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:20.685000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40126039b0 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:59:20.685000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:59:20.689000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6782 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:20.689000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4012603a10 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:59:20.689000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:59:20.691000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6789 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:20.691000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4012689ce0 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:59:20.691000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:59:20.727000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:20.727000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:20.727000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400ee275e0 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:59:20.727000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:59:20.727000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4012689d10 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 19:59:20.727000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 19:59:21.135124 env[1141]: time="2023-10-02T19:59:21.134998043Z" level=info msg="StopPodSandbox for \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\"" Oct 2 19:59:21.135124 env[1141]: time="2023-10-02T19:59:21.135081083Z" level=info msg="Container to stop \"eed57abbd6c1d7988e275dcf37b572008e8c221b2b210e7f65954b22642a7774\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:59:21.136510 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df-shm.mount: Deactivated successfully. Oct 2 19:59:21.138099 env[1141]: time="2023-10-02T19:59:21.138056937Z" level=info msg="StopContainer for \"b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a\" with timeout 30 (s)" Oct 2 19:59:21.139977 env[1141]: time="2023-10-02T19:59:21.139784025Z" level=info msg="Stop container \"b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a\" with signal terminated" Oct 2 19:59:21.146311 systemd[1]: cri-containerd-ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df.scope: Deactivated successfully. Oct 2 19:59:21.146000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:59:21.149000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:59:21.169000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:59:21.169247 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df-rootfs.mount: Deactivated successfully. Oct 2 19:59:21.169908 systemd[1]: cri-containerd-b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a.scope: Deactivated successfully. Oct 2 19:59:21.174000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:59:21.186187 env[1141]: time="2023-10-02T19:59:21.186141557Z" level=info msg="shim disconnected" id=ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df Oct 2 19:59:21.186340 env[1141]: time="2023-10-02T19:59:21.186188757Z" level=warning msg="cleaning up after shim disconnected" id=ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df namespace=k8s.io Oct 2 19:59:21.186340 env[1141]: time="2023-10-02T19:59:21.186200637Z" level=info msg="cleaning up dead shim" Oct 2 19:59:21.189811 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a-rootfs.mount: Deactivated successfully. Oct 2 19:59:21.194527 env[1141]: time="2023-10-02T19:59:21.194468035Z" level=info msg="shim disconnected" id=b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a Oct 2 19:59:21.194527 env[1141]: time="2023-10-02T19:59:21.194527235Z" level=warning msg="cleaning up after shim disconnected" id=b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a namespace=k8s.io Oct 2 19:59:21.194848 env[1141]: time="2023-10-02T19:59:21.194537715Z" level=info msg="cleaning up dead shim" Oct 2 19:59:21.197799 env[1141]: time="2023-10-02T19:59:21.197761770Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:21Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3003 runtime=io.containerd.runc.v2\n" Oct 2 19:59:21.198083 env[1141]: time="2023-10-02T19:59:21.198055571Z" level=info msg="TearDown network for sandbox \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\" successfully" Oct 2 19:59:21.198130 env[1141]: time="2023-10-02T19:59:21.198082811Z" level=info msg="StopPodSandbox for \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\" returns successfully" Oct 2 19:59:21.207255 env[1141]: time="2023-10-02T19:59:21.207200493Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:21Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3015 runtime=io.containerd.runc.v2\n" Oct 2 19:59:21.208849 env[1141]: time="2023-10-02T19:59:21.208814061Z" level=info msg="StopContainer for \"b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a\" returns successfully" Oct 2 19:59:21.209275 env[1141]: time="2023-10-02T19:59:21.209243622Z" level=info msg="StopPodSandbox for \"54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41\"" Oct 2 19:59:21.209345 env[1141]: time="2023-10-02T19:59:21.209295943Z" level=info msg="Container to stop \"b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:59:21.210534 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41-shm.mount: Deactivated successfully. Oct 2 19:59:21.217240 systemd[1]: cri-containerd-54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41.scope: Deactivated successfully. Oct 2 19:59:21.217000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:59:21.221000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:59:21.235492 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41-rootfs.mount: Deactivated successfully. Oct 2 19:59:21.240707 env[1141]: time="2023-10-02T19:59:21.240654326Z" level=info msg="shim disconnected" id=54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41 Oct 2 19:59:21.240707 env[1141]: time="2023-10-02T19:59:21.240707806Z" level=warning msg="cleaning up after shim disconnected" id=54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41 namespace=k8s.io Oct 2 19:59:21.240900 env[1141]: time="2023-10-02T19:59:21.240723087Z" level=info msg="cleaning up dead shim" Oct 2 19:59:21.249569 env[1141]: time="2023-10-02T19:59:21.249523687Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:21Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3047 runtime=io.containerd.runc.v2\n" Oct 2 19:59:21.249840 env[1141]: time="2023-10-02T19:59:21.249813208Z" level=info msg="TearDown network for sandbox \"54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41\" successfully" Oct 2 19:59:21.249877 env[1141]: time="2023-10-02T19:59:21.249840088Z" level=info msg="StopPodSandbox for \"54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41\" returns successfully" Oct 2 19:59:21.294000 kubelet[2006]: I1002 19:59:21.293953 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-xtables-lock\") pod \"c1162ff3-3689-4a8d-83dd-2fce27af323b\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " Oct 2 19:59:21.294000 kubelet[2006]: I1002 19:59:21.294003 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-z5b8s\" (UniqueName: \"kubernetes.io/projected/c1162ff3-3689-4a8d-83dd-2fce27af323b-kube-api-access-z5b8s\") pod \"c1162ff3-3689-4a8d-83dd-2fce27af323b\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " Oct 2 19:59:21.294489 kubelet[2006]: I1002 19:59:21.294027 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c1162ff3-3689-4a8d-83dd-2fce27af323b-clustermesh-secrets\") pod \"c1162ff3-3689-4a8d-83dd-2fce27af323b\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " Oct 2 19:59:21.294489 kubelet[2006]: I1002 19:59:21.294044 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-cilium-run\") pod \"c1162ff3-3689-4a8d-83dd-2fce27af323b\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " Oct 2 19:59:21.294489 kubelet[2006]: I1002 19:59:21.294064 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-host-proc-sys-net\") pod \"c1162ff3-3689-4a8d-83dd-2fce27af323b\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " Oct 2 19:59:21.294489 kubelet[2006]: I1002 19:59:21.294083 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c1162ff3-3689-4a8d-83dd-2fce27af323b-hubble-tls\") pod \"c1162ff3-3689-4a8d-83dd-2fce27af323b\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " Oct 2 19:59:21.294489 kubelet[2006]: I1002 19:59:21.294103 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c1162ff3-3689-4a8d-83dd-2fce27af323b-cilium-config-path\") pod \"c1162ff3-3689-4a8d-83dd-2fce27af323b\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " Oct 2 19:59:21.294489 kubelet[2006]: I1002 19:59:21.294119 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-cni-path\") pod \"c1162ff3-3689-4a8d-83dd-2fce27af323b\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " Oct 2 19:59:21.294489 kubelet[2006]: I1002 19:59:21.294161 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-lib-modules\") pod \"c1162ff3-3689-4a8d-83dd-2fce27af323b\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " Oct 2 19:59:21.294489 kubelet[2006]: I1002 19:59:21.294179 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-cilium-cgroup\") pod \"c1162ff3-3689-4a8d-83dd-2fce27af323b\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " Oct 2 19:59:21.294489 kubelet[2006]: I1002 19:59:21.294195 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-bpf-maps\") pod \"c1162ff3-3689-4a8d-83dd-2fce27af323b\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " Oct 2 19:59:21.294489 kubelet[2006]: I1002 19:59:21.294212 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-etc-cni-netd\") pod \"c1162ff3-3689-4a8d-83dd-2fce27af323b\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " Oct 2 19:59:21.294489 kubelet[2006]: I1002 19:59:21.294228 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-host-proc-sys-kernel\") pod \"c1162ff3-3689-4a8d-83dd-2fce27af323b\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " Oct 2 19:59:21.294489 kubelet[2006]: I1002 19:59:21.294245 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-hostproc\") pod \"c1162ff3-3689-4a8d-83dd-2fce27af323b\" (UID: \"c1162ff3-3689-4a8d-83dd-2fce27af323b\") " Oct 2 19:59:21.294783 kubelet[2006]: I1002 19:59:21.294536 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-hostproc" (OuterVolumeSpecName: "hostproc") pod "c1162ff3-3689-4a8d-83dd-2fce27af323b" (UID: "c1162ff3-3689-4a8d-83dd-2fce27af323b"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:21.294783 kubelet[2006]: I1002 19:59:21.294541 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "c1162ff3-3689-4a8d-83dd-2fce27af323b" (UID: "c1162ff3-3689-4a8d-83dd-2fce27af323b"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:21.294783 kubelet[2006]: I1002 19:59:21.294582 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "c1162ff3-3689-4a8d-83dd-2fce27af323b" (UID: "c1162ff3-3689-4a8d-83dd-2fce27af323b"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:21.294783 kubelet[2006]: I1002 19:59:21.294583 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "c1162ff3-3689-4a8d-83dd-2fce27af323b" (UID: "c1162ff3-3689-4a8d-83dd-2fce27af323b"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:21.294783 kubelet[2006]: I1002 19:59:21.294602 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "c1162ff3-3689-4a8d-83dd-2fce27af323b" (UID: "c1162ff3-3689-4a8d-83dd-2fce27af323b"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:21.294783 kubelet[2006]: I1002 19:59:21.294618 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "c1162ff3-3689-4a8d-83dd-2fce27af323b" (UID: "c1162ff3-3689-4a8d-83dd-2fce27af323b"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:21.294783 kubelet[2006]: I1002 19:59:21.294634 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "c1162ff3-3689-4a8d-83dd-2fce27af323b" (UID: "c1162ff3-3689-4a8d-83dd-2fce27af323b"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:21.294940 kubelet[2006]: I1002 19:59:21.294765 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-cni-path" (OuterVolumeSpecName: "cni-path") pod "c1162ff3-3689-4a8d-83dd-2fce27af323b" (UID: "c1162ff3-3689-4a8d-83dd-2fce27af323b"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:21.294940 kubelet[2006]: I1002 19:59:21.294812 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "c1162ff3-3689-4a8d-83dd-2fce27af323b" (UID: "c1162ff3-3689-4a8d-83dd-2fce27af323b"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:21.294940 kubelet[2006]: I1002 19:59:21.294827 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "c1162ff3-3689-4a8d-83dd-2fce27af323b" (UID: "c1162ff3-3689-4a8d-83dd-2fce27af323b"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:21.297110 kubelet[2006]: W1002 19:59:21.295276 2006 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/c1162ff3-3689-4a8d-83dd-2fce27af323b/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:59:21.297110 kubelet[2006]: I1002 19:59:21.297059 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/c1162ff3-3689-4a8d-83dd-2fce27af323b-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "c1162ff3-3689-4a8d-83dd-2fce27af323b" (UID: "c1162ff3-3689-4a8d-83dd-2fce27af323b"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:59:21.298100 kubelet[2006]: I1002 19:59:21.298068 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c1162ff3-3689-4a8d-83dd-2fce27af323b-kube-api-access-z5b8s" (OuterVolumeSpecName: "kube-api-access-z5b8s") pod "c1162ff3-3689-4a8d-83dd-2fce27af323b" (UID: "c1162ff3-3689-4a8d-83dd-2fce27af323b"). InnerVolumeSpecName "kube-api-access-z5b8s". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:59:21.298174 kubelet[2006]: I1002 19:59:21.298133 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/c1162ff3-3689-4a8d-83dd-2fce27af323b-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "c1162ff3-3689-4a8d-83dd-2fce27af323b" (UID: "c1162ff3-3689-4a8d-83dd-2fce27af323b"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:59:21.298468 kubelet[2006]: I1002 19:59:21.298443 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c1162ff3-3689-4a8d-83dd-2fce27af323b-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "c1162ff3-3689-4a8d-83dd-2fce27af323b" (UID: "c1162ff3-3689-4a8d-83dd-2fce27af323b"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:59:21.395027 kubelet[2006]: I1002 19:59:21.394901 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e4a47875-bb55-41ff-acc4-a322d6a28acc-cilium-config-path\") pod \"e4a47875-bb55-41ff-acc4-a322d6a28acc\" (UID: \"e4a47875-bb55-41ff-acc4-a322d6a28acc\") " Oct 2 19:59:21.395027 kubelet[2006]: I1002 19:59:21.394947 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-kr7sv\" (UniqueName: \"kubernetes.io/projected/e4a47875-bb55-41ff-acc4-a322d6a28acc-kube-api-access-kr7sv\") pod \"e4a47875-bb55-41ff-acc4-a322d6a28acc\" (UID: \"e4a47875-bb55-41ff-acc4-a322d6a28acc\") " Oct 2 19:59:21.395027 kubelet[2006]: I1002 19:59:21.394981 2006 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:21.395027 kubelet[2006]: I1002 19:59:21.394998 2006 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-z5b8s\" (UniqueName: \"kubernetes.io/projected/c1162ff3-3689-4a8d-83dd-2fce27af323b-kube-api-access-z5b8s\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:21.395027 kubelet[2006]: I1002 19:59:21.395008 2006 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c1162ff3-3689-4a8d-83dd-2fce27af323b-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:21.395027 kubelet[2006]: I1002 19:59:21.395025 2006 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:21.395027 kubelet[2006]: I1002 19:59:21.395037 2006 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:21.395344 kubelet[2006]: I1002 19:59:21.395046 2006 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c1162ff3-3689-4a8d-83dd-2fce27af323b-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:21.395344 kubelet[2006]: I1002 19:59:21.395056 2006 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:21.395344 kubelet[2006]: I1002 19:59:21.395065 2006 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c1162ff3-3689-4a8d-83dd-2fce27af323b-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:21.395344 kubelet[2006]: I1002 19:59:21.395074 2006 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:21.395344 kubelet[2006]: I1002 19:59:21.395082 2006 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:21.395344 kubelet[2006]: I1002 19:59:21.395095 2006 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:21.395344 kubelet[2006]: I1002 19:59:21.395104 2006 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:21.395344 kubelet[2006]: I1002 19:59:21.395113 2006 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:21.395344 kubelet[2006]: I1002 19:59:21.395122 2006 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c1162ff3-3689-4a8d-83dd-2fce27af323b-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:21.396317 kubelet[2006]: W1002 19:59:21.395542 2006 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/e4a47875-bb55-41ff-acc4-a322d6a28acc/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:59:21.397234 kubelet[2006]: I1002 19:59:21.397196 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/e4a47875-bb55-41ff-acc4-a322d6a28acc-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "e4a47875-bb55-41ff-acc4-a322d6a28acc" (UID: "e4a47875-bb55-41ff-acc4-a322d6a28acc"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:59:21.398472 kubelet[2006]: I1002 19:59:21.398440 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e4a47875-bb55-41ff-acc4-a322d6a28acc-kube-api-access-kr7sv" (OuterVolumeSpecName: "kube-api-access-kr7sv") pod "e4a47875-bb55-41ff-acc4-a322d6a28acc" (UID: "e4a47875-bb55-41ff-acc4-a322d6a28acc"). InnerVolumeSpecName "kube-api-access-kr7sv". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:59:21.449000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:21.449000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001b8b6a0 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:59:21.449000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:21.450000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:21.450000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400087e030 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:59:21.450000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:21.495815 kubelet[2006]: I1002 19:59:21.495766 2006 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e4a47875-bb55-41ff-acc4-a322d6a28acc-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:21.495815 kubelet[2006]: I1002 19:59:21.495810 2006 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-kr7sv\" (UniqueName: \"kubernetes.io/projected/e4a47875-bb55-41ff-acc4-a322d6a28acc-kube-api-access-kr7sv\") on node \"localhost\" DevicePath \"\"" Oct 2 19:59:21.562455 kubelet[2006]: I1002 19:59:21.562427 2006 scope.go:115] "RemoveContainer" containerID="b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a" Oct 2 19:59:21.564741 env[1141]: time="2023-10-02T19:59:21.564703769Z" level=info msg="RemoveContainer for \"b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a\"" Oct 2 19:59:21.567522 env[1141]: time="2023-10-02T19:59:21.567482181Z" level=info msg="RemoveContainer for \"b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a\" returns successfully" Oct 2 19:59:21.567717 kubelet[2006]: I1002 19:59:21.567680 2006 scope.go:115] "RemoveContainer" containerID="b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a" Oct 2 19:59:21.567954 env[1141]: time="2023-10-02T19:59:21.567874863Z" level=error msg="ContainerStatus for \"b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a\": not found" Oct 2 19:59:21.568056 kubelet[2006]: E1002 19:59:21.568029 2006 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a\": not found" containerID="b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a" Oct 2 19:59:21.568097 kubelet[2006]: I1002 19:59:21.568067 2006 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a} err="failed to get container status \"b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a\": rpc error: code = NotFound desc = an error occurred when try to find container \"b3184c6d500062dafe6e0f712185e9b3e04b54d89698b30173ad1e84311c978a\": not found" Oct 2 19:59:21.568097 kubelet[2006]: I1002 19:59:21.568081 2006 scope.go:115] "RemoveContainer" containerID="eed57abbd6c1d7988e275dcf37b572008e8c221b2b210e7f65954b22642a7774" Oct 2 19:59:21.569741 env[1141]: time="2023-10-02T19:59:21.569705112Z" level=info msg="RemoveContainer for \"eed57abbd6c1d7988e275dcf37b572008e8c221b2b210e7f65954b22642a7774\"" Oct 2 19:59:21.570347 systemd[1]: Removed slice kubepods-besteffort-pode4a47875_bb55_41ff_acc4_a322d6a28acc.slice. Oct 2 19:59:21.571956 systemd[1]: Removed slice kubepods-burstable-podc1162ff3_3689_4a8d_83dd_2fce27af323b.slice. Oct 2 19:59:21.572274 env[1141]: time="2023-10-02T19:59:21.572244243Z" level=info msg="RemoveContainer for \"eed57abbd6c1d7988e275dcf37b572008e8c221b2b210e7f65954b22642a7774\" returns successfully" Oct 2 19:59:22.091750 kubelet[2006]: I1002 19:59:22.091710 2006 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=c1162ff3-3689-4a8d-83dd-2fce27af323b path="/var/lib/kubelet/pods/c1162ff3-3689-4a8d-83dd-2fce27af323b/volumes" Oct 2 19:59:22.092149 kubelet[2006]: I1002 19:59:22.092122 2006 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=e4a47875-bb55-41ff-acc4-a322d6a28acc path="/var/lib/kubelet/pods/e4a47875-bb55-41ff-acc4-a322d6a28acc/volumes" Oct 2 19:59:22.136513 systemd[1]: var-lib-kubelet-pods-e4a47875\x2dbb55\x2d41ff\x2dacc4\x2da322d6a28acc-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dkr7sv.mount: Deactivated successfully. Oct 2 19:59:22.136621 systemd[1]: var-lib-kubelet-pods-c1162ff3\x2d3689\x2d4a8d\x2d83dd\x2d2fce27af323b-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dz5b8s.mount: Deactivated successfully. Oct 2 19:59:22.136678 systemd[1]: var-lib-kubelet-pods-c1162ff3\x2d3689\x2d4a8d\x2d83dd\x2d2fce27af323b-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:59:22.136742 systemd[1]: var-lib-kubelet-pods-c1162ff3\x2d3689\x2d4a8d\x2d83dd\x2d2fce27af323b-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:59:23.085946 sshd[2953]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:23.087000 audit[2953]: USER_END pid=2953 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:23.087000 audit[2953]: CRED_DISP pid=2953 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:23.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.9:22-10.0.0.1:39814 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:23.090063 systemd[1]: Started sshd@29-10.0.0.9:22-10.0.0.1:39814.service. Oct 2 19:59:23.090615 systemd[1]: sshd@28-10.0.0.9:22-10.0.0.1:45794.service: Deactivated successfully. Oct 2 19:59:23.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.9:22-10.0.0.1:45794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:23.091387 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:59:23.091590 systemd[1]: session-29.scope: Consumed 1.509s CPU time. Oct 2 19:59:23.092087 systemd-logind[1127]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:59:23.093981 systemd-logind[1127]: Removed session 29. Oct 2 19:59:23.125000 audit[3066]: USER_ACCT pid=3066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:23.126600 sshd[3066]: Accepted publickey for core from 10.0.0.1 port 39814 ssh2: RSA SHA256:HYZQRhxVAAt6Gcr+zBcKZEn/OixtikngqD7jOIOR0c8 Oct 2 19:59:23.126000 audit[3066]: CRED_ACQ pid=3066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:23.127000 audit[3066]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe2c9f060 a2=3 a3=1 items=0 ppid=1 pid=3066 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:23.127000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:23.127718 sshd[3066]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:23.131235 systemd-logind[1127]: New session 30 of user core. Oct 2 19:59:23.132170 systemd[1]: Started session-30.scope. Oct 2 19:59:23.135000 audit[3066]: USER_START pid=3066 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:23.137000 audit[3069]: CRED_ACQ pid=3069 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:59:24.057736 env[1141]: time="2023-10-02T19:59:24.057693474Z" level=info msg="StopPodSandbox for \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\"" Oct 2 19:59:24.058051 env[1141]: time="2023-10-02T19:59:24.057786994Z" level=info msg="TearDown network for sandbox \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\" successfully" Oct 2 19:59:24.058051 env[1141]: time="2023-10-02T19:59:24.057820034Z" level=info msg="StopPodSandbox for \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\" returns successfully" Oct 2 19:59:24.058193 env[1141]: time="2023-10-02T19:59:24.058155676Z" level=info msg="RemovePodSandbox for \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\"" Oct 2 19:59:24.058254 env[1141]: time="2023-10-02T19:59:24.058192996Z" level=info msg="Forcibly stopping sandbox \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\"" Oct 2 19:59:24.058288 env[1141]: time="2023-10-02T19:59:24.058257716Z" level=info msg="TearDown network for sandbox \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\" successfully" Oct 2 19:59:24.060704 env[1141]: time="2023-10-02T19:59:24.060674207Z" level=info msg="RemovePodSandbox \"ae314f49957b975f50bd62071e88d31f62736f68eacc73229253788d3569c1df\" returns successfully" Oct 2 19:59:24.061129 env[1141]: time="2023-10-02T19:59:24.061102369Z" level=info msg="StopPodSandbox for \"54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41\"" Oct 2 19:59:24.061196 env[1141]: time="2023-10-02T19:59:24.061169769Z" level=info msg="TearDown network for sandbox \"54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41\" successfully" Oct 2 19:59:24.061232 env[1141]: time="2023-10-02T19:59:24.061195809Z" level=info msg="StopPodSandbox for \"54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41\" returns successfully" Oct 2 19:59:24.061467 env[1141]: time="2023-10-02T19:59:24.061439490Z" level=info msg="RemovePodSandbox for \"54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41\"" Oct 2 19:59:24.061526 env[1141]: time="2023-10-02T19:59:24.061468890Z" level=info msg="Forcibly stopping sandbox \"54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41\"" Oct 2 19:59:24.061569 env[1141]: time="2023-10-02T19:59:24.061527531Z" level=info msg="TearDown network for sandbox \"54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41\" successfully" Oct 2 19:59:24.063325 env[1141]: time="2023-10-02T19:59:24.063294139Z" level=info msg="RemovePodSandbox \"54d211df3f5da88c6c2d125d001a63ce0ef82189f97f39f1b1961100b2191e41\" returns successfully" Oct 2 19:59:24.174157 kubelet[2006]: E1002 19:59:24.174128 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:24.761855 kubelet[2006]: I1002 19:59:24.761804 2006 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:59:24.761855 kubelet[2006]: E1002 19:59:24.761865 2006 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c1162ff3-3689-4a8d-83dd-2fce27af323b" containerName="mount-cgroup" Oct 2 19:59:24.762117 kubelet[2006]: E1002 19:59:24.761876 2006 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e4a47875-bb55-41ff-acc4-a322d6a28acc" containerName="cilium-operator" Oct 2 19:59:24.762117 kubelet[2006]: E1002 19:59:24.761883 2006 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c1162ff3-3689-4a8d-83dd-2fce27af323b" containerName="mount-cgroup" Oct 2 19:59:24.762117 kubelet[2006]: E1002 19:59:24.761890 2006 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c1162ff3-3689-4a8d-83dd-2fce27af323b" containerName="mount-cgroup" Oct 2 19:59:24.762117 kubelet[2006]: E1002 19:59:24.761896 2006 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c1162ff3-3689-4a8d-83dd-2fce27af323b" containerName="mount-cgroup" Oct 2 19:59:24.762117 kubelet[2006]: I1002 19:59:24.761917 2006 memory_manager.go:346] "RemoveStaleState removing state" podUID="c1162ff3-3689-4a8d-83dd-2fce27af323b" containerName="mount-cgroup" Oct 2 19:59:24.762117 kubelet[2006]: I1002 19:59:24.761923 2006 memory_manager.go:346] "RemoveStaleState removing state" podUID="c1162ff3-3689-4a8d-83dd-2fce27af323b" containerName="mount-cgroup" Oct 2 19:59:24.762117 kubelet[2006]: I1002 19:59:24.761929 2006 memory_manager.go:346] "RemoveStaleState removing state" podUID="e4a47875-bb55-41ff-acc4-a322d6a28acc" containerName="cilium-operator" Oct 2 19:59:24.762117 kubelet[2006]: I1002 19:59:24.761934 2006 memory_manager.go:346] "RemoveStaleState removing state" podUID="c1162ff3-3689-4a8d-83dd-2fce27af323b" containerName="mount-cgroup" Oct 2 19:59:24.762117 kubelet[2006]: I1002 19:59:24.761940 2006 memory_manager.go:346] "RemoveStaleState removing state" podUID="c1162ff3-3689-4a8d-83dd-2fce27af323b" containerName="mount-cgroup" Oct 2 19:59:24.762117 kubelet[2006]: E1002 19:59:24.761955 2006 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c1162ff3-3689-4a8d-83dd-2fce27af323b" containerName="mount-cgroup" Oct 2 19:59:24.762117 kubelet[2006]: I1002 19:59:24.761971 2006 memory_manager.go:346] "RemoveStaleState removing state" podUID="c1162ff3-3689-4a8d-83dd-2fce27af323b" containerName="mount-cgroup" Oct 2 19:59:24.762117 kubelet[2006]: I1002 19:59:24.762121 2006 memory_manager.go:346] "RemoveStaleState removing state" podUID="c1162ff3-3689-4a8d-83dd-2fce27af323b" containerName="mount-cgroup" Oct 2 19:59:24.762537 kubelet[2006]: E1002 19:59:24.762143 2006 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c1162ff3-3689-4a8d-83dd-2fce27af323b" containerName="mount-cgroup" Oct 2 19:59:24.767256 systemd[1]: Created slice kubepods-burstable-pod62bbd768_4a00_4d4e_b46e_0d3779d86c66.slice. Oct 2 19:59:24.915820 kubelet[2006]: I1002 19:59:24.915779 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cni-path\") pod \"cilium-tfhzq\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " pod="kube-system/cilium-tfhzq" Oct 2 19:59:24.916023 kubelet[2006]: I1002 19:59:24.916011 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jrcq8\" (UniqueName: \"kubernetes.io/projected/62bbd768-4a00-4d4e-b46e-0d3779d86c66-kube-api-access-jrcq8\") pod \"cilium-tfhzq\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " pod="kube-system/cilium-tfhzq" Oct 2 19:59:24.916181 kubelet[2006]: I1002 19:59:24.916168 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-etc-cni-netd\") pod \"cilium-tfhzq\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " pod="kube-system/cilium-tfhzq" Oct 2 19:59:24.916300 kubelet[2006]: I1002 19:59:24.916288 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cilium-config-path\") pod \"cilium-tfhzq\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " pod="kube-system/cilium-tfhzq" Oct 2 19:59:24.916447 kubelet[2006]: I1002 19:59:24.916434 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-host-proc-sys-net\") pod \"cilium-tfhzq\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " pod="kube-system/cilium-tfhzq" Oct 2 19:59:24.916586 kubelet[2006]: I1002 19:59:24.916574 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-hostproc\") pod \"cilium-tfhzq\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " pod="kube-system/cilium-tfhzq" Oct 2 19:59:24.916735 kubelet[2006]: I1002 19:59:24.916724 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cilium-cgroup\") pod \"cilium-tfhzq\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " pod="kube-system/cilium-tfhzq" Oct 2 19:59:24.916835 kubelet[2006]: I1002 19:59:24.916823 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-lib-modules\") pod \"cilium-tfhzq\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " pod="kube-system/cilium-tfhzq" Oct 2 19:59:24.916951 kubelet[2006]: I1002 19:59:24.916940 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/62bbd768-4a00-4d4e-b46e-0d3779d86c66-clustermesh-secrets\") pod \"cilium-tfhzq\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " pod="kube-system/cilium-tfhzq" Oct 2 19:59:24.917058 kubelet[2006]: I1002 19:59:24.917047 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cilium-ipsec-secrets\") pod \"cilium-tfhzq\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " pod="kube-system/cilium-tfhzq" Oct 2 19:59:24.917172 kubelet[2006]: I1002 19:59:24.917161 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cilium-run\") pod \"cilium-tfhzq\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " pod="kube-system/cilium-tfhzq" Oct 2 19:59:24.917287 kubelet[2006]: I1002 19:59:24.917277 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-host-proc-sys-kernel\") pod \"cilium-tfhzq\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " pod="kube-system/cilium-tfhzq" Oct 2 19:59:24.917429 kubelet[2006]: I1002 19:59:24.917414 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/62bbd768-4a00-4d4e-b46e-0d3779d86c66-hubble-tls\") pod \"cilium-tfhzq\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " pod="kube-system/cilium-tfhzq" Oct 2 19:59:24.917562 kubelet[2006]: I1002 19:59:24.917551 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-xtables-lock\") pod \"cilium-tfhzq\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " pod="kube-system/cilium-tfhzq" Oct 2 19:59:24.917682 kubelet[2006]: I1002 19:59:24.917672 2006 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-bpf-maps\") pod \"cilium-tfhzq\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " pod="kube-system/cilium-tfhzq" Oct 2 19:59:25.070411 kubelet[2006]: E1002 19:59:25.070280 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:25.071810 env[1141]: time="2023-10-02T19:59:25.071716576Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-tfhzq,Uid:62bbd768-4a00-4d4e-b46e-0d3779d86c66,Namespace:kube-system,Attempt:0,}" Oct 2 19:59:25.422519 env[1141]: time="2023-10-02T19:59:25.422471520Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:59:25.423993 env[1141]: time="2023-10-02T19:59:25.423954726Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:59:25.425706 env[1141]: time="2023-10-02T19:59:25.425677854Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:59:25.427446 env[1141]: time="2023-10-02T19:59:25.427412942Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:59:25.444103 env[1141]: time="2023-10-02T19:59:25.443074811Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:59:25.444103 env[1141]: time="2023-10-02T19:59:25.443335332Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:59:25.444103 env[1141]: time="2023-10-02T19:59:25.443346532Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:59:25.444103 env[1141]: time="2023-10-02T19:59:25.443542333Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7 pid=3092 runtime=io.containerd.runc.v2 Oct 2 19:59:25.461088 systemd[1]: Started cri-containerd-16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7.scope. Oct 2 19:59:25.485381 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:59:25.485522 kernel: audit: type=1400 audit(1696276765.483:1341): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.489561 kernel: audit: type=1400 audit(1696276765.483:1342): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.489626 kernel: audit: type=1400 audit(1696276765.483:1343): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.494578 kernel: audit: type=1400 audit(1696276765.483:1344): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.496950 kernel: audit: type=1400 audit(1696276765.483:1345): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.499456 kernel: audit: type=1400 audit(1696276765.483:1346): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.501951 kernel: audit: type=1400 audit(1696276765.483:1347): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.504332 kernel: audit: type=1400 audit(1696276765.483:1348): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.504411 kernel: audit: type=1400 audit(1696276765.483:1349): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.509786 kernel: audit: type=1400 audit(1696276765.494:1350): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.494000 audit: BPF prog-id=128 op=LOAD Oct 2 19:59:25.496000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.496000 audit[3102]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3092 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:25.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136333335626630313764373631383137616561343465346635383139 Oct 2 19:59:25.496000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.496000 audit[3102]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3092 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:25.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136333335626630313764373631383137616561343465346635383139 Oct 2 19:59:25.496000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.496000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.496000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.496000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.496000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.496000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.496000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.496000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.496000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.496000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.496000 audit: BPF prog-id=129 op=LOAD Oct 2 19:59:25.496000 audit[3102]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3092 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:25.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136333335626630313764373631383137616561343465346635383139 Oct 2 19:59:25.499000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.499000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.499000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.499000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.499000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.499000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.499000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.499000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.499000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.499000 audit: BPF prog-id=130 op=LOAD Oct 2 19:59:25.499000 audit[3102]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3092 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:25.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136333335626630313764373631383137616561343465346635383139 Oct 2 19:59:25.501000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:59:25.501000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:59:25.501000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.501000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.501000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.501000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.501000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.501000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.501000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.501000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.501000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.501000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:25.501000 audit: BPF prog-id=131 op=LOAD Oct 2 19:59:25.501000 audit[3102]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3092 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:25.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136333335626630313764373631383137616561343465346635383139 Oct 2 19:59:25.520887 env[1141]: time="2023-10-02T19:59:25.520843393Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-tfhzq,Uid:62bbd768-4a00-4d4e-b46e-0d3779d86c66,Namespace:kube-system,Attempt:0,} returns sandbox id \"16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7\"" Oct 2 19:59:25.521541 kubelet[2006]: E1002 19:59:25.521521 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:25.524649 env[1141]: time="2023-10-02T19:59:25.524561329Z" level=info msg="CreateContainer within sandbox \"16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:59:25.540057 env[1141]: time="2023-10-02T19:59:25.540009437Z" level=info msg="CreateContainer within sandbox \"16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a\"" Oct 2 19:59:25.541681 env[1141]: time="2023-10-02T19:59:25.541559324Z" level=info msg="StartContainer for \"9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a\"" Oct 2 19:59:25.557745 systemd[1]: Started cri-containerd-9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a.scope. Oct 2 19:59:25.596582 systemd[1]: cri-containerd-9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a.scope: Deactivated successfully. Oct 2 19:59:25.607888 env[1141]: time="2023-10-02T19:59:25.607828736Z" level=info msg="shim disconnected" id=9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a Oct 2 19:59:25.607888 env[1141]: time="2023-10-02T19:59:25.607875576Z" level=warning msg="cleaning up after shim disconnected" id=9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a namespace=k8s.io Oct 2 19:59:25.607888 env[1141]: time="2023-10-02T19:59:25.607885656Z" level=info msg="cleaning up dead shim" Oct 2 19:59:25.616014 env[1141]: time="2023-10-02T19:59:25.615964051Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:25Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3148 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:59:25Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:59:25.616259 env[1141]: time="2023-10-02T19:59:25.616209853Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:59:25.616486 env[1141]: time="2023-10-02T19:59:25.616436014Z" level=error msg="Failed to pipe stdout of container \"9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a\"" error="reading from a closed fifo" Oct 2 19:59:25.619861 env[1141]: time="2023-10-02T19:59:25.619818868Z" level=error msg="Failed to pipe stderr of container \"9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a\"" error="reading from a closed fifo" Oct 2 19:59:25.622375 env[1141]: time="2023-10-02T19:59:25.622310679Z" level=error msg="StartContainer for \"9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:59:25.622676 kubelet[2006]: E1002 19:59:25.622642 2006 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a" Oct 2 19:59:25.622995 kubelet[2006]: E1002 19:59:25.622969 2006 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:59:25.622995 kubelet[2006]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:59:25.622995 kubelet[2006]: rm /hostbin/cilium-mount Oct 2 19:59:25.622995 kubelet[2006]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-jrcq8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-tfhzq_kube-system(62bbd768-4a00-4d4e-b46e-0d3779d86c66): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:59:25.623283 kubelet[2006]: E1002 19:59:25.623016 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-tfhzq" podUID=62bbd768-4a00-4d4e-b46e-0d3779d86c66 Oct 2 19:59:25.704022 kernel: hrtimer: interrupt took 6263507 ns Oct 2 19:59:26.577846 kubelet[2006]: E1002 19:59:26.577806 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:26.580333 env[1141]: time="2023-10-02T19:59:26.580281711Z" level=info msg="CreateContainer within sandbox \"16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:59:26.594861 env[1141]: time="2023-10-02T19:59:26.594775014Z" level=info msg="CreateContainer within sandbox \"16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a\"" Oct 2 19:59:26.595786 env[1141]: time="2023-10-02T19:59:26.595735498Z" level=info msg="StartContainer for \"4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a\"" Oct 2 19:59:26.614883 systemd[1]: Started cri-containerd-4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a.scope. Oct 2 19:59:26.640470 systemd[1]: cri-containerd-4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a.scope: Deactivated successfully. Oct 2 19:59:26.650591 env[1141]: time="2023-10-02T19:59:26.650530097Z" level=info msg="shim disconnected" id=4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a Oct 2 19:59:26.651020 env[1141]: time="2023-10-02T19:59:26.650993419Z" level=warning msg="cleaning up after shim disconnected" id=4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a namespace=k8s.io Oct 2 19:59:26.651149 env[1141]: time="2023-10-02T19:59:26.651132860Z" level=info msg="cleaning up dead shim" Oct 2 19:59:26.661004 env[1141]: time="2023-10-02T19:59:26.660957743Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3185 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:59:26Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:59:26.661498 env[1141]: time="2023-10-02T19:59:26.661436705Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:59:26.661750 env[1141]: time="2023-10-02T19:59:26.661684906Z" level=error msg="Failed to pipe stderr of container \"4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a\"" error="reading from a closed fifo" Oct 2 19:59:26.662132 env[1141]: time="2023-10-02T19:59:26.662097948Z" level=error msg="Failed to pipe stdout of container \"4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a\"" error="reading from a closed fifo" Oct 2 19:59:26.663896 env[1141]: time="2023-10-02T19:59:26.663847915Z" level=error msg="StartContainer for \"4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:59:26.664250 kubelet[2006]: E1002 19:59:26.664202 2006 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a" Oct 2 19:59:26.664439 kubelet[2006]: E1002 19:59:26.664308 2006 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:59:26.664439 kubelet[2006]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:59:26.664439 kubelet[2006]: rm /hostbin/cilium-mount Oct 2 19:59:26.664439 kubelet[2006]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-jrcq8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-tfhzq_kube-system(62bbd768-4a00-4d4e-b46e-0d3779d86c66): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:59:26.664439 kubelet[2006]: E1002 19:59:26.664344 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-tfhzq" podUID=62bbd768-4a00-4d4e-b46e-0d3779d86c66 Oct 2 19:59:27.022683 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a-rootfs.mount: Deactivated successfully. Oct 2 19:59:27.581034 kubelet[2006]: I1002 19:59:27.581008 2006 scope.go:115] "RemoveContainer" containerID="9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a" Oct 2 19:59:27.581401 kubelet[2006]: I1002 19:59:27.581249 2006 scope.go:115] "RemoveContainer" containerID="9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a" Oct 2 19:59:27.582300 env[1141]: time="2023-10-02T19:59:27.582263055Z" level=info msg="RemoveContainer for \"9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a\"" Oct 2 19:59:27.582657 env[1141]: time="2023-10-02T19:59:27.582622696Z" level=info msg="RemoveContainer for \"9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a\"" Oct 2 19:59:27.582800 env[1141]: time="2023-10-02T19:59:27.582765257Z" level=error msg="RemoveContainer for \"9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a\" failed" error="failed to set removing state for container \"9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a\": container is already in removing state" Oct 2 19:59:27.583176 kubelet[2006]: E1002 19:59:27.582951 2006 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a\": container is already in removing state" containerID="9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a" Oct 2 19:59:27.583176 kubelet[2006]: E1002 19:59:27.582982 2006 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a": container is already in removing state; Skipping pod "cilium-tfhzq_kube-system(62bbd768-4a00-4d4e-b46e-0d3779d86c66)" Oct 2 19:59:27.583176 kubelet[2006]: E1002 19:59:27.583053 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:27.583485 kubelet[2006]: E1002 19:59:27.583470 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-tfhzq_kube-system(62bbd768-4a00-4d4e-b46e-0d3779d86c66)\"" pod="kube-system/cilium-tfhzq" podUID=62bbd768-4a00-4d4e-b46e-0d3779d86c66 Oct 2 19:59:27.584593 env[1141]: time="2023-10-02T19:59:27.584564585Z" level=info msg="RemoveContainer for \"9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a\" returns successfully" Oct 2 19:59:28.090721 kubelet[2006]: E1002 19:59:28.090690 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:28.584849 kubelet[2006]: E1002 19:59:28.584820 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:28.585541 kubelet[2006]: E1002 19:59:28.585519 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-tfhzq_kube-system(62bbd768-4a00-4d4e-b46e-0d3779d86c66)\"" pod="kube-system/cilium-tfhzq" podUID=62bbd768-4a00-4d4e-b46e-0d3779d86c66 Oct 2 19:59:28.713700 kubelet[2006]: W1002 19:59:28.713655 2006 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod62bbd768_4a00_4d4e_b46e_0d3779d86c66.slice/cri-containerd-9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a.scope WatchSource:0}: container "9528c914e12e5d9a037bb02a8cfe3638f4f845580fac4244f0b350aeb9a4096a" in namespace "k8s.io": not found Oct 2 19:59:29.175537 kubelet[2006]: E1002 19:59:29.175513 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:31.821179 kubelet[2006]: W1002 19:59:31.821124 2006 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod62bbd768_4a00_4d4e_b46e_0d3779d86c66.slice/cri-containerd-4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a.scope WatchSource:0}: task 4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a not found: not found Oct 2 19:59:34.176313 kubelet[2006]: E1002 19:59:34.176283 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:39.069000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:39.074051 kernel: kauditd_printk_skb: 47 callbacks suppressed Oct 2 19:59:39.074141 kernel: audit: type=1400 audit(1696276779.069:1359): avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:39.074166 kernel: audit: type=1300 audit(1696276779.069:1359): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e82420 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:59:39.069000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e82420 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:59:39.069000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:39.081302 kernel: audit: type=1327 audit(1696276779.069:1359): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:39.075000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:39.084323 kernel: audit: type=1400 audit(1696276779.075:1360): avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:39.084379 kernel: audit: type=1300 audit(1696276779.075:1360): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e82540 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:59:39.075000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e82540 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:59:39.075000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:39.091503 kernel: audit: type=1327 audit(1696276779.075:1360): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:39.091552 kernel: audit: type=1400 audit(1696276779.080:1361): avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:39.080000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:39.081000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:39.097565 kernel: audit: type=1400 audit(1696276779.081:1362): avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:39.097665 kernel: audit: type=1300 audit(1696276779.080:1361): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40024b3a60 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:59:39.080000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40024b3a60 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:59:39.080000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:39.104822 kernel: audit: type=1327 audit(1696276779.080:1361): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:39.081000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e82660 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 19:59:39.081000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:39.178089 kubelet[2006]: E1002 19:59:39.178051 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:41.090658 kubelet[2006]: E1002 19:59:41.090618 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:41.095246 env[1141]: time="2023-10-02T19:59:41.095200880Z" level=info msg="CreateContainer within sandbox \"16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:59:41.102930 env[1141]: time="2023-10-02T19:59:41.102894070Z" level=info msg="CreateContainer within sandbox \"16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9\"" Oct 2 19:59:41.103369 env[1141]: time="2023-10-02T19:59:41.103339711Z" level=info msg="StartContainer for \"1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9\"" Oct 2 19:59:41.117007 systemd[1]: Started cri-containerd-1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9.scope. Oct 2 19:59:41.150290 systemd[1]: cri-containerd-1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9.scope: Deactivated successfully. Oct 2 19:59:41.161022 env[1141]: time="2023-10-02T19:59:41.160966810Z" level=info msg="shim disconnected" id=1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9 Oct 2 19:59:41.161022 env[1141]: time="2023-10-02T19:59:41.161024371Z" level=warning msg="cleaning up after shim disconnected" id=1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9 namespace=k8s.io Oct 2 19:59:41.161235 env[1141]: time="2023-10-02T19:59:41.161034011Z" level=info msg="cleaning up dead shim" Oct 2 19:59:41.170517 env[1141]: time="2023-10-02T19:59:41.170457367Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3224 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:59:41Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:59:41.170769 env[1141]: time="2023-10-02T19:59:41.170708087Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:59:41.170962 env[1141]: time="2023-10-02T19:59:41.170921968Z" level=error msg="Failed to pipe stderr of container \"1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9\"" error="reading from a closed fifo" Oct 2 19:59:41.171197 env[1141]: time="2023-10-02T19:59:41.171169929Z" level=error msg="Failed to pipe stdout of container \"1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9\"" error="reading from a closed fifo" Oct 2 19:59:41.172931 env[1141]: time="2023-10-02T19:59:41.172889656Z" level=error msg="StartContainer for \"1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:59:41.173171 kubelet[2006]: E1002 19:59:41.173140 2006 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9" Oct 2 19:59:41.173479 kubelet[2006]: E1002 19:59:41.173458 2006 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:59:41.173479 kubelet[2006]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:59:41.173479 kubelet[2006]: rm /hostbin/cilium-mount Oct 2 19:59:41.173479 kubelet[2006]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-jrcq8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-tfhzq_kube-system(62bbd768-4a00-4d4e-b46e-0d3779d86c66): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:59:41.173707 kubelet[2006]: E1002 19:59:41.173693 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-tfhzq" podUID=62bbd768-4a00-4d4e-b46e-0d3779d86c66 Oct 2 19:59:41.607371 kubelet[2006]: I1002 19:59:41.607339 2006 scope.go:115] "RemoveContainer" containerID="4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a" Oct 2 19:59:41.607683 kubelet[2006]: I1002 19:59:41.607660 2006 scope.go:115] "RemoveContainer" containerID="4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a" Oct 2 19:59:41.609286 env[1141]: time="2023-10-02T19:59:41.609248436Z" level=info msg="RemoveContainer for \"4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a\"" Oct 2 19:59:41.610483 env[1141]: time="2023-10-02T19:59:41.610454600Z" level=info msg="RemoveContainer for \"4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a\"" Oct 2 19:59:41.610570 env[1141]: time="2023-10-02T19:59:41.610539721Z" level=error msg="RemoveContainer for \"4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a\" failed" error="failed to set removing state for container \"4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a\": container is already in removing state" Oct 2 19:59:41.610751 kubelet[2006]: E1002 19:59:41.610721 2006 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a\": container is already in removing state" containerID="4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a" Oct 2 19:59:41.610825 kubelet[2006]: E1002 19:59:41.610756 2006 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a": container is already in removing state; Skipping pod "cilium-tfhzq_kube-system(62bbd768-4a00-4d4e-b46e-0d3779d86c66)" Oct 2 19:59:41.611131 kubelet[2006]: E1002 19:59:41.611108 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:41.611384 kubelet[2006]: E1002 19:59:41.611355 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-tfhzq_kube-system(62bbd768-4a00-4d4e-b46e-0d3779d86c66)\"" pod="kube-system/cilium-tfhzq" podUID=62bbd768-4a00-4d4e-b46e-0d3779d86c66 Oct 2 19:59:41.613387 env[1141]: time="2023-10-02T19:59:41.612571328Z" level=info msg="RemoveContainer for \"4c390a3268bb867eaa82499ba78b41486c3d7e2912b0bff3b8d57a568b72e18a\" returns successfully" Oct 2 19:59:42.101012 systemd[1]: run-containerd-runc-k8s.io-1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9-runc.ej0QIb.mount: Deactivated successfully. Oct 2 19:59:42.101115 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9-rootfs.mount: Deactivated successfully. Oct 2 19:59:44.179555 kubelet[2006]: E1002 19:59:44.179519 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:44.265466 kubelet[2006]: W1002 19:59:44.265427 2006 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod62bbd768_4a00_4d4e_b46e_0d3779d86c66.slice/cri-containerd-1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9.scope WatchSource:0}: task 1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9 not found: not found Oct 2 19:59:49.181968 kubelet[2006]: E1002 19:59:49.181917 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:54.182983 kubelet[2006]: E1002 19:59:54.182936 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:55.090347 kubelet[2006]: E1002 19:59:55.089677 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:59:55.090347 kubelet[2006]: E1002 19:59:55.089895 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-tfhzq_kube-system(62bbd768-4a00-4d4e-b46e-0d3779d86c66)\"" pod="kube-system/cilium-tfhzq" podUID=62bbd768-4a00-4d4e-b46e-0d3779d86c66 Oct 2 19:59:59.184217 kubelet[2006]: E1002 19:59:59.184179 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:04.186122 kubelet[2006]: E1002 20:00:04.186071 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:08.090961 kubelet[2006]: E1002 20:00:08.090909 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:00:08.093705 env[1141]: time="2023-10-02T20:00:08.093608168Z" level=info msg="CreateContainer within sandbox \"16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:00:08.103412 env[1141]: time="2023-10-02T20:00:08.103301878Z" level=info msg="CreateContainer within sandbox \"16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"9c7aefdeaeb11c3d4eee6be4c8370b349888fe91d1a194c53d5807f4b47c6eb4\"" Oct 2 20:00:08.103842 env[1141]: time="2023-10-02T20:00:08.103799119Z" level=info msg="StartContainer for \"9c7aefdeaeb11c3d4eee6be4c8370b349888fe91d1a194c53d5807f4b47c6eb4\"" Oct 2 20:00:08.135325 systemd[1]: Started cri-containerd-9c7aefdeaeb11c3d4eee6be4c8370b349888fe91d1a194c53d5807f4b47c6eb4.scope. Oct 2 20:00:08.157171 systemd[1]: cri-containerd-9c7aefdeaeb11c3d4eee6be4c8370b349888fe91d1a194c53d5807f4b47c6eb4.scope: Deactivated successfully. Oct 2 20:00:08.165038 env[1141]: time="2023-10-02T20:00:08.164983508Z" level=info msg="shim disconnected" id=9c7aefdeaeb11c3d4eee6be4c8370b349888fe91d1a194c53d5807f4b47c6eb4 Oct 2 20:00:08.165038 env[1141]: time="2023-10-02T20:00:08.165034028Z" level=warning msg="cleaning up after shim disconnected" id=9c7aefdeaeb11c3d4eee6be4c8370b349888fe91d1a194c53d5807f4b47c6eb4 namespace=k8s.io Oct 2 20:00:08.165266 env[1141]: time="2023-10-02T20:00:08.165044628Z" level=info msg="cleaning up dead shim" Oct 2 20:00:08.173150 env[1141]: time="2023-10-02T20:00:08.173082013Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3263 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:00:08Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/9c7aefdeaeb11c3d4eee6be4c8370b349888fe91d1a194c53d5807f4b47c6eb4/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:00:08.173406 env[1141]: time="2023-10-02T20:00:08.173333854Z" level=error msg="copy shim log" error="read /proc/self/fd/40: file already closed" Oct 2 20:00:08.173575 env[1141]: time="2023-10-02T20:00:08.173528574Z" level=error msg="Failed to pipe stdout of container \"9c7aefdeaeb11c3d4eee6be4c8370b349888fe91d1a194c53d5807f4b47c6eb4\"" error="reading from a closed fifo" Oct 2 20:00:08.173669 env[1141]: time="2023-10-02T20:00:08.173631215Z" level=error msg="Failed to pipe stderr of container \"9c7aefdeaeb11c3d4eee6be4c8370b349888fe91d1a194c53d5807f4b47c6eb4\"" error="reading from a closed fifo" Oct 2 20:00:08.175070 env[1141]: time="2023-10-02T20:00:08.175025179Z" level=error msg="StartContainer for \"9c7aefdeaeb11c3d4eee6be4c8370b349888fe91d1a194c53d5807f4b47c6eb4\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:00:08.175294 kubelet[2006]: E1002 20:00:08.175266 2006 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="9c7aefdeaeb11c3d4eee6be4c8370b349888fe91d1a194c53d5807f4b47c6eb4" Oct 2 20:00:08.175424 kubelet[2006]: E1002 20:00:08.175407 2006 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:00:08.175424 kubelet[2006]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:00:08.175424 kubelet[2006]: rm /hostbin/cilium-mount Oct 2 20:00:08.175424 kubelet[2006]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-jrcq8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-tfhzq_kube-system(62bbd768-4a00-4d4e-b46e-0d3779d86c66): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:00:08.175849 kubelet[2006]: E1002 20:00:08.175815 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-tfhzq" podUID=62bbd768-4a00-4d4e-b46e-0d3779d86c66 Oct 2 20:00:08.651492 kubelet[2006]: I1002 20:00:08.651463 2006 scope.go:115] "RemoveContainer" containerID="1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9" Oct 2 20:00:08.651790 kubelet[2006]: I1002 20:00:08.651773 2006 scope.go:115] "RemoveContainer" containerID="1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9" Oct 2 20:00:08.652919 env[1141]: time="2023-10-02T20:00:08.652866972Z" level=info msg="RemoveContainer for \"1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9\"" Oct 2 20:00:08.653175 env[1141]: time="2023-10-02T20:00:08.653149613Z" level=info msg="RemoveContainer for \"1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9\"" Oct 2 20:00:08.653268 env[1141]: time="2023-10-02T20:00:08.653236213Z" level=error msg="RemoveContainer for \"1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9\" failed" error="failed to set removing state for container \"1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9\": container is already in removing state" Oct 2 20:00:08.653431 kubelet[2006]: E1002 20:00:08.653413 2006 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9\": container is already in removing state" containerID="1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9" Oct 2 20:00:08.653505 kubelet[2006]: E1002 20:00:08.653441 2006 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9": container is already in removing state; Skipping pod "cilium-tfhzq_kube-system(62bbd768-4a00-4d4e-b46e-0d3779d86c66)" Oct 2 20:00:08.653505 kubelet[2006]: E1002 20:00:08.653494 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:00:08.653717 kubelet[2006]: E1002 20:00:08.653699 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-tfhzq_kube-system(62bbd768-4a00-4d4e-b46e-0d3779d86c66)\"" pod="kube-system/cilium-tfhzq" podUID=62bbd768-4a00-4d4e-b46e-0d3779d86c66 Oct 2 20:00:08.655253 env[1141]: time="2023-10-02T20:00:08.655221459Z" level=info msg="RemoveContainer for \"1bef2e599b3308bedead033748ba6cacbb674d83722a0296b9070ede61ce9ed9\" returns successfully" Oct 2 20:00:09.099901 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9c7aefdeaeb11c3d4eee6be4c8370b349888fe91d1a194c53d5807f4b47c6eb4-rootfs.mount: Deactivated successfully. Oct 2 20:00:09.187595 kubelet[2006]: E1002 20:00:09.187556 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:10.090476 kubelet[2006]: E1002 20:00:10.090435 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:00:11.270165 kubelet[2006]: W1002 20:00:11.270127 2006 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod62bbd768_4a00_4d4e_b46e_0d3779d86c66.slice/cri-containerd-9c7aefdeaeb11c3d4eee6be4c8370b349888fe91d1a194c53d5807f4b47c6eb4.scope WatchSource:0}: task 9c7aefdeaeb11c3d4eee6be4c8370b349888fe91d1a194c53d5807f4b47c6eb4 not found: not found Oct 2 20:00:14.189096 kubelet[2006]: E1002 20:00:14.189069 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:19.190155 kubelet[2006]: E1002 20:00:19.190022 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:20.089635 kubelet[2006]: E1002 20:00:20.089594 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:00:20.089939 kubelet[2006]: E1002 20:00:20.089827 2006 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-tfhzq_kube-system(62bbd768-4a00-4d4e-b46e-0d3779d86c66)\"" pod="kube-system/cilium-tfhzq" podUID=62bbd768-4a00-4d4e-b46e-0d3779d86c66 Oct 2 20:00:20.685000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:20.686989 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:00:20.687045 kernel: audit: type=1400 audit(1696276820.685:1363): avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:20.685000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40102b2cc0 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 20:00:20.693551 kernel: audit: type=1300 audit(1696276820.685:1363): arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40102b2cc0 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 20:00:20.693615 kernel: audit: type=1327 audit(1696276820.685:1363): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:00:20.685000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:00:20.685000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:20.699524 kernel: audit: type=1400 audit(1696276820.685:1364): avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:20.699575 kernel: audit: type=1300 audit(1696276820.685:1364): arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4003cc5b60 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 20:00:20.685000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4003cc5b60 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 20:00:20.703126 kernel: audit: type=1327 audit(1696276820.685:1364): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:00:20.685000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:00:20.689000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6782 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:20.709045 kernel: audit: type=1400 audit(1696276820.689:1365): avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6782 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:20.709106 kernel: audit: type=1300 audit(1696276820.689:1365): arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400fa51dd0 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 20:00:20.689000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400fa51dd0 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 20:00:20.689000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:00:20.715758 kernel: audit: type=1327 audit(1696276820.689:1365): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:00:20.715815 kernel: audit: type=1400 audit(1696276820.689:1366): avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6789 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:20.689000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6789 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:20.689000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400fa51e00 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 20:00:20.689000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:00:20.728000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:20.728000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40102b2ec0 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 20:00:20.728000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:00:20.728000 audit[1887]: AVC avc: denied { watch } for pid=1887 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:20.728000 audit[1887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40055d27b0 a2=fc6 a3=0 items=0 ppid=1729 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c627 key=(null) Oct 2 20:00:20.728000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E39002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:00:21.450000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:21.450000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001e00fe0 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 20:00:21.450000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:21.450000 audit[1894]: AVC avc: denied { watch } for pid=1894 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6787 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:21.450000 audit[1894]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400087e300 a2=fc6 a3=0 items=0 ppid=1726 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c866 key=(null) Oct 2 20:00:21.450000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:24.107889 kubelet[2006]: W1002 20:00:24.107858 2006 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 20:00:24.190771 kubelet[2006]: E1002 20:00:24.190724 2006 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:25.949822 env[1141]: time="2023-10-02T20:00:25.949759628Z" level=info msg="StopPodSandbox for \"16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7\"" Oct 2 20:00:25.950177 env[1141]: time="2023-10-02T20:00:25.949837788Z" level=info msg="Container to stop \"9c7aefdeaeb11c3d4eee6be4c8370b349888fe91d1a194c53d5807f4b47c6eb4\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:00:25.951237 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7-shm.mount: Deactivated successfully. Oct 2 20:00:25.959243 systemd[1]: cri-containerd-16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7.scope: Deactivated successfully. Oct 2 20:00:25.958000 audit: BPF prog-id=128 op=UNLOAD Oct 2 20:00:25.961167 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:00:25.961255 kernel: audit: type=1334 audit(1696276825.958:1371): prog-id=128 op=UNLOAD Oct 2 20:00:25.963000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:00:25.966403 kernel: audit: type=1334 audit(1696276825.963:1372): prog-id=131 op=UNLOAD Oct 2 20:00:25.984597 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7-rootfs.mount: Deactivated successfully. Oct 2 20:00:25.984947 sshd[3066]: pam_unix(sshd:session): session closed for user core Oct 2 20:00:25.984000 audit[3066]: USER_END pid=3066 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:00:25.987352 systemd[1]: sshd@29-10.0.0.9:22-10.0.0.1:39814.service: Deactivated successfully. Oct 2 20:00:25.988137 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 20:00:25.988325 systemd[1]: session-30.scope: Consumed 1.860s CPU time. Oct 2 20:00:25.988742 systemd-logind[1127]: Session 30 logged out. Waiting for processes to exit. Oct 2 20:00:25.989525 systemd-logind[1127]: Removed session 30. Oct 2 20:00:25.984000 audit[3066]: CRED_DISP pid=3066 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:00:25.992688 kernel: audit: type=1106 audit(1696276825.984:1373): pid=3066 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:00:25.992778 kernel: audit: type=1104 audit(1696276825.984:1374): pid=3066 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:00:25.992800 kernel: audit: type=1131 audit(1696276825.986:1375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.9:22-10.0.0.1:39814 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:00:25.986000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.9:22-10.0.0.1:39814 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:00:26.006619 env[1141]: time="2023-10-02T20:00:26.006483544Z" level=info msg="shim disconnected" id=16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7 Oct 2 20:00:26.006619 env[1141]: time="2023-10-02T20:00:26.006612864Z" level=warning msg="cleaning up after shim disconnected" id=16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7 namespace=k8s.io Oct 2 20:00:26.006619 env[1141]: time="2023-10-02T20:00:26.006623465Z" level=info msg="cleaning up dead shim" Oct 2 20:00:26.014876 env[1141]: time="2023-10-02T20:00:26.014820007Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3301 runtime=io.containerd.runc.v2\n" Oct 2 20:00:26.015159 env[1141]: time="2023-10-02T20:00:26.015121688Z" level=info msg="TearDown network for sandbox \"16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7\" successfully" Oct 2 20:00:26.015159 env[1141]: time="2023-10-02T20:00:26.015151568Z" level=info msg="StopPodSandbox for \"16335bf017d761817aea44e4f5819192b8261467abb19d4e0d848f4af31c9cf7\" returns successfully" Oct 2 20:00:26.090091 kubelet[2006]: E1002 20:00:26.090052 2006 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:00:26.208144 kubelet[2006]: I1002 20:00:26.208034 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-host-proc-sys-net\") pod \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " Oct 2 20:00:26.208144 kubelet[2006]: I1002 20:00:26.208080 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cilium-ipsec-secrets\") pod \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " Oct 2 20:00:26.208144 kubelet[2006]: I1002 20:00:26.208105 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cilium-run\") pod \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " Oct 2 20:00:26.208144 kubelet[2006]: I1002 20:00:26.208124 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-bpf-maps\") pod \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " Oct 2 20:00:26.208144 kubelet[2006]: I1002 20:00:26.208148 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-xtables-lock\") pod \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " Oct 2 20:00:26.208478 kubelet[2006]: I1002 20:00:26.208168 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-etc-cni-netd\") pod \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " Oct 2 20:00:26.208478 kubelet[2006]: I1002 20:00:26.208189 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cilium-config-path\") pod \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " Oct 2 20:00:26.208478 kubelet[2006]: I1002 20:00:26.208212 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-jrcq8\" (UniqueName: \"kubernetes.io/projected/62bbd768-4a00-4d4e-b46e-0d3779d86c66-kube-api-access-jrcq8\") pod \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " Oct 2 20:00:26.208478 kubelet[2006]: I1002 20:00:26.208229 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-hostproc\") pod \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " Oct 2 20:00:26.208478 kubelet[2006]: I1002 20:00:26.208248 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cilium-cgroup\") pod \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " Oct 2 20:00:26.208478 kubelet[2006]: I1002 20:00:26.208266 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-host-proc-sys-kernel\") pod \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " Oct 2 20:00:26.208478 kubelet[2006]: I1002 20:00:26.208283 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cni-path\") pod \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " Oct 2 20:00:26.208478 kubelet[2006]: I1002 20:00:26.208300 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-lib-modules\") pod \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " Oct 2 20:00:26.208478 kubelet[2006]: I1002 20:00:26.208319 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/62bbd768-4a00-4d4e-b46e-0d3779d86c66-clustermesh-secrets\") pod \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " Oct 2 20:00:26.208478 kubelet[2006]: I1002 20:00:26.208338 2006 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/62bbd768-4a00-4d4e-b46e-0d3779d86c66-hubble-tls\") pod \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\" (UID: \"62bbd768-4a00-4d4e-b46e-0d3779d86c66\") " Oct 2 20:00:26.208478 kubelet[2006]: I1002 20:00:26.208464 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "62bbd768-4a00-4d4e-b46e-0d3779d86c66" (UID: "62bbd768-4a00-4d4e-b46e-0d3779d86c66"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:26.208757 kubelet[2006]: I1002 20:00:26.208594 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-hostproc" (OuterVolumeSpecName: "hostproc") pod "62bbd768-4a00-4d4e-b46e-0d3779d86c66" (UID: "62bbd768-4a00-4d4e-b46e-0d3779d86c66"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:26.208757 kubelet[2006]: I1002 20:00:26.208620 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "62bbd768-4a00-4d4e-b46e-0d3779d86c66" (UID: "62bbd768-4a00-4d4e-b46e-0d3779d86c66"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:26.208757 kubelet[2006]: I1002 20:00:26.208636 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "62bbd768-4a00-4d4e-b46e-0d3779d86c66" (UID: "62bbd768-4a00-4d4e-b46e-0d3779d86c66"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:26.208757 kubelet[2006]: I1002 20:00:26.208652 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cni-path" (OuterVolumeSpecName: "cni-path") pod "62bbd768-4a00-4d4e-b46e-0d3779d86c66" (UID: "62bbd768-4a00-4d4e-b46e-0d3779d86c66"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:26.208757 kubelet[2006]: I1002 20:00:26.208667 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "62bbd768-4a00-4d4e-b46e-0d3779d86c66" (UID: "62bbd768-4a00-4d4e-b46e-0d3779d86c66"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:26.208757 kubelet[2006]: I1002 20:00:26.208692 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "62bbd768-4a00-4d4e-b46e-0d3779d86c66" (UID: "62bbd768-4a00-4d4e-b46e-0d3779d86c66"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:26.208757 kubelet[2006]: I1002 20:00:26.208728 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "62bbd768-4a00-4d4e-b46e-0d3779d86c66" (UID: "62bbd768-4a00-4d4e-b46e-0d3779d86c66"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:26.208757 kubelet[2006]: I1002 20:00:26.208747 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "62bbd768-4a00-4d4e-b46e-0d3779d86c66" (UID: "62bbd768-4a00-4d4e-b46e-0d3779d86c66"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:26.208960 kubelet[2006]: I1002 20:00:26.208762 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "62bbd768-4a00-4d4e-b46e-0d3779d86c66" (UID: "62bbd768-4a00-4d4e-b46e-0d3779d86c66"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:26.208960 kubelet[2006]: W1002 20:00:26.208889 2006 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/62bbd768-4a00-4d4e-b46e-0d3779d86c66/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:00:26.210942 kubelet[2006]: I1002 20:00:26.210903 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "62bbd768-4a00-4d4e-b46e-0d3779d86c66" (UID: "62bbd768-4a00-4d4e-b46e-0d3779d86c66"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:00:26.212622 systemd[1]: var-lib-kubelet-pods-62bbd768\x2d4a00\x2d4d4e\x2db46e\x2d0d3779d86c66-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:00:26.212727 systemd[1]: var-lib-kubelet-pods-62bbd768\x2d4a00\x2d4d4e\x2db46e\x2d0d3779d86c66-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:00:26.214176 kubelet[2006]: I1002 20:00:26.214129 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/62bbd768-4a00-4d4e-b46e-0d3779d86c66-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "62bbd768-4a00-4d4e-b46e-0d3779d86c66" (UID: "62bbd768-4a00-4d4e-b46e-0d3779d86c66"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:00:26.214780 kubelet[2006]: I1002 20:00:26.214748 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "62bbd768-4a00-4d4e-b46e-0d3779d86c66" (UID: "62bbd768-4a00-4d4e-b46e-0d3779d86c66"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:00:26.215004 kubelet[2006]: I1002 20:00:26.214980 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/62bbd768-4a00-4d4e-b46e-0d3779d86c66-kube-api-access-jrcq8" (OuterVolumeSpecName: "kube-api-access-jrcq8") pod "62bbd768-4a00-4d4e-b46e-0d3779d86c66" (UID: "62bbd768-4a00-4d4e-b46e-0d3779d86c66"). InnerVolumeSpecName "kube-api-access-jrcq8". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:00:26.215241 systemd[1]: var-lib-kubelet-pods-62bbd768\x2d4a00\x2d4d4e\x2db46e\x2d0d3779d86c66-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2djrcq8.mount: Deactivated successfully. Oct 2 20:00:26.217059 kubelet[2006]: I1002 20:00:26.217025 2006 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/62bbd768-4a00-4d4e-b46e-0d3779d86c66-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "62bbd768-4a00-4d4e-b46e-0d3779d86c66" (UID: "62bbd768-4a00-4d4e-b46e-0d3779d86c66"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:00:26.309326 kubelet[2006]: I1002 20:00:26.309277 2006 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:26.309326 kubelet[2006]: I1002 20:00:26.309314 2006 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:26.309326 kubelet[2006]: I1002 20:00:26.309324 2006 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:26.309326 kubelet[2006]: I1002 20:00:26.309334 2006 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:26.309580 kubelet[2006]: I1002 20:00:26.309346 2006 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:26.309580 kubelet[2006]: I1002 20:00:26.309451 2006 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-jrcq8\" (UniqueName: \"kubernetes.io/projected/62bbd768-4a00-4d4e-b46e-0d3779d86c66-kube-api-access-jrcq8\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:26.309580 kubelet[2006]: I1002 20:00:26.309461 2006 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:26.309580 kubelet[2006]: I1002 20:00:26.309471 2006 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:26.309580 kubelet[2006]: I1002 20:00:26.309480 2006 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:26.309580 kubelet[2006]: I1002 20:00:26.309489 2006 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:26.309580 kubelet[2006]: I1002 20:00:26.309498 2006 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:26.309580 kubelet[2006]: I1002 20:00:26.309507 2006 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/62bbd768-4a00-4d4e-b46e-0d3779d86c66-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:26.309580 kubelet[2006]: I1002 20:00:26.309516 2006 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/62bbd768-4a00-4d4e-b46e-0d3779d86c66-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:26.309580 kubelet[2006]: I1002 20:00:26.309526 2006 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/62bbd768-4a00-4d4e-b46e-0d3779d86c66-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:26.309580 kubelet[2006]: I1002 20:00:26.309535 2006 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/62bbd768-4a00-4d4e-b46e-0d3779d86c66-cilium-ipsec-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 20:00:26.687023 kubelet[2006]: I1002 20:00:26.686982 2006 scope.go:115] "RemoveContainer" containerID="9c7aefdeaeb11c3d4eee6be4c8370b349888fe91d1a194c53d5807f4b47c6eb4" Oct 2 20:00:26.688733 env[1141]: time="2023-10-02T20:00:26.688331977Z" level=info msg="RemoveContainer for \"9c7aefdeaeb11c3d4eee6be4c8370b349888fe91d1a194c53d5807f4b47c6eb4\"" Oct 2 20:00:26.691105 systemd[1]: Removed slice kubepods-burstable-pod62bbd768_4a00_4d4e_b46e_0d3779d86c66.slice. Oct 2 20:00:26.692625 env[1141]: time="2023-10-02T20:00:26.692152907Z" level=info msg="RemoveContainer for \"9c7aefdeaeb11c3d4eee6be4c8370b349888fe91d1a194c53d5807f4b47c6eb4\" returns successfully" Oct 2 20:00:26.951236 systemd[1]: var-lib-kubelet-pods-62bbd768\x2d4a00\x2d4d4e\x2db46e\x2d0d3779d86c66-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully.