Oct 2 20:06:54.761460 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 20:06:54.761484 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 20:06:54.761492 kernel: efi: EFI v2.70 by EDK II Oct 2 20:06:54.761498 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Oct 2 20:06:54.761503 kernel: random: crng init done Oct 2 20:06:54.761512 kernel: ACPI: Early table checksum verification disabled Oct 2 20:06:54.761518 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Oct 2 20:06:54.761526 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Oct 2 20:06:54.761534 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:06:54.761540 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:06:54.761546 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:06:54.761551 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:06:54.761557 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:06:54.761562 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:06:54.761573 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:06:54.761579 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:06:54.761585 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:06:54.761591 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Oct 2 20:06:54.761597 kernel: NUMA: Failed to initialise from firmware Oct 2 20:06:54.761603 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 20:06:54.761623 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Oct 2 20:06:54.761632 kernel: Zone ranges: Oct 2 20:06:54.761638 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 20:06:54.761645 kernel: DMA32 empty Oct 2 20:06:54.761651 kernel: Normal empty Oct 2 20:06:54.761656 kernel: Movable zone start for each node Oct 2 20:06:54.761664 kernel: Early memory node ranges Oct 2 20:06:54.761671 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Oct 2 20:06:54.761677 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Oct 2 20:06:54.761683 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Oct 2 20:06:54.761689 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Oct 2 20:06:54.761698 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Oct 2 20:06:54.761704 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Oct 2 20:06:54.761710 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Oct 2 20:06:54.761718 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 20:06:54.761725 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Oct 2 20:06:54.761731 kernel: psci: probing for conduit method from ACPI. Oct 2 20:06:54.761737 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 20:06:54.761745 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 20:06:54.761751 kernel: psci: Trusted OS migration not required Oct 2 20:06:54.761774 kernel: psci: SMC Calling Convention v1.1 Oct 2 20:06:54.761782 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Oct 2 20:06:54.761791 kernel: ACPI: SRAT not present Oct 2 20:06:54.761797 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 20:06:54.761804 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 20:06:54.761810 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Oct 2 20:06:54.761816 kernel: Detected PIPT I-cache on CPU0 Oct 2 20:06:54.761822 kernel: CPU features: detected: GIC system register CPU interface Oct 2 20:06:54.761829 kernel: CPU features: detected: Hardware dirty bit management Oct 2 20:06:54.761835 kernel: CPU features: detected: Spectre-v4 Oct 2 20:06:54.761841 kernel: CPU features: detected: Spectre-BHB Oct 2 20:06:54.761848 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 20:06:54.761854 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 20:06:54.761861 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 20:06:54.761867 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Oct 2 20:06:54.761873 kernel: Policy zone: DMA Oct 2 20:06:54.761881 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 20:06:54.761888 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 20:06:54.761901 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 20:06:54.761907 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 20:06:54.761913 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 20:06:54.761920 kernel: Memory: 2459280K/2572288K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 113008K reserved, 0K cma-reserved) Oct 2 20:06:54.761928 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 20:06:54.761934 kernel: trace event string verifier disabled Oct 2 20:06:54.761940 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 20:06:54.761946 kernel: rcu: RCU event tracing is enabled. Oct 2 20:06:54.761953 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 20:06:54.761959 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 20:06:54.761966 kernel: Tracing variant of Tasks RCU enabled. Oct 2 20:06:54.761972 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 20:06:54.761978 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 20:06:54.761984 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 20:06:54.761990 kernel: GICv3: 256 SPIs implemented Oct 2 20:06:54.761997 kernel: GICv3: 0 Extended SPIs implemented Oct 2 20:06:54.762003 kernel: GICv3: Distributor has no Range Selector support Oct 2 20:06:54.762009 kernel: Root IRQ handler: gic_handle_irq Oct 2 20:06:54.762015 kernel: GICv3: 16 PPIs implemented Oct 2 20:06:54.762021 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Oct 2 20:06:54.762027 kernel: ACPI: SRAT not present Oct 2 20:06:54.762033 kernel: ITS [mem 0x08080000-0x0809ffff] Oct 2 20:06:54.762039 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 20:06:54.762046 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Oct 2 20:06:54.762052 kernel: GICv3: using LPI property table @0x00000000400d0000 Oct 2 20:06:54.762058 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Oct 2 20:06:54.762065 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 20:06:54.762072 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 20:06:54.762078 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 20:06:54.762084 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 20:06:54.762090 kernel: arm-pv: using stolen time PV Oct 2 20:06:54.762097 kernel: Console: colour dummy device 80x25 Oct 2 20:06:54.762103 kernel: ACPI: Core revision 20210730 Oct 2 20:06:54.762110 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 20:06:54.762116 kernel: pid_max: default: 32768 minimum: 301 Oct 2 20:06:54.762122 kernel: LSM: Security Framework initializing Oct 2 20:06:54.762129 kernel: SELinux: Initializing. Oct 2 20:06:54.762136 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 20:06:54.762143 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 20:06:54.762149 kernel: rcu: Hierarchical SRCU implementation. Oct 2 20:06:54.762155 kernel: Platform MSI: ITS@0x8080000 domain created Oct 2 20:06:54.762161 kernel: PCI/MSI: ITS@0x8080000 domain created Oct 2 20:06:54.762168 kernel: Remapping and enabling EFI services. Oct 2 20:06:54.762174 kernel: smp: Bringing up secondary CPUs ... Oct 2 20:06:54.762180 kernel: Detected PIPT I-cache on CPU1 Oct 2 20:06:54.762186 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Oct 2 20:06:54.762194 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Oct 2 20:06:54.762200 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 20:06:54.762206 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 20:06:54.762213 kernel: Detected PIPT I-cache on CPU2 Oct 2 20:06:54.762219 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Oct 2 20:06:54.762226 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Oct 2 20:06:54.762232 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 20:06:54.762238 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Oct 2 20:06:54.762245 kernel: Detected PIPT I-cache on CPU3 Oct 2 20:06:54.762251 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Oct 2 20:06:54.762258 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Oct 2 20:06:54.762265 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 20:06:54.762271 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Oct 2 20:06:54.762277 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 20:06:54.762288 kernel: SMP: Total of 4 processors activated. Oct 2 20:06:54.762295 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 20:06:54.762302 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 20:06:54.762309 kernel: CPU features: detected: Common not Private translations Oct 2 20:06:54.762316 kernel: CPU features: detected: CRC32 instructions Oct 2 20:06:54.762322 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 20:06:54.762329 kernel: CPU features: detected: LSE atomic instructions Oct 2 20:06:54.762335 kernel: CPU features: detected: Privileged Access Never Oct 2 20:06:54.762343 kernel: CPU features: detected: RAS Extension Support Oct 2 20:06:54.762350 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Oct 2 20:06:54.762356 kernel: CPU: All CPU(s) started at EL1 Oct 2 20:06:54.762363 kernel: alternatives: patching kernel code Oct 2 20:06:54.762370 kernel: devtmpfs: initialized Oct 2 20:06:54.762377 kernel: KASLR enabled Oct 2 20:06:54.762383 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 20:06:54.762390 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 20:06:54.762396 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 20:06:54.762403 kernel: SMBIOS 3.0.0 present. Oct 2 20:06:54.762409 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Oct 2 20:06:54.762416 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 20:06:54.762422 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 20:06:54.762429 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 20:06:54.762437 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 20:06:54.762443 kernel: audit: initializing netlink subsys (disabled) Oct 2 20:06:54.762450 kernel: audit: type=2000 audit(0.031:1): state=initialized audit_enabled=0 res=1 Oct 2 20:06:54.762456 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 20:06:54.762463 kernel: cpuidle: using governor menu Oct 2 20:06:54.762470 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 20:06:54.762477 kernel: ASID allocator initialised with 32768 entries Oct 2 20:06:54.762484 kernel: ACPI: bus type PCI registered Oct 2 20:06:54.762491 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 20:06:54.762499 kernel: Serial: AMBA PL011 UART driver Oct 2 20:06:54.762505 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 20:06:54.762512 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 20:06:54.762519 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 20:06:54.762525 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 20:06:54.762532 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 20:06:54.762539 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 20:06:54.762545 kernel: ACPI: Added _OSI(Module Device) Oct 2 20:06:54.762552 kernel: ACPI: Added _OSI(Processor Device) Oct 2 20:06:54.762559 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 20:06:54.762566 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 20:06:54.762572 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 20:06:54.762579 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 20:06:54.762585 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 20:06:54.762592 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 20:06:54.762598 kernel: ACPI: Interpreter enabled Oct 2 20:06:54.762605 kernel: ACPI: Using GIC for interrupt routing Oct 2 20:06:54.762611 kernel: ACPI: MCFG table detected, 1 entries Oct 2 20:06:54.762620 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Oct 2 20:06:54.762626 kernel: printk: console [ttyAMA0] enabled Oct 2 20:06:54.762633 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 20:06:54.762791 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 20:06:54.762863 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 20:06:54.762936 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 20:06:54.763001 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Oct 2 20:06:54.763065 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Oct 2 20:06:54.763073 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Oct 2 20:06:54.763080 kernel: PCI host bridge to bus 0000:00 Oct 2 20:06:54.763146 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Oct 2 20:06:54.763200 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 20:06:54.763252 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Oct 2 20:06:54.763304 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 20:06:54.763377 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Oct 2 20:06:54.763450 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 20:06:54.763509 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Oct 2 20:06:54.763570 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Oct 2 20:06:54.763630 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 20:06:54.763688 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 20:06:54.763747 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Oct 2 20:06:54.763819 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Oct 2 20:06:54.763877 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Oct 2 20:06:54.763936 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 20:06:54.763989 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Oct 2 20:06:54.763998 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 20:06:54.764005 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 20:06:54.764012 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 20:06:54.764021 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 20:06:54.764027 kernel: iommu: Default domain type: Translated Oct 2 20:06:54.764034 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 20:06:54.764040 kernel: vgaarb: loaded Oct 2 20:06:54.764047 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 20:06:54.764054 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 20:06:54.764061 kernel: PTP clock support registered Oct 2 20:06:54.764068 kernel: Registered efivars operations Oct 2 20:06:54.764075 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 20:06:54.764081 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 20:06:54.764089 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 20:06:54.764096 kernel: pnp: PnP ACPI init Oct 2 20:06:54.764159 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Oct 2 20:06:54.764168 kernel: pnp: PnP ACPI: found 1 devices Oct 2 20:06:54.764175 kernel: NET: Registered PF_INET protocol family Oct 2 20:06:54.764182 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 20:06:54.764189 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 20:06:54.764196 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 20:06:54.764205 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 20:06:54.764211 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 20:06:54.764218 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 20:06:54.764224 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 20:06:54.764231 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 20:06:54.764238 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 20:06:54.764244 kernel: PCI: CLS 0 bytes, default 64 Oct 2 20:06:54.764251 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Oct 2 20:06:54.764258 kernel: kvm [1]: HYP mode not available Oct 2 20:06:54.764266 kernel: Initialise system trusted keyrings Oct 2 20:06:54.764272 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 20:06:54.764279 kernel: Key type asymmetric registered Oct 2 20:06:54.764285 kernel: Asymmetric key parser 'x509' registered Oct 2 20:06:54.764292 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 20:06:54.764298 kernel: io scheduler mq-deadline registered Oct 2 20:06:54.764305 kernel: io scheduler kyber registered Oct 2 20:06:54.764311 kernel: io scheduler bfq registered Oct 2 20:06:54.764318 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 20:06:54.764326 kernel: ACPI: button: Power Button [PWRB] Oct 2 20:06:54.764333 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 20:06:54.764393 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Oct 2 20:06:54.764401 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 20:06:54.764408 kernel: thunder_xcv, ver 1.0 Oct 2 20:06:54.764415 kernel: thunder_bgx, ver 1.0 Oct 2 20:06:54.764421 kernel: nicpf, ver 1.0 Oct 2 20:06:54.764428 kernel: nicvf, ver 1.0 Oct 2 20:06:54.764495 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 20:06:54.764552 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T20:06:54 UTC (1696277214) Oct 2 20:06:54.764561 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 20:06:54.764567 kernel: NET: Registered PF_INET6 protocol family Oct 2 20:06:54.764574 kernel: Segment Routing with IPv6 Oct 2 20:06:54.764580 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 20:06:54.764587 kernel: NET: Registered PF_PACKET protocol family Oct 2 20:06:54.764593 kernel: Key type dns_resolver registered Oct 2 20:06:54.764599 kernel: registered taskstats version 1 Oct 2 20:06:54.764608 kernel: Loading compiled-in X.509 certificates Oct 2 20:06:54.764615 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 20:06:54.764621 kernel: Key type .fscrypt registered Oct 2 20:06:54.764627 kernel: Key type fscrypt-provisioning registered Oct 2 20:06:54.764634 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 20:06:54.764641 kernel: ima: Allocated hash algorithm: sha1 Oct 2 20:06:54.764647 kernel: ima: No architecture policies found Oct 2 20:06:54.764654 kernel: Freeing unused kernel memory: 34560K Oct 2 20:06:54.764660 kernel: Run /init as init process Oct 2 20:06:54.764669 kernel: with arguments: Oct 2 20:06:54.764675 kernel: /init Oct 2 20:06:54.764682 kernel: with environment: Oct 2 20:06:54.764688 kernel: HOME=/ Oct 2 20:06:54.764695 kernel: TERM=linux Oct 2 20:06:54.764701 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 20:06:54.764710 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:06:54.764719 systemd[1]: Detected virtualization kvm. Oct 2 20:06:54.764727 systemd[1]: Detected architecture arm64. Oct 2 20:06:54.764734 systemd[1]: Running in initrd. Oct 2 20:06:54.764741 systemd[1]: No hostname configured, using default hostname. Oct 2 20:06:54.764748 systemd[1]: Hostname set to . Oct 2 20:06:54.764755 systemd[1]: Initializing machine ID from VM UUID. Oct 2 20:06:54.764770 systemd[1]: Queued start job for default target initrd.target. Oct 2 20:06:54.764777 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:06:54.764784 systemd[1]: Reached target cryptsetup.target. Oct 2 20:06:54.764792 systemd[1]: Reached target paths.target. Oct 2 20:06:54.764799 systemd[1]: Reached target slices.target. Oct 2 20:06:54.764806 systemd[1]: Reached target swap.target. Oct 2 20:06:54.764813 systemd[1]: Reached target timers.target. Oct 2 20:06:54.764820 systemd[1]: Listening on iscsid.socket. Oct 2 20:06:54.764827 systemd[1]: Listening on iscsiuio.socket. Oct 2 20:06:54.764834 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 20:06:54.764842 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 20:06:54.764849 systemd[1]: Listening on systemd-journald.socket. Oct 2 20:06:54.764856 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:06:54.764862 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:06:54.764869 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:06:54.764876 systemd[1]: Reached target sockets.target. Oct 2 20:06:54.764883 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:06:54.764895 systemd[1]: Finished network-cleanup.service. Oct 2 20:06:54.764903 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 20:06:54.764912 systemd[1]: Starting systemd-journald.service... Oct 2 20:06:54.764919 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:06:54.764926 systemd[1]: Starting systemd-resolved.service... Oct 2 20:06:54.764933 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 20:06:54.764940 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:06:54.764947 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 20:06:54.764954 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:06:54.764961 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 20:06:54.764969 kernel: audit: type=1130 audit(1696277214.762:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.764980 systemd-journald[290]: Journal started Oct 2 20:06:54.765019 systemd-journald[290]: Runtime Journal (/run/log/journal/60a5acf5758b49b8b00d7da581f7b10e) is 6.0M, max 48.7M, 42.6M free. Oct 2 20:06:54.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.757027 systemd-modules-load[291]: Inserted module 'overlay' Oct 2 20:06:54.766923 systemd[1]: Started systemd-journald.service. Oct 2 20:06:54.766000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.769301 kernel: audit: type=1130 audit(1696277214.766:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.769594 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:06:54.772906 kernel: audit: type=1130 audit(1696277214.770:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.773140 systemd-resolved[292]: Positive Trust Anchors: Oct 2 20:06:54.773153 systemd-resolved[292]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:06:54.773180 systemd-resolved[292]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:06:54.773913 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 20:06:54.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.777608 systemd-resolved[292]: Defaulting to hostname 'linux'. Oct 2 20:06:54.785331 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 20:06:54.785349 kernel: audit: type=1130 audit(1696277214.780:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.785359 kernel: Bridge firewalling registered Oct 2 20:06:54.778416 systemd[1]: Started systemd-resolved.service. Oct 2 20:06:54.783547 systemd[1]: Reached target nss-lookup.target. Oct 2 20:06:54.783987 systemd-modules-load[291]: Inserted module 'br_netfilter' Oct 2 20:06:54.793786 kernel: SCSI subsystem initialized Oct 2 20:06:54.794220 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 20:06:54.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.797258 systemd[1]: Starting dracut-cmdline.service... Oct 2 20:06:54.798324 kernel: audit: type=1130 audit(1696277214.794:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.801493 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 20:06:54.801538 kernel: device-mapper: uevent: version 1.0.3 Oct 2 20:06:54.801549 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 20:06:54.803788 systemd-modules-load[291]: Inserted module 'dm_multipath' Oct 2 20:06:54.804598 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:06:54.808376 kernel: audit: type=1130 audit(1696277214.804:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.804000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.807655 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:06:54.814616 dracut-cmdline[308]: dracut-dracut-053 Oct 2 20:06:54.814616 dracut-cmdline[308]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 20:06:54.819330 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:06:54.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.823240 kernel: audit: type=1130 audit(1696277214.819:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.882793 kernel: Loading iSCSI transport class v2.0-870. Oct 2 20:06:54.892797 kernel: iscsi: registered transport (tcp) Oct 2 20:06:54.905777 kernel: iscsi: registered transport (qla4xxx) Oct 2 20:06:54.905806 kernel: QLogic iSCSI HBA Driver Oct 2 20:06:54.951113 systemd[1]: Finished dracut-cmdline.service. Oct 2 20:06:54.953794 kernel: audit: type=1130 audit(1696277214.950:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.952541 systemd[1]: Starting dracut-pre-udev.service... Oct 2 20:06:54.999788 kernel: raid6: neonx8 gen() 13037 MB/s Oct 2 20:06:55.016775 kernel: raid6: neonx8 xor() 10647 MB/s Oct 2 20:06:55.033776 kernel: raid6: neonx4 gen() 13240 MB/s Oct 2 20:06:55.050778 kernel: raid6: neonx4 xor() 11127 MB/s Oct 2 20:06:55.067778 kernel: raid6: neonx2 gen() 12716 MB/s Oct 2 20:06:55.084777 kernel: raid6: neonx2 xor() 10064 MB/s Oct 2 20:06:55.101787 kernel: raid6: neonx1 gen() 10379 MB/s Oct 2 20:06:55.118785 kernel: raid6: neonx1 xor() 8685 MB/s Oct 2 20:06:55.135786 kernel: raid6: int64x8 gen() 6225 MB/s Oct 2 20:06:55.152784 kernel: raid6: int64x8 xor() 3504 MB/s Oct 2 20:06:55.169788 kernel: raid6: int64x4 gen() 7161 MB/s Oct 2 20:06:55.186788 kernel: raid6: int64x4 xor() 3820 MB/s Oct 2 20:06:55.203792 kernel: raid6: int64x2 gen() 6070 MB/s Oct 2 20:06:55.220780 kernel: raid6: int64x2 xor() 3284 MB/s Oct 2 20:06:55.237806 kernel: raid6: int64x1 gen() 4990 MB/s Oct 2 20:06:55.255007 kernel: raid6: int64x1 xor() 2602 MB/s Oct 2 20:06:55.255026 kernel: raid6: using algorithm neonx4 gen() 13240 MB/s Oct 2 20:06:55.255036 kernel: raid6: .... xor() 11127 MB/s, rmw enabled Oct 2 20:06:55.255044 kernel: raid6: using neon recovery algorithm Oct 2 20:06:55.265782 kernel: xor: measuring software checksum speed Oct 2 20:06:55.267066 kernel: 8regs : 17116 MB/sec Oct 2 20:06:55.267079 kernel: 32regs : 20418 MB/sec Oct 2 20:06:55.267796 kernel: arm64_neon : 27826 MB/sec Oct 2 20:06:55.267807 kernel: xor: using function: arm64_neon (27826 MB/sec) Oct 2 20:06:55.326793 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 20:06:55.339950 systemd[1]: Finished dracut-pre-udev.service. Oct 2 20:06:55.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:55.342000 audit: BPF prog-id=7 op=LOAD Oct 2 20:06:55.342000 audit: BPF prog-id=8 op=LOAD Oct 2 20:06:55.343382 systemd[1]: Starting systemd-udevd.service... Oct 2 20:06:55.344465 kernel: audit: type=1130 audit(1696277215.339:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:55.360916 systemd-udevd[491]: Using default interface naming scheme 'v252'. Oct 2 20:06:55.364266 systemd[1]: Started systemd-udevd.service. Oct 2 20:06:55.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:55.366436 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 20:06:55.380955 dracut-pre-trigger[498]: rd.md=0: removing MD RAID activation Oct 2 20:06:55.414682 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 20:06:55.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:55.416282 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:06:55.455071 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:06:55.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:55.487961 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 20:06:55.489775 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 20:06:55.509794 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (541) Oct 2 20:06:55.515548 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 20:06:55.516428 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 20:06:55.520500 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 20:06:55.523712 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 20:06:55.527941 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:06:55.529431 systemd[1]: Starting disk-uuid.service... Oct 2 20:06:55.537797 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 20:06:56.550700 disk-uuid[564]: The operation has completed successfully. Oct 2 20:06:56.551941 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 20:06:56.574062 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 20:06:56.573000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.574171 systemd[1]: Finished disk-uuid.service. Oct 2 20:06:56.575589 systemd[1]: Starting verity-setup.service... Oct 2 20:06:56.589786 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 20:06:56.611664 systemd[1]: Found device dev-mapper-usr.device. Oct 2 20:06:56.613870 systemd[1]: Mounting sysusr-usr.mount... Oct 2 20:06:56.616572 systemd[1]: Finished verity-setup.service. Oct 2 20:06:56.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.672787 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 20:06:56.673286 systemd[1]: Mounted sysusr-usr.mount. Oct 2 20:06:56.673957 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 20:06:56.674666 systemd[1]: Starting ignition-setup.service... Oct 2 20:06:56.676330 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 20:06:56.685896 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 20:06:56.685945 kernel: BTRFS info (device vda6): using free space tree Oct 2 20:06:56.685956 kernel: BTRFS info (device vda6): has skinny extents Oct 2 20:06:56.695440 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 20:06:56.701260 systemd[1]: Finished ignition-setup.service. Oct 2 20:06:56.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.702601 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 20:06:56.786716 ignition[639]: Ignition 2.14.0 Oct 2 20:06:56.787373 ignition[639]: Stage: fetch-offline Oct 2 20:06:56.787424 ignition[639]: no configs at "/usr/lib/ignition/base.d" Oct 2 20:06:56.788428 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 20:06:56.788000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.789000 audit: BPF prog-id=9 op=LOAD Oct 2 20:06:56.787434 ignition[639]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 20:06:56.787570 ignition[639]: parsed url from cmdline: "" Oct 2 20:06:56.790932 systemd[1]: Starting systemd-networkd.service... Oct 2 20:06:56.787573 ignition[639]: no config URL provided Oct 2 20:06:56.787577 ignition[639]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:06:56.787584 ignition[639]: no config at "/usr/lib/ignition/user.ign" Oct 2 20:06:56.787601 ignition[639]: op(1): [started] loading QEMU firmware config module Oct 2 20:06:56.787606 ignition[639]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 20:06:56.795000 ignition[639]: op(1): [finished] loading QEMU firmware config module Oct 2 20:06:56.815497 systemd-networkd[740]: lo: Link UP Oct 2 20:06:56.815508 systemd-networkd[740]: lo: Gained carrier Oct 2 20:06:56.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.815888 systemd-networkd[740]: Enumeration completed Oct 2 20:06:56.816069 systemd-networkd[740]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:06:56.816169 systemd[1]: Started systemd-networkd.service. Oct 2 20:06:56.817212 systemd-networkd[740]: eth0: Link UP Oct 2 20:06:56.817215 systemd-networkd[740]: eth0: Gained carrier Oct 2 20:06:56.817233 systemd[1]: Reached target network.target. Oct 2 20:06:56.819208 systemd[1]: Starting iscsiuio.service... Oct 2 20:06:56.828749 systemd[1]: Started iscsiuio.service. Oct 2 20:06:56.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.831005 systemd[1]: Starting iscsid.service... Oct 2 20:06:56.836840 iscsid[745]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:06:56.836840 iscsid[745]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 20:06:56.836840 iscsid[745]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 20:06:56.836840 iscsid[745]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 20:06:56.836840 iscsid[745]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:06:56.836840 iscsid[745]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 20:06:56.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.840298 systemd[1]: Started iscsid.service. Oct 2 20:06:56.840331 systemd-networkd[740]: eth0: DHCPv4 address 10.0.0.8/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 20:06:56.844110 systemd[1]: Starting dracut-initqueue.service... Oct 2 20:06:56.851953 ignition[639]: parsing config with SHA512: 51335f6902b9a9b61ff31ac3119143d39dc8a869495d2373148c5c7aeb74f2470c52138aff2b92298c46ef522ec8cdb2a9e71c0989fc8dd942ba954130c18f18 Oct 2 20:06:56.857826 systemd[1]: Finished dracut-initqueue.service. Oct 2 20:06:56.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.858509 systemd[1]: Reached target remote-fs-pre.target. Oct 2 20:06:56.859360 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:06:56.860319 systemd[1]: Reached target remote-fs.target. Oct 2 20:06:56.861997 systemd[1]: Starting dracut-pre-mount.service... Oct 2 20:06:56.871000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.871859 systemd[1]: Finished dracut-pre-mount.service. Oct 2 20:06:56.881039 unknown[639]: fetched base config from "system" Oct 2 20:06:56.881050 unknown[639]: fetched user config from "qemu" Oct 2 20:06:56.881635 ignition[639]: fetch-offline: fetch-offline passed Oct 2 20:06:56.881126 systemd-resolved[292]: Detected conflict on linux IN A 10.0.0.8 Oct 2 20:06:56.881695 ignition[639]: Ignition finished successfully Oct 2 20:06:56.881135 systemd-resolved[292]: Hostname conflict, changing published hostname from 'linux' to 'linux11'. Oct 2 20:06:56.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.883811 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 20:06:56.884675 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 20:06:56.885426 systemd[1]: Starting ignition-kargs.service... Oct 2 20:06:56.896631 ignition[761]: Ignition 2.14.0 Oct 2 20:06:56.896641 ignition[761]: Stage: kargs Oct 2 20:06:56.896732 ignition[761]: no configs at "/usr/lib/ignition/base.d" Oct 2 20:06:56.896741 ignition[761]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 20:06:56.897728 ignition[761]: kargs: kargs passed Oct 2 20:06:56.900000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.899216 systemd[1]: Finished ignition-kargs.service. Oct 2 20:06:56.897806 ignition[761]: Ignition finished successfully Oct 2 20:06:56.901086 systemd[1]: Starting ignition-disks.service... Oct 2 20:06:56.909534 ignition[767]: Ignition 2.14.0 Oct 2 20:06:56.909550 ignition[767]: Stage: disks Oct 2 20:06:56.909647 ignition[767]: no configs at "/usr/lib/ignition/base.d" Oct 2 20:06:56.909657 ignition[767]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 20:06:56.910649 ignition[767]: disks: disks passed Oct 2 20:06:56.910693 ignition[767]: Ignition finished successfully Oct 2 20:06:56.913695 systemd[1]: Finished ignition-disks.service. Oct 2 20:06:56.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.914412 systemd[1]: Reached target initrd-root-device.target. Oct 2 20:06:56.915316 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:06:56.916396 systemd[1]: Reached target local-fs.target. Oct 2 20:06:56.917288 systemd[1]: Reached target sysinit.target. Oct 2 20:06:56.918170 systemd[1]: Reached target basic.target. Oct 2 20:06:56.920037 systemd[1]: Starting systemd-fsck-root.service... Oct 2 20:06:56.932419 systemd-fsck[775]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 20:06:56.937426 systemd[1]: Finished systemd-fsck-root.service. Oct 2 20:06:56.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.938908 systemd[1]: Mounting sysroot.mount... Oct 2 20:06:56.945776 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 20:06:56.946033 systemd[1]: Mounted sysroot.mount. Oct 2 20:06:56.946573 systemd[1]: Reached target initrd-root-fs.target. Oct 2 20:06:56.948350 systemd[1]: Mounting sysroot-usr.mount... Oct 2 20:06:56.949065 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 20:06:56.949113 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 20:06:56.949134 systemd[1]: Reached target ignition-diskful.target. Oct 2 20:06:56.951673 systemd[1]: Mounted sysroot-usr.mount. Oct 2 20:06:56.952982 systemd[1]: Starting initrd-setup-root.service... Oct 2 20:06:56.958395 initrd-setup-root[785]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 20:06:56.963310 initrd-setup-root[793]: cut: /sysroot/etc/group: No such file or directory Oct 2 20:06:56.967775 initrd-setup-root[801]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 20:06:56.972361 initrd-setup-root[809]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 20:06:57.000259 systemd[1]: Finished initrd-setup-root.service. Oct 2 20:06:57.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:57.001527 systemd[1]: Starting ignition-mount.service... Oct 2 20:06:57.002655 systemd[1]: Starting sysroot-boot.service... Oct 2 20:06:57.009223 bash[827]: umount: /sysroot/usr/share/oem: not mounted. Oct 2 20:06:57.019249 ignition[829]: INFO : Ignition 2.14.0 Oct 2 20:06:57.019249 ignition[829]: INFO : Stage: mount Oct 2 20:06:57.020400 ignition[829]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 20:06:57.020400 ignition[829]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 20:06:57.020400 ignition[829]: INFO : mount: mount passed Oct 2 20:06:57.020400 ignition[829]: INFO : Ignition finished successfully Oct 2 20:06:57.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:57.021014 systemd[1]: Finished ignition-mount.service. Oct 2 20:06:57.023780 systemd[1]: Finished sysroot-boot.service. Oct 2 20:06:57.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:57.623236 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:06:57.629771 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (837) Oct 2 20:06:57.631060 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 20:06:57.631073 kernel: BTRFS info (device vda6): using free space tree Oct 2 20:06:57.631088 kernel: BTRFS info (device vda6): has skinny extents Oct 2 20:06:57.634248 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:06:57.635554 systemd[1]: Starting ignition-files.service... Oct 2 20:06:57.652442 ignition[857]: INFO : Ignition 2.14.0 Oct 2 20:06:57.652442 ignition[857]: INFO : Stage: files Oct 2 20:06:57.653583 ignition[857]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 20:06:57.653583 ignition[857]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 20:06:57.653583 ignition[857]: DEBUG : files: compiled without relabeling support, skipping Oct 2 20:06:57.656112 ignition[857]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 20:06:57.656112 ignition[857]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 20:06:57.658682 ignition[857]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 20:06:57.659720 ignition[857]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 20:06:57.659720 ignition[857]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 20:06:57.659461 unknown[857]: wrote ssh authorized keys file for user: core Oct 2 20:06:57.662601 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 20:06:57.662601 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Oct 2 20:06:57.845968 systemd-networkd[740]: eth0: Gained IPv6LL Oct 2 20:06:57.892162 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 20:06:58.206757 ignition[857]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Oct 2 20:06:58.209691 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 20:06:58.211533 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 20:06:58.213378 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Oct 2 20:06:58.373416 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 20:06:58.494833 ignition[857]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Oct 2 20:06:58.497810 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 20:06:58.497810 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:06:58.497810 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubeadm: attempt #1 Oct 2 20:06:58.541422 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 20:06:59.008574 ignition[857]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 5a08b81f9cc82d3cce21130856ca63b8dafca9149d9775dd25b376eb0f18209aa0e4a47c0a6d7e6fb1316aacd5d59dec770f26c09120c866949d70bc415518b3 Oct 2 20:06:59.008574 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:06:59.011770 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:06:59.011770 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubelet: attempt #1 Oct 2 20:06:59.050789 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 20:06:59.656840 ignition[857]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 5a898ef543a6482895101ea58e33602e3c0a7682d322aaf08ac3dc8a5a3c8da8f09600d577024549288f8cebb1a86f9c79927796b69a3d8fe989ca8f12b147d6 Oct 2 20:06:59.656840 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:06:59.659901 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:06:59.659901 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubectl: attempt #1 Oct 2 20:06:59.695450 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 20:06:59.991965 ignition[857]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 6a5c9c02a29126949f096415bb1761a0c0ad44168e2ab3d0409982701da58f96223bec354828ddf958e945ef1ce63c0ad41e77cbcbcce0756163e71b4fbae432 Oct 2 20:06:59.991965 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:06:59.994972 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:06:59.994972 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:06:59.994972 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:06:59.994972 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 20:07:00.241837 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 20:07:00.665513 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:07:00.666936 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 20:07:00.666936 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 20:07:00.666936 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:07:00.666936 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:07:00.666936 ignition[857]: INFO : files: op(c): [started] processing unit "prepare-critools.service" Oct 2 20:07:00.666936 ignition[857]: INFO : files: op(c): op(d): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:07:00.666936 ignition[857]: INFO : files: op(c): op(d): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:07:00.666936 ignition[857]: INFO : files: op(c): [finished] processing unit "prepare-critools.service" Oct 2 20:07:00.666936 ignition[857]: INFO : files: op(e): [started] processing unit "coreos-metadata.service" Oct 2 20:07:00.666936 ignition[857]: INFO : files: op(e): op(f): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 20:07:00.666936 ignition[857]: INFO : files: op(e): op(f): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 20:07:00.666936 ignition[857]: INFO : files: op(e): [finished] processing unit "coreos-metadata.service" Oct 2 20:07:00.666936 ignition[857]: INFO : files: op(10): [started] processing unit "prepare-cni-plugins.service" Oct 2 20:07:00.666936 ignition[857]: INFO : files: op(10): op(11): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:07:00.666936 ignition[857]: INFO : files: op(10): op(11): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:07:00.666936 ignition[857]: INFO : files: op(10): [finished] processing unit "prepare-cni-plugins.service" Oct 2 20:07:00.666936 ignition[857]: INFO : files: op(12): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 20:07:00.666936 ignition[857]: INFO : files: op(12): op(13): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 20:07:00.715756 ignition[857]: INFO : files: op(12): op(13): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 20:07:00.716796 ignition[857]: INFO : files: op(12): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 20:07:00.716796 ignition[857]: INFO : files: op(14): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:07:00.716796 ignition[857]: INFO : files: op(14): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:07:00.716796 ignition[857]: INFO : files: op(15): [started] setting preset to enabled for "prepare-critools.service" Oct 2 20:07:00.716796 ignition[857]: INFO : files: op(15): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 20:07:00.716796 ignition[857]: INFO : files: createResultFile: createFiles: op(16): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:07:00.716796 ignition[857]: INFO : files: createResultFile: createFiles: op(16): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:07:00.716796 ignition[857]: INFO : files: files passed Oct 2 20:07:00.716796 ignition[857]: INFO : Ignition finished successfully Oct 2 20:07:00.737298 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 20:07:00.737322 kernel: audit: type=1130 audit(1696277220.718:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.737334 kernel: audit: type=1130 audit(1696277220.725:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.737344 kernel: audit: type=1131 audit(1696277220.725:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.737353 kernel: audit: type=1130 audit(1696277220.732:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.725000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.725000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.717658 systemd[1]: Finished ignition-files.service. Oct 2 20:07:00.719981 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 20:07:00.739407 initrd-setup-root-after-ignition[882]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 20:07:00.721007 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 20:07:00.741794 initrd-setup-root-after-ignition[884]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 20:07:00.721633 systemd[1]: Starting ignition-quench.service... Oct 2 20:07:00.725052 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 20:07:00.725130 systemd[1]: Finished ignition-quench.service. Oct 2 20:07:00.732139 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 20:07:00.733669 systemd[1]: Reached target ignition-complete.target. Oct 2 20:07:00.737033 systemd[1]: Starting initrd-parse-etc.service... Oct 2 20:07:00.751424 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 20:07:00.751517 systemd[1]: Finished initrd-parse-etc.service. Oct 2 20:07:00.756369 kernel: audit: type=1130 audit(1696277220.751:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.756393 kernel: audit: type=1131 audit(1696277220.751:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.751000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.752758 systemd[1]: Reached target initrd-fs.target. Oct 2 20:07:00.756841 systemd[1]: Reached target initrd.target. Oct 2 20:07:00.757737 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 20:07:00.758501 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 20:07:00.770265 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 20:07:00.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.771594 systemd[1]: Starting initrd-cleanup.service... Oct 2 20:07:00.773902 kernel: audit: type=1130 audit(1696277220.770:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.780738 systemd[1]: Stopped target nss-lookup.target. Oct 2 20:07:00.781490 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 20:07:00.782541 systemd[1]: Stopped target timers.target. Oct 2 20:07:00.783532 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 20:07:00.783000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.786785 kernel: audit: type=1131 audit(1696277220.783:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.783635 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 20:07:00.784572 systemd[1]: Stopped target initrd.target. Oct 2 20:07:00.787340 systemd[1]: Stopped target basic.target. Oct 2 20:07:00.788310 systemd[1]: Stopped target ignition-complete.target. Oct 2 20:07:00.789316 systemd[1]: Stopped target ignition-diskful.target. Oct 2 20:07:00.790540 systemd[1]: Stopped target initrd-root-device.target. Oct 2 20:07:00.791894 systemd[1]: Stopped target remote-fs.target. Oct 2 20:07:00.792934 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 20:07:00.794000 systemd[1]: Stopped target sysinit.target. Oct 2 20:07:00.794953 systemd[1]: Stopped target local-fs.target. Oct 2 20:07:00.796020 systemd[1]: Stopped target local-fs-pre.target. Oct 2 20:07:00.797016 systemd[1]: Stopped target swap.target. Oct 2 20:07:00.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.797951 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 20:07:00.802179 kernel: audit: type=1131 audit(1696277220.798:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.798047 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 20:07:00.802000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.799144 systemd[1]: Stopped target cryptsetup.target. Oct 2 20:07:00.805737 kernel: audit: type=1131 audit(1696277220.802:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.805000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.801646 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 20:07:00.801739 systemd[1]: Stopped dracut-initqueue.service. Oct 2 20:07:00.802773 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 20:07:00.802871 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 20:07:00.805431 systemd[1]: Stopped target paths.target. Oct 2 20:07:00.806283 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 20:07:00.807803 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 20:07:00.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.808926 systemd[1]: Stopped target slices.target. Oct 2 20:07:00.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.809858 systemd[1]: Stopped target sockets.target. Oct 2 20:07:00.810730 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 20:07:00.810860 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 20:07:00.816752 iscsid[745]: iscsid shutting down. Oct 2 20:07:00.812374 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 20:07:00.812461 systemd[1]: Stopped ignition-files.service. Oct 2 20:07:00.814483 systemd[1]: Stopping ignition-mount.service... Oct 2 20:07:00.818000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.822000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.815219 systemd[1]: Stopping iscsid.service... Oct 2 20:07:00.824710 ignition[897]: INFO : Ignition 2.14.0 Oct 2 20:07:00.824710 ignition[897]: INFO : Stage: umount Oct 2 20:07:00.824710 ignition[897]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 20:07:00.824710 ignition[897]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 20:07:00.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.825000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.825000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.827000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.816992 systemd[1]: Stopping sysroot-boot.service... Oct 2 20:07:00.831196 ignition[897]: INFO : umount: umount passed Oct 2 20:07:00.831196 ignition[897]: INFO : Ignition finished successfully Oct 2 20:07:00.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.817793 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 20:07:00.833000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.834000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.817952 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 20:07:00.819122 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 20:07:00.819205 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 20:07:00.821558 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 20:07:00.837000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.821644 systemd[1]: Stopped iscsid.service. Oct 2 20:07:00.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.822540 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 20:07:00.822606 systemd[1]: Closed iscsid.socket. Oct 2 20:07:00.840000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.823817 systemd[1]: Stopping iscsiuio.service... Oct 2 20:07:00.824511 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 20:07:00.824585 systemd[1]: Finished initrd-cleanup.service. Oct 2 20:07:00.825432 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 20:07:00.825505 systemd[1]: Stopped iscsiuio.service. Oct 2 20:07:00.845000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.826269 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 20:07:00.846000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.826335 systemd[1]: Stopped ignition-mount.service. Oct 2 20:07:00.827758 systemd[1]: Stopped target network.target. Oct 2 20:07:00.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.828902 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 20:07:00.828932 systemd[1]: Closed iscsiuio.socket. Oct 2 20:07:00.830673 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 20:07:00.830707 systemd[1]: Stopped ignition-disks.service. Oct 2 20:07:00.832048 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 20:07:00.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.832083 systemd[1]: Stopped ignition-kargs.service. Oct 2 20:07:00.833116 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 20:07:00.833148 systemd[1]: Stopped ignition-setup.service. Oct 2 20:07:00.834287 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:07:00.835453 systemd[1]: Stopping systemd-resolved.service... Oct 2 20:07:00.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.837338 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 20:07:00.857000 audit: BPF prog-id=6 op=UNLOAD Oct 2 20:07:00.837774 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 20:07:00.859000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.837854 systemd[1]: Stopped sysroot-boot.service. Oct 2 20:07:00.838551 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 20:07:00.838588 systemd[1]: Stopped initrd-setup-root.service. Oct 2 20:07:00.862000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.838828 systemd-networkd[740]: eth0: DHCPv6 lease lost Oct 2 20:07:00.863000 audit: BPF prog-id=9 op=UNLOAD Oct 2 20:07:00.863000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.840349 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:07:00.864000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.840434 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:07:00.841667 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 20:07:00.841696 systemd[1]: Closed systemd-networkd.socket. Oct 2 20:07:00.844136 systemd[1]: Stopping network-cleanup.service... Oct 2 20:07:00.868000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.844939 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 20:07:00.869000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.844991 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 20:07:00.871000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.846540 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 20:07:00.846573 systemd[1]: Stopped systemd-sysctl.service. Oct 2 20:07:00.848003 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 20:07:00.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.873000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:00.848063 systemd[1]: Stopped systemd-modules-load.service. Oct 2 20:07:00.849157 systemd[1]: Stopping systemd-udevd.service... Oct 2 20:07:00.853161 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 20:07:00.853566 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 20:07:00.853642 systemd[1]: Stopped systemd-resolved.service. Oct 2 20:07:00.857217 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 20:07:00.857314 systemd[1]: Stopped network-cleanup.service. Oct 2 20:07:00.858678 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 20:07:00.858860 systemd[1]: Stopped systemd-udevd.service. Oct 2 20:07:00.859967 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 20:07:00.860003 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 20:07:00.860826 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 20:07:00.860851 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 20:07:00.861709 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 20:07:00.861742 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 20:07:00.862806 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 20:07:00.862837 systemd[1]: Stopped dracut-cmdline.service. Oct 2 20:07:00.863781 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 20:07:00.863815 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 20:07:00.866020 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 20:07:00.867225 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 20:07:00.867279 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 20:07:00.869141 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 20:07:00.869180 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 20:07:00.870009 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 20:07:00.870050 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 20:07:00.872159 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 20:07:00.872570 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 20:07:00.872648 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 20:07:00.873831 systemd[1]: Reached target initrd-switch-root.target. Oct 2 20:07:00.875578 systemd[1]: Starting initrd-switch-root.service... Oct 2 20:07:00.883923 systemd[1]: Switching root. Oct 2 20:07:00.897951 systemd-journald[290]: Journal stopped Oct 2 20:07:02.969474 systemd-journald[290]: Received SIGTERM from PID 1 (systemd). Oct 2 20:07:02.969575 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 20:07:02.969587 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 20:07:02.969597 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 20:07:02.969610 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 20:07:02.969620 kernel: SELinux: policy capability open_perms=1 Oct 2 20:07:02.969629 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 20:07:02.969638 kernel: SELinux: policy capability always_check_network=0 Oct 2 20:07:02.969657 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 20:07:02.969667 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 20:07:02.969677 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 20:07:02.969686 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 20:07:02.969696 systemd[1]: Successfully loaded SELinux policy in 32.519ms. Oct 2 20:07:02.969736 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.945ms. Oct 2 20:07:02.969748 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:07:02.969785 systemd[1]: Detected virtualization kvm. Oct 2 20:07:02.969798 systemd[1]: Detected architecture arm64. Oct 2 20:07:02.969809 systemd[1]: Detected first boot. Oct 2 20:07:02.969819 systemd[1]: Initializing machine ID from VM UUID. Oct 2 20:07:02.969829 systemd[1]: Populated /etc with preset unit settings. Oct 2 20:07:02.969851 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:07:02.969869 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:07:02.969883 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:07:02.969894 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 20:07:02.969904 systemd[1]: Stopped initrd-switch-root.service. Oct 2 20:07:02.969915 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 20:07:02.969926 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 20:07:02.969937 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 20:07:02.969947 systemd[1]: Created slice system-getty.slice. Oct 2 20:07:02.969958 systemd[1]: Created slice system-modprobe.slice. Oct 2 20:07:02.969969 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 20:07:02.969979 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 20:07:02.969989 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 20:07:02.969999 systemd[1]: Created slice user.slice. Oct 2 20:07:02.970010 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:07:02.970020 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 20:07:02.970032 systemd[1]: Set up automount boot.automount. Oct 2 20:07:02.970042 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 20:07:02.970052 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 20:07:02.970062 systemd[1]: Stopped target initrd-fs.target. Oct 2 20:07:02.970073 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 20:07:02.970083 systemd[1]: Reached target integritysetup.target. Oct 2 20:07:02.970093 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:07:02.970109 systemd[1]: Reached target remote-fs.target. Oct 2 20:07:02.970120 systemd[1]: Reached target slices.target. Oct 2 20:07:02.970130 systemd[1]: Reached target swap.target. Oct 2 20:07:02.970157 systemd[1]: Reached target torcx.target. Oct 2 20:07:02.970169 systemd[1]: Reached target veritysetup.target. Oct 2 20:07:02.970180 systemd[1]: Listening on systemd-coredump.socket. Oct 2 20:07:02.970191 systemd[1]: Listening on systemd-initctl.socket. Oct 2 20:07:02.970201 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:07:02.970211 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:07:02.970221 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:07:02.970233 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 20:07:02.970244 systemd[1]: Mounting dev-hugepages.mount... Oct 2 20:07:02.970254 systemd[1]: Mounting dev-mqueue.mount... Oct 2 20:07:02.970360 systemd[1]: Mounting media.mount... Oct 2 20:07:02.970371 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 20:07:02.970382 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 20:07:02.970393 systemd[1]: Mounting tmp.mount... Oct 2 20:07:02.970403 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 20:07:02.970414 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 20:07:02.970437 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:07:02.970450 systemd[1]: Starting modprobe@configfs.service... Oct 2 20:07:02.970461 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 20:07:02.970471 systemd[1]: Starting modprobe@drm.service... Oct 2 20:07:02.970481 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 20:07:02.970491 systemd[1]: Starting modprobe@fuse.service... Oct 2 20:07:02.970502 systemd[1]: Starting modprobe@loop.service... Oct 2 20:07:02.970513 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 20:07:02.970523 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 20:07:02.970534 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 20:07:02.970544 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 20:07:02.970554 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 20:07:02.970564 systemd[1]: Stopped systemd-journald.service. Oct 2 20:07:02.970574 systemd[1]: Starting systemd-journald.service... Oct 2 20:07:02.970584 kernel: fuse: init (API version 7.34) Oct 2 20:07:02.970594 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:07:02.970605 systemd[1]: Starting systemd-network-generator.service... Oct 2 20:07:02.970615 kernel: loop: module loaded Oct 2 20:07:02.970630 systemd[1]: Starting systemd-remount-fs.service... Oct 2 20:07:02.970641 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:07:02.970651 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 20:07:02.970661 systemd[1]: Stopped verity-setup.service. Oct 2 20:07:02.970671 systemd[1]: Mounted dev-hugepages.mount. Oct 2 20:07:02.970789 systemd[1]: Mounted dev-mqueue.mount. Oct 2 20:07:02.970802 systemd[1]: Mounted media.mount. Oct 2 20:07:02.970812 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 20:07:02.970823 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 20:07:02.970835 systemd[1]: Mounted tmp.mount. Oct 2 20:07:02.970848 systemd-journald[994]: Journal started Oct 2 20:07:02.970905 systemd-journald[994]: Runtime Journal (/run/log/journal/60a5acf5758b49b8b00d7da581f7b10e) is 6.0M, max 48.7M, 42.6M free. Oct 2 20:07:00.954000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 20:07:01.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:07:01.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:07:01.116000 audit: BPF prog-id=10 op=LOAD Oct 2 20:07:01.116000 audit: BPF prog-id=10 op=UNLOAD Oct 2 20:07:01.116000 audit: BPF prog-id=11 op=LOAD Oct 2 20:07:01.116000 audit: BPF prog-id=11 op=UNLOAD Oct 2 20:07:02.861000 audit: BPF prog-id=12 op=LOAD Oct 2 20:07:02.861000 audit: BPF prog-id=3 op=UNLOAD Oct 2 20:07:02.861000 audit: BPF prog-id=13 op=LOAD Oct 2 20:07:02.861000 audit: BPF prog-id=14 op=LOAD Oct 2 20:07:02.861000 audit: BPF prog-id=4 op=UNLOAD Oct 2 20:07:02.861000 audit: BPF prog-id=5 op=UNLOAD Oct 2 20:07:02.862000 audit: BPF prog-id=15 op=LOAD Oct 2 20:07:02.862000 audit: BPF prog-id=12 op=UNLOAD Oct 2 20:07:02.862000 audit: BPF prog-id=16 op=LOAD Oct 2 20:07:02.862000 audit: BPF prog-id=17 op=LOAD Oct 2 20:07:02.862000 audit: BPF prog-id=13 op=UNLOAD Oct 2 20:07:02.862000 audit: BPF prog-id=14 op=UNLOAD Oct 2 20:07:02.863000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.866000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.875000 audit: BPF prog-id=15 op=UNLOAD Oct 2 20:07:02.942000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.944000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.945000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.946000 audit: BPF prog-id=18 op=LOAD Oct 2 20:07:02.946000 audit: BPF prog-id=19 op=LOAD Oct 2 20:07:02.946000 audit: BPF prog-id=20 op=LOAD Oct 2 20:07:02.946000 audit: BPF prog-id=16 op=UNLOAD Oct 2 20:07:02.946000 audit: BPF prog-id=17 op=UNLOAD Oct 2 20:07:02.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.967000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 20:07:02.967000 audit[994]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=5 a1=fffff0a125f0 a2=4000 a3=1 items=0 ppid=1 pid=994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:02.967000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 20:07:01.163384 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:01Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:07:02.971797 systemd[1]: Started systemd-journald.service. Oct 2 20:07:02.860713 systemd[1]: Queued start job for default target multi-user.target. Oct 2 20:07:01.164006 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:01Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:07:02.860725 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 20:07:01.164025 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:01Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:07:02.863708 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 20:07:01.164055 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:01Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 20:07:01.164065 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:01Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 20:07:01.164095 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:01Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 20:07:02.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.164107 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:01Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 20:07:01.164340 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:01Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 20:07:01.164376 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:01Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:07:01.164388 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:01Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:07:01.164835 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:01Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 20:07:02.972758 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:07:01.164878 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:01Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 20:07:01.164897 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:01Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 20:07:01.164911 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:01Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 20:07:01.164928 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:01Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 20:07:01.164941 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:01Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 20:07:02.610219 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:02Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:07:02.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.610477 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:02Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:07:02.610568 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:02Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:07:02.610721 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:02Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:07:02.610793 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:02Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 20:07:02.610854 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2023-10-02T20:07:02Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 20:07:02.973914 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 20:07:02.974036 systemd[1]: Finished modprobe@configfs.service. Oct 2 20:07:02.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.974885 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 20:07:02.975007 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 20:07:02.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.974000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.975834 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 20:07:02.976338 systemd[1]: Finished modprobe@drm.service. Oct 2 20:07:02.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.977140 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 20:07:02.977533 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 20:07:02.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.977000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.978418 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 20:07:02.978561 systemd[1]: Finished modprobe@fuse.service. Oct 2 20:07:02.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.979490 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 20:07:02.979629 systemd[1]: Finished modprobe@loop.service. Oct 2 20:07:02.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.979000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.980924 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:07:02.980000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.981814 systemd[1]: Finished systemd-network-generator.service. Oct 2 20:07:02.981000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.982748 systemd[1]: Finished systemd-remount-fs.service. Oct 2 20:07:02.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.983864 systemd[1]: Reached target network-pre.target. Oct 2 20:07:02.985580 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 20:07:02.987304 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 20:07:02.988042 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 20:07:02.992171 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 20:07:02.993995 systemd[1]: Starting systemd-journal-flush.service... Oct 2 20:07:02.994687 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 20:07:02.995720 systemd[1]: Starting systemd-random-seed.service... Oct 2 20:07:02.996784 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 20:07:02.998045 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:07:02.999848 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 20:07:03.000735 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 20:07:03.003880 systemd[1]: Finished systemd-random-seed.service. Oct 2 20:07:03.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.004742 systemd[1]: Reached target first-boot-complete.target. Oct 2 20:07:03.009070 systemd-journald[994]: Time spent on flushing to /var/log/journal/60a5acf5758b49b8b00d7da581f7b10e is 14.769ms for 1002 entries. Oct 2 20:07:03.009070 systemd-journald[994]: System Journal (/var/log/journal/60a5acf5758b49b8b00d7da581f7b10e) is 8.0M, max 195.6M, 187.6M free. Oct 2 20:07:03.030950 systemd-journald[994]: Received client request to flush runtime journal. Oct 2 20:07:03.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.025000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.017584 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:07:03.019523 systemd[1]: Starting systemd-udev-settle.service... Oct 2 20:07:03.020410 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 20:07:03.022049 systemd[1]: Starting systemd-sysusers.service... Oct 2 20:07:03.026019 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:07:03.031811 systemd[1]: Finished systemd-journal-flush.service. Oct 2 20:07:03.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.034824 udevadm[1032]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 20:07:03.042696 systemd[1]: Finished systemd-sysusers.service. Oct 2 20:07:03.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.044463 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:07:03.063267 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:07:03.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.483000 audit: BPF prog-id=21 op=LOAD Oct 2 20:07:03.483000 audit: BPF prog-id=22 op=LOAD Oct 2 20:07:03.483000 audit: BPF prog-id=7 op=UNLOAD Oct 2 20:07:03.483000 audit: BPF prog-id=8 op=UNLOAD Oct 2 20:07:03.482576 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 20:07:03.484653 systemd[1]: Starting systemd-udevd.service... Oct 2 20:07:03.504656 systemd-udevd[1038]: Using default interface naming scheme 'v252'. Oct 2 20:07:03.515569 systemd[1]: Started systemd-udevd.service. Oct 2 20:07:03.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.516000 audit: BPF prog-id=23 op=LOAD Oct 2 20:07:03.520500 systemd[1]: Starting systemd-networkd.service... Oct 2 20:07:03.524000 audit: BPF prog-id=24 op=LOAD Oct 2 20:07:03.524000 audit: BPF prog-id=25 op=LOAD Oct 2 20:07:03.524000 audit: BPF prog-id=26 op=LOAD Oct 2 20:07:03.526416 systemd[1]: Starting systemd-userdbd.service... Oct 2 20:07:03.540318 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 20:07:03.570299 systemd[1]: Started systemd-userdbd.service. Oct 2 20:07:03.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.590206 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:07:03.638665 systemd-networkd[1046]: lo: Link UP Oct 2 20:07:03.638678 systemd-networkd[1046]: lo: Gained carrier Oct 2 20:07:03.639051 systemd-networkd[1046]: Enumeration completed Oct 2 20:07:03.639156 systemd[1]: Started systemd-networkd.service. Oct 2 20:07:03.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.640009 systemd-networkd[1046]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:07:03.646355 systemd-networkd[1046]: eth0: Link UP Oct 2 20:07:03.646368 systemd-networkd[1046]: eth0: Gained carrier Oct 2 20:07:03.650209 systemd[1]: Finished systemd-udev-settle.service. Oct 2 20:07:03.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.652197 systemd[1]: Starting lvm2-activation-early.service... Oct 2 20:07:03.664405 lvm[1071]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:07:03.675976 systemd-networkd[1046]: eth0: DHCPv4 address 10.0.0.8/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 20:07:03.701800 systemd[1]: Finished lvm2-activation-early.service. Oct 2 20:07:03.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.702614 systemd[1]: Reached target cryptsetup.target. Oct 2 20:07:03.704529 systemd[1]: Starting lvm2-activation.service... Oct 2 20:07:03.709193 lvm[1072]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:07:03.738782 systemd[1]: Finished lvm2-activation.service. Oct 2 20:07:03.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.739585 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:07:03.740282 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 20:07:03.740311 systemd[1]: Reached target local-fs.target. Oct 2 20:07:03.740841 systemd[1]: Reached target machines.target. Oct 2 20:07:03.742667 systemd[1]: Starting ldconfig.service... Oct 2 20:07:03.743613 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 20:07:03.743694 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:07:03.745019 systemd[1]: Starting systemd-boot-update.service... Oct 2 20:07:03.746897 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 20:07:03.749098 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 20:07:03.750775 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:07:03.750873 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:07:03.752033 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 20:07:03.755844 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1074 (bootctl) Oct 2 20:07:03.757096 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 20:07:03.758501 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 20:07:03.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.768409 systemd-tmpfiles[1077]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 20:07:03.772589 systemd-tmpfiles[1077]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 20:07:03.777227 systemd-tmpfiles[1077]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 20:07:03.875770 systemd-fsck[1082]: fsck.fat 4.2 (2021-01-31) Oct 2 20:07:03.875770 systemd-fsck[1082]: /dev/vda1: 236 files, 113463/258078 clusters Oct 2 20:07:03.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.877583 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 20:07:03.913995 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 20:07:03.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.964280 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 20:07:03.965671 systemd[1]: Mounting boot.mount... Oct 2 20:07:03.972849 ldconfig[1073]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 20:07:03.973193 systemd[1]: Mounted boot.mount. Oct 2 20:07:03.983034 systemd[1]: Finished ldconfig.service. Oct 2 20:07:03.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.995200 systemd[1]: Finished systemd-boot-update.service. Oct 2 20:07:04.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.051264 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 20:07:04.053376 systemd[1]: Starting audit-rules.service... Oct 2 20:07:04.055023 systemd[1]: Starting clean-ca-certificates.service... Oct 2 20:07:04.056939 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 20:07:04.057000 audit: BPF prog-id=27 op=LOAD Oct 2 20:07:04.059548 systemd[1]: Starting systemd-resolved.service... Oct 2 20:07:04.060000 audit: BPF prog-id=28 op=LOAD Oct 2 20:07:04.062258 systemd[1]: Starting systemd-timesyncd.service... Oct 2 20:07:04.063919 systemd[1]: Starting systemd-update-utmp.service... Oct 2 20:07:04.065052 systemd[1]: Finished clean-ca-certificates.service. Oct 2 20:07:04.066076 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 20:07:04.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.072000 audit[1097]: SYSTEM_BOOT pid=1097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.076248 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 20:07:04.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.077164 systemd[1]: Finished systemd-update-utmp.service. Oct 2 20:07:04.077000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.079035 systemd[1]: Starting systemd-update-done.service... Oct 2 20:07:04.086145 systemd[1]: Finished systemd-update-done.service. Oct 2 20:07:04.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.098000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 20:07:04.098000 audit[1107]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffea72e1b0 a2=420 a3=0 items=0 ppid=1086 pid=1107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:04.098000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 20:07:04.100011 augenrules[1107]: No rules Oct 2 20:07:04.100632 systemd[1]: Finished audit-rules.service. Oct 2 20:07:04.119312 systemd-resolved[1090]: Positive Trust Anchors: Oct 2 20:07:04.119322 systemd-resolved[1090]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:07:04.119349 systemd-resolved[1090]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:07:04.123171 systemd[1]: Started systemd-timesyncd.service. Oct 2 20:07:04.124148 systemd-timesyncd[1091]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 20:07:04.124192 systemd[1]: Reached target time-set.target. Oct 2 20:07:04.124522 systemd-timesyncd[1091]: Initial clock synchronization to Mon 2023-10-02 20:07:03.798977 UTC. Oct 2 20:07:04.136192 systemd-resolved[1090]: Defaulting to hostname 'linux'. Oct 2 20:07:04.137657 systemd[1]: Started systemd-resolved.service. Oct 2 20:07:04.138364 systemd[1]: Reached target network.target. Oct 2 20:07:04.138921 systemd[1]: Reached target nss-lookup.target. Oct 2 20:07:04.139469 systemd[1]: Reached target sysinit.target. Oct 2 20:07:04.140113 systemd[1]: Started motdgen.path. Oct 2 20:07:04.140608 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 20:07:04.141512 systemd[1]: Started logrotate.timer. Oct 2 20:07:04.142154 systemd[1]: Started mdadm.timer. Oct 2 20:07:04.142654 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 20:07:04.143280 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 20:07:04.143311 systemd[1]: Reached target paths.target. Oct 2 20:07:04.143828 systemd[1]: Reached target timers.target. Oct 2 20:07:04.144693 systemd[1]: Listening on dbus.socket. Oct 2 20:07:04.146372 systemd[1]: Starting docker.socket... Oct 2 20:07:04.149806 systemd[1]: Listening on sshd.socket. Oct 2 20:07:04.150494 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:07:04.151087 systemd[1]: Listening on docker.socket. Oct 2 20:07:04.151717 systemd[1]: Reached target sockets.target. Oct 2 20:07:04.152477 systemd[1]: Reached target basic.target. Oct 2 20:07:04.153183 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:07:04.153225 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:07:04.154436 systemd[1]: Starting containerd.service... Oct 2 20:07:04.156475 systemd[1]: Starting dbus.service... Oct 2 20:07:04.158146 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 20:07:04.160496 systemd[1]: Starting extend-filesystems.service... Oct 2 20:07:04.161165 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 20:07:04.162493 systemd[1]: Starting motdgen.service... Oct 2 20:07:04.165597 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 20:07:04.169155 systemd[1]: Starting prepare-critools.service... Oct 2 20:07:04.170837 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 20:07:04.172543 systemd[1]: Starting sshd-keygen.service... Oct 2 20:07:04.175359 systemd[1]: Starting systemd-logind.service... Oct 2 20:07:04.176059 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:07:04.176140 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 20:07:04.176754 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 20:07:04.177711 systemd[1]: Starting update-engine.service... Oct 2 20:07:04.179550 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 20:07:04.181492 jq[1117]: false Oct 2 20:07:04.182775 jq[1133]: true Oct 2 20:07:04.182957 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 20:07:04.183143 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 20:07:04.185536 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 20:07:04.185729 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 20:07:04.198616 extend-filesystems[1118]: Found vda Oct 2 20:07:04.199485 extend-filesystems[1118]: Found vda1 Oct 2 20:07:04.199485 extend-filesystems[1118]: Found vda2 Oct 2 20:07:04.199485 extend-filesystems[1118]: Found vda3 Oct 2 20:07:04.199485 extend-filesystems[1118]: Found usr Oct 2 20:07:04.199485 extend-filesystems[1118]: Found vda4 Oct 2 20:07:04.202183 extend-filesystems[1118]: Found vda6 Oct 2 20:07:04.202183 extend-filesystems[1118]: Found vda7 Oct 2 20:07:04.202183 extend-filesystems[1118]: Found vda9 Oct 2 20:07:04.202183 extend-filesystems[1118]: Checking size of /dev/vda9 Oct 2 20:07:04.203350 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 20:07:04.203542 systemd[1]: Finished motdgen.service. Oct 2 20:07:04.207403 jq[1139]: true Oct 2 20:07:04.211776 tar[1136]: ./ Oct 2 20:07:04.211776 tar[1136]: ./loopback Oct 2 20:07:04.215713 tar[1137]: crictl Oct 2 20:07:04.239503 dbus-daemon[1116]: [system] SELinux support is enabled Oct 2 20:07:04.239674 systemd[1]: Started dbus.service. Oct 2 20:07:04.242386 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 20:07:04.242435 systemd[1]: Reached target system-config.target. Oct 2 20:07:04.243110 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 20:07:04.243126 systemd[1]: Reached target user-config.target. Oct 2 20:07:04.269518 systemd-logind[1129]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 20:07:04.273142 tar[1136]: ./bandwidth Oct 2 20:07:04.278889 systemd-logind[1129]: New seat seat0. Oct 2 20:07:04.286628 systemd[1]: Started systemd-logind.service. Oct 2 20:07:04.306537 bash[1161]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:07:04.307393 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 20:07:04.312570 extend-filesystems[1118]: Old size kept for /dev/vda9 Oct 2 20:07:04.315252 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 20:07:04.315403 systemd[1]: Finished extend-filesystems.service. Oct 2 20:07:04.350362 tar[1136]: ./ptp Oct 2 20:07:04.351402 update_engine[1131]: I1002 20:07:04.351120 1131 main.cc:92] Flatcar Update Engine starting Oct 2 20:07:04.356540 systemd[1]: Started update-engine.service. Oct 2 20:07:04.356629 update_engine[1131]: I1002 20:07:04.356566 1131 update_check_scheduler.cc:74] Next update check in 5m11s Oct 2 20:07:04.359046 systemd[1]: Started locksmithd.service. Oct 2 20:07:04.399318 tar[1136]: ./vlan Oct 2 20:07:04.420637 env[1142]: time="2023-10-02T20:07:04.420581440Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 20:07:04.449097 env[1142]: time="2023-10-02T20:07:04.449007760Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 20:07:04.449219 env[1142]: time="2023-10-02T20:07:04.449164720Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:07:04.450042 tar[1136]: ./host-device Oct 2 20:07:04.450628 env[1142]: time="2023-10-02T20:07:04.450590680Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:07:04.450628 env[1142]: time="2023-10-02T20:07:04.450623440Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:07:04.450918 env[1142]: time="2023-10-02T20:07:04.450849240Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:07:04.450918 env[1142]: time="2023-10-02T20:07:04.450880600Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 20:07:04.450918 env[1142]: time="2023-10-02T20:07:04.450894240Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 20:07:04.450918 env[1142]: time="2023-10-02T20:07:04.450903800Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 20:07:04.451035 env[1142]: time="2023-10-02T20:07:04.450976880Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:07:04.451244 env[1142]: time="2023-10-02T20:07:04.451188560Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:07:04.451375 env[1142]: time="2023-10-02T20:07:04.451316880Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:07:04.451375 env[1142]: time="2023-10-02T20:07:04.451338120Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 20:07:04.451437 env[1142]: time="2023-10-02T20:07:04.451389360Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 20:07:04.451437 env[1142]: time="2023-10-02T20:07:04.451401360Z" level=info msg="metadata content store policy set" policy=shared Oct 2 20:07:04.459050 env[1142]: time="2023-10-02T20:07:04.459015240Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 20:07:04.459050 env[1142]: time="2023-10-02T20:07:04.459051680Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 20:07:04.459155 env[1142]: time="2023-10-02T20:07:04.459067120Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 20:07:04.459155 env[1142]: time="2023-10-02T20:07:04.459092680Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 20:07:04.459155 env[1142]: time="2023-10-02T20:07:04.459107280Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 20:07:04.459155 env[1142]: time="2023-10-02T20:07:04.459120640Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 20:07:04.459155 env[1142]: time="2023-10-02T20:07:04.459133720Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 20:07:04.459586 env[1142]: time="2023-10-02T20:07:04.459560200Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 20:07:04.459586 env[1142]: time="2023-10-02T20:07:04.459587440Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 20:07:04.459654 env[1142]: time="2023-10-02T20:07:04.459601800Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 20:07:04.459654 env[1142]: time="2023-10-02T20:07:04.459615880Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 20:07:04.459654 env[1142]: time="2023-10-02T20:07:04.459628600Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 20:07:04.459770 env[1142]: time="2023-10-02T20:07:04.459737760Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 20:07:04.459867 env[1142]: time="2023-10-02T20:07:04.459838760Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 20:07:04.460092 env[1142]: time="2023-10-02T20:07:04.460070800Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 20:07:04.460126 env[1142]: time="2023-10-02T20:07:04.460098640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.460126 env[1142]: time="2023-10-02T20:07:04.460112880Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 20:07:04.460237 env[1142]: time="2023-10-02T20:07:04.460220240Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.460267 env[1142]: time="2023-10-02T20:07:04.460236320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.460267 env[1142]: time="2023-10-02T20:07:04.460249080Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.460267 env[1142]: time="2023-10-02T20:07:04.460260760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.460327 env[1142]: time="2023-10-02T20:07:04.460272000Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.460327 env[1142]: time="2023-10-02T20:07:04.460284520Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.460327 env[1142]: time="2023-10-02T20:07:04.460296440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.460327 env[1142]: time="2023-10-02T20:07:04.460308240Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.460327 env[1142]: time="2023-10-02T20:07:04.460320640Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 20:07:04.460450 env[1142]: time="2023-10-02T20:07:04.460430440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.460487 env[1142]: time="2023-10-02T20:07:04.460451320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.460487 env[1142]: time="2023-10-02T20:07:04.460465600Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.460487 env[1142]: time="2023-10-02T20:07:04.460477960Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 20:07:04.460553 env[1142]: time="2023-10-02T20:07:04.460491520Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 20:07:04.460553 env[1142]: time="2023-10-02T20:07:04.460502640Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 20:07:04.460553 env[1142]: time="2023-10-02T20:07:04.460521160Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 20:07:04.460609 env[1142]: time="2023-10-02T20:07:04.460552280Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.460827 env[1142]: time="2023-10-02T20:07:04.460745240Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 20:07:04.463501 env[1142]: time="2023-10-02T20:07:04.460830320Z" level=info msg="Connect containerd service" Oct 2 20:07:04.463501 env[1142]: time="2023-10-02T20:07:04.460872040Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 20:07:04.463501 env[1142]: time="2023-10-02T20:07:04.461625640Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 20:07:04.465084 env[1142]: time="2023-10-02T20:07:04.465053960Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 20:07:04.465157 env[1142]: time="2023-10-02T20:07:04.465136760Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 20:07:04.465358 env[1142]: time="2023-10-02T20:07:04.465190480Z" level=info msg="containerd successfully booted in 0.045400s" Oct 2 20:07:04.465358 env[1142]: time="2023-10-02T20:07:04.465250480Z" level=info msg="Start subscribing containerd event" Oct 2 20:07:04.465358 env[1142]: time="2023-10-02T20:07:04.465316160Z" level=info msg="Start recovering state" Oct 2 20:07:04.465285 systemd[1]: Started containerd.service. Oct 2 20:07:04.467132 env[1142]: time="2023-10-02T20:07:04.467101840Z" level=info msg="Start event monitor" Oct 2 20:07:04.478966 env[1142]: time="2023-10-02T20:07:04.478926520Z" level=info msg="Start snapshots syncer" Oct 2 20:07:04.478966 env[1142]: time="2023-10-02T20:07:04.478960080Z" level=info msg="Start cni network conf syncer for default" Oct 2 20:07:04.478966 env[1142]: time="2023-10-02T20:07:04.478969680Z" level=info msg="Start streaming server" Oct 2 20:07:04.492988 tar[1136]: ./tuning Oct 2 20:07:04.505720 locksmithd[1170]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 20:07:04.522721 tar[1136]: ./vrf Oct 2 20:07:04.553345 tar[1136]: ./sbr Oct 2 20:07:04.583583 tar[1136]: ./tap Oct 2 20:07:04.618245 tar[1136]: ./dhcp Oct 2 20:07:04.661426 systemd[1]: Finished prepare-critools.service. Oct 2 20:07:04.699103 tar[1136]: ./static Oct 2 20:07:04.720346 tar[1136]: ./firewall Oct 2 20:07:04.752458 tar[1136]: ./macvlan Oct 2 20:07:04.781614 tar[1136]: ./dummy Oct 2 20:07:04.810556 tar[1136]: ./bridge Oct 2 20:07:04.842384 tar[1136]: ./ipvlan Oct 2 20:07:04.871055 tar[1136]: ./portmap Oct 2 20:07:04.898305 tar[1136]: ./host-local Oct 2 20:07:04.934532 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 20:07:05.141900 systemd-networkd[1046]: eth0: Gained IPv6LL Oct 2 20:07:05.832981 sshd_keygen[1134]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 20:07:05.851492 systemd[1]: Finished sshd-keygen.service. Oct 2 20:07:05.853510 systemd[1]: Starting issuegen.service... Oct 2 20:07:05.858433 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 20:07:05.858580 systemd[1]: Finished issuegen.service. Oct 2 20:07:05.860389 systemd[1]: Starting systemd-user-sessions.service... Oct 2 20:07:05.866597 systemd[1]: Finished systemd-user-sessions.service. Oct 2 20:07:05.868501 systemd[1]: Started getty@tty1.service. Oct 2 20:07:05.870299 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 20:07:05.871136 systemd[1]: Reached target getty.target. Oct 2 20:07:05.871709 systemd[1]: Reached target multi-user.target. Oct 2 20:07:05.873345 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 20:07:05.879822 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 20:07:05.879958 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 20:07:05.880684 systemd[1]: Startup finished in 628ms (kernel) + 6.315s (initrd) + 4.961s (userspace) = 11.905s. Oct 2 20:07:06.885636 systemd[1]: Created slice system-sshd.slice. Oct 2 20:07:06.886739 systemd[1]: Started sshd@0-10.0.0.8:22-10.0.0.1:59472.service. Oct 2 20:07:06.938215 sshd[1200]: Accepted publickey for core from 10.0.0.1 port 59472 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:07:06.940362 sshd[1200]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:06.947745 systemd[1]: Created slice user-500.slice. Oct 2 20:07:06.948805 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 20:07:06.950811 systemd-logind[1129]: New session 1 of user core. Oct 2 20:07:06.956854 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 20:07:06.958053 systemd[1]: Starting user@500.service... Oct 2 20:07:06.960975 (systemd)[1203]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:07.018076 systemd[1203]: Queued start job for default target default.target. Oct 2 20:07:07.018532 systemd[1203]: Reached target paths.target. Oct 2 20:07:07.018549 systemd[1203]: Reached target sockets.target. Oct 2 20:07:07.018559 systemd[1203]: Reached target timers.target. Oct 2 20:07:07.018568 systemd[1203]: Reached target basic.target. Oct 2 20:07:07.018618 systemd[1203]: Reached target default.target. Oct 2 20:07:07.018644 systemd[1203]: Startup finished in 51ms. Oct 2 20:07:07.018689 systemd[1]: Started user@500.service. Oct 2 20:07:07.019596 systemd[1]: Started session-1.scope. Oct 2 20:07:07.069314 systemd[1]: Started sshd@1-10.0.0.8:22-10.0.0.1:59480.service. Oct 2 20:07:07.108142 sshd[1212]: Accepted publickey for core from 10.0.0.1 port 59480 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:07:07.109705 sshd[1212]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:07.113519 systemd-logind[1129]: New session 2 of user core. Oct 2 20:07:07.113936 systemd[1]: Started session-2.scope. Oct 2 20:07:07.167820 sshd[1212]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:07.171736 systemd[1]: Started sshd@2-10.0.0.8:22-10.0.0.1:59486.service. Oct 2 20:07:07.172214 systemd[1]: sshd@1-10.0.0.8:22-10.0.0.1:59480.service: Deactivated successfully. Oct 2 20:07:07.172942 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 20:07:07.173412 systemd-logind[1129]: Session 2 logged out. Waiting for processes to exit. Oct 2 20:07:07.174319 systemd-logind[1129]: Removed session 2. Oct 2 20:07:07.212118 sshd[1217]: Accepted publickey for core from 10.0.0.1 port 59486 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:07:07.213298 sshd[1217]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:07.216246 systemd-logind[1129]: New session 3 of user core. Oct 2 20:07:07.217030 systemd[1]: Started session-3.scope. Oct 2 20:07:07.265468 sshd[1217]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:07.269030 systemd[1]: Started sshd@3-10.0.0.8:22-10.0.0.1:59490.service. Oct 2 20:07:07.269470 systemd[1]: sshd@2-10.0.0.8:22-10.0.0.1:59486.service: Deactivated successfully. Oct 2 20:07:07.270132 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 20:07:07.270609 systemd-logind[1129]: Session 3 logged out. Waiting for processes to exit. Oct 2 20:07:07.271270 systemd-logind[1129]: Removed session 3. Oct 2 20:07:07.308409 sshd[1223]: Accepted publickey for core from 10.0.0.1 port 59490 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:07:07.309631 sshd[1223]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:07.312772 systemd-logind[1129]: New session 4 of user core. Oct 2 20:07:07.313556 systemd[1]: Started session-4.scope. Oct 2 20:07:07.366204 sshd[1223]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:07.369223 systemd[1]: sshd@3-10.0.0.8:22-10.0.0.1:59490.service: Deactivated successfully. Oct 2 20:07:07.369863 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 20:07:07.370324 systemd-logind[1129]: Session 4 logged out. Waiting for processes to exit. Oct 2 20:07:07.371301 systemd[1]: Started sshd@4-10.0.0.8:22-10.0.0.1:59506.service. Oct 2 20:07:07.371916 systemd-logind[1129]: Removed session 4. Oct 2 20:07:07.410565 sshd[1230]: Accepted publickey for core from 10.0.0.1 port 59506 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:07:07.411725 sshd[1230]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:07.414854 systemd-logind[1129]: New session 5 of user core. Oct 2 20:07:07.415595 systemd[1]: Started session-5.scope. Oct 2 20:07:07.472310 sudo[1233]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 20:07:07.472510 sudo[1233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:07:07.485932 dbus-daemon[1116]: avc: received setenforce notice (enforcing=1) Oct 2 20:07:07.487635 sudo[1233]: pam_unix(sudo:session): session closed for user root Oct 2 20:07:07.489409 sshd[1230]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:07.493115 systemd[1]: Started sshd@5-10.0.0.8:22-10.0.0.1:59518.service. Oct 2 20:07:07.493542 systemd[1]: sshd@4-10.0.0.8:22-10.0.0.1:59506.service: Deactivated successfully. Oct 2 20:07:07.494325 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 20:07:07.494841 systemd-logind[1129]: Session 5 logged out. Waiting for processes to exit. Oct 2 20:07:07.495577 systemd-logind[1129]: Removed session 5. Oct 2 20:07:07.532973 sshd[1236]: Accepted publickey for core from 10.0.0.1 port 59518 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:07:07.534199 sshd[1236]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:07.537307 systemd-logind[1129]: New session 6 of user core. Oct 2 20:07:07.538109 systemd[1]: Started session-6.scope. Oct 2 20:07:07.588896 sudo[1241]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 20:07:07.589089 sudo[1241]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:07:07.591798 sudo[1241]: pam_unix(sudo:session): session closed for user root Oct 2 20:07:07.596370 sudo[1240]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 20:07:07.596578 sudo[1240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:07:07.605312 systemd[1]: Stopping audit-rules.service... Oct 2 20:07:07.605000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:07:07.607221 kernel: kauditd_printk_skb: 123 callbacks suppressed Oct 2 20:07:07.607266 kernel: audit: type=1305 audit(1696277227.605:163): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:07:07.607535 auditctl[1244]: No rules Oct 2 20:07:07.607709 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 20:07:07.607867 systemd[1]: Stopped audit-rules.service. Oct 2 20:07:07.605000 audit[1244]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff2e976d0 a2=420 a3=0 items=0 ppid=1 pid=1244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:07.609154 systemd[1]: Starting audit-rules.service... Oct 2 20:07:07.610837 kernel: audit: type=1300 audit(1696277227.605:163): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff2e976d0 a2=420 a3=0 items=0 ppid=1 pid=1244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:07.610898 kernel: audit: type=1327 audit(1696277227.605:163): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:07:07.605000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:07:07.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:07.613185 kernel: audit: type=1131 audit(1696277227.607:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:07.626278 augenrules[1261]: No rules Oct 2 20:07:07.626903 systemd[1]: Finished audit-rules.service. Oct 2 20:07:07.626000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:07.627792 sudo[1240]: pam_unix(sudo:session): session closed for user root Oct 2 20:07:07.627000 audit[1240]: USER_END pid=1240 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:07.629321 sshd[1236]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:07.631470 kernel: audit: type=1130 audit(1696277227.626:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:07.631540 kernel: audit: type=1106 audit(1696277227.627:166): pid=1240 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:07.631581 kernel: audit: type=1104 audit(1696277227.627:167): pid=1240 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:07.627000 audit[1240]: CRED_DISP pid=1240 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:07.631540 systemd[1]: sshd@5-10.0.0.8:22-10.0.0.1:59518.service: Deactivated successfully. Oct 2 20:07:07.632055 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 20:07:07.632520 systemd-logind[1129]: Session 6 logged out. Waiting for processes to exit. Oct 2 20:07:07.632852 kernel: audit: type=1106 audit(1696277227.629:168): pid=1236 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:07.629000 audit[1236]: USER_END pid=1236 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:07.633393 systemd[1]: Started sshd@6-10.0.0.8:22-10.0.0.1:59532.service. Oct 2 20:07:07.635006 kernel: audit: type=1104 audit(1696277227.629:169): pid=1236 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:07.629000 audit[1236]: CRED_DISP pid=1236 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:07.635027 systemd-logind[1129]: Removed session 6. Oct 2 20:07:07.636802 kernel: audit: type=1131 audit(1696277227.630:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.8:22-10.0.0.1:59518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:07.630000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.8:22-10.0.0.1:59518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:07.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.8:22-10.0.0.1:59532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:07.671000 audit[1267]: USER_ACCT pid=1267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:07.672398 sshd[1267]: Accepted publickey for core from 10.0.0.1 port 59532 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:07:07.672000 audit[1267]: CRED_ACQ pid=1267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:07.672000 audit[1267]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4a89ef0 a2=3 a3=1 items=0 ppid=1 pid=1267 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:07.672000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:07.673875 sshd[1267]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:07.677817 systemd-logind[1129]: New session 7 of user core. Oct 2 20:07:07.678225 systemd[1]: Started session-7.scope. Oct 2 20:07:07.680000 audit[1267]: USER_START pid=1267 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:07.681000 audit[1269]: CRED_ACQ pid=1269 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:07.728000 audit[1270]: USER_ACCT pid=1270 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:07.728000 audit[1270]: CRED_REFR pid=1270 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:07.729165 sudo[1270]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 20:07:07.729383 sudo[1270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:07:07.730000 audit[1270]: USER_START pid=1270 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:08.304746 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:07:08.311001 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:07:08.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:08.311526 systemd[1]: Reached target network-online.target. Oct 2 20:07:08.313114 systemd[1]: Starting docker.service... Oct 2 20:07:08.411292 env[1288]: time="2023-10-02T20:07:08.411230106Z" level=info msg="Starting up" Oct 2 20:07:08.413012 env[1288]: time="2023-10-02T20:07:08.412984295Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:07:08.413099 env[1288]: time="2023-10-02T20:07:08.413085347Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:07:08.413164 env[1288]: time="2023-10-02T20:07:08.413149434Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:07:08.413232 env[1288]: time="2023-10-02T20:07:08.413218695Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:07:08.417000 env[1288]: time="2023-10-02T20:07:08.416972914Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:07:08.417084 env[1288]: time="2023-10-02T20:07:08.417070931Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:07:08.417144 env[1288]: time="2023-10-02T20:07:08.417128714Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:07:08.417207 env[1288]: time="2023-10-02T20:07:08.417194668Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:07:08.421025 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport1005074062-merged.mount: Deactivated successfully. Oct 2 20:07:08.627194 env[1288]: time="2023-10-02T20:07:08.626750370Z" level=info msg="Loading containers: start." Oct 2 20:07:08.666000 audit[1324]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1324 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.666000 audit[1324]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=fffff27ac1d0 a2=0 a3=1 items=0 ppid=1288 pid=1324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.666000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 20:07:08.667000 audit[1326]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.667000 audit[1326]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffdcd8ebe0 a2=0 a3=1 items=0 ppid=1288 pid=1326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.667000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 20:07:08.669000 audit[1328]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1328 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.669000 audit[1328]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffe71ced0 a2=0 a3=1 items=0 ppid=1288 pid=1328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.669000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:07:08.671000 audit[1330]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1330 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.671000 audit[1330]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffda612ff0 a2=0 a3=1 items=0 ppid=1288 pid=1330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.671000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:07:08.673000 audit[1332]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.673000 audit[1332]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffed060a40 a2=0 a3=1 items=0 ppid=1288 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.673000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 20:07:08.697000 audit[1337]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1337 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.697000 audit[1337]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff7ed2000 a2=0 a3=1 items=0 ppid=1288 pid=1337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.697000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 20:07:08.702000 audit[1339]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1339 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.702000 audit[1339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff265ef50 a2=0 a3=1 items=0 ppid=1288 pid=1339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.702000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 20:07:08.703000 audit[1341]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1341 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.703000 audit[1341]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=fffff8695d60 a2=0 a3=1 items=0 ppid=1288 pid=1341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.703000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 20:07:08.705000 audit[1343]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1343 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.705000 audit[1343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffe71c2cc0 a2=0 a3=1 items=0 ppid=1288 pid=1343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.705000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:07:08.712000 audit[1347]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1347 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.712000 audit[1347]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffcc5e6bd0 a2=0 a3=1 items=0 ppid=1288 pid=1347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.712000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:07:08.713000 audit[1348]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1348 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.713000 audit[1348]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff3635b00 a2=0 a3=1 items=0 ppid=1288 pid=1348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.713000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:07:08.719776 kernel: Initializing XFRM netlink socket Oct 2 20:07:08.744284 env[1288]: time="2023-10-02T20:07:08.744240899Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 20:07:08.759000 audit[1356]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1356 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.759000 audit[1356]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffda232820 a2=0 a3=1 items=0 ppid=1288 pid=1356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.759000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 20:07:08.785000 audit[1359]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1359 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.785000 audit[1359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffe305f120 a2=0 a3=1 items=0 ppid=1288 pid=1359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.785000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 20:07:08.788000 audit[1362]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1362 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.788000 audit[1362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffdad5ffa0 a2=0 a3=1 items=0 ppid=1288 pid=1362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.788000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 20:07:08.790000 audit[1364]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1364 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.790000 audit[1364]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc1e90f40 a2=0 a3=1 items=0 ppid=1288 pid=1364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.790000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 20:07:08.792000 audit[1366]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1366 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.792000 audit[1366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=fffffb6a5670 a2=0 a3=1 items=0 ppid=1288 pid=1366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.792000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 20:07:08.795000 audit[1368]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1368 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.795000 audit[1368]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffc568c710 a2=0 a3=1 items=0 ppid=1288 pid=1368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.795000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 20:07:08.797000 audit[1370]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1370 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.797000 audit[1370]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffffc9fc6c0 a2=0 a3=1 items=0 ppid=1288 pid=1370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.797000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 20:07:08.804000 audit[1373]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1373 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.804000 audit[1373]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffd961d900 a2=0 a3=1 items=0 ppid=1288 pid=1373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.804000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 20:07:08.806000 audit[1375]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1375 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.806000 audit[1375]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffedcaa570 a2=0 a3=1 items=0 ppid=1288 pid=1375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.806000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:07:08.808000 audit[1377]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1377 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.808000 audit[1377]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=fffffe0e0ff0 a2=0 a3=1 items=0 ppid=1288 pid=1377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.808000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:07:08.810000 audit[1379]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1379 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.810000 audit[1379]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc6426730 a2=0 a3=1 items=0 ppid=1288 pid=1379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.810000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 20:07:08.812280 systemd-networkd[1046]: docker0: Link UP Oct 2 20:07:08.819000 audit[1383]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1383 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.819000 audit[1383]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe4b73460 a2=0 a3=1 items=0 ppid=1288 pid=1383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.819000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:07:08.820000 audit[1384]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1384 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:08.820000 audit[1384]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe98bbd90 a2=0 a3=1 items=0 ppid=1288 pid=1384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:08.820000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:07:08.821478 env[1288]: time="2023-10-02T20:07:08.821433946Z" level=info msg="Loading containers: done." Oct 2 20:07:08.847677 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2044942876-merged.mount: Deactivated successfully. Oct 2 20:07:08.850637 env[1288]: time="2023-10-02T20:07:08.850593676Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 20:07:08.850828 env[1288]: time="2023-10-02T20:07:08.850800761Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 20:07:08.850930 env[1288]: time="2023-10-02T20:07:08.850907416Z" level=info msg="Daemon has completed initialization" Oct 2 20:07:08.864659 systemd[1]: Started docker.service. Oct 2 20:07:08.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:08.870907 env[1288]: time="2023-10-02T20:07:08.870749499Z" level=info msg="API listen on /run/docker.sock" Oct 2 20:07:08.888681 systemd[1]: Reloading. Oct 2 20:07:08.934160 /usr/lib/systemd/system-generators/torcx-generator[1432]: time="2023-10-02T20:07:08Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:07:08.934188 /usr/lib/systemd/system-generators/torcx-generator[1432]: time="2023-10-02T20:07:08Z" level=info msg="torcx already run" Oct 2 20:07:09.000230 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:07:09.000250 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:07:09.017266 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.061000 audit: BPF prog-id=34 op=LOAD Oct 2 20:07:09.061000 audit: BPF prog-id=27 op=UNLOAD Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit: BPF prog-id=35 op=LOAD Oct 2 20:07:09.062000 audit: BPF prog-id=29 op=UNLOAD Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit: BPF prog-id=36 op=LOAD Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.062000 audit: BPF prog-id=37 op=LOAD Oct 2 20:07:09.062000 audit: BPF prog-id=30 op=UNLOAD Oct 2 20:07:09.062000 audit: BPF prog-id=31 op=UNLOAD Oct 2 20:07:09.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.063000 audit: BPF prog-id=38 op=LOAD Oct 2 20:07:09.063000 audit: BPF prog-id=32 op=UNLOAD Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit: BPF prog-id=39 op=LOAD Oct 2 20:07:09.065000 audit: BPF prog-id=28 op=UNLOAD Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit: BPF prog-id=40 op=LOAD Oct 2 20:07:09.065000 audit: BPF prog-id=24 op=UNLOAD Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit: BPF prog-id=41 op=LOAD Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit: BPF prog-id=42 op=LOAD Oct 2 20:07:09.066000 audit: BPF prog-id=25 op=UNLOAD Oct 2 20:07:09.066000 audit: BPF prog-id=26 op=UNLOAD Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit: BPF prog-id=43 op=LOAD Oct 2 20:07:09.066000 audit: BPF prog-id=18 op=UNLOAD Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit: BPF prog-id=44 op=LOAD Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.066000 audit: BPF prog-id=45 op=LOAD Oct 2 20:07:09.066000 audit: BPF prog-id=19 op=UNLOAD Oct 2 20:07:09.066000 audit: BPF prog-id=20 op=UNLOAD Oct 2 20:07:09.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.067000 audit: BPF prog-id=46 op=LOAD Oct 2 20:07:09.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.067000 audit: BPF prog-id=47 op=LOAD Oct 2 20:07:09.067000 audit: BPF prog-id=21 op=UNLOAD Oct 2 20:07:09.067000 audit: BPF prog-id=22 op=UNLOAD Oct 2 20:07:09.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:09.068000 audit: BPF prog-id=48 op=LOAD Oct 2 20:07:09.068000 audit: BPF prog-id=23 op=UNLOAD Oct 2 20:07:09.076060 systemd[1]: Started kubelet.service. Oct 2 20:07:09.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:09.272175 kubelet[1469]: E1002 20:07:09.272058 1469 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 20:07:09.274360 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:07:09.274525 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:07:09.273000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:07:09.478391 env[1142]: time="2023-10-02T20:07:09.478342628Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\"" Oct 2 20:07:10.060453 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount318564352.mount: Deactivated successfully. Oct 2 20:07:12.638795 env[1142]: time="2023-10-02T20:07:12.638734717Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:12.640198 env[1142]: time="2023-10-02T20:07:12.640169175Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:30bb499447fe1bc655853e2e8ac386cdeb28c80263536259cb54f290f9a58d6c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:12.641920 env[1142]: time="2023-10-02T20:07:12.641888061Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:12.644055 env[1142]: time="2023-10-02T20:07:12.644036147Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6beea2e5531a0606613594fd3ed92d71bbdcef99dd3237522049a0b32cad736c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:12.644675 env[1142]: time="2023-10-02T20:07:12.644643734Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\" returns image reference \"sha256:30bb499447fe1bc655853e2e8ac386cdeb28c80263536259cb54f290f9a58d6c\"" Oct 2 20:07:12.655487 env[1142]: time="2023-10-02T20:07:12.655460406Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\"" Oct 2 20:07:15.782797 env[1142]: time="2023-10-02T20:07:15.782736493Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:15.784242 env[1142]: time="2023-10-02T20:07:15.784212147Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:89d57b83c17862d0ca2dd214e9e5ad425f8d67ecba32d10b846f8d22d3b5597c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:15.786026 env[1142]: time="2023-10-02T20:07:15.785998761Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:15.788286 env[1142]: time="2023-10-02T20:07:15.788259136Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6a42ce14d716205a99763f3c732c0a8f0ea041bdbbea7d2dfffcc53dafd7cac4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:15.788968 env[1142]: time="2023-10-02T20:07:15.788938634Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\" returns image reference \"sha256:89d57b83c17862d0ca2dd214e9e5ad425f8d67ecba32d10b846f8d22d3b5597c\"" Oct 2 20:07:15.798617 env[1142]: time="2023-10-02T20:07:15.798588399Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\"" Oct 2 20:07:17.584851 env[1142]: time="2023-10-02T20:07:17.584802202Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:17.586096 env[1142]: time="2023-10-02T20:07:17.586068512Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:64fc40cee3716a4596d219b360ce536adb7998eaeae3f5dbb774d6503f5039d7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:17.587693 env[1142]: time="2023-10-02T20:07:17.587671206Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:17.589455 env[1142]: time="2023-10-02T20:07:17.589410295Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:6511193f8114a2f011790619698efe12a8119ed9a17e2e36f4c1c759ccf173ab,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:17.590072 env[1142]: time="2023-10-02T20:07:17.590047199Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\" returns image reference \"sha256:64fc40cee3716a4596d219b360ce536adb7998eaeae3f5dbb774d6503f5039d7\"" Oct 2 20:07:17.600875 env[1142]: time="2023-10-02T20:07:17.600847828Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\"" Oct 2 20:07:18.553051 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2689640467.mount: Deactivated successfully. Oct 2 20:07:19.525241 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 20:07:19.525432 systemd[1]: Stopped kubelet.service. Oct 2 20:07:19.527169 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 20:07:19.527247 kernel: audit: type=1130 audit(1696277239.524:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:19.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:19.526888 systemd[1]: Started kubelet.service. Oct 2 20:07:19.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:19.529304 kernel: audit: type=1131 audit(1696277239.524:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:19.529352 kernel: audit: type=1130 audit(1696277239.526:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:19.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:19.571105 kubelet[1511]: E1002 20:07:19.571057 1511 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 20:07:19.574083 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:07:19.574214 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:07:19.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:07:19.576785 kernel: audit: type=1131 audit(1696277239.573:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:07:20.229265 env[1142]: time="2023-10-02T20:07:20.229194276Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:20.230397 env[1142]: time="2023-10-02T20:07:20.230363828Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7da62c127fc0f2c3473babe4dd0fe1da874278c4e524a490b1781e3e0e6dddfa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:20.231501 env[1142]: time="2023-10-02T20:07:20.231464440Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:20.233499 env[1142]: time="2023-10-02T20:07:20.233467039Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:41c8f92d1cd571e0e36af431f35c78379f84f5daf5b85d43014a9940d697afcf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:20.233874 env[1142]: time="2023-10-02T20:07:20.233846268Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\" returns image reference \"sha256:7da62c127fc0f2c3473babe4dd0fe1da874278c4e524a490b1781e3e0e6dddfa\"" Oct 2 20:07:20.244060 env[1142]: time="2023-10-02T20:07:20.244032427Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 20:07:20.745924 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3304892239.mount: Deactivated successfully. Oct 2 20:07:20.749669 env[1142]: time="2023-10-02T20:07:20.749594775Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:20.750643 env[1142]: time="2023-10-02T20:07:20.750620082Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:20.751930 env[1142]: time="2023-10-02T20:07:20.751906151Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:20.753149 env[1142]: time="2023-10-02T20:07:20.753123002Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:20.754352 env[1142]: time="2023-10-02T20:07:20.754308466Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 20:07:20.766804 env[1142]: time="2023-10-02T20:07:20.766774217Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Oct 2 20:07:27.118581 env[1142]: time="2023-10-02T20:07:27.118530691Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:27.119935 env[1142]: time="2023-10-02T20:07:27.119906882Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:27.122704 env[1142]: time="2023-10-02T20:07:27.122677064Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:27.126231 env[1142]: time="2023-10-02T20:07:27.126190961Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:27.127092 env[1142]: time="2023-10-02T20:07:27.127062281Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace\"" Oct 2 20:07:27.137986 env[1142]: time="2023-10-02T20:07:27.137952142Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 20:07:27.710550 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2119609736.mount: Deactivated successfully. Oct 2 20:07:28.322966 env[1142]: time="2023-10-02T20:07:28.322922035Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:28.324198 env[1142]: time="2023-10-02T20:07:28.324172754Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:28.325477 env[1142]: time="2023-10-02T20:07:28.325449225Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:28.326856 env[1142]: time="2023-10-02T20:07:28.326831296Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:28.327507 env[1142]: time="2023-10-02T20:07:28.327478514Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 20:07:29.824945 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 20:07:29.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:29.825115 systemd[1]: Stopped kubelet.service. Oct 2 20:07:29.824000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:29.826568 systemd[1]: Started kubelet.service. Oct 2 20:07:29.828437 kernel: audit: type=1130 audit(1696277249.824:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:29.828493 kernel: audit: type=1131 audit(1696277249.824:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:29.828518 kernel: audit: type=1130 audit(1696277249.825:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:29.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:29.888299 kubelet[1616]: E1002 20:07:29.888246 1616 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 20:07:29.890591 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:07:29.890723 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:07:29.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:07:29.892789 kernel: audit: type=1131 audit(1696277249.890:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:07:33.859320 systemd[1]: Stopped kubelet.service. Oct 2 20:07:33.858000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:33.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:33.863093 kernel: audit: type=1130 audit(1696277253.858:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:33.863173 kernel: audit: type=1131 audit(1696277253.858:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:33.876927 systemd[1]: Reloading. Oct 2 20:07:33.933465 /usr/lib/systemd/system-generators/torcx-generator[1648]: time="2023-10-02T20:07:33Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:07:33.933491 /usr/lib/systemd/system-generators/torcx-generator[1648]: time="2023-10-02T20:07:33Z" level=info msg="torcx already run" Oct 2 20:07:33.995701 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:07:33.995722 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:07:34.013378 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:07:34.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.063054 kernel: audit: type=1400 audit(1696277254.059:390): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.063101 kernel: audit: type=1400 audit(1696277254.059:391): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.063120 kernel: audit: type=1400 audit(1696277254.059:392): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.064629 kernel: audit: type=1400 audit(1696277254.059:393): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.060000 audit: BPF prog-id=49 op=LOAD Oct 2 20:07:34.060000 audit: BPF prog-id=34 op=UNLOAD Oct 2 20:07:34.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.062000 audit: BPF prog-id=50 op=LOAD Oct 2 20:07:34.062000 audit: BPF prog-id=35 op=UNLOAD Oct 2 20:07:34.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.063000 audit: BPF prog-id=51 op=LOAD Oct 2 20:07:34.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.065000 audit: BPF prog-id=52 op=LOAD Oct 2 20:07:34.065000 audit: BPF prog-id=36 op=UNLOAD Oct 2 20:07:34.065000 audit: BPF prog-id=37 op=UNLOAD Oct 2 20:07:34.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.066000 audit: BPF prog-id=53 op=LOAD Oct 2 20:07:34.066000 audit: BPF prog-id=38 op=UNLOAD Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit: BPF prog-id=54 op=LOAD Oct 2 20:07:34.068000 audit: BPF prog-id=39 op=UNLOAD Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit: BPF prog-id=55 op=LOAD Oct 2 20:07:34.068000 audit: BPF prog-id=40 op=UNLOAD Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit: BPF prog-id=56 op=LOAD Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit: BPF prog-id=57 op=LOAD Oct 2 20:07:34.069000 audit: BPF prog-id=41 op=UNLOAD Oct 2 20:07:34.069000 audit: BPF prog-id=42 op=UNLOAD Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit: BPF prog-id=58 op=LOAD Oct 2 20:07:34.069000 audit: BPF prog-id=43 op=UNLOAD Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit: BPF prog-id=59 op=LOAD Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.069000 audit: BPF prog-id=60 op=LOAD Oct 2 20:07:34.069000 audit: BPF prog-id=44 op=UNLOAD Oct 2 20:07:34.069000 audit: BPF prog-id=45 op=UNLOAD Oct 2 20:07:34.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.070000 audit: BPF prog-id=61 op=LOAD Oct 2 20:07:34.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.070000 audit: BPF prog-id=62 op=LOAD Oct 2 20:07:34.070000 audit: BPF prog-id=46 op=UNLOAD Oct 2 20:07:34.070000 audit: BPF prog-id=47 op=UNLOAD Oct 2 20:07:34.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.071000 audit: BPF prog-id=63 op=LOAD Oct 2 20:07:34.071000 audit: BPF prog-id=48 op=UNLOAD Oct 2 20:07:34.084152 systemd[1]: Started kubelet.service. Oct 2 20:07:34.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:34.130040 kubelet[1685]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:07:34.130040 kubelet[1685]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 20:07:34.130040 kubelet[1685]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:07:34.130040 kubelet[1685]: I1002 20:07:34.127456 1685 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:07:34.793780 kubelet[1685]: I1002 20:07:34.793736 1685 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 20:07:34.793780 kubelet[1685]: I1002 20:07:34.793780 1685 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:07:34.794033 kubelet[1685]: I1002 20:07:34.794005 1685 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 20:07:34.799090 kubelet[1685]: I1002 20:07:34.799055 1685 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:07:34.799655 kubelet[1685]: E1002 20:07:34.799632 1685 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.8:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 20:07:34.805057 kubelet[1685]: W1002 20:07:34.805037 1685 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 20:07:34.805826 kubelet[1685]: I1002 20:07:34.805807 1685 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:07:34.806136 kubelet[1685]: I1002 20:07:34.806122 1685 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:07:34.806344 kubelet[1685]: I1002 20:07:34.806325 1685 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 20:07:34.806485 kubelet[1685]: I1002 20:07:34.806473 1685 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 20:07:34.806547 kubelet[1685]: I1002 20:07:34.806538 1685 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 20:07:34.806680 kubelet[1685]: I1002 20:07:34.806667 1685 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:07:34.806995 kubelet[1685]: I1002 20:07:34.806983 1685 kubelet.go:393] "Attempting to sync node with API server" Oct 2 20:07:34.807063 kubelet[1685]: I1002 20:07:34.807054 1685 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:07:34.807143 kubelet[1685]: I1002 20:07:34.807134 1685 kubelet.go:309] "Adding apiserver pod source" Oct 2 20:07:34.807220 kubelet[1685]: I1002 20:07:34.807210 1685 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:07:34.807567 kubelet[1685]: W1002 20:07:34.807472 1685 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.8:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 20:07:34.807567 kubelet[1685]: E1002 20:07:34.807539 1685 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.8:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 20:07:34.808051 kubelet[1685]: W1002 20:07:34.807856 1685 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.8:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 20:07:34.808051 kubelet[1685]: E1002 20:07:34.807903 1685 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.8:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 20:07:34.808213 kubelet[1685]: I1002 20:07:34.808147 1685 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:07:34.808603 kubelet[1685]: W1002 20:07:34.808590 1685 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 20:07:34.809319 kubelet[1685]: I1002 20:07:34.809293 1685 server.go:1232] "Started kubelet" Oct 2 20:07:34.809457 kubelet[1685]: I1002 20:07:34.809440 1685 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:07:34.809557 kubelet[1685]: I1002 20:07:34.809534 1685 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 20:07:34.809807 kubelet[1685]: I1002 20:07:34.809786 1685 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 20:07:34.810351 kubelet[1685]: I1002 20:07:34.810333 1685 server.go:462] "Adding debug handlers to kubelet server" Oct 2 20:07:34.810000 audit[1685]: AVC avc: denied { mac_admin } for pid=1685 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.810000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:07:34.810000 audit[1685]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e491a0 a1=4000e4a9c0 a2=4000e49170 a3=25 items=0 ppid=1 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:34.810000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:07:34.810000 audit[1685]: AVC avc: denied { mac_admin } for pid=1685 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.810000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:07:34.810000 audit[1685]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40003dce40 a1=4000e4a9d8 a2=4000e49230 a3=25 items=0 ppid=1 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:34.810000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:07:34.811264 kubelet[1685]: I1002 20:07:34.810997 1685 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:07:34.811264 kubelet[1685]: I1002 20:07:34.811040 1685 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:07:34.811264 kubelet[1685]: I1002 20:07:34.811091 1685 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:07:34.811981 kubelet[1685]: E1002 20:07:34.811965 1685 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:07:34.812065 kubelet[1685]: E1002 20:07:34.812053 1685 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:07:34.812808 kubelet[1685]: E1002 20:07:34.812726 1685 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 20:07:34.812808 kubelet[1685]: I1002 20:07:34.812786 1685 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 20:07:34.812903 kubelet[1685]: I1002 20:07:34.812887 1685 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 20:07:34.813106 kubelet[1685]: I1002 20:07:34.812951 1685 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 20:07:34.813287 kubelet[1685]: W1002 20:07:34.813245 1685 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.8:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 20:07:34.813325 kubelet[1685]: E1002 20:07:34.813288 1685 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.8:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 20:07:34.813000 audit[1697]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1697 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:34.813000 audit[1697]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe6d7c6a0 a2=0 a3=1 items=0 ppid=1685 pid=1697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:34.813000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:07:34.814309 kubelet[1685]: E1002 20:07:34.814182 1685 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.8:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.8:6443: connect: connection refused" interval="200ms" Oct 2 20:07:34.814451 kubelet[1685]: E1002 20:07:34.814322 1685 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a632d0d7b429b", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 7, 34, 809272987, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 7, 34, 809272987, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"localhost"}': 'Post "https://10.0.0.8:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.8:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:07:34.814000 audit[1698]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:34.814000 audit[1698]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd1fa1c20 a2=0 a3=1 items=0 ppid=1685 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:34.814000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:07:34.817000 audit[1700]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1700 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:34.817000 audit[1700]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe1902af0 a2=0 a3=1 items=0 ppid=1685 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:34.817000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:07:34.819000 audit[1702]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1702 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:34.819000 audit[1702]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffedcb3a20 a2=0 a3=1 items=0 ppid=1685 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:34.819000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:07:34.831411 kubelet[1685]: I1002 20:07:34.831392 1685 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:07:34.831564 kubelet[1685]: I1002 20:07:34.831552 1685 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:07:34.831633 kubelet[1685]: I1002 20:07:34.831624 1685 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:07:34.830000 audit[1711]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:34.832245 kernel: kauditd_printk_skb: 189 callbacks suppressed Oct 2 20:07:34.832295 kernel: audit: type=1325 audit(1696277254.830:569): table=filter:30 family=2 entries=1 op=nft_register_rule pid=1711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:34.833308 kubelet[1685]: I1002 20:07:34.833292 1685 policy_none.go:49] "None policy: Start" Oct 2 20:07:34.830000 audit[1711]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffebd5ac70 a2=0 a3=1 items=0 ppid=1685 pid=1711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:34.834867 kubelet[1685]: I1002 20:07:34.834836 1685 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 20:07:34.835988 kubelet[1685]: I1002 20:07:34.835954 1685 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 20:07:34.835988 kubelet[1685]: I1002 20:07:34.835989 1685 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 20:07:34.836078 kernel: audit: type=1300 audit(1696277254.830:569): arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffebd5ac70 a2=0 a3=1 items=0 ppid=1685 pid=1711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:34.836106 kernel: audit: type=1327 audit(1696277254.830:569): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 20:07:34.830000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 20:07:34.836149 kubelet[1685]: I1002 20:07:34.836008 1685 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 20:07:34.836149 kubelet[1685]: E1002 20:07:34.836056 1685 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:07:34.836519 kubelet[1685]: W1002 20:07:34.836470 1685 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.8:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 20:07:34.836519 kubelet[1685]: E1002 20:07:34.836517 1685 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.8:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 20:07:34.834000 audit[1712]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1712 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:34.839399 kernel: audit: type=1325 audit(1696277254.834:570): table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1712 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:34.839454 kernel: audit: type=1300 audit(1696277254.834:570): arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd91b5780 a2=0 a3=1 items=0 ppid=1685 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:34.834000 audit[1712]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd91b5780 a2=0 a3=1 items=0 ppid=1685 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:34.840368 kubelet[1685]: I1002 20:07:34.840255 1685 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:07:34.840368 kubelet[1685]: I1002 20:07:34.840283 1685 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:07:34.834000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:07:34.843324 kernel: audit: type=1327 audit(1696277254.834:570): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:07:34.843389 kernel: audit: type=1325 audit(1696277254.835:571): table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1713 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:34.835000 audit[1713]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1713 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:34.844416 kernel: audit: type=1300 audit(1696277254.835:571): arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffea9554e0 a2=0 a3=1 items=0 ppid=1685 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:34.835000 audit[1713]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffea9554e0 a2=0 a3=1 items=0 ppid=1685 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:34.845080 systemd[1]: Created slice kubepods.slice. Oct 2 20:07:34.846772 kernel: audit: type=1327 audit(1696277254.835:571): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:07:34.835000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:07:34.836000 audit[1714]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1714 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:34.848658 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 20:07:34.849073 kernel: audit: type=1325 audit(1696277254.836:572): table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1714 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:34.836000 audit[1714]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff28a5950 a2=0 a3=1 items=0 ppid=1685 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:34.836000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:07:34.837000 audit[1715]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1715 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:34.837000 audit[1715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff3244e10 a2=0 a3=1 items=0 ppid=1685 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:34.837000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:07:34.837000 audit[1716]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1716 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:34.837000 audit[1716]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffe766f780 a2=0 a3=1 items=0 ppid=1685 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:34.837000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:07:34.838000 audit[1717]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=1717 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:34.838000 audit[1717]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffee887980 a2=0 a3=1 items=0 ppid=1685 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:34.838000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:07:34.838000 audit[1718]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1718 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:34.838000 audit[1718]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdf3cfbf0 a2=0 a3=1 items=0 ppid=1685 pid=1718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:34.838000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:07:34.851349 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 20:07:34.863389 kubelet[1685]: I1002 20:07:34.863366 1685 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:07:34.863471 kubelet[1685]: I1002 20:07:34.863431 1685 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:07:34.863614 kubelet[1685]: I1002 20:07:34.863589 1685 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:07:34.862000 audit[1685]: AVC avc: denied { mac_admin } for pid=1685 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:34.862000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:07:34.862000 audit[1685]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40010ceab0 a1=4000e4b398 a2=40010cea80 a3=25 items=0 ppid=1 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:34.862000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:07:34.864234 kubelet[1685]: E1002 20:07:34.864199 1685 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 2 20:07:34.914367 kubelet[1685]: I1002 20:07:34.914335 1685 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 20:07:34.914696 kubelet[1685]: E1002 20:07:34.914673 1685 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.8:6443/api/v1/nodes\": dial tcp 10.0.0.8:6443: connect: connection refused" node="localhost" Oct 2 20:07:34.936906 kubelet[1685]: I1002 20:07:34.936879 1685 topology_manager.go:215] "Topology Admit Handler" podUID="6961ff1365464b1e2d286a48d6c5e40f" podNamespace="kube-system" podName="kube-controller-manager-localhost" Oct 2 20:07:34.938008 kubelet[1685]: I1002 20:07:34.937973 1685 topology_manager.go:215] "Topology Admit Handler" podUID="b619222ebfcfd1a0c9478200f0921497" podNamespace="kube-system" podName="kube-scheduler-localhost" Oct 2 20:07:34.939263 kubelet[1685]: I1002 20:07:34.939226 1685 topology_manager.go:215] "Topology Admit Handler" podUID="9cfd802a5b8fba3aec51267ac8db8208" podNamespace="kube-system" podName="kube-apiserver-localhost" Oct 2 20:07:34.944076 systemd[1]: Created slice kubepods-burstable-pod6961ff1365464b1e2d286a48d6c5e40f.slice. Oct 2 20:07:34.966522 systemd[1]: Created slice kubepods-burstable-pod9cfd802a5b8fba3aec51267ac8db8208.slice. Oct 2 20:07:34.971250 systemd[1]: Created slice kubepods-burstable-podb619222ebfcfd1a0c9478200f0921497.slice. Oct 2 20:07:35.015408 kubelet[1685]: E1002 20:07:35.015376 1685 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.8:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.8:6443: connect: connection refused" interval="400ms" Oct 2 20:07:35.114057 kubelet[1685]: I1002 20:07:35.113964 1685 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:35.114231 kubelet[1685]: I1002 20:07:35.114216 1685 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:35.114339 kubelet[1685]: I1002 20:07:35.114321 1685 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9cfd802a5b8fba3aec51267ac8db8208-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"9cfd802a5b8fba3aec51267ac8db8208\") " pod="kube-system/kube-apiserver-localhost" Oct 2 20:07:35.114439 kubelet[1685]: I1002 20:07:35.114429 1685 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:35.114524 kubelet[1685]: I1002 20:07:35.114514 1685 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:35.114611 kubelet[1685]: I1002 20:07:35.114601 1685 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:35.114701 kubelet[1685]: I1002 20:07:35.114691 1685 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b619222ebfcfd1a0c9478200f0921497-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b619222ebfcfd1a0c9478200f0921497\") " pod="kube-system/kube-scheduler-localhost" Oct 2 20:07:35.114804 kubelet[1685]: I1002 20:07:35.114792 1685 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9cfd802a5b8fba3aec51267ac8db8208-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"9cfd802a5b8fba3aec51267ac8db8208\") " pod="kube-system/kube-apiserver-localhost" Oct 2 20:07:35.114912 kubelet[1685]: I1002 20:07:35.114900 1685 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9cfd802a5b8fba3aec51267ac8db8208-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"9cfd802a5b8fba3aec51267ac8db8208\") " pod="kube-system/kube-apiserver-localhost" Oct 2 20:07:35.116040 kubelet[1685]: I1002 20:07:35.116020 1685 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 20:07:35.116554 kubelet[1685]: E1002 20:07:35.116539 1685 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.8:6443/api/v1/nodes\": dial tcp 10.0.0.8:6443: connect: connection refused" node="localhost" Oct 2 20:07:35.265268 kubelet[1685]: E1002 20:07:35.265218 1685 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:35.266214 env[1142]: time="2023-10-02T20:07:35.265927521Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:6961ff1365464b1e2d286a48d6c5e40f,Namespace:kube-system,Attempt:0,}" Oct 2 20:07:35.270223 kubelet[1685]: E1002 20:07:35.270190 1685 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:35.270681 env[1142]: time="2023-10-02T20:07:35.270636674Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:9cfd802a5b8fba3aec51267ac8db8208,Namespace:kube-system,Attempt:0,}" Oct 2 20:07:35.273333 kubelet[1685]: E1002 20:07:35.273299 1685 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:35.273810 env[1142]: time="2023-10-02T20:07:35.273758163Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b619222ebfcfd1a0c9478200f0921497,Namespace:kube-system,Attempt:0,}" Oct 2 20:07:35.417073 kubelet[1685]: E1002 20:07:35.416978 1685 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.8:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.8:6443: connect: connection refused" interval="800ms" Oct 2 20:07:35.518520 kubelet[1685]: I1002 20:07:35.518482 1685 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 20:07:35.518869 kubelet[1685]: E1002 20:07:35.518845 1685 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.8:6443/api/v1/nodes\": dial tcp 10.0.0.8:6443: connect: connection refused" node="localhost" Oct 2 20:07:35.751213 kubelet[1685]: W1002 20:07:35.751088 1685 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.8:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 20:07:35.751213 kubelet[1685]: E1002 20:07:35.751153 1685 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.8:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 20:07:35.844949 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount790329563.mount: Deactivated successfully. Oct 2 20:07:35.850680 env[1142]: time="2023-10-02T20:07:35.850624723Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:35.851692 env[1142]: time="2023-10-02T20:07:35.851659637Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:35.876063 kubelet[1685]: W1002 20:07:35.876008 1685 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.8:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 20:07:35.876063 kubelet[1685]: E1002 20:07:35.876069 1685 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.8:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 20:07:35.883572 kubelet[1685]: W1002 20:07:35.883530 1685 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.8:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 20:07:35.883572 kubelet[1685]: E1002 20:07:35.883571 1685 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.8:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.8:6443: connect: connection refused Oct 2 20:07:35.902739 env[1142]: time="2023-10-02T20:07:35.902648844Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:35.904696 env[1142]: time="2023-10-02T20:07:35.904652480Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:35.906932 env[1142]: time="2023-10-02T20:07:35.906895779Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:35.908139 env[1142]: time="2023-10-02T20:07:35.908110879Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:35.909487 env[1142]: time="2023-10-02T20:07:35.909457083Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:35.911810 env[1142]: time="2023-10-02T20:07:35.911780482Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:35.912844 env[1142]: time="2023-10-02T20:07:35.912813997Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:35.915825 env[1142]: time="2023-10-02T20:07:35.915755060Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:35.916636 env[1142]: time="2023-10-02T20:07:35.916612745Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:35.918177 env[1142]: time="2023-10-02T20:07:35.918143491Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:35.944930 env[1142]: time="2023-10-02T20:07:35.944849198Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:07:35.944930 env[1142]: time="2023-10-02T20:07:35.944888529Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:07:35.944930 env[1142]: time="2023-10-02T20:07:35.944898242Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:07:35.945137 env[1142]: time="2023-10-02T20:07:35.945102250Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4cfb2246c1fdf6819ec32f0b006ceeb009a0501c892974ab321af5b0b1b2595b pid=1732 runtime=io.containerd.runc.v2 Oct 2 20:07:35.945286 env[1142]: time="2023-10-02T20:07:35.945225159Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:07:35.945286 env[1142]: time="2023-10-02T20:07:35.945255377Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:07:35.945286 env[1142]: time="2023-10-02T20:07:35.945265450Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:07:35.945552 env[1142]: time="2023-10-02T20:07:35.945492601Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2449bcc0c42c29769fc669970d850e99fa12ca54a52cb3a979ae266732cc8d40 pid=1735 runtime=io.containerd.runc.v2 Oct 2 20:07:35.947785 env[1142]: time="2023-10-02T20:07:35.947698888Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:07:35.947785 env[1142]: time="2023-10-02T20:07:35.947732663Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:07:35.947785 env[1142]: time="2023-10-02T20:07:35.947742895Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:07:35.948071 env[1142]: time="2023-10-02T20:07:35.948015613Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e8ad900007ee76022e092639aaa31d49133a9faca07a1ca6f862bf2dbfc590d0 pid=1754 runtime=io.containerd.runc.v2 Oct 2 20:07:35.961818 systemd[1]: Started cri-containerd-e8ad900007ee76022e092639aaa31d49133a9faca07a1ca6f862bf2dbfc590d0.scope. Oct 2 20:07:35.965120 systemd[1]: Started cri-containerd-2449bcc0c42c29769fc669970d850e99fa12ca54a52cb3a979ae266732cc8d40.scope. Oct 2 20:07:35.966079 systemd[1]: Started cri-containerd-4cfb2246c1fdf6819ec32f0b006ceeb009a0501c892974ab321af5b0b1b2595b.scope. Oct 2 20:07:35.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit: BPF prog-id=64 op=LOAD Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1732 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:35.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463666232323436633166646636383139656333326630623030366365 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1732 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:35.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463666232323436633166646636383139656333326630623030366365 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit: BPF prog-id=65 op=LOAD Oct 2 20:07:35.998000 audit[1762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1732 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:35.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463666232323436633166646636383139656333326630623030366365 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit: BPF prog-id=66 op=LOAD Oct 2 20:07:35.998000 audit[1762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1732 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:35.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463666232323436633166646636383139656333326630623030366365 Oct 2 20:07:35.998000 audit: BPF prog-id=66 op=UNLOAD Oct 2 20:07:35.998000 audit: BPF prog-id=65 op=UNLOAD Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit: BPF prog-id=67 op=LOAD Oct 2 20:07:35.998000 audit[1762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1732 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:35.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463666232323436633166646636383139656333326630623030366365 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit: BPF prog-id=68 op=LOAD Oct 2 20:07:36.003000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.003000 audit[1771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=1754 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538616439303030303765653736303232653039323633396161613331 Oct 2 20:07:36.003000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.003000 audit[1771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1754 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538616439303030303765653736303232653039323633396161613331 Oct 2 20:07:36.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.003000 audit: BPF prog-id=69 op=LOAD Oct 2 20:07:36.004000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { bpf } for pid=1768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1735 pid=1768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.004000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234343962636330633432633239373639666336363939373064383530 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { perfmon } for pid=1768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1735 pid=1768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.004000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234343962636330633432633239373639666336363939373064383530 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { bpf } for pid=1768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { bpf } for pid=1768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { bpf } for pid=1768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { perfmon } for pid=1768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { perfmon } for pid=1768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { perfmon } for pid=1768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { perfmon } for pid=1768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { perfmon } for pid=1768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { bpf } for pid=1768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { bpf } for pid=1768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit: BPF prog-id=70 op=LOAD Oct 2 20:07:36.004000 audit[1768]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1735 pid=1768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.004000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234343962636330633432633239373639666336363939373064383530 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { bpf } for pid=1768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { bpf } for pid=1768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { perfmon } for pid=1768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { perfmon } for pid=1768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { perfmon } for pid=1768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { perfmon } for pid=1768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { perfmon } for pid=1768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { bpf } for pid=1768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1768]: AVC avc: denied { bpf } for pid=1768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit: BPF prog-id=71 op=LOAD Oct 2 20:07:36.004000 audit[1768]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1735 pid=1768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.004000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234343962636330633432633239373639666336363939373064383530 Oct 2 20:07:36.004000 audit: BPF prog-id=71 op=UNLOAD Oct 2 20:07:36.004000 audit: BPF prog-id=70 op=UNLOAD Oct 2 20:07:36.004000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1768]: AVC avc: denied { bpf } for pid=1768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1768]: AVC avc: denied { bpf } for pid=1768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1768]: AVC avc: denied { bpf } for pid=1768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1768]: AVC avc: denied { perfmon } for pid=1768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1768]: AVC avc: denied { perfmon } for pid=1768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1768]: AVC avc: denied { perfmon } for pid=1768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1768]: AVC avc: denied { perfmon } for pid=1768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1768]: AVC avc: denied { perfmon } for pid=1768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1768]: AVC avc: denied { bpf } for pid=1768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.004000 audit: BPF prog-id=72 op=LOAD Oct 2 20:07:36.004000 audit[1771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1754 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.004000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538616439303030303765653736303232653039323633396161613331 Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1768]: AVC avc: denied { bpf } for pid=1768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit: BPF prog-id=73 op=LOAD Oct 2 20:07:36.005000 audit: BPF prog-id=74 op=LOAD Oct 2 20:07:36.005000 audit[1771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1754 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538616439303030303765653736303232653039323633396161613331 Oct 2 20:07:36.005000 audit[1768]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1735 pid=1768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234343962636330633432633239373639666336363939373064383530 Oct 2 20:07:36.005000 audit: BPF prog-id=73 op=UNLOAD Oct 2 20:07:36.005000 audit: BPF prog-id=72 op=UNLOAD Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.005000 audit: BPF prog-id=75 op=LOAD Oct 2 20:07:36.005000 audit[1771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1754 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538616439303030303765653736303232653039323633396161613331 Oct 2 20:07:36.033158 env[1142]: time="2023-10-02T20:07:36.033114161Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:6961ff1365464b1e2d286a48d6c5e40f,Namespace:kube-system,Attempt:0,} returns sandbox id \"4cfb2246c1fdf6819ec32f0b006ceeb009a0501c892974ab321af5b0b1b2595b\"" Oct 2 20:07:36.034078 env[1142]: time="2023-10-02T20:07:36.034041200Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:9cfd802a5b8fba3aec51267ac8db8208,Namespace:kube-system,Attempt:0,} returns sandbox id \"2449bcc0c42c29769fc669970d850e99fa12ca54a52cb3a979ae266732cc8d40\"" Oct 2 20:07:36.035141 kubelet[1685]: E1002 20:07:36.035116 1685 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:36.035688 kubelet[1685]: E1002 20:07:36.035667 1685 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:36.036069 env[1142]: time="2023-10-02T20:07:36.036033230Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b619222ebfcfd1a0c9478200f0921497,Namespace:kube-system,Attempt:0,} returns sandbox id \"e8ad900007ee76022e092639aaa31d49133a9faca07a1ca6f862bf2dbfc590d0\"" Oct 2 20:07:36.038108 env[1142]: time="2023-10-02T20:07:36.038069791Z" level=info msg="CreateContainer within sandbox \"4cfb2246c1fdf6819ec32f0b006ceeb009a0501c892974ab321af5b0b1b2595b\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 20:07:36.038301 env[1142]: time="2023-10-02T20:07:36.038251833Z" level=info msg="CreateContainer within sandbox \"2449bcc0c42c29769fc669970d850e99fa12ca54a52cb3a979ae266732cc8d40\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 20:07:36.038368 kubelet[1685]: E1002 20:07:36.038301 1685 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:36.041187 env[1142]: time="2023-10-02T20:07:36.041156511Z" level=info msg="CreateContainer within sandbox \"e8ad900007ee76022e092639aaa31d49133a9faca07a1ca6f862bf2dbfc590d0\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 20:07:36.052374 env[1142]: time="2023-10-02T20:07:36.052328154Z" level=info msg="CreateContainer within sandbox \"2449bcc0c42c29769fc669970d850e99fa12ca54a52cb3a979ae266732cc8d40\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"8a3f7f8fd3f6a348cd7ae9b3a03f1157cd7eee19f6eb74230983f86e7547e3dd\"" Oct 2 20:07:36.053116 env[1142]: time="2023-10-02T20:07:36.053086223Z" level=info msg="StartContainer for \"8a3f7f8fd3f6a348cd7ae9b3a03f1157cd7eee19f6eb74230983f86e7547e3dd\"" Oct 2 20:07:36.054257 env[1142]: time="2023-10-02T20:07:36.054226764Z" level=info msg="CreateContainer within sandbox \"4cfb2246c1fdf6819ec32f0b006ceeb009a0501c892974ab321af5b0b1b2595b\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"3d202dd1202324f9c8a5c6e763ae8883c2dd240d44463ce0cffdffead017af2a\"" Oct 2 20:07:36.054690 env[1142]: time="2023-10-02T20:07:36.054659804Z" level=info msg="StartContainer for \"3d202dd1202324f9c8a5c6e763ae8883c2dd240d44463ce0cffdffead017af2a\"" Oct 2 20:07:36.055959 env[1142]: time="2023-10-02T20:07:36.055922625Z" level=info msg="CreateContainer within sandbox \"e8ad900007ee76022e092639aaa31d49133a9faca07a1ca6f862bf2dbfc590d0\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"c58cfab751a47a5a299d31d417ade3c81edce99c6266ca0021c5fdb2f57f7605\"" Oct 2 20:07:36.056305 env[1142]: time="2023-10-02T20:07:36.056281953Z" level=info msg="StartContainer for \"c58cfab751a47a5a299d31d417ade3c81edce99c6266ca0021c5fdb2f57f7605\"" Oct 2 20:07:36.072994 systemd[1]: Started cri-containerd-8a3f7f8fd3f6a348cd7ae9b3a03f1157cd7eee19f6eb74230983f86e7547e3dd.scope. Oct 2 20:07:36.084458 systemd[1]: Started cri-containerd-3d202dd1202324f9c8a5c6e763ae8883c2dd240d44463ce0cffdffead017af2a.scope. Oct 2 20:07:36.085467 systemd[1]: Started cri-containerd-c58cfab751a47a5a299d31d417ade3c81edce99c6266ca0021c5fdb2f57f7605.scope. Oct 2 20:07:36.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.109000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.109000 audit: BPF prog-id=76 op=LOAD Oct 2 20:07:36.109000 audit[1863]: AVC avc: denied { bpf } for pid=1863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.109000 audit[1863]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=1735 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.109000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861336637663866643366366133343863643761653962336130336631 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { perfmon } for pid=1863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1735 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861336637663866643366366133343863643761653962336130336631 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { bpf } for pid=1863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { bpf } for pid=1863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { bpf } for pid=1863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { perfmon } for pid=1863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { perfmon } for pid=1863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { perfmon } for pid=1863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { perfmon } for pid=1863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { perfmon } for pid=1863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { bpf } for pid=1863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { bpf } for pid=1863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit: BPF prog-id=77 op=LOAD Oct 2 20:07:36.110000 audit[1863]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1735 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861336637663866643366366133343863643761653962336130336631 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { bpf } for pid=1863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { bpf } for pid=1863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { perfmon } for pid=1863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { perfmon } for pid=1863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { perfmon } for pid=1863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { perfmon } for pid=1863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { perfmon } for pid=1863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { bpf } for pid=1863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { bpf } for pid=1863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit: BPF prog-id=78 op=LOAD Oct 2 20:07:36.110000 audit[1863]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1735 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861336637663866643366366133343863643761653962336130336631 Oct 2 20:07:36.110000 audit: BPF prog-id=78 op=UNLOAD Oct 2 20:07:36.110000 audit: BPF prog-id=77 op=UNLOAD Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { bpf } for pid=1863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { bpf } for pid=1863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { bpf } for pid=1863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { perfmon } for pid=1863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { perfmon } for pid=1863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { perfmon } for pid=1863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { perfmon } for pid=1863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { perfmon } for pid=1863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { bpf } for pid=1863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit[1863]: AVC avc: denied { bpf } for pid=1863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.110000 audit: BPF prog-id=79 op=LOAD Oct 2 20:07:36.110000 audit[1863]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1735 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861336637663866643366366133343863643761653962336130336631 Oct 2 20:07:36.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.113000 audit: BPF prog-id=80 op=LOAD Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { bpf } for pid=1877 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1754 pid=1877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335386366616237353161343761356132393964333164343137616465 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { perfmon } for pid=1877 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1754 pid=1877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335386366616237353161343761356132393964333164343137616465 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { bpf } for pid=1877 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { bpf } for pid=1877 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { bpf } for pid=1877 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { perfmon } for pid=1877 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { perfmon } for pid=1877 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { perfmon } for pid=1877 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { perfmon } for pid=1877 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { perfmon } for pid=1877 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { bpf } for pid=1877 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { bpf } for pid=1877 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit: BPF prog-id=81 op=LOAD Oct 2 20:07:36.115000 audit[1877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1754 pid=1877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335386366616237353161343761356132393964333164343137616465 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { bpf } for pid=1877 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { bpf } for pid=1877 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { perfmon } for pid=1877 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { perfmon } for pid=1877 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { perfmon } for pid=1877 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { perfmon } for pid=1877 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { perfmon } for pid=1877 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { bpf } for pid=1877 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { bpf } for pid=1877 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit: BPF prog-id=82 op=LOAD Oct 2 20:07:36.115000 audit[1877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1754 pid=1877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335386366616237353161343761356132393964333164343137616465 Oct 2 20:07:36.115000 audit: BPF prog-id=82 op=UNLOAD Oct 2 20:07:36.115000 audit: BPF prog-id=81 op=UNLOAD Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { bpf } for pid=1877 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { bpf } for pid=1877 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { bpf } for pid=1877 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { perfmon } for pid=1877 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { perfmon } for pid=1877 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { perfmon } for pid=1877 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { perfmon } for pid=1877 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { perfmon } for pid=1877 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { bpf } for pid=1877 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit[1877]: AVC avc: denied { bpf } for pid=1877 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.115000 audit: BPF prog-id=83 op=LOAD Oct 2 20:07:36.115000 audit[1877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1754 pid=1877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335386366616237353161343761356132393964333164343137616465 Oct 2 20:07:36.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.121000 audit: BPF prog-id=84 op=LOAD Oct 2 20:07:36.121000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.121000 audit[1871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1732 pid=1871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364323032646431323032333234663963386135633665373633616538 Oct 2 20:07:36.122000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.122000 audit[1871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1732 pid=1871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364323032646431323032333234663963386135633665373633616538 Oct 2 20:07:36.122000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.122000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.122000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.122000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.122000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.122000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.122000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.122000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.122000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.122000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.122000 audit: BPF prog-id=85 op=LOAD Oct 2 20:07:36.122000 audit[1871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1732 pid=1871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364323032646431323032333234663963386135633665373633616538 Oct 2 20:07:36.123000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.123000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.123000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.123000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.123000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.123000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.123000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.123000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.123000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.123000 audit: BPF prog-id=86 op=LOAD Oct 2 20:07:36.123000 audit[1871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1732 pid=1871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.123000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364323032646431323032333234663963386135633665373633616538 Oct 2 20:07:36.124000 audit: BPF prog-id=86 op=UNLOAD Oct 2 20:07:36.124000 audit: BPF prog-id=85 op=UNLOAD Oct 2 20:07:36.124000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.124000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.124000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.124000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.124000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.124000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.124000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.124000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.124000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.124000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.124000 audit: BPF prog-id=87 op=LOAD Oct 2 20:07:36.124000 audit[1871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1732 pid=1871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.124000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364323032646431323032333234663963386135633665373633616538 Oct 2 20:07:36.151853 env[1142]: time="2023-10-02T20:07:36.151799756Z" level=info msg="StartContainer for \"c58cfab751a47a5a299d31d417ade3c81edce99c6266ca0021c5fdb2f57f7605\" returns successfully" Oct 2 20:07:36.153971 env[1142]: time="2023-10-02T20:07:36.153288032Z" level=info msg="StartContainer for \"8a3f7f8fd3f6a348cd7ae9b3a03f1157cd7eee19f6eb74230983f86e7547e3dd\" returns successfully" Oct 2 20:07:36.203484 env[1142]: time="2023-10-02T20:07:36.203409723Z" level=info msg="StartContainer for \"3d202dd1202324f9c8a5c6e763ae8883c2dd240d44463ce0cffdffead017af2a\" returns successfully" Oct 2 20:07:36.218484 kubelet[1685]: E1002 20:07:36.218194 1685 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.8:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.8:6443: connect: connection refused" interval="1.6s" Oct 2 20:07:36.322391 kubelet[1685]: I1002 20:07:36.322287 1685 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 20:07:36.322703 kubelet[1685]: E1002 20:07:36.322603 1685 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.8:6443/api/v1/nodes\": dial tcp 10.0.0.8:6443: connect: connection refused" node="localhost" Oct 2 20:07:36.848662 kubelet[1685]: E1002 20:07:36.848633 1685 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:36.849645 kubelet[1685]: E1002 20:07:36.849620 1685 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:36.851465 kubelet[1685]: E1002 20:07:36.851423 1685 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:37.378000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:37.378000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4006c580c0 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:07:37.378000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:07:37.378000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:37.378000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3e a1=4004dac060 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:07:37.378000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:07:37.379000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4768 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:37.379000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3e a1=400a251890 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:07:37.379000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:07:37.396000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:37.396000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:37.396000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=4004dad0b0 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:07:37.396000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:07:37.396000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=44 a1=40073b2920 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:07:37.396000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:07:37.397000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:37.397000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=44 a1=4002c963c0 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:07:37.397000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:07:37.822940 kubelet[1685]: E1002 20:07:37.822841 1685 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Oct 2 20:07:37.851460 kubelet[1685]: E1002 20:07:37.851424 1685 csi_plugin.go:295] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "localhost" not found Oct 2 20:07:37.853940 kubelet[1685]: E1002 20:07:37.853905 1685 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:37.881000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:37.881000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000074030 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:07:37.881000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:37.881000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:37.881000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000530100 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:07:37.881000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:37.923936 kubelet[1685]: I1002 20:07:37.923905 1685 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 20:07:37.929259 kubelet[1685]: I1002 20:07:37.929231 1685 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 20:07:37.937295 kubelet[1685]: E1002 20:07:37.937257 1685 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 20:07:38.038152 kubelet[1685]: E1002 20:07:38.038113 1685 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 20:07:38.138643 kubelet[1685]: E1002 20:07:38.138547 1685 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 20:07:38.239066 kubelet[1685]: E1002 20:07:38.239027 1685 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 20:07:38.339507 kubelet[1685]: E1002 20:07:38.339474 1685 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 20:07:38.440130 kubelet[1685]: E1002 20:07:38.439971 1685 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 20:07:38.540517 kubelet[1685]: E1002 20:07:38.540480 1685 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 20:07:38.810751 kubelet[1685]: I1002 20:07:38.810640 1685 apiserver.go:52] "Watching apiserver" Oct 2 20:07:38.813636 kubelet[1685]: I1002 20:07:38.813604 1685 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 20:07:38.863783 kubelet[1685]: E1002 20:07:38.863745 1685 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:39.675741 kubelet[1685]: E1002 20:07:39.675712 1685 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:39.855288 kubelet[1685]: E1002 20:07:39.855248 1685 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:39.855551 kubelet[1685]: E1002 20:07:39.855535 1685 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:40.091991 kernel: kauditd_printk_skb: 384 callbacks suppressed Oct 2 20:07:40.092123 kernel: audit: type=1400 audit(1696277260.090:694): avc: denied { watch } for pid=1902 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32587 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:07:40.090000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32587 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:07:40.090000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40008e8a40 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:07:40.097557 kernel: audit: type=1300 audit(1696277260.090:694): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40008e8a40 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:07:40.097627 kernel: audit: type=1327 audit(1696277260.090:694): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:40.090000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:40.172359 systemd[1]: Reloading. Oct 2 20:07:40.220545 /usr/lib/systemd/system-generators/torcx-generator[1985]: time="2023-10-02T20:07:40Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:07:40.220570 /usr/lib/systemd/system-generators/torcx-generator[1985]: time="2023-10-02T20:07:40Z" level=info msg="torcx already run" Oct 2 20:07:40.292643 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:07:40.292878 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:07:40.310236 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:07:40.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.371019 kernel: audit: type=1400 audit(1696277260.366:695): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.371083 kernel: audit: type=1400 audit(1696277260.366:696): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.371100 kernel: audit: type=1400 audit(1696277260.366:697): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.372620 kernel: audit: type=1400 audit(1696277260.366:698): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.376222 kernel: audit: type=1400 audit(1696277260.366:699): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.376269 kernel: audit: type=1400 audit(1696277260.366:700): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.379866 kernel: audit: type=1400 audit(1696277260.366:701): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.368000 audit: BPF prog-id=88 op=LOAD Oct 2 20:07:40.368000 audit: BPF prog-id=49 op=UNLOAD Oct 2 20:07:40.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.370000 audit: BPF prog-id=89 op=LOAD Oct 2 20:07:40.370000 audit: BPF prog-id=50 op=UNLOAD Oct 2 20:07:40.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.371000 audit: BPF prog-id=90 op=LOAD Oct 2 20:07:40.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.373000 audit: BPF prog-id=91 op=LOAD Oct 2 20:07:40.373000 audit: BPF prog-id=51 op=UNLOAD Oct 2 20:07:40.373000 audit: BPF prog-id=52 op=UNLOAD Oct 2 20:07:40.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.375000 audit: BPF prog-id=92 op=LOAD Oct 2 20:07:40.375000 audit: BPF prog-id=68 op=UNLOAD Oct 2 20:07:40.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.377000 audit: BPF prog-id=93 op=LOAD Oct 2 20:07:40.377000 audit: BPF prog-id=64 op=UNLOAD Oct 2 20:07:40.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.382000 audit: BPF prog-id=95 op=LOAD Oct 2 20:07:40.382000 audit: BPF prog-id=54 op=UNLOAD Oct 2 20:07:40.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.383000 audit: BPF prog-id=96 op=LOAD Oct 2 20:07:40.383000 audit: BPF prog-id=84 op=UNLOAD Oct 2 20:07:40.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.384000 audit: BPF prog-id=97 op=LOAD Oct 2 20:07:40.384000 audit: BPF prog-id=55 op=UNLOAD Oct 2 20:07:40.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.385000 audit: BPF prog-id=98 op=LOAD Oct 2 20:07:40.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.385000 audit: BPF prog-id=99 op=LOAD Oct 2 20:07:40.385000 audit: BPF prog-id=56 op=UNLOAD Oct 2 20:07:40.385000 audit: BPF prog-id=57 op=UNLOAD Oct 2 20:07:40.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.386000 audit: BPF prog-id=100 op=LOAD Oct 2 20:07:40.386000 audit: BPF prog-id=76 op=UNLOAD Oct 2 20:07:40.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.387000 audit: BPF prog-id=101 op=LOAD Oct 2 20:07:40.388000 audit: BPF prog-id=58 op=UNLOAD Oct 2 20:07:40.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.388000 audit: BPF prog-id=102 op=LOAD Oct 2 20:07:40.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.389000 audit: BPF prog-id=103 op=LOAD Oct 2 20:07:40.389000 audit: BPF prog-id=59 op=UNLOAD Oct 2 20:07:40.389000 audit: BPF prog-id=60 op=UNLOAD Oct 2 20:07:40.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit: BPF prog-id=104 op=LOAD Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit: BPF prog-id=105 op=LOAD Oct 2 20:07:40.391000 audit: BPF prog-id=61 op=UNLOAD Oct 2 20:07:40.391000 audit: BPF prog-id=62 op=UNLOAD Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.391000 audit: BPF prog-id=106 op=LOAD Oct 2 20:07:40.391000 audit: BPF prog-id=80 op=UNLOAD Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.392000 audit: BPF prog-id=107 op=LOAD Oct 2 20:07:40.392000 audit: BPF prog-id=63 op=UNLOAD Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.393000 audit: BPF prog-id=108 op=LOAD Oct 2 20:07:40.393000 audit: BPF prog-id=69 op=UNLOAD Oct 2 20:07:40.412569 kubelet[1685]: I1002 20:07:40.412452 1685 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:07:40.412708 systemd[1]: Stopping kubelet.service... Oct 2 20:07:40.436144 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 20:07:40.436365 systemd[1]: Stopped kubelet.service. Oct 2 20:07:40.435000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:40.438224 systemd[1]: Started kubelet.service. Oct 2 20:07:40.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:40.498277 kubelet[2022]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:07:40.498277 kubelet[2022]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 20:07:40.498277 kubelet[2022]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:07:40.498603 kubelet[2022]: I1002 20:07:40.498335 2022 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:07:40.503696 kubelet[2022]: I1002 20:07:40.503660 2022 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 20:07:40.503696 kubelet[2022]: I1002 20:07:40.503691 2022 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:07:40.503982 kubelet[2022]: I1002 20:07:40.503950 2022 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 20:07:40.505764 kubelet[2022]: I1002 20:07:40.505736 2022 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 20:07:40.506952 kubelet[2022]: I1002 20:07:40.506928 2022 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:07:40.512343 kubelet[2022]: W1002 20:07:40.512319 2022 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 20:07:40.513139 kubelet[2022]: I1002 20:07:40.513118 2022 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:07:40.513411 kubelet[2022]: I1002 20:07:40.513395 2022 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:07:40.513636 kubelet[2022]: I1002 20:07:40.513617 2022 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 20:07:40.513792 kubelet[2022]: I1002 20:07:40.513759 2022 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 20:07:40.513851 kubelet[2022]: I1002 20:07:40.513842 2022 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 20:07:40.513919 kubelet[2022]: I1002 20:07:40.513909 2022 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:07:40.514364 kubelet[2022]: I1002 20:07:40.514339 2022 kubelet.go:393] "Attempting to sync node with API server" Oct 2 20:07:40.514428 kubelet[2022]: I1002 20:07:40.514373 2022 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:07:40.514428 kubelet[2022]: I1002 20:07:40.514400 2022 kubelet.go:309] "Adding apiserver pod source" Oct 2 20:07:40.514428 kubelet[2022]: I1002 20:07:40.514422 2022 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:07:40.516130 kubelet[2022]: I1002 20:07:40.516084 2022 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:07:40.518201 kubelet[2022]: I1002 20:07:40.518182 2022 server.go:1232] "Started kubelet" Oct 2 20:07:40.519527 kubelet[2022]: I1002 20:07:40.519507 2022 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 20:07:40.519864 kubelet[2022]: E1002 20:07:40.519515 2022 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:07:40.520133 kubelet[2022]: E1002 20:07:40.520119 2022 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:07:40.520248 kubelet[2022]: I1002 20:07:40.519594 2022 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:07:40.520836 kubelet[2022]: I1002 20:07:40.520058 2022 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 20:07:40.529819 kubelet[2022]: I1002 20:07:40.529555 2022 server.go:462] "Adding debug handlers to kubelet server" Oct 2 20:07:40.529000 audit[2022]: AVC avc: denied { mac_admin } for pid=2022 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.529000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:07:40.529000 audit[2022]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a4d020 a1=4000842be8 a2=4000a4cff0 a3=25 items=0 ppid=1 pid=2022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:40.529000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:07:40.530236 kubelet[2022]: I1002 20:07:40.530215 2022 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:07:40.529000 audit[2022]: AVC avc: denied { mac_admin } for pid=2022 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.529000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:07:40.529000 audit[2022]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d33700 a1=4000842c00 a2=4000a4d0b0 a3=25 items=0 ppid=1 pid=2022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:40.529000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:07:40.530556 kubelet[2022]: I1002 20:07:40.530539 2022 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:07:40.530627 kubelet[2022]: I1002 20:07:40.530618 2022 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:07:40.533670 kubelet[2022]: I1002 20:07:40.533647 2022 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 20:07:40.533785 kubelet[2022]: I1002 20:07:40.533748 2022 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 20:07:40.533960 kubelet[2022]: I1002 20:07:40.533941 2022 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 20:07:40.562525 kubelet[2022]: I1002 20:07:40.562498 2022 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 20:07:40.562000 audit[2044]: USER_ACCT pid=2044 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:40.563465 sudo[2044]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 20:07:40.562000 audit[2044]: CRED_REFR pid=2044 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:40.563668 sudo[2044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 20:07:40.564386 kubelet[2022]: I1002 20:07:40.564344 2022 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 20:07:40.564461 kubelet[2022]: I1002 20:07:40.564409 2022 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 20:07:40.564487 kubelet[2022]: I1002 20:07:40.564478 2022 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 20:07:40.564654 kubelet[2022]: E1002 20:07:40.564589 2022 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:07:40.564000 audit[2044]: USER_START pid=2044 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:40.583063 kubelet[2022]: I1002 20:07:40.583038 2022 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:07:40.583186 kubelet[2022]: I1002 20:07:40.583175 2022 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:07:40.583261 kubelet[2022]: I1002 20:07:40.583251 2022 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:07:40.583479 kubelet[2022]: I1002 20:07:40.583463 2022 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 20:07:40.583560 kubelet[2022]: I1002 20:07:40.583549 2022 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 2 20:07:40.583620 kubelet[2022]: I1002 20:07:40.583611 2022 policy_none.go:49] "None policy: Start" Oct 2 20:07:40.584183 kubelet[2022]: I1002 20:07:40.584168 2022 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:07:40.584262 kubelet[2022]: I1002 20:07:40.584252 2022 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:07:40.584479 kubelet[2022]: I1002 20:07:40.584462 2022 state_mem.go:75] "Updated machine memory state" Oct 2 20:07:40.588114 kubelet[2022]: I1002 20:07:40.588082 2022 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:07:40.587000 audit[2022]: AVC avc: denied { mac_admin } for pid=2022 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:40.587000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:07:40.587000 audit[2022]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000968120 a1=4000edbc50 a2=40009680f0 a3=25 items=0 ppid=1 pid=2022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:40.587000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:07:40.588342 kubelet[2022]: I1002 20:07:40.588175 2022 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:07:40.588486 kubelet[2022]: I1002 20:07:40.588452 2022 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:07:40.637325 kubelet[2022]: I1002 20:07:40.637225 2022 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 20:07:40.644462 kubelet[2022]: I1002 20:07:40.644430 2022 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Oct 2 20:07:40.644584 kubelet[2022]: I1002 20:07:40.644518 2022 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 20:07:40.664879 kubelet[2022]: I1002 20:07:40.664833 2022 topology_manager.go:215] "Topology Admit Handler" podUID="6961ff1365464b1e2d286a48d6c5e40f" podNamespace="kube-system" podName="kube-controller-manager-localhost" Oct 2 20:07:40.665115 kubelet[2022]: I1002 20:07:40.665084 2022 topology_manager.go:215] "Topology Admit Handler" podUID="b619222ebfcfd1a0c9478200f0921497" podNamespace="kube-system" podName="kube-scheduler-localhost" Oct 2 20:07:40.666857 kubelet[2022]: I1002 20:07:40.666828 2022 topology_manager.go:215] "Topology Admit Handler" podUID="9cfd802a5b8fba3aec51267ac8db8208" podNamespace="kube-system" podName="kube-apiserver-localhost" Oct 2 20:07:40.672733 kubelet[2022]: E1002 20:07:40.672702 2022 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 20:07:40.672887 kubelet[2022]: E1002 20:07:40.672716 2022 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 20:07:40.734192 kubelet[2022]: I1002 20:07:40.734162 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9cfd802a5b8fba3aec51267ac8db8208-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"9cfd802a5b8fba3aec51267ac8db8208\") " pod="kube-system/kube-apiserver-localhost" Oct 2 20:07:40.734192 kubelet[2022]: I1002 20:07:40.734202 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:40.734326 kubelet[2022]: I1002 20:07:40.734222 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:40.734326 kubelet[2022]: I1002 20:07:40.734243 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:40.734326 kubelet[2022]: I1002 20:07:40.734263 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9cfd802a5b8fba3aec51267ac8db8208-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"9cfd802a5b8fba3aec51267ac8db8208\") " pod="kube-system/kube-apiserver-localhost" Oct 2 20:07:40.734326 kubelet[2022]: I1002 20:07:40.734280 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9cfd802a5b8fba3aec51267ac8db8208-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"9cfd802a5b8fba3aec51267ac8db8208\") " pod="kube-system/kube-apiserver-localhost" Oct 2 20:07:40.734326 kubelet[2022]: I1002 20:07:40.734305 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:40.734467 kubelet[2022]: I1002 20:07:40.734325 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b619222ebfcfd1a0c9478200f0921497-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b619222ebfcfd1a0c9478200f0921497\") " pod="kube-system/kube-scheduler-localhost" Oct 2 20:07:40.734467 kubelet[2022]: I1002 20:07:40.734344 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:40.972953 kubelet[2022]: E1002 20:07:40.972865 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:40.973804 kubelet[2022]: E1002 20:07:40.973758 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:40.974724 kubelet[2022]: E1002 20:07:40.974702 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:41.061652 sudo[2044]: pam_unix(sudo:session): session closed for user root Oct 2 20:07:41.060000 audit[2044]: USER_END pid=2044 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:41.061000 audit[2044]: CRED_DISP pid=2044 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:41.516347 kubelet[2022]: I1002 20:07:41.516307 2022 apiserver.go:52] "Watching apiserver" Oct 2 20:07:41.534862 kubelet[2022]: I1002 20:07:41.534821 2022 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 20:07:41.582008 kubelet[2022]: E1002 20:07:41.581970 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:41.584009 kubelet[2022]: E1002 20:07:41.583985 2022 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 20:07:41.584351 kubelet[2022]: E1002 20:07:41.584335 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:41.586511 kubelet[2022]: E1002 20:07:41.585217 2022 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:41.586511 kubelet[2022]: E1002 20:07:41.585747 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:41.604873 kubelet[2022]: I1002 20:07:41.604843 2022 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.6047874549999999 podCreationTimestamp="2023-10-02 20:07:40 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:07:41.598369889 +0000 UTC m=+1.154313545" watchObservedRunningTime="2023-10-02 20:07:41.604787455 +0000 UTC m=+1.160731111" Oct 2 20:07:41.611997 kubelet[2022]: I1002 20:07:41.611965 2022 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.611929001 podCreationTimestamp="2023-10-02 20:07:39 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:07:41.605130902 +0000 UTC m=+1.161074558" watchObservedRunningTime="2023-10-02 20:07:41.611929001 +0000 UTC m=+1.167872657" Oct 2 20:07:41.620066 kubelet[2022]: I1002 20:07:41.620040 2022 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=3.620006717 podCreationTimestamp="2023-10-02 20:07:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:07:41.61242459 +0000 UTC m=+1.168368246" watchObservedRunningTime="2023-10-02 20:07:41.620006717 +0000 UTC m=+1.175950373" Oct 2 20:07:42.422175 sudo[1270]: pam_unix(sudo:session): session closed for user root Oct 2 20:07:42.420000 audit[1270]: USER_END pid=1270 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:42.420000 audit[1270]: CRED_DISP pid=1270 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:42.423459 sshd[1267]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:42.422000 audit[1267]: USER_END pid=1267 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:42.422000 audit[1267]: CRED_DISP pid=1267 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:42.426460 systemd[1]: sshd@6-10.0.0.8:22-10.0.0.1:59532.service: Deactivated successfully. Oct 2 20:07:42.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.8:22-10.0.0.1:59532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:42.427215 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 20:07:42.427393 systemd[1]: session-7.scope: Consumed 7.586s CPU time. Oct 2 20:07:42.427742 systemd-logind[1129]: Session 7 logged out. Waiting for processes to exit. Oct 2 20:07:42.428635 systemd-logind[1129]: Removed session 7. Oct 2 20:07:42.580519 kubelet[2022]: E1002 20:07:42.580482 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:42.580848 kubelet[2022]: E1002 20:07:42.580555 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:42.581173 kubelet[2022]: E1002 20:07:42.581144 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:43.582007 kubelet[2022]: E1002 20:07:43.581972 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:43.582464 kubelet[2022]: E1002 20:07:43.582180 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:43.813000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:43.813000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000764080 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:07:43.813000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:43.813000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:43.813000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000336aa0 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:07:43.813000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:43.814000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:43.814000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000764100 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:07:43.814000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:43.814000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:43.814000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000dad8a0 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:07:43.814000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:47.370612 kubelet[2022]: E1002 20:07:47.370547 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:47.588321 kubelet[2022]: E1002 20:07:47.588278 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:49.980890 update_engine[1131]: I1002 20:07:49.980835 1131 update_attempter.cc:505] Updating boot flags... Oct 2 20:07:51.694795 kubelet[2022]: E1002 20:07:51.694745 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:52.597328 kubelet[2022]: E1002 20:07:52.597297 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:52.714494 kubelet[2022]: E1002 20:07:52.714465 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:54.426924 kubelet[2022]: I1002 20:07:54.426874 2022 topology_manager.go:215] "Topology Admit Handler" podUID="7cfeb067-9d94-401d-ae25-7de2143dd2f2" podNamespace="kube-system" podName="cilium-operator-6bc8ccdb58-sfl9m" Oct 2 20:07:54.431652 systemd[1]: Created slice kubepods-besteffort-pod7cfeb067_9d94_401d_ae25_7de2143dd2f2.slice. Oct 2 20:07:54.448648 kubelet[2022]: I1002 20:07:54.448601 2022 topology_manager.go:215] "Topology Admit Handler" podUID="1d70eba5-742c-48ca-805b-745c1ab230a9" podNamespace="kube-system" podName="kube-proxy-jd4hf" Oct 2 20:07:54.451077 kubelet[2022]: I1002 20:07:54.451039 2022 topology_manager.go:215] "Topology Admit Handler" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" podNamespace="kube-system" podName="cilium-hpsmd" Oct 2 20:07:54.453517 systemd[1]: Created slice kubepods-besteffort-pod1d70eba5_742c_48ca_805b_745c1ab230a9.slice. Oct 2 20:07:54.455228 kubelet[2022]: W1002 20:07:54.455201 2022 reflector.go:535] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 20:07:54.455228 kubelet[2022]: E1002 20:07:54.455234 2022 reflector.go:147] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 20:07:54.455372 kubelet[2022]: W1002 20:07:54.455354 2022 reflector.go:535] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 20:07:54.455437 kubelet[2022]: E1002 20:07:54.455427 2022 reflector.go:147] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 20:07:54.455671 kubelet[2022]: W1002 20:07:54.455636 2022 reflector.go:535] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 20:07:54.455671 kubelet[2022]: E1002 20:07:54.455666 2022 reflector.go:147] object-"kube-system"/"kube-proxy": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 20:07:54.463227 systemd[1]: Created slice kubepods-burstable-podc2b80e2b_061f_4777_9e68_49dd6e29bca9.slice. Oct 2 20:07:54.531135 kubelet[2022]: I1002 20:07:54.531098 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-cilium-run\") pod \"cilium-hpsmd\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " pod="kube-system/cilium-hpsmd" Oct 2 20:07:54.531330 kubelet[2022]: I1002 20:07:54.531318 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-lib-modules\") pod \"cilium-hpsmd\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " pod="kube-system/cilium-hpsmd" Oct 2 20:07:54.531410 kubelet[2022]: I1002 20:07:54.531400 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c2b80e2b-061f-4777-9e68-49dd6e29bca9-hubble-tls\") pod \"cilium-hpsmd\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " pod="kube-system/cilium-hpsmd" Oct 2 20:07:54.531684 kubelet[2022]: I1002 20:07:54.531661 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-82nxk\" (UniqueName: \"kubernetes.io/projected/1d70eba5-742c-48ca-805b-745c1ab230a9-kube-api-access-82nxk\") pod \"kube-proxy-jd4hf\" (UID: \"1d70eba5-742c-48ca-805b-745c1ab230a9\") " pod="kube-system/kube-proxy-jd4hf" Oct 2 20:07:54.532094 kubelet[2022]: I1002 20:07:54.532077 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-drfvg\" (UniqueName: \"kubernetes.io/projected/c2b80e2b-061f-4777-9e68-49dd6e29bca9-kube-api-access-drfvg\") pod \"cilium-hpsmd\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " pod="kube-system/cilium-hpsmd" Oct 2 20:07:54.532198 kubelet[2022]: I1002 20:07:54.532187 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-bpf-maps\") pod \"cilium-hpsmd\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " pod="kube-system/cilium-hpsmd" Oct 2 20:07:54.532281 kubelet[2022]: I1002 20:07:54.532272 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-etc-cni-netd\") pod \"cilium-hpsmd\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " pod="kube-system/cilium-hpsmd" Oct 2 20:07:54.532356 kubelet[2022]: I1002 20:07:54.532347 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-xtables-lock\") pod \"cilium-hpsmd\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " pod="kube-system/cilium-hpsmd" Oct 2 20:07:54.532440 kubelet[2022]: I1002 20:07:54.532430 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xj6r4\" (UniqueName: \"kubernetes.io/projected/7cfeb067-9d94-401d-ae25-7de2143dd2f2-kube-api-access-xj6r4\") pod \"cilium-operator-6bc8ccdb58-sfl9m\" (UID: \"7cfeb067-9d94-401d-ae25-7de2143dd2f2\") " pod="kube-system/cilium-operator-6bc8ccdb58-sfl9m" Oct 2 20:07:54.532518 kubelet[2022]: I1002 20:07:54.532509 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/1d70eba5-742c-48ca-805b-745c1ab230a9-kube-proxy\") pod \"kube-proxy-jd4hf\" (UID: \"1d70eba5-742c-48ca-805b-745c1ab230a9\") " pod="kube-system/kube-proxy-jd4hf" Oct 2 20:07:54.532616 kubelet[2022]: I1002 20:07:54.532606 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1d70eba5-742c-48ca-805b-745c1ab230a9-xtables-lock\") pod \"kube-proxy-jd4hf\" (UID: \"1d70eba5-742c-48ca-805b-745c1ab230a9\") " pod="kube-system/kube-proxy-jd4hf" Oct 2 20:07:54.533264 kubelet[2022]: I1002 20:07:54.533249 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1d70eba5-742c-48ca-805b-745c1ab230a9-lib-modules\") pod \"kube-proxy-jd4hf\" (UID: \"1d70eba5-742c-48ca-805b-745c1ab230a9\") " pod="kube-system/kube-proxy-jd4hf" Oct 2 20:07:54.534461 kubelet[2022]: I1002 20:07:54.534443 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-host-proc-sys-kernel\") pod \"cilium-hpsmd\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " pod="kube-system/cilium-hpsmd" Oct 2 20:07:54.535474 kubelet[2022]: I1002 20:07:54.535448 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c2b80e2b-061f-4777-9e68-49dd6e29bca9-cilium-config-path\") pod \"cilium-hpsmd\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " pod="kube-system/cilium-hpsmd" Oct 2 20:07:54.535609 kubelet[2022]: I1002 20:07:54.535598 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-cilium-cgroup\") pod \"cilium-hpsmd\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " pod="kube-system/cilium-hpsmd" Oct 2 20:07:54.535725 kubelet[2022]: I1002 20:07:54.535714 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-cni-path\") pod \"cilium-hpsmd\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " pod="kube-system/cilium-hpsmd" Oct 2 20:07:54.535866 kubelet[2022]: I1002 20:07:54.535854 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c2b80e2b-061f-4777-9e68-49dd6e29bca9-clustermesh-secrets\") pod \"cilium-hpsmd\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " pod="kube-system/cilium-hpsmd" Oct 2 20:07:54.536144 kubelet[2022]: I1002 20:07:54.536126 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/7cfeb067-9d94-401d-ae25-7de2143dd2f2-cilium-config-path\") pod \"cilium-operator-6bc8ccdb58-sfl9m\" (UID: \"7cfeb067-9d94-401d-ae25-7de2143dd2f2\") " pod="kube-system/cilium-operator-6bc8ccdb58-sfl9m" Oct 2 20:07:54.536251 kubelet[2022]: I1002 20:07:54.536241 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-hostproc\") pod \"cilium-hpsmd\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " pod="kube-system/cilium-hpsmd" Oct 2 20:07:54.536374 kubelet[2022]: I1002 20:07:54.536363 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-host-proc-sys-net\") pod \"cilium-hpsmd\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " pod="kube-system/cilium-hpsmd" Oct 2 20:07:54.557705 kubelet[2022]: I1002 20:07:54.557682 2022 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 20:07:54.558962 env[1142]: time="2023-10-02T20:07:54.558649716Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 20:07:54.559419 kubelet[2022]: I1002 20:07:54.559399 2022 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 20:07:54.741864 kubelet[2022]: E1002 20:07:54.741729 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:54.742605 env[1142]: time="2023-10-02T20:07:54.742346687Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-sfl9m,Uid:7cfeb067-9d94-401d-ae25-7de2143dd2f2,Namespace:kube-system,Attempt:0,}" Oct 2 20:07:54.767015 env[1142]: time="2023-10-02T20:07:54.766950864Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:07:54.767198 env[1142]: time="2023-10-02T20:07:54.767174760Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:07:54.767282 env[1142]: time="2023-10-02T20:07:54.767261606Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:07:54.768174 env[1142]: time="2023-10-02T20:07:54.768124347Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9 pid=2123 runtime=io.containerd.runc.v2 Oct 2 20:07:54.786920 systemd[1]: Started cri-containerd-a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9.scope. Oct 2 20:07:54.807838 kernel: kauditd_printk_skb: 293 callbacks suppressed Oct 2 20:07:54.807961 kernel: audit: type=1400 audit(1696277274.805:948): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.809964 kernel: audit: type=1400 audit(1696277274.805:949): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.810057 kernel: audit: type=1400 audit(1696277274.805:950): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.811650 kernel: audit: type=1400 audit(1696277274.805:951): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.814819 kernel: audit: type=1400 audit(1696277274.805:952): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.814895 kernel: audit: type=1400 audit(1696277274.805:953): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.816512 kernel: audit: type=1400 audit(1696277274.805:954): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.818083 kernel: audit: type=1400 audit(1696277274.805:955): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.819710 kernel: audit: type=1400 audit(1696277274.805:956): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.822703 kernel: audit: type=1400 audit(1696277274.806:957): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.806000 audit: BPF prog-id=109 op=LOAD Oct 2 20:07:54.808000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.808000 audit[2132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2123 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:54.808000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135613335333935633766363164613936613166333461363262366436 Oct 2 20:07:54.808000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.808000 audit[2132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2123 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:54.808000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135613335333935633766363164613936613166333461363262366436 Oct 2 20:07:54.808000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.808000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.808000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.808000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.808000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.808000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.808000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.808000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.808000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.808000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.808000 audit: BPF prog-id=110 op=LOAD Oct 2 20:07:54.808000 audit[2132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2123 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:54.808000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135613335333935633766363164613936613166333461363262366436 Oct 2 20:07:54.809000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.809000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.809000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.809000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.809000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.809000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.809000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.809000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.809000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.809000 audit: BPF prog-id=111 op=LOAD Oct 2 20:07:54.809000 audit[2132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2123 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:54.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135613335333935633766363164613936613166333461363262366436 Oct 2 20:07:54.810000 audit: BPF prog-id=111 op=UNLOAD Oct 2 20:07:54.810000 audit: BPF prog-id=110 op=UNLOAD Oct 2 20:07:54.810000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.810000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.810000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.810000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.810000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.810000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.810000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.810000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.810000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.810000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:54.810000 audit: BPF prog-id=112 op=LOAD Oct 2 20:07:54.810000 audit[2132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2123 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:54.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135613335333935633766363164613936613166333461363262366436 Oct 2 20:07:54.838074 env[1142]: time="2023-10-02T20:07:54.838028162Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-sfl9m,Uid:7cfeb067-9d94-401d-ae25-7de2143dd2f2,Namespace:kube-system,Attempt:0,} returns sandbox id \"a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9\"" Oct 2 20:07:54.838960 kubelet[2022]: E1002 20:07:54.838940 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:54.842386 env[1142]: time="2023-10-02T20:07:54.841270791Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 20:07:55.638265 kubelet[2022]: E1002 20:07:55.638232 2022 projected.go:267] Couldn't get secret kube-system/hubble-server-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 20:07:55.638265 kubelet[2022]: E1002 20:07:55.638261 2022 projected.go:198] Error preparing data for projected volume hubble-tls for pod kube-system/cilium-hpsmd: failed to sync secret cache: timed out waiting for the condition Oct 2 20:07:55.638638 kubelet[2022]: E1002 20:07:55.638322 2022 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/c2b80e2b-061f-4777-9e68-49dd6e29bca9-hubble-tls podName:c2b80e2b-061f-4777-9e68-49dd6e29bca9 nodeName:}" failed. No retries permitted until 2023-10-02 20:07:56.138301381 +0000 UTC m=+15.694245037 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "hubble-tls" (UniqueName: "kubernetes.io/projected/c2b80e2b-061f-4777-9e68-49dd6e29bca9-hubble-tls") pod "cilium-hpsmd" (UID: "c2b80e2b-061f-4777-9e68-49dd6e29bca9") : failed to sync secret cache: timed out waiting for the condition Oct 2 20:07:55.638638 kubelet[2022]: E1002 20:07:55.638243 2022 secret.go:194] Couldn't get secret kube-system/cilium-clustermesh: failed to sync secret cache: timed out waiting for the condition Oct 2 20:07:55.638638 kubelet[2022]: E1002 20:07:55.638355 2022 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/c2b80e2b-061f-4777-9e68-49dd6e29bca9-clustermesh-secrets podName:c2b80e2b-061f-4777-9e68-49dd6e29bca9 nodeName:}" failed. No retries permitted until 2023-10-02 20:07:56.138349064 +0000 UTC m=+15.694292720 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "clustermesh-secrets" (UniqueName: "kubernetes.io/secret/c2b80e2b-061f-4777-9e68-49dd6e29bca9-clustermesh-secrets") pod "cilium-hpsmd" (UID: "c2b80e2b-061f-4777-9e68-49dd6e29bca9") : failed to sync secret cache: timed out waiting for the condition Oct 2 20:07:55.657514 kubelet[2022]: E1002 20:07:55.657468 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:55.658202 env[1142]: time="2023-10-02T20:07:55.658082914Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-jd4hf,Uid:1d70eba5-742c-48ca-805b-745c1ab230a9,Namespace:kube-system,Attempt:0,}" Oct 2 20:07:55.674740 env[1142]: time="2023-10-02T20:07:55.674617588Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:07:55.674740 env[1142]: time="2023-10-02T20:07:55.674672152Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:07:55.674740 env[1142]: time="2023-10-02T20:07:55.674682753Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:07:55.675063 env[1142]: time="2023-10-02T20:07:55.675025336Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8ca18b15fb9d2edfa7e67258c75431db7f33034342a6fabf52e3d675ace8217d pid=2165 runtime=io.containerd.runc.v2 Oct 2 20:07:55.687928 systemd[1]: run-containerd-runc-k8s.io-8ca18b15fb9d2edfa7e67258c75431db7f33034342a6fabf52e3d675ace8217d-runc.GUxV7o.mount: Deactivated successfully. Oct 2 20:07:55.692394 systemd[1]: Started cri-containerd-8ca18b15fb9d2edfa7e67258c75431db7f33034342a6fabf52e3d675ace8217d.scope. Oct 2 20:07:55.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.722000 audit: BPF prog-id=113 op=LOAD Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2165 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:55.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863613138623135666239643265646661376536373235386337353433 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2165 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:55.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863613138623135666239643265646661376536373235386337353433 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit: BPF prog-id=114 op=LOAD Oct 2 20:07:55.723000 audit[2173]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2165 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:55.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863613138623135666239643265646661376536373235386337353433 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit: BPF prog-id=115 op=LOAD Oct 2 20:07:55.723000 audit[2173]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2165 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:55.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863613138623135666239643265646661376536373235386337353433 Oct 2 20:07:55.723000 audit: BPF prog-id=115 op=UNLOAD Oct 2 20:07:55.723000 audit: BPF prog-id=114 op=UNLOAD Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.723000 audit: BPF prog-id=116 op=LOAD Oct 2 20:07:55.723000 audit[2173]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2165 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:55.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863613138623135666239643265646661376536373235386337353433 Oct 2 20:07:55.744032 env[1142]: time="2023-10-02T20:07:55.743849094Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-jd4hf,Uid:1d70eba5-742c-48ca-805b-745c1ab230a9,Namespace:kube-system,Attempt:0,} returns sandbox id \"8ca18b15fb9d2edfa7e67258c75431db7f33034342a6fabf52e3d675ace8217d\"" Oct 2 20:07:55.744598 kubelet[2022]: E1002 20:07:55.744561 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:55.747343 env[1142]: time="2023-10-02T20:07:55.746975665Z" level=info msg="CreateContainer within sandbox \"8ca18b15fb9d2edfa7e67258c75431db7f33034342a6fabf52e3d675ace8217d\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 20:07:55.786594 env[1142]: time="2023-10-02T20:07:55.786523890Z" level=info msg="CreateContainer within sandbox \"8ca18b15fb9d2edfa7e67258c75431db7f33034342a6fabf52e3d675ace8217d\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"a2d3c92a8ce730f1e80c4c188876a60e2330cf2c4a910e3389cf66076d7eaae2\"" Oct 2 20:07:55.790693 env[1142]: time="2023-10-02T20:07:55.787294742Z" level=info msg="StartContainer for \"a2d3c92a8ce730f1e80c4c188876a60e2330cf2c4a910e3389cf66076d7eaae2\"" Oct 2 20:07:55.810562 systemd[1]: Started cri-containerd-a2d3c92a8ce730f1e80c4c188876a60e2330cf2c4a910e3389cf66076d7eaae2.scope. Oct 2 20:07:55.836000 audit[2203]: AVC avc: denied { perfmon } for pid=2203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.836000 audit[2203]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2165 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:55.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132643363393261386365373330663165383063346331383838373661 Oct 2 20:07:55.836000 audit[2203]: AVC avc: denied { bpf } for pid=2203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.836000 audit[2203]: AVC avc: denied { bpf } for pid=2203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.836000 audit[2203]: AVC avc: denied { bpf } for pid=2203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.836000 audit[2203]: AVC avc: denied { perfmon } for pid=2203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.836000 audit[2203]: AVC avc: denied { perfmon } for pid=2203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.836000 audit[2203]: AVC avc: denied { perfmon } for pid=2203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.836000 audit[2203]: AVC avc: denied { perfmon } for pid=2203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.836000 audit[2203]: AVC avc: denied { perfmon } for pid=2203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.836000 audit[2203]: AVC avc: denied { bpf } for pid=2203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.836000 audit[2203]: AVC avc: denied { bpf } for pid=2203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.836000 audit: BPF prog-id=117 op=LOAD Oct 2 20:07:55.836000 audit[2203]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2165 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:55.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132643363393261386365373330663165383063346331383838373661 Oct 2 20:07:55.837000 audit[2203]: AVC avc: denied { bpf } for pid=2203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.837000 audit[2203]: AVC avc: denied { bpf } for pid=2203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.837000 audit[2203]: AVC avc: denied { perfmon } for pid=2203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.837000 audit[2203]: AVC avc: denied { perfmon } for pid=2203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.837000 audit[2203]: AVC avc: denied { perfmon } for pid=2203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.837000 audit[2203]: AVC avc: denied { perfmon } for pid=2203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.837000 audit[2203]: AVC avc: denied { perfmon } for pid=2203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.837000 audit[2203]: AVC avc: denied { bpf } for pid=2203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.837000 audit[2203]: AVC avc: denied { bpf } for pid=2203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.837000 audit: BPF prog-id=118 op=LOAD Oct 2 20:07:55.837000 audit[2203]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2165 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:55.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132643363393261386365373330663165383063346331383838373661 Oct 2 20:07:55.838000 audit: BPF prog-id=118 op=UNLOAD Oct 2 20:07:55.838000 audit: BPF prog-id=117 op=UNLOAD Oct 2 20:07:55.838000 audit[2203]: AVC avc: denied { bpf } for pid=2203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.838000 audit[2203]: AVC avc: denied { bpf } for pid=2203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.838000 audit[2203]: AVC avc: denied { bpf } for pid=2203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.838000 audit[2203]: AVC avc: denied { perfmon } for pid=2203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.838000 audit[2203]: AVC avc: denied { perfmon } for pid=2203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.838000 audit[2203]: AVC avc: denied { perfmon } for pid=2203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.838000 audit[2203]: AVC avc: denied { perfmon } for pid=2203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.838000 audit[2203]: AVC avc: denied { perfmon } for pid=2203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.838000 audit[2203]: AVC avc: denied { bpf } for pid=2203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.838000 audit[2203]: AVC avc: denied { bpf } for pid=2203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:55.838000 audit: BPF prog-id=119 op=LOAD Oct 2 20:07:55.838000 audit[2203]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2165 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:55.838000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132643363393261386365373330663165383063346331383838373661 Oct 2 20:07:55.863755 env[1142]: time="2023-10-02T20:07:55.863654849Z" level=info msg="StartContainer for \"a2d3c92a8ce730f1e80c4c188876a60e2330cf2c4a910e3389cf66076d7eaae2\" returns successfully" Oct 2 20:07:55.973000 audit[2255]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:55.973000 audit[2255]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffeb0a83e0 a2=0 a3=ffffa683f6c0 items=0 ppid=2214 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:55.973000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:07:55.978000 audit[2257]: NETFILTER_CFG table=nat:39 family=10 entries=1 op=nft_register_chain pid=2257 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:55.978000 audit[2257]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffd59b0f0 a2=0 a3=ffff93cc46c0 items=0 ppid=2214 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:55.978000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:07:55.978000 audit[2256]: NETFILTER_CFG table=mangle:40 family=2 entries=1 op=nft_register_chain pid=2256 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:55.978000 audit[2256]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc806d9a0 a2=0 a3=ffffa0b096c0 items=0 ppid=2214 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:55.978000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:07:55.979000 audit[2258]: NETFILTER_CFG table=filter:41 family=10 entries=1 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:55.979000 audit[2258]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcecd1b80 a2=0 a3=ffffa52536c0 items=0 ppid=2214 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:55.979000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:07:55.979000 audit[2259]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=2259 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:55.979000 audit[2259]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe9734680 a2=0 a3=ffff822f16c0 items=0 ppid=2214 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:55.979000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:07:55.980000 audit[2260]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2260 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:55.980000 audit[2260]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdf7c0ca0 a2=0 a3=ffffb534f6c0 items=0 ppid=2214 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:55.980000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:07:56.074000 audit[2261]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2261 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.074000 audit[2261]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe1342ee0 a2=0 a3=ffff9f9f56c0 items=0 ppid=2214 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.074000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:07:56.077000 audit[2263]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2263 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.077000 audit[2263]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffd75f8b70 a2=0 a3=ffffaa0e16c0 items=0 ppid=2214 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.077000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 20:07:56.082000 audit[2266]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2266 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.082000 audit[2266]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffc92e2a0 a2=0 a3=ffffbe6696c0 items=0 ppid=2214 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.082000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 20:07:56.083000 audit[2267]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.083000 audit[2267]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc7f6b010 a2=0 a3=ffff9b5716c0 items=0 ppid=2214 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.083000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:07:56.086000 audit[2269]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2269 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.086000 audit[2269]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcd88a930 a2=0 a3=ffff983a86c0 items=0 ppid=2214 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.086000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:07:56.087000 audit[2270]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2270 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.087000 audit[2270]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff1d331b0 a2=0 a3=ffff827c66c0 items=0 ppid=2214 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.087000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:07:56.090000 audit[2272]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2272 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.090000 audit[2272]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffebc9e870 a2=0 a3=ffff881b16c0 items=0 ppid=2214 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.090000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:07:56.093000 audit[2275]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2275 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.093000 audit[2275]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff314fe50 a2=0 a3=ffff98a0e6c0 items=0 ppid=2214 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.093000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 20:07:56.094000 audit[2276]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.094000 audit[2276]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc88015e0 a2=0 a3=ffff967de6c0 items=0 ppid=2214 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.094000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:07:56.097000 audit[2278]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2278 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.097000 audit[2278]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd1199f70 a2=0 a3=ffff8d9936c0 items=0 ppid=2214 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.097000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:07:56.098000 audit[2279]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2279 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.098000 audit[2279]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffead3f1e0 a2=0 a3=ffff941056c0 items=0 ppid=2214 pid=2279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.098000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:07:56.101000 audit[2281]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2281 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.101000 audit[2281]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe6ddaed0 a2=0 a3=ffffaaf4e6c0 items=0 ppid=2214 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.101000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:07:56.105000 audit[2284]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2284 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.105000 audit[2284]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffee538690 a2=0 a3=ffffb13e76c0 items=0 ppid=2214 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.105000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:07:56.113000 audit[2287]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2287 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.113000 audit[2287]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc6bff0d0 a2=0 a3=ffffae7186c0 items=0 ppid=2214 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.113000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:07:56.116000 audit[2288]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2288 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.116000 audit[2288]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffcbde69a0 a2=0 a3=ffffa85cb6c0 items=0 ppid=2214 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.116000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:07:56.120000 audit[2290]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2290 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.120000 audit[2290]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffdb325830 a2=0 a3=ffff98c7f6c0 items=0 ppid=2214 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.120000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:07:56.124000 audit[2293]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2293 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.124000 audit[2293]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc5581010 a2=0 a3=ffffb206a6c0 items=0 ppid=2214 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.124000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:07:56.125000 audit[2294]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2294 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.125000 audit[2294]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe8e419f0 a2=0 a3=ffffb71f46c0 items=0 ppid=2214 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.125000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:07:56.128000 audit[2296]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2296 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:56.128000 audit[2296]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffe6644b50 a2=0 a3=ffff91de96c0 items=0 ppid=2214 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.128000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:07:56.144000 audit[2302]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:07:56.144000 audit[2302]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffc5c619b0 a2=0 a3=ffffb65026c0 items=0 ppid=2214 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.144000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:07:56.149000 audit[2302]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:07:56.149000 audit[2302]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffc5c619b0 a2=0 a3=ffffb65026c0 items=0 ppid=2214 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.149000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:07:56.150000 audit[2310]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.150000 audit[2310]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd038b980 a2=0 a3=ffff8f4426c0 items=0 ppid=2214 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.150000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:07:56.153000 audit[2312]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2312 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.153000 audit[2312]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffffd310840 a2=0 a3=ffff8f7426c0 items=0 ppid=2214 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.153000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 20:07:56.157000 audit[2315]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2315 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.157000 audit[2315]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffea71b180 a2=0 a3=ffffb35c66c0 items=0 ppid=2214 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.157000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 20:07:56.158000 audit[2316]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2316 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.158000 audit[2316]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc143c3e0 a2=0 a3=ffff9cc2c6c0 items=0 ppid=2214 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.158000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:07:56.161000 audit[2318]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2318 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.161000 audit[2318]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdfbe6a20 a2=0 a3=ffff8f8696c0 items=0 ppid=2214 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.161000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:07:56.162000 audit[2319]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2319 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.162000 audit[2319]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe3381ba0 a2=0 a3=ffffb380a6c0 items=0 ppid=2214 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.162000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:07:56.165000 audit[2321]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.165000 audit[2321]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffff3431a0 a2=0 a3=ffff968aa6c0 items=0 ppid=2214 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.165000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 20:07:56.168000 audit[2324]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2324 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.168000 audit[2324]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffc4f19220 a2=0 a3=ffff91f8e6c0 items=0 ppid=2214 pid=2324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.168000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:07:56.169000 audit[2325]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2325 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.169000 audit[2325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc4b30e50 a2=0 a3=ffff961f06c0 items=0 ppid=2214 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.169000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:07:56.172000 audit[2327]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2327 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.172000 audit[2327]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd00604b0 a2=0 a3=ffff829d16c0 items=0 ppid=2214 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.172000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:07:56.173000 audit[2328]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2328 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.173000 audit[2328]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd779ebd0 a2=0 a3=ffff961726c0 items=0 ppid=2214 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.173000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:07:56.175000 audit[2330]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2330 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.175000 audit[2330]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd8bcef40 a2=0 a3=ffffa4f0d6c0 items=0 ppid=2214 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.175000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:07:56.179000 audit[2333]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2333 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.179000 audit[2333]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffec5a9eb0 a2=0 a3=ffffb3fd76c0 items=0 ppid=2214 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.179000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:07:56.183000 audit[2336]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2336 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.183000 audit[2336]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe9350310 a2=0 a3=ffff9d0196c0 items=0 ppid=2214 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.183000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 20:07:56.185000 audit[2337]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2337 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.185000 audit[2337]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe3417df0 a2=0 a3=ffffa2c6c6c0 items=0 ppid=2214 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.185000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:07:56.187000 audit[2339]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2339 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.187000 audit[2339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffe6454a50 a2=0 a3=ffffa02ed6c0 items=0 ppid=2214 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.187000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:07:56.190000 audit[2342]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2342 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.190000 audit[2342]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd607b800 a2=0 a3=ffff8e1246c0 items=0 ppid=2214 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.190000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:07:56.191000 audit[2343]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2343 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.191000 audit[2343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdbfc9960 a2=0 a3=ffff814f46c0 items=0 ppid=2214 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.191000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:07:56.193000 audit[2345]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2345 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.193000 audit[2345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffcc52a610 a2=0 a3=ffffbf6356c0 items=0 ppid=2214 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.193000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:07:56.195000 audit[2346]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2346 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.195000 audit[2346]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffd188610 a2=0 a3=ffffba3496c0 items=0 ppid=2214 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.195000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:07:56.198000 audit[2348]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.198000 audit[2348]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd88ebc40 a2=0 a3=ffffba84a6c0 items=0 ppid=2214 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.198000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:07:56.202000 audit[2351]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2351 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:56.202000 audit[2351]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc6fa4c70 a2=0 a3=ffff84ce96c0 items=0 ppid=2214 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.202000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:07:56.204000 audit[2353]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2353 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:07:56.204000 audit[2353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffe5a9b8c0 a2=0 a3=ffffba5256c0 items=0 ppid=2214 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.204000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:07:56.205000 audit[2353]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2353 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:07:56.205000 audit[2353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffe5a9b8c0 a2=0 a3=ffffba5256c0 items=0 ppid=2214 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.205000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:07:56.266942 kubelet[2022]: E1002 20:07:56.265836 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:56.267087 env[1142]: time="2023-10-02T20:07:56.266340869Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-hpsmd,Uid:c2b80e2b-061f-4777-9e68-49dd6e29bca9,Namespace:kube-system,Attempt:0,}" Oct 2 20:07:56.282103 env[1142]: time="2023-10-02T20:07:56.282027159Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:07:56.282277 env[1142]: time="2023-10-02T20:07:56.282254414Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:07:56.282376 env[1142]: time="2023-10-02T20:07:56.282353980Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:07:56.282658 env[1142]: time="2023-10-02T20:07:56.282616717Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939 pid=2362 runtime=io.containerd.runc.v2 Oct 2 20:07:56.295664 systemd[1]: Started cri-containerd-b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939.scope. Oct 2 20:07:56.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.322000 audit: BPF prog-id=120 op=LOAD Oct 2 20:07:56.322000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.322000 audit[2372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2362 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235336336323266323962313463373162623565353564643636633535 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit[2372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2362 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235336336323266323962313463373162623565353564643636633535 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit: BPF prog-id=121 op=LOAD Oct 2 20:07:56.323000 audit[2372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2362 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235336336323266323962313463373162623565353564643636633535 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.323000 audit: BPF prog-id=122 op=LOAD Oct 2 20:07:56.323000 audit[2372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2362 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235336336323266323962313463373162623565353564643636633535 Oct 2 20:07:56.324000 audit: BPF prog-id=122 op=UNLOAD Oct 2 20:07:56.324000 audit: BPF prog-id=121 op=UNLOAD Oct 2 20:07:56.324000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.324000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.324000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.324000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.324000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.324000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.324000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.324000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.324000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.324000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.324000 audit: BPF prog-id=123 op=LOAD Oct 2 20:07:56.324000 audit[2372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2362 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235336336323266323962313463373162623565353564643636633535 Oct 2 20:07:56.337826 env[1142]: time="2023-10-02T20:07:56.337778789Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:56.339156 env[1142]: time="2023-10-02T20:07:56.338958985Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:56.341521 env[1142]: time="2023-10-02T20:07:56.341478147Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-hpsmd,Uid:c2b80e2b-061f-4777-9e68-49dd6e29bca9,Namespace:kube-system,Attempt:0,} returns sandbox id \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\"" Oct 2 20:07:56.342390 kubelet[2022]: E1002 20:07:56.342303 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:56.343879 env[1142]: time="2023-10-02T20:07:56.342451770Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:56.343879 env[1142]: time="2023-10-02T20:07:56.343202298Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 20:07:56.346064 env[1142]: time="2023-10-02T20:07:56.345414120Z" level=info msg="CreateContainer within sandbox \"a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 20:07:56.346064 env[1142]: time="2023-10-02T20:07:56.345953315Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 20:07:56.358169 env[1142]: time="2023-10-02T20:07:56.358111938Z" level=info msg="CreateContainer within sandbox \"a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa\"" Oct 2 20:07:56.358613 env[1142]: time="2023-10-02T20:07:56.358585608Z" level=info msg="StartContainer for \"d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa\"" Oct 2 20:07:56.376682 systemd[1]: Started cri-containerd-d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa.scope. Oct 2 20:07:56.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.403000 audit: BPF prog-id=124 op=LOAD Oct 2 20:07:56.403000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.403000 audit[2402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2123 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.403000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434393466363663333930353165623634333864363634633132396464 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2123 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.404000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434393466363663333930353165623634333864363634633132396464 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit: BPF prog-id=125 op=LOAD Oct 2 20:07:56.404000 audit[2402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2123 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.404000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434393466363663333930353165623634333864363634633132396464 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit: BPF prog-id=126 op=LOAD Oct 2 20:07:56.404000 audit[2402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2123 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.404000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434393466363663333930353165623634333864363634633132396464 Oct 2 20:07:56.404000 audit: BPF prog-id=126 op=UNLOAD Oct 2 20:07:56.404000 audit: BPF prog-id=125 op=UNLOAD Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:56.404000 audit: BPF prog-id=127 op=LOAD Oct 2 20:07:56.404000 audit[2402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2123 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:56.404000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434393466363663333930353165623634333864363634633132396464 Oct 2 20:07:56.427823 env[1142]: time="2023-10-02T20:07:56.427779424Z" level=info msg="StartContainer for \"d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa\" returns successfully" Oct 2 20:07:56.487000 audit[2412]: AVC avc: denied { map_create } for pid=2412 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c755,c921 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c755,c921 tclass=bpf permissive=0 Oct 2 20:07:56.487000 audit[2412]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=400070f768 a2=48 a3=0 items=0 ppid=2123 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c755,c921 key=(null) Oct 2 20:07:56.487000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 20:07:56.606355 kubelet[2022]: E1002 20:07:56.606317 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:56.609181 kubelet[2022]: E1002 20:07:56.609150 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:56.629459 kubelet[2022]: I1002 20:07:56.629414 2022 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-6bc8ccdb58-sfl9m" podStartSLOduration=1.126775091 podCreationTimestamp="2023-10-02 20:07:54 +0000 UTC" firstStartedPulling="2023-10-02 20:07:54.840814359 +0000 UTC m=+14.396757975" lastFinishedPulling="2023-10-02 20:07:56.343417832 +0000 UTC m=+15.899361488" observedRunningTime="2023-10-02 20:07:56.627577968 +0000 UTC m=+16.183521624" watchObservedRunningTime="2023-10-02 20:07:56.629378604 +0000 UTC m=+16.185322220" Oct 2 20:07:56.637808 kubelet[2022]: I1002 20:07:56.637741 2022 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-jd4hf" podStartSLOduration=2.63770858 podCreationTimestamp="2023-10-02 20:07:54 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:07:56.637098301 +0000 UTC m=+16.193041917" watchObservedRunningTime="2023-10-02 20:07:56.63770858 +0000 UTC m=+16.193652236" Oct 2 20:07:57.616306 kubelet[2022]: E1002 20:07:57.616280 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:00.034388 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2455797933.mount: Deactivated successfully. Oct 2 20:08:00.635702 kubelet[2022]: I1002 20:08:00.635648 2022 eviction_manager.go:342] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 20:08:00.635702 kubelet[2022]: I1002 20:08:00.635692 2022 container_gc.go:86] "Attempting to delete unused containers" Oct 2 20:08:00.638950 kubelet[2022]: I1002 20:08:00.638267 2022 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 20:08:00.640661 kubelet[2022]: I1002 20:08:00.640487 2022 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108" size=14557471 Oct 2 20:08:00.640882 env[1142]: time="2023-10-02T20:08:00.640842198Z" level=info msg="RemoveImage \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 20:08:00.645768 env[1142]: time="2023-10-02T20:08:00.645723622Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns:v1.10.1,XXX_unrecognized:[],}" Oct 2 20:08:00.648800 env[1142]: time="2023-10-02T20:08:00.648755026Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,XXX_unrecognized:[],}" Oct 2 20:08:00.648963 env[1142]: time="2023-10-02T20:08:00.648943956Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,XXX_unrecognized:[],}" Oct 2 20:08:00.657971 env[1142]: time="2023-10-02T20:08:00.657919482Z" level=info msg="RemoveImage \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\" returns successfully" Oct 2 20:08:00.658495 kubelet[2022]: I1002 20:08:00.658463 2022 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace" size=86464836 Oct 2 20:08:00.658715 env[1142]: time="2023-10-02T20:08:00.658687123Z" level=info msg="RemoveImage \"sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace\"" Oct 2 20:08:00.659665 env[1142]: time="2023-10-02T20:08:00.659481486Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd:3.5.9-0,XXX_unrecognized:[],}" Oct 2 20:08:00.663899 env[1142]: time="2023-10-02T20:08:00.663851403Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,XXX_unrecognized:[],}" Oct 2 20:08:00.663997 env[1142]: time="2023-10-02T20:08:00.663925287Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace,XXX_unrecognized:[],}" Oct 2 20:08:00.689151 env[1142]: time="2023-10-02T20:08:00.689092409Z" level=info msg="RemoveImage \"sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace\" returns successfully" Oct 2 20:08:00.689363 kubelet[2022]: I1002 20:08:00.689343 2022 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e" size=253553 Oct 2 20:08:00.689697 env[1142]: time="2023-10-02T20:08:00.689669560Z" level=info msg="RemoveImage \"sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e\"" Oct 2 20:08:00.690668 env[1142]: time="2023-10-02T20:08:00.690598450Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause:3.6,XXX_unrecognized:[],}" Oct 2 20:08:00.691473 env[1142]: time="2023-10-02T20:08:00.691373332Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,XXX_unrecognized:[],}" Oct 2 20:08:00.692081 env[1142]: time="2023-10-02T20:08:00.692056569Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,XXX_unrecognized:[],}" Oct 2 20:08:00.696141 env[1142]: time="2023-10-02T20:08:00.696096628Z" level=info msg="RemoveImage \"sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e\" returns successfully" Oct 2 20:08:00.706307 kubelet[2022]: I1002 20:08:00.706269 2022 eviction_manager.go:349] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 20:08:02.535068 env[1142]: time="2023-10-02T20:08:02.535020464Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:08:02.536345 env[1142]: time="2023-10-02T20:08:02.536292687Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:08:02.544748 env[1142]: time="2023-10-02T20:08:02.544697827Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:08:02.545324 env[1142]: time="2023-10-02T20:08:02.545279056Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 20:08:02.549398 env[1142]: time="2023-10-02T20:08:02.549361619Z" level=info msg="CreateContainer within sandbox \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:08:02.559248 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1018807247.mount: Deactivated successfully. Oct 2 20:08:02.569709 env[1142]: time="2023-10-02T20:08:02.569657792Z" level=info msg="CreateContainer within sandbox \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc\"" Oct 2 20:08:02.571802 env[1142]: time="2023-10-02T20:08:02.571276353Z" level=info msg="StartContainer for \"06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc\"" Oct 2 20:08:02.590001 systemd[1]: Started cri-containerd-06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc.scope. Oct 2 20:08:02.608321 systemd[1]: cri-containerd-06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc.scope: Deactivated successfully. Oct 2 20:08:02.773878 env[1142]: time="2023-10-02T20:08:02.773826858Z" level=info msg="shim disconnected" id=06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc Oct 2 20:08:02.773878 env[1142]: time="2023-10-02T20:08:02.773875861Z" level=warning msg="cleaning up after shim disconnected" id=06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc namespace=k8s.io Oct 2 20:08:02.773878 env[1142]: time="2023-10-02T20:08:02.773886101Z" level=info msg="cleaning up dead shim" Oct 2 20:08:02.782277 env[1142]: time="2023-10-02T20:08:02.782200636Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:08:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2457 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:08:02Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:08:02.782581 env[1142]: time="2023-10-02T20:08:02.782472169Z" level=error msg="copy shim log" error="read /proc/self/fd/61: file already closed" Oct 2 20:08:02.782789 env[1142]: time="2023-10-02T20:08:02.782697101Z" level=error msg="Failed to pipe stdout of container \"06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc\"" error="reading from a closed fifo" Oct 2 20:08:02.786074 env[1142]: time="2023-10-02T20:08:02.785815016Z" level=error msg="Failed to pipe stderr of container \"06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc\"" error="reading from a closed fifo" Oct 2 20:08:02.787838 env[1142]: time="2023-10-02T20:08:02.787747633Z" level=error msg="StartContainer for \"06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:08:02.788236 kubelet[2022]: E1002 20:08:02.788078 2022 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc" Oct 2 20:08:02.792250 kubelet[2022]: E1002 20:08:02.792213 2022 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:08:02.792250 kubelet[2022]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:08:02.792250 kubelet[2022]: rm /hostbin/cilium-mount Oct 2 20:08:02.792392 kubelet[2022]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-drfvg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:08:02.792392 kubelet[2022]: E1002 20:08:02.792268 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:08:03.555882 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc-rootfs.mount: Deactivated successfully. Oct 2 20:08:03.632700 kubelet[2022]: E1002 20:08:03.632196 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:03.636317 env[1142]: time="2023-10-02T20:08:03.636033218Z" level=info msg="CreateContainer within sandbox \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:08:03.648795 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1697845343.mount: Deactivated successfully. Oct 2 20:08:03.653176 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3918191535.mount: Deactivated successfully. Oct 2 20:08:03.656988 env[1142]: time="2023-10-02T20:08:03.656935941Z" level=info msg="CreateContainer within sandbox \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813\"" Oct 2 20:08:03.658833 env[1142]: time="2023-10-02T20:08:03.657728899Z" level=info msg="StartContainer for \"07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813\"" Oct 2 20:08:03.677067 systemd[1]: Started cri-containerd-07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813.scope. Oct 2 20:08:03.703198 systemd[1]: cri-containerd-07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813.scope: Deactivated successfully. Oct 2 20:08:03.714866 env[1142]: time="2023-10-02T20:08:03.714802717Z" level=info msg="shim disconnected" id=07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813 Oct 2 20:08:03.714866 env[1142]: time="2023-10-02T20:08:03.714855519Z" level=warning msg="cleaning up after shim disconnected" id=07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813 namespace=k8s.io Oct 2 20:08:03.714866 env[1142]: time="2023-10-02T20:08:03.714865600Z" level=info msg="cleaning up dead shim" Oct 2 20:08:03.723265 env[1142]: time="2023-10-02T20:08:03.723197160Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:08:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2493 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:08:03Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:08:03.723527 env[1142]: time="2023-10-02T20:08:03.723470213Z" level=error msg="copy shim log" error="read /proc/self/fd/61: file already closed" Oct 2 20:08:03.723712 env[1142]: time="2023-10-02T20:08:03.723666382Z" level=error msg="Failed to pipe stdout of container \"07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813\"" error="reading from a closed fifo" Oct 2 20:08:03.724198 env[1142]: time="2023-10-02T20:08:03.724158846Z" level=error msg="Failed to pipe stderr of container \"07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813\"" error="reading from a closed fifo" Oct 2 20:08:03.725685 env[1142]: time="2023-10-02T20:08:03.725640757Z" level=error msg="StartContainer for \"07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:08:03.725925 kubelet[2022]: E1002 20:08:03.725899 2022 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813" Oct 2 20:08:03.726016 kubelet[2022]: E1002 20:08:03.726002 2022 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:08:03.726016 kubelet[2022]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:08:03.726016 kubelet[2022]: rm /hostbin/cilium-mount Oct 2 20:08:03.726016 kubelet[2022]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-drfvg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:08:03.726243 kubelet[2022]: E1002 20:08:03.726044 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:08:04.633267 kubelet[2022]: I1002 20:08:04.633236 2022 scope.go:117] "RemoveContainer" containerID="06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc" Oct 2 20:08:04.634001 kubelet[2022]: I1002 20:08:04.633978 2022 scope.go:117] "RemoveContainer" containerID="06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc" Oct 2 20:08:04.634530 env[1142]: time="2023-10-02T20:08:04.634485181Z" level=info msg="RemoveContainer for \"06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc\"" Oct 2 20:08:04.637014 env[1142]: time="2023-10-02T20:08:04.636971016Z" level=info msg="RemoveContainer for \"06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc\" returns successfully" Oct 2 20:08:04.639556 env[1142]: time="2023-10-02T20:08:04.639519053Z" level=info msg="RemoveContainer for \"06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc\"" Oct 2 20:08:04.639556 env[1142]: time="2023-10-02T20:08:04.639552815Z" level=info msg="RemoveContainer for \"06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc\" returns successfully" Oct 2 20:08:04.639742 kubelet[2022]: E1002 20:08:04.639711 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:04.639995 kubelet[2022]: E1002 20:08:04.639972 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:08:05.640511 kubelet[2022]: E1002 20:08:05.640478 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:05.641165 kubelet[2022]: E1002 20:08:05.641131 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:08:05.878020 kubelet[2022]: W1002 20:08:05.877977 2022 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc2b80e2b_061f_4777_9e68_49dd6e29bca9.slice/cri-containerd-06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc.scope WatchSource:0}: container "06e68592e22b1dba9ccd59cc59bcd47bba12b2a005e064c21f10185c8630b1bc" in namespace "k8s.io": not found Oct 2 20:08:08.984775 kubelet[2022]: W1002 20:08:08.984731 2022 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc2b80e2b_061f_4777_9e68_49dd6e29bca9.slice/cri-containerd-07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813.scope WatchSource:0}: task 07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813 not found: not found Oct 2 20:08:20.424892 kernel: kauditd_printk_skb: 417 callbacks suppressed Oct 2 20:08:20.425036 kernel: audit: type=1130 audit(1696277300.421:1078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.8:22-10.0.0.1:53174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:20.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.8:22-10.0.0.1:53174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:20.422105 systemd[1]: Started sshd@7-10.0.0.8:22-10.0.0.1:53174.service. Oct 2 20:08:20.466000 audit[2508]: USER_ACCT pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:20.467896 sshd[2508]: Accepted publickey for core from 10.0.0.1 port 53174 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:08:20.469046 sshd[2508]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:20.467000 audit[2508]: CRED_ACQ pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:20.471840 kernel: audit: type=1101 audit(1696277300.466:1079): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:20.471911 kernel: audit: type=1103 audit(1696277300.467:1080): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:20.471940 kernel: audit: type=1006 audit(1696277300.467:1081): pid=2508 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 20:08:20.473147 kernel: audit: type=1300 audit(1696277300.467:1081): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7c4c8d0 a2=3 a3=1 items=0 ppid=1 pid=2508 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:20.467000 audit[2508]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7c4c8d0 a2=3 a3=1 items=0 ppid=1 pid=2508 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:20.473651 systemd[1]: Started session-8.scope. Oct 2 20:08:20.474135 systemd-logind[1129]: New session 8 of user core. Oct 2 20:08:20.467000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:20.476204 kernel: audit: type=1327 audit(1696277300.467:1081): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:20.477000 audit[2508]: USER_START pid=2508 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:20.478000 audit[2510]: CRED_ACQ pid=2510 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:20.483628 kernel: audit: type=1105 audit(1696277300.477:1082): pid=2508 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:20.483714 kernel: audit: type=1103 audit(1696277300.478:1083): pid=2510 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:20.566481 kubelet[2022]: E1002 20:08:20.566445 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:20.568563 env[1142]: time="2023-10-02T20:08:20.568423023Z" level=info msg="CreateContainer within sandbox \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:08:20.584923 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4013988281.mount: Deactivated successfully. Oct 2 20:08:20.594134 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1923293658.mount: Deactivated successfully. Oct 2 20:08:20.606413 env[1142]: time="2023-10-02T20:08:20.606359036Z" level=info msg="CreateContainer within sandbox \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7\"" Oct 2 20:08:20.609118 env[1142]: time="2023-10-02T20:08:20.607125099Z" level=info msg="StartContainer for \"087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7\"" Oct 2 20:08:20.625458 systemd[1]: Started cri-containerd-087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7.scope. Oct 2 20:08:20.631572 sshd[2508]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:20.634000 audit[2508]: USER_END pid=2508 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:20.636810 systemd[1]: sshd@7-10.0.0.8:22-10.0.0.1:53174.service: Deactivated successfully. Oct 2 20:08:20.637513 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 20:08:20.634000 audit[2508]: CRED_DISP pid=2508 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:20.637848 kernel: audit: type=1106 audit(1696277300.634:1084): pid=2508 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:20.637879 kernel: audit: type=1104 audit(1696277300.634:1085): pid=2508 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:20.638492 systemd-logind[1129]: Session 8 logged out. Waiting for processes to exit. Oct 2 20:08:20.639303 systemd-logind[1129]: Removed session 8. Oct 2 20:08:20.634000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.8:22-10.0.0.1:53174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:20.658367 systemd[1]: cri-containerd-087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7.scope: Deactivated successfully. Oct 2 20:08:20.672143 env[1142]: time="2023-10-02T20:08:20.672086011Z" level=info msg="shim disconnected" id=087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7 Oct 2 20:08:20.672143 env[1142]: time="2023-10-02T20:08:20.672134653Z" level=warning msg="cleaning up after shim disconnected" id=087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7 namespace=k8s.io Oct 2 20:08:20.672143 env[1142]: time="2023-10-02T20:08:20.672143293Z" level=info msg="cleaning up dead shim" Oct 2 20:08:20.683856 env[1142]: time="2023-10-02T20:08:20.683705226Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:08:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2548 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:08:20Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:08:20.685333 env[1142]: time="2023-10-02T20:08:20.684019275Z" level=error msg="copy shim log" error="read /proc/self/fd/59: file already closed" Oct 2 20:08:20.685333 env[1142]: time="2023-10-02T20:08:20.684249322Z" level=error msg="Failed to pipe stdout of container \"087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7\"" error="reading from a closed fifo" Oct 2 20:08:20.685783 env[1142]: time="2023-10-02T20:08:20.685706684Z" level=error msg="Failed to pipe stderr of container \"087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7\"" error="reading from a closed fifo" Oct 2 20:08:20.687364 env[1142]: time="2023-10-02T20:08:20.687318691Z" level=error msg="StartContainer for \"087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:08:20.687569 kubelet[2022]: E1002 20:08:20.687546 2022 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7" Oct 2 20:08:20.687669 kubelet[2022]: E1002 20:08:20.687656 2022 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:08:20.687669 kubelet[2022]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:08:20.687669 kubelet[2022]: rm /hostbin/cilium-mount Oct 2 20:08:20.687669 kubelet[2022]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-drfvg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:08:20.687887 kubelet[2022]: E1002 20:08:20.687724 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:08:21.582313 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7-rootfs.mount: Deactivated successfully. Oct 2 20:08:21.672854 kubelet[2022]: I1002 20:08:21.672817 2022 scope.go:117] "RemoveContainer" containerID="07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813" Oct 2 20:08:21.673215 kubelet[2022]: I1002 20:08:21.673196 2022 scope.go:117] "RemoveContainer" containerID="07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813" Oct 2 20:08:21.674362 env[1142]: time="2023-10-02T20:08:21.674266061Z" level=info msg="RemoveContainer for \"07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813\"" Oct 2 20:08:21.675037 env[1142]: time="2023-10-02T20:08:21.674985561Z" level=info msg="RemoveContainer for \"07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813\"" Oct 2 20:08:21.675119 env[1142]: time="2023-10-02T20:08:21.675066004Z" level=error msg="RemoveContainer for \"07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813\" failed" error="failed to set removing state for container \"07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813\": container is already in removing state" Oct 2 20:08:21.675331 kubelet[2022]: E1002 20:08:21.675308 2022 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813\": container is already in removing state" containerID="07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813" Oct 2 20:08:21.675517 kubelet[2022]: E1002 20:08:21.675448 2022 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813": container is already in removing state; Skipping pod "cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)" Oct 2 20:08:21.675676 kubelet[2022]: E1002 20:08:21.675664 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:21.676032 kubelet[2022]: E1002 20:08:21.676015 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:08:21.677235 env[1142]: time="2023-10-02T20:08:21.677130262Z" level=info msg="RemoveContainer for \"07b34205a7c7b4315cf87110b624e91f726d49a4116689af78eb86319fc0d813\" returns successfully" Oct 2 20:08:23.778573 kubelet[2022]: W1002 20:08:23.778524 2022 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc2b80e2b_061f_4777_9e68_49dd6e29bca9.slice/cri-containerd-087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7.scope WatchSource:0}: task 087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7 not found: not found Oct 2 20:08:30.635000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.8:22-10.0.0.1:33366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:30.636534 systemd[1]: Started sshd@8-10.0.0.8:22-10.0.0.1:33366.service. Oct 2 20:08:30.639181 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:30.639259 kernel: audit: type=1130 audit(1696277310.635:1087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.8:22-10.0.0.1:33366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:30.675000 audit[2565]: USER_ACCT pid=2565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:30.676567 sshd[2565]: Accepted publickey for core from 10.0.0.1 port 33366 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:08:30.678216 sshd[2565]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:30.677000 audit[2565]: CRED_ACQ pid=2565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:30.681457 kernel: audit: type=1101 audit(1696277310.675:1088): pid=2565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:30.681524 kernel: audit: type=1103 audit(1696277310.677:1089): pid=2565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:30.681560 kernel: audit: type=1006 audit(1696277310.677:1090): pid=2565 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 20:08:30.683105 kernel: audit: type=1300 audit(1696277310.677:1090): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde76cf70 a2=3 a3=1 items=0 ppid=1 pid=2565 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:30.677000 audit[2565]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde76cf70 a2=3 a3=1 items=0 ppid=1 pid=2565 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:30.682608 systemd[1]: Started session-9.scope. Oct 2 20:08:30.682755 systemd-logind[1129]: New session 9 of user core. Oct 2 20:08:30.684099 kernel: audit: type=1327 audit(1696277310.677:1090): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:30.677000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:30.686000 audit[2565]: USER_START pid=2565 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:30.688000 audit[2567]: CRED_ACQ pid=2567 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:30.692422 kernel: audit: type=1105 audit(1696277310.686:1091): pid=2565 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:30.692494 kernel: audit: type=1103 audit(1696277310.688:1092): pid=2567 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:30.797917 sshd[2565]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:30.798000 audit[2565]: USER_END pid=2565 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:30.800568 systemd[1]: sshd@8-10.0.0.8:22-10.0.0.1:33366.service: Deactivated successfully. Oct 2 20:08:30.801325 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 20:08:30.798000 audit[2565]: CRED_DISP pid=2565 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:30.802216 systemd-logind[1129]: Session 9 logged out. Waiting for processes to exit. Oct 2 20:08:30.803036 systemd-logind[1129]: Removed session 9. Oct 2 20:08:30.803405 kernel: audit: type=1106 audit(1696277310.798:1093): pid=2565 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:30.803438 kernel: audit: type=1104 audit(1696277310.798:1094): pid=2565 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:30.799000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.8:22-10.0.0.1:33366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:32.566135 kubelet[2022]: E1002 20:08:32.566101 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:32.566456 kubelet[2022]: E1002 20:08:32.566342 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:08:37.378000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:37.379957 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:37.380021 kernel: audit: type=1400 audit(1696277317.378:1096): avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:37.378000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400b6951c0 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:08:37.384545 kernel: audit: type=1300 audit(1696277317.378:1096): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400b6951c0 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:08:37.384602 kernel: audit: type=1327 audit(1696277317.378:1096): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:08:37.378000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:08:37.386769 kernel: audit: type=1400 audit(1696277317.378:1097): avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:37.378000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:37.388836 kernel: audit: type=1300 audit(1696277317.378:1097): arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40083dfdd0 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:08:37.378000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40083dfdd0 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:08:37.391390 kernel: audit: type=1327 audit(1696277317.378:1097): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:08:37.378000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:08:37.379000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4768 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:37.395698 kernel: audit: type=1400 audit(1696277317.379:1098): avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4768 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:37.395735 kernel: audit: type=1300 audit(1696277317.379:1098): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40084eb290 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:08:37.379000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40084eb290 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:08:37.398348 kernel: audit: type=1327 audit(1696277317.379:1098): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:08:37.379000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:08:37.400536 kernel: audit: type=1400 audit(1696277317.397:1099): avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:37.397000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:37.397000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40083dfe60 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:08:37.397000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:08:37.397000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:37.397000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400b037ce0 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:08:37.397000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:08:37.397000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:37.397000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40084eb3e0 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:08:37.397000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:08:37.881000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:37.881000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400118b530 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:08:37.881000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:37.884000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:37.884000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400269b700 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:08:37.884000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:40.803350 systemd[1]: Started sshd@9-10.0.0.8:22-10.0.0.1:57026.service. Oct 2 20:08:40.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.8:22-10.0.0.1:57026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:40.842000 audit[2582]: USER_ACCT pid=2582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:40.844059 sshd[2582]: Accepted publickey for core from 10.0.0.1 port 57026 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:08:40.844000 audit[2582]: CRED_ACQ pid=2582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:40.844000 audit[2582]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe931120 a2=3 a3=1 items=0 ppid=1 pid=2582 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:40.844000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:40.846240 sshd[2582]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:40.851818 systemd-logind[1129]: New session 10 of user core. Oct 2 20:08:40.851833 systemd[1]: Started session-10.scope. Oct 2 20:08:40.855000 audit[2582]: USER_START pid=2582 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:40.857000 audit[2584]: CRED_ACQ pid=2584 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:40.963679 sshd[2582]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:40.963000 audit[2582]: USER_END pid=2582 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:40.964000 audit[2582]: CRED_DISP pid=2582 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:40.967054 systemd[1]: sshd@9-10.0.0.8:22-10.0.0.1:57026.service: Deactivated successfully. Oct 2 20:08:40.967823 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 20:08:40.966000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.8:22-10.0.0.1:57026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:40.968380 systemd-logind[1129]: Session 10 logged out. Waiting for processes to exit. Oct 2 20:08:40.969136 systemd-logind[1129]: Removed session 10. Oct 2 20:08:43.565623 kubelet[2022]: E1002 20:08:43.565593 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:43.568170 env[1142]: time="2023-10-02T20:08:43.567923180Z" level=info msg="CreateContainer within sandbox \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:08:43.578157 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1016166611.mount: Deactivated successfully. Oct 2 20:08:43.582650 env[1142]: time="2023-10-02T20:08:43.582593656Z" level=info msg="CreateContainer within sandbox \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7\"" Oct 2 20:08:43.583231 env[1142]: time="2023-10-02T20:08:43.583192457Z" level=info msg="StartContainer for \"352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7\"" Oct 2 20:08:43.599792 systemd[1]: Started cri-containerd-352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7.scope. Oct 2 20:08:43.638477 systemd[1]: cri-containerd-352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7.scope: Deactivated successfully. Oct 2 20:08:43.657629 env[1142]: time="2023-10-02T20:08:43.657578040Z" level=info msg="shim disconnected" id=352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7 Oct 2 20:08:43.657629 env[1142]: time="2023-10-02T20:08:43.657628440Z" level=warning msg="cleaning up after shim disconnected" id=352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7 namespace=k8s.io Oct 2 20:08:43.657914 env[1142]: time="2023-10-02T20:08:43.657638560Z" level=info msg="cleaning up dead shim" Oct 2 20:08:43.667918 env[1142]: time="2023-10-02T20:08:43.667862585Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:08:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2620 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:08:43Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:08:43.668176 env[1142]: time="2023-10-02T20:08:43.668114706Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 20:08:43.668361 env[1142]: time="2023-10-02T20:08:43.668313146Z" level=error msg="Failed to pipe stdout of container \"352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7\"" error="reading from a closed fifo" Oct 2 20:08:43.669412 env[1142]: time="2023-10-02T20:08:43.669373149Z" level=error msg="Failed to pipe stderr of container \"352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7\"" error="reading from a closed fifo" Oct 2 20:08:43.671403 env[1142]: time="2023-10-02T20:08:43.671343274Z" level=error msg="StartContainer for \"352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:08:43.671664 kubelet[2022]: E1002 20:08:43.671630 2022 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7" Oct 2 20:08:43.671803 kubelet[2022]: E1002 20:08:43.671779 2022 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:08:43.671803 kubelet[2022]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:08:43.671803 kubelet[2022]: rm /hostbin/cilium-mount Oct 2 20:08:43.671803 kubelet[2022]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-drfvg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:08:43.671946 kubelet[2022]: E1002 20:08:43.671839 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:08:43.717173 kubelet[2022]: I1002 20:08:43.717003 2022 scope.go:117] "RemoveContainer" containerID="087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7" Oct 2 20:08:43.718187 kubelet[2022]: I1002 20:08:43.718020 2022 scope.go:117] "RemoveContainer" containerID="087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7" Oct 2 20:08:43.719123 env[1142]: time="2023-10-02T20:08:43.719089231Z" level=info msg="RemoveContainer for \"087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7\"" Oct 2 20:08:43.724256 env[1142]: time="2023-10-02T20:08:43.724205843Z" level=info msg="RemoveContainer for \"087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7\" returns successfully" Oct 2 20:08:43.724491 env[1142]: time="2023-10-02T20:08:43.724294644Z" level=info msg="RemoveContainer for \"087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7\"" Oct 2 20:08:43.724597 env[1142]: time="2023-10-02T20:08:43.724578764Z" level=info msg="RemoveContainer for \"087206c9266d1d04e0cc6731c91d5a5874f95880cd4c5f2cfa6dd71853735fc7\" returns successfully" Oct 2 20:08:43.725201 kubelet[2022]: E1002 20:08:43.724830 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:43.725201 kubelet[2022]: E1002 20:08:43.725155 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:08:43.814000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:43.817545 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:08:43.817626 kernel: audit: type=1400 audit(1696277323.814:1113): avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:43.817651 kernel: audit: type=1400 audit(1696277323.814:1114): avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:43.814000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:43.814000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001a6b960 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:08:43.824366 kernel: audit: type=1300 audit(1696277323.814:1114): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001a6b960 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:08:43.824424 kernel: audit: type=1327 audit(1696277323.814:1114): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:43.814000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:43.814000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:43.828731 kernel: audit: type=1400 audit(1696277323.814:1115): avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:43.828789 kernel: audit: type=1300 audit(1696277323.814:1115): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001669400 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:08:43.814000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001669400 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:08:43.831456 kernel: audit: type=1327 audit(1696277323.814:1115): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:43.814000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:43.833836 kernel: audit: type=1300 audit(1696277323.814:1113): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400269ba00 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:08:43.814000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400269ba00 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:08:43.836481 kernel: audit: type=1327 audit(1696277323.814:1113): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:43.814000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:43.815000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:43.841933 kernel: audit: type=1400 audit(1696277323.815:1116): avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:43.815000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001a6bb80 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:08:43.815000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:44.576162 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7-rootfs.mount: Deactivated successfully. Oct 2 20:08:46.762965 kubelet[2022]: W1002 20:08:46.762926 2022 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc2b80e2b_061f_4777_9e68_49dd6e29bca9.slice/cri-containerd-352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7.scope WatchSource:0}: task 352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7 not found: not found Oct 2 20:08:50.969771 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:08:50.969889 kernel: audit: type=1130 audit(1696277330.966:1117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.8:22-10.0.0.1:51238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:50.966000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.8:22-10.0.0.1:51238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:50.968602 systemd[1]: Started sshd@10-10.0.0.8:22-10.0.0.1:51238.service. Oct 2 20:08:51.007000 audit[2634]: USER_ACCT pid=2634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:51.009288 sshd[2634]: Accepted publickey for core from 10.0.0.1 port 51238 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:08:51.010387 sshd[2634]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:51.008000 audit[2634]: CRED_ACQ pid=2634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:51.013623 kernel: audit: type=1101 audit(1696277331.007:1118): pid=2634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:51.013678 kernel: audit: type=1103 audit(1696277331.008:1119): pid=2634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:51.015185 kernel: audit: type=1006 audit(1696277331.008:1120): pid=2634 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 20:08:51.008000 audit[2634]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd45749a0 a2=3 a3=1 items=0 ppid=1 pid=2634 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:51.017649 kernel: audit: type=1300 audit(1696277331.008:1120): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd45749a0 a2=3 a3=1 items=0 ppid=1 pid=2634 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:51.008000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:51.018530 kernel: audit: type=1327 audit(1696277331.008:1120): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:51.020119 systemd-logind[1129]: New session 11 of user core. Oct 2 20:08:51.020554 systemd[1]: Started session-11.scope. Oct 2 20:08:51.023000 audit[2634]: USER_START pid=2634 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:51.026000 audit[2636]: CRED_ACQ pid=2636 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:51.030134 kernel: audit: type=1105 audit(1696277331.023:1121): pid=2634 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:51.030189 kernel: audit: type=1103 audit(1696277331.026:1122): pid=2636 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:51.137350 sshd[2634]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:51.136000 audit[2634]: USER_END pid=2634 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:51.136000 audit[2634]: CRED_DISP pid=2634 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:51.142590 kernel: audit: type=1106 audit(1696277331.136:1123): pid=2634 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:51.142654 kernel: audit: type=1104 audit(1696277331.136:1124): pid=2634 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:51.142964 systemd[1]: sshd@10-10.0.0.8:22-10.0.0.1:51238.service: Deactivated successfully. Oct 2 20:08:51.143684 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 20:08:51.141000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.8:22-10.0.0.1:51238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:51.144270 systemd-logind[1129]: Session 11 logged out. Waiting for processes to exit. Oct 2 20:08:51.145076 systemd-logind[1129]: Removed session 11. Oct 2 20:08:54.566479 kubelet[2022]: E1002 20:08:54.566446 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:58.565569 kubelet[2022]: E1002 20:08:58.565536 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:58.566169 kubelet[2022]: E1002 20:08:58.566147 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:09:01.142247 systemd[1]: Started sshd@11-10.0.0.8:22-10.0.0.1:44920.service. Oct 2 20:09:01.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.8:22-10.0.0.1:44920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:01.145156 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:01.145223 kernel: audit: type=1130 audit(1696277341.140:1126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.8:22-10.0.0.1:44920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:01.180000 audit[2651]: USER_ACCT pid=2651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:01.182705 sshd[2651]: Accepted publickey for core from 10.0.0.1 port 44920 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:09:01.184137 sshd[2651]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:01.182000 audit[2651]: CRED_ACQ pid=2651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:01.186880 kernel: audit: type=1101 audit(1696277341.180:1127): pid=2651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:01.186951 kernel: audit: type=1103 audit(1696277341.182:1128): pid=2651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:01.186976 kernel: audit: type=1006 audit(1696277341.182:1129): pid=2651 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 20:09:01.188785 kernel: audit: type=1300 audit(1696277341.182:1129): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc77f7c00 a2=3 a3=1 items=0 ppid=1 pid=2651 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:01.182000 audit[2651]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc77f7c00 a2=3 a3=1 items=0 ppid=1 pid=2651 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:01.189736 systemd-logind[1129]: New session 12 of user core. Oct 2 20:09:01.190353 systemd[1]: Started session-12.scope. Oct 2 20:09:01.182000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:01.191236 kernel: audit: type=1327 audit(1696277341.182:1129): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:01.192000 audit[2651]: USER_START pid=2651 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:01.193000 audit[2653]: CRED_ACQ pid=2653 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:01.198535 kernel: audit: type=1105 audit(1696277341.192:1130): pid=2651 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:01.198581 kernel: audit: type=1103 audit(1696277341.193:1131): pid=2653 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:01.304591 sshd[2651]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:01.303000 audit[2651]: USER_END pid=2651 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:01.307052 systemd[1]: sshd@11-10.0.0.8:22-10.0.0.1:44920.service: Deactivated successfully. Oct 2 20:09:01.307829 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 20:09:01.303000 audit[2651]: CRED_DISP pid=2651 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:01.308409 systemd-logind[1129]: Session 12 logged out. Waiting for processes to exit. Oct 2 20:09:01.309055 systemd-logind[1129]: Removed session 12. Oct 2 20:09:01.310263 kernel: audit: type=1106 audit(1696277341.303:1132): pid=2651 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:01.310319 kernel: audit: type=1104 audit(1696277341.303:1133): pid=2651 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:01.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.8:22-10.0.0.1:44920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:05.565430 kubelet[2022]: E1002 20:09:05.565391 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:09.565755 kubelet[2022]: E1002 20:09:09.565711 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:09.566108 kubelet[2022]: E1002 20:09:09.566019 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:11.309480 systemd[1]: Started sshd@12-10.0.0.8:22-10.0.0.1:46396.service. Oct 2 20:09:11.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.8:22-10.0.0.1:46396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:11.312081 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:11.312161 kernel: audit: type=1130 audit(1696277351.307:1135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.8:22-10.0.0.1:46396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:11.348000 audit[2665]: USER_ACCT pid=2665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:11.350256 sshd[2665]: Accepted publickey for core from 10.0.0.1 port 46396 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:09:11.351479 sshd[2665]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:11.349000 audit[2665]: CRED_ACQ pid=2665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:11.354267 kernel: audit: type=1101 audit(1696277351.348:1136): pid=2665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:11.354336 kernel: audit: type=1103 audit(1696277351.349:1137): pid=2665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:11.354358 kernel: audit: type=1006 audit(1696277351.349:1138): pid=2665 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 20:09:11.355870 kernel: audit: type=1300 audit(1696277351.349:1138): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc09ec9f0 a2=3 a3=1 items=0 ppid=1 pid=2665 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:11.349000 audit[2665]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc09ec9f0 a2=3 a3=1 items=0 ppid=1 pid=2665 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:11.356718 systemd-logind[1129]: New session 13 of user core. Oct 2 20:09:11.357130 systemd[1]: Started session-13.scope. Oct 2 20:09:11.357783 kernel: audit: type=1327 audit(1696277351.349:1138): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:11.349000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:11.360000 audit[2665]: USER_START pid=2665 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:11.361000 audit[2667]: CRED_ACQ pid=2667 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:11.366175 kernel: audit: type=1105 audit(1696277351.360:1139): pid=2665 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:11.366243 kernel: audit: type=1103 audit(1696277351.361:1140): pid=2667 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:11.475066 sshd[2665]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:11.474000 audit[2665]: USER_END pid=2665 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:11.477945 systemd-logind[1129]: Session 13 logged out. Waiting for processes to exit. Oct 2 20:09:11.478110 systemd[1]: sshd@12-10.0.0.8:22-10.0.0.1:46396.service: Deactivated successfully. Oct 2 20:09:11.474000 audit[2665]: CRED_DISP pid=2665 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:11.478873 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 20:09:11.479576 systemd-logind[1129]: Removed session 13. Oct 2 20:09:11.480534 kernel: audit: type=1106 audit(1696277351.474:1141): pid=2665 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:11.480590 kernel: audit: type=1104 audit(1696277351.474:1142): pid=2665 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:11.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.8:22-10.0.0.1:46396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:11.565616 kubelet[2022]: E1002 20:09:11.565208 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:11.565616 kubelet[2022]: E1002 20:09:11.565440 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:09:11.565616 kubelet[2022]: E1002 20:09:11.565458 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:21.479824 systemd[1]: Started sshd@13-10.0.0.8:22-10.0.0.1:53240.service. Oct 2 20:09:21.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.8:22-10.0.0.1:53240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:21.482531 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:21.482633 kernel: audit: type=1130 audit(1696277361.479:1144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.8:22-10.0.0.1:53240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:21.519000 audit[2680]: USER_ACCT pid=2680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:21.521235 sshd[2680]: Accepted publickey for core from 10.0.0.1 port 53240 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:09:21.521000 audit[2680]: CRED_ACQ pid=2680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:21.522849 sshd[2680]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:21.524915 kernel: audit: type=1101 audit(1696277361.519:1145): pid=2680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:21.524988 kernel: audit: type=1103 audit(1696277361.521:1146): pid=2680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:21.525012 kernel: audit: type=1006 audit(1696277361.521:1147): pid=2680 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 20:09:21.521000 audit[2680]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebd71410 a2=3 a3=1 items=0 ppid=1 pid=2680 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:21.527539 systemd-logind[1129]: New session 14 of user core. Oct 2 20:09:21.527838 systemd[1]: Started session-14.scope. Oct 2 20:09:21.528407 kernel: audit: type=1300 audit(1696277361.521:1147): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebd71410 a2=3 a3=1 items=0 ppid=1 pid=2680 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:21.528460 kernel: audit: type=1327 audit(1696277361.521:1147): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:21.521000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:21.530000 audit[2680]: USER_START pid=2680 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:21.532000 audit[2682]: CRED_ACQ pid=2682 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:21.535792 kernel: audit: type=1105 audit(1696277361.530:1148): pid=2680 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:21.535854 kernel: audit: type=1103 audit(1696277361.532:1149): pid=2682 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:21.646846 sshd[2680]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:21.647000 audit[2680]: USER_END pid=2680 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:21.647000 audit[2680]: CRED_DISP pid=2680 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:21.649548 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 20:09:21.650243 systemd[1]: sshd@13-10.0.0.8:22-10.0.0.1:53240.service: Deactivated successfully. Oct 2 20:09:21.650624 systemd-logind[1129]: Session 14 logged out. Waiting for processes to exit. Oct 2 20:09:21.652205 systemd-logind[1129]: Removed session 14. Oct 2 20:09:21.652494 kernel: audit: type=1106 audit(1696277361.647:1150): pid=2680 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:21.652527 kernel: audit: type=1104 audit(1696277361.647:1151): pid=2680 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:21.649000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.8:22-10.0.0.1:53240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:26.565817 kubelet[2022]: E1002 20:09:26.565752 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:26.568004 env[1142]: time="2023-10-02T20:09:26.567962993Z" level=info msg="CreateContainer within sandbox \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 20:09:26.576517 env[1142]: time="2023-10-02T20:09:26.576465268Z" level=info msg="CreateContainer within sandbox \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da\"" Oct 2 20:09:26.576892 env[1142]: time="2023-10-02T20:09:26.576856833Z" level=info msg="StartContainer for \"e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da\"" Oct 2 20:09:26.593427 systemd[1]: Started cri-containerd-e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da.scope. Oct 2 20:09:26.616194 systemd[1]: cri-containerd-e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da.scope: Deactivated successfully. Oct 2 20:09:26.621437 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da-rootfs.mount: Deactivated successfully. Oct 2 20:09:26.629569 env[1142]: time="2023-10-02T20:09:26.629519743Z" level=info msg="shim disconnected" id=e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da Oct 2 20:09:26.629569 env[1142]: time="2023-10-02T20:09:26.629569464Z" level=warning msg="cleaning up after shim disconnected" id=e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da namespace=k8s.io Oct 2 20:09:26.629751 env[1142]: time="2023-10-02T20:09:26.629579704Z" level=info msg="cleaning up dead shim" Oct 2 20:09:26.638839 env[1142]: time="2023-10-02T20:09:26.638791548Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:09:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2719 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:09:26Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:09:26.639270 env[1142]: time="2023-10-02T20:09:26.639193154Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 20:09:26.639739 env[1142]: time="2023-10-02T20:09:26.639603199Z" level=error msg="Failed to pipe stderr of container \"e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da\"" error="reading from a closed fifo" Oct 2 20:09:26.641087 env[1142]: time="2023-10-02T20:09:26.641041418Z" level=error msg="Failed to pipe stdout of container \"e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da\"" error="reading from a closed fifo" Oct 2 20:09:26.643533 env[1142]: time="2023-10-02T20:09:26.643484931Z" level=error msg="StartContainer for \"e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:09:26.643838 kubelet[2022]: E1002 20:09:26.643749 2022 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da" Oct 2 20:09:26.644021 kubelet[2022]: E1002 20:09:26.643929 2022 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:09:26.644021 kubelet[2022]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:09:26.644021 kubelet[2022]: rm /hostbin/cilium-mount Oct 2 20:09:26.644021 kubelet[2022]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-drfvg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:09:26.644021 kubelet[2022]: E1002 20:09:26.643969 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:09:26.791183 kubelet[2022]: I1002 20:09:26.791146 2022 scope.go:117] "RemoveContainer" containerID="352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7" Oct 2 20:09:26.791505 kubelet[2022]: I1002 20:09:26.791475 2022 scope.go:117] "RemoveContainer" containerID="352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7" Oct 2 20:09:26.794115 env[1142]: time="2023-10-02T20:09:26.793612636Z" level=info msg="RemoveContainer for \"352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7\"" Oct 2 20:09:26.794115 env[1142]: time="2023-10-02T20:09:26.793662756Z" level=info msg="RemoveContainer for \"352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7\"" Oct 2 20:09:26.794115 env[1142]: time="2023-10-02T20:09:26.793786118Z" level=error msg="RemoveContainer for \"352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7\" failed" error="failed to set removing state for container \"352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7\": container is already in removing state" Oct 2 20:09:26.794312 kubelet[2022]: E1002 20:09:26.793938 2022 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7\": container is already in removing state" containerID="352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7" Oct 2 20:09:26.794312 kubelet[2022]: E1002 20:09:26.793967 2022 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7": container is already in removing state; Skipping pod "cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)" Oct 2 20:09:26.794312 kubelet[2022]: E1002 20:09:26.794019 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:26.794312 kubelet[2022]: E1002 20:09:26.794222 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:09:26.797097 env[1142]: time="2023-10-02T20:09:26.796867480Z" level=info msg="RemoveContainer for \"352b9611ed0261564f4b25af0debbbba32f725aa6294a2e11cc50032a60996b7\" returns successfully" Oct 2 20:09:29.733718 kubelet[2022]: W1002 20:09:29.733636 2022 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc2b80e2b_061f_4777_9e68_49dd6e29bca9.slice/cri-containerd-e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da.scope WatchSource:0}: task e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da not found: not found Oct 2 20:09:31.650368 systemd[1]: Started sshd@14-10.0.0.8:22-10.0.0.1:40806.service. Oct 2 20:09:31.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.8:22-10.0.0.1:40806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:31.651164 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:31.651222 kernel: audit: type=1130 audit(1696277371.649:1153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.8:22-10.0.0.1:40806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:31.690000 audit[2732]: USER_ACCT pid=2732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:31.691116 sshd[2732]: Accepted publickey for core from 10.0.0.1 port 40806 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:09:31.692842 sshd[2732]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:31.691000 audit[2732]: CRED_ACQ pid=2732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:31.695380 kernel: audit: type=1101 audit(1696277371.690:1154): pid=2732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:31.695449 kernel: audit: type=1103 audit(1696277371.691:1155): pid=2732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:31.695477 kernel: audit: type=1006 audit(1696277371.691:1156): pid=2732 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 20:09:31.696605 systemd-logind[1129]: New session 15 of user core. Oct 2 20:09:31.696866 kernel: audit: type=1300 audit(1696277371.691:1156): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd43b720 a2=3 a3=1 items=0 ppid=1 pid=2732 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:31.691000 audit[2732]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd43b720 a2=3 a3=1 items=0 ppid=1 pid=2732 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:31.697067 systemd[1]: Started session-15.scope. Oct 2 20:09:31.691000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:31.699771 kernel: audit: type=1327 audit(1696277371.691:1156): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:31.700000 audit[2732]: USER_START pid=2732 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:31.702000 audit[2734]: CRED_ACQ pid=2734 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:31.705887 kernel: audit: type=1105 audit(1696277371.700:1157): pid=2732 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:31.705950 kernel: audit: type=1103 audit(1696277371.702:1158): pid=2734 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:31.830659 sshd[2732]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:31.831000 audit[2732]: USER_END pid=2732 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:31.833703 systemd-logind[1129]: Session 15 logged out. Waiting for processes to exit. Oct 2 20:09:31.833878 systemd[1]: sshd@14-10.0.0.8:22-10.0.0.1:40806.service: Deactivated successfully. Oct 2 20:09:31.831000 audit[2732]: CRED_DISP pid=2732 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:31.834682 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 20:09:31.835392 systemd-logind[1129]: Removed session 15. Oct 2 20:09:31.836572 kernel: audit: type=1106 audit(1696277371.831:1159): pid=2732 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:31.836636 kernel: audit: type=1104 audit(1696277371.831:1160): pid=2732 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:31.833000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.8:22-10.0.0.1:40806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:37.379000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:37.382510 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:37.382580 kernel: audit: type=1400 audit(1696277377.379:1162): avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:37.382602 kernel: audit: type=1400 audit(1696277377.379:1163): avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:37.379000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:37.384585 kernel: audit: type=1300 audit(1696277377.379:1163): arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40059f8630 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:09:37.379000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40059f8630 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:09:37.387221 kernel: audit: type=1327 audit(1696277377.379:1163): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:09:37.379000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:09:37.389424 kernel: audit: type=1300 audit(1696277377.379:1162): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4004cd9c00 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:09:37.379000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4004cd9c00 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:09:37.379000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:09:37.394279 kernel: audit: type=1327 audit(1696277377.379:1162): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:09:37.394311 kernel: audit: type=1400 audit(1696277377.380:1164): avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4768 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:37.380000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4768 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:37.396304 kernel: audit: type=1300 audit(1696277377.380:1164): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4005e00420 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:09:37.380000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4005e00420 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:09:37.398910 kernel: audit: type=1327 audit(1696277377.380:1164): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:09:37.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:09:37.401096 kernel: audit: type=1400 audit(1696277377.398:1165): avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:37.398000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:37.398000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4004cd9d00 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:09:37.398000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:09:37.398000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:37.398000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40059f8690 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:09:37.398000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:09:37.398000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:37.398000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4005e00480 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:09:37.398000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:09:37.883000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:37.883000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40019a9800 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:09:37.883000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:37.885000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:37.885000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000dad8e0 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:09:37.885000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:39.565153 kubelet[2022]: E1002 20:09:39.565125 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:39.565489 kubelet[2022]: E1002 20:09:39.565369 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:09:40.539897 kubelet[2022]: E1002 20:09:40.539846 2022 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 20:09:40.626014 kubelet[2022]: E1002 20:09:40.625983 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:41.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.8:22-10.0.0.1:39558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:41.835687 systemd[1]: Started sshd@15-10.0.0.8:22-10.0.0.1:39558.service. Oct 2 20:09:41.874000 audit[2748]: USER_ACCT pid=2748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:41.875739 sshd[2748]: Accepted publickey for core from 10.0.0.1 port 39558 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:09:41.875000 audit[2748]: CRED_ACQ pid=2748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:41.875000 audit[2748]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd671cc80 a2=3 a3=1 items=0 ppid=1 pid=2748 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:41.875000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:41.876878 sshd[2748]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:41.881087 systemd-logind[1129]: New session 16 of user core. Oct 2 20:09:41.881465 systemd[1]: Started session-16.scope. Oct 2 20:09:41.884000 audit[2748]: USER_START pid=2748 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:41.886000 audit[2750]: CRED_ACQ pid=2750 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:41.994880 sshd[2748]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:41.995000 audit[2748]: USER_END pid=2748 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:41.995000 audit[2748]: CRED_DISP pid=2748 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:41.997373 systemd[1]: sshd@15-10.0.0.8:22-10.0.0.1:39558.service: Deactivated successfully. Oct 2 20:09:41.996000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.8:22-10.0.0.1:39558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:41.998117 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 20:09:41.998646 systemd-logind[1129]: Session 16 logged out. Waiting for processes to exit. Oct 2 20:09:41.999366 systemd-logind[1129]: Removed session 16. Oct 2 20:09:43.815000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:43.818706 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:09:43.818803 kernel: audit: type=1400 audit(1696277383.815:1179): avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:43.818830 kernel: audit: type=1300 audit(1696277383.815:1179): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000337bc0 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:09:43.815000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000337bc0 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:09:43.815000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:43.824083 kernel: audit: type=1327 audit(1696277383.815:1179): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:43.824156 kernel: audit: type=1400 audit(1696277383.815:1180): avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:43.815000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:43.815000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40012fbf00 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:09:43.829599 kernel: audit: type=1300 audit(1696277383.815:1180): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40012fbf00 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:09:43.829670 kernel: audit: type=1327 audit(1696277383.815:1180): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:43.815000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:43.815000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:43.833911 kernel: audit: type=1400 audit(1696277383.815:1181): avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:43.833949 kernel: audit: type=1300 audit(1696277383.815:1181): arch=c00000b7 syscall=27 success=no exit=-13 a0=d a1=4000f166a0 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:09:43.815000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=d a1=4000f166a0 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:09:43.815000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:43.838888 kernel: audit: type=1327 audit(1696277383.815:1181): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:43.815000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:43.841130 kernel: audit: type=1400 audit(1696277383.815:1182): avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:43.815000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000eff520 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:09:43.815000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:45.627052 kubelet[2022]: E1002 20:09:45.627027 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:50.565619 kubelet[2022]: E1002 20:09:50.565586 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:50.566256 kubelet[2022]: E1002 20:09:50.566234 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:09:50.628251 kubelet[2022]: E1002 20:09:50.628227 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:51.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.8:22-10.0.0.1:42096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:51.999643 systemd[1]: Started sshd@16-10.0.0.8:22-10.0.0.1:42096.service. Oct 2 20:09:52.002313 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:09:52.002391 kernel: audit: type=1130 audit(1696277391.999:1183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.8:22-10.0.0.1:42096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:52.040000 audit[2762]: USER_ACCT pid=2762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.041275 sshd[2762]: Accepted publickey for core from 10.0.0.1 port 42096 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:09:52.042443 sshd[2762]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:52.041000 audit[2762]: CRED_ACQ pid=2762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.045369 kernel: audit: type=1101 audit(1696277392.040:1184): pid=2762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.045407 kernel: audit: type=1103 audit(1696277392.041:1185): pid=2762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.045424 kernel: audit: type=1006 audit(1696277392.041:1186): pid=2762 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 20:09:52.046662 kernel: audit: type=1300 audit(1696277392.041:1186): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5e7aa30 a2=3 a3=1 items=0 ppid=1 pid=2762 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:52.041000 audit[2762]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5e7aa30 a2=3 a3=1 items=0 ppid=1 pid=2762 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:52.046323 systemd-logind[1129]: New session 17 of user core. Oct 2 20:09:52.046734 systemd[1]: Started session-17.scope. Oct 2 20:09:52.048935 kernel: audit: type=1327 audit(1696277392.041:1186): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:52.041000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:52.051000 audit[2762]: USER_START pid=2762 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.053000 audit[2764]: CRED_ACQ pid=2764 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.056795 kernel: audit: type=1105 audit(1696277392.051:1187): pid=2762 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.056866 kernel: audit: type=1103 audit(1696277392.053:1188): pid=2764 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.163982 sshd[2762]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:52.164000 audit[2762]: USER_END pid=2762 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.167000 audit[2762]: CRED_DISP pid=2762 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.168570 systemd[1]: Started sshd@17-10.0.0.8:22-10.0.0.1:42098.service. Oct 2 20:09:52.169799 systemd[1]: sshd@16-10.0.0.8:22-10.0.0.1:42096.service: Deactivated successfully. Oct 2 20:09:52.170264 kernel: audit: type=1106 audit(1696277392.164:1189): pid=2762 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.170319 kernel: audit: type=1104 audit(1696277392.167:1190): pid=2762 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.170616 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 20:09:52.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.8:22-10.0.0.1:42098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:52.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.8:22-10.0.0.1:42096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:52.171367 systemd-logind[1129]: Session 17 logged out. Waiting for processes to exit. Oct 2 20:09:52.172086 systemd-logind[1129]: Removed session 17. Oct 2 20:09:52.207000 audit[2776]: USER_ACCT pid=2776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.208829 sshd[2776]: Accepted publickey for core from 10.0.0.1 port 42098 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:09:52.208000 audit[2776]: CRED_ACQ pid=2776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.208000 audit[2776]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff62f6720 a2=3 a3=1 items=0 ppid=1 pid=2776 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:52.208000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:52.210028 sshd[2776]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:52.213855 systemd-logind[1129]: New session 18 of user core. Oct 2 20:09:52.214228 systemd[1]: Started session-18.scope. Oct 2 20:09:52.216000 audit[2776]: USER_START pid=2776 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.218000 audit[2779]: CRED_ACQ pid=2779 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.886245 sshd[2776]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:52.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.8:22-10.0.0.1:32916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:52.890894 systemd[1]: Started sshd@18-10.0.0.8:22-10.0.0.1:32916.service. Oct 2 20:09:52.891000 audit[2776]: USER_END pid=2776 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.891000 audit[2776]: CRED_DISP pid=2776 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.894000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.8:22-10.0.0.1:42098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:52.895355 systemd[1]: sshd@17-10.0.0.8:22-10.0.0.1:42098.service: Deactivated successfully. Oct 2 20:09:52.896062 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 20:09:52.896399 systemd-logind[1129]: Session 18 logged out. Waiting for processes to exit. Oct 2 20:09:52.897143 systemd-logind[1129]: Removed session 18. Oct 2 20:09:52.931000 audit[2788]: USER_ACCT pid=2788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.932506 sshd[2788]: Accepted publickey for core from 10.0.0.1 port 32916 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:09:52.933000 audit[2788]: CRED_ACQ pid=2788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.933000 audit[2788]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7cb3850 a2=3 a3=1 items=0 ppid=1 pid=2788 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:52.933000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:52.934198 sshd[2788]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:52.937857 systemd-logind[1129]: New session 19 of user core. Oct 2 20:09:52.938196 systemd[1]: Started session-19.scope. Oct 2 20:09:52.940000 audit[2788]: USER_START pid=2788 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:52.942000 audit[2791]: CRED_ACQ pid=2791 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:53.051303 sshd[2788]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:53.051000 audit[2788]: USER_END pid=2788 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:53.051000 audit[2788]: CRED_DISP pid=2788 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:53.053956 systemd[1]: sshd@18-10.0.0.8:22-10.0.0.1:32916.service: Deactivated successfully. Oct 2 20:09:53.053000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.8:22-10.0.0.1:32916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:53.054667 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 20:09:53.055204 systemd-logind[1129]: Session 19 logged out. Waiting for processes to exit. Oct 2 20:09:53.055836 systemd-logind[1129]: Removed session 19. Oct 2 20:09:55.629562 kubelet[2022]: E1002 20:09:55.629524 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:00.630148 kubelet[2022]: E1002 20:10:00.630115 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:03.056192 systemd[1]: Started sshd@19-10.0.0.8:22-10.0.0.1:50520.service. Oct 2 20:10:03.055000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.8:22-10.0.0.1:50520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:03.056845 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 20:10:03.056905 kernel: audit: type=1130 audit(1696277403.055:1210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.8:22-10.0.0.1:50520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:03.095000 audit[2804]: USER_ACCT pid=2804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:03.096466 sshd[2804]: Accepted publickey for core from 10.0.0.1 port 50520 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:10:03.098052 sshd[2804]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:03.096000 audit[2804]: CRED_ACQ pid=2804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:03.100511 kernel: audit: type=1101 audit(1696277403.095:1211): pid=2804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:03.100575 kernel: audit: type=1103 audit(1696277403.096:1212): pid=2804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:03.100595 kernel: audit: type=1006 audit(1696277403.096:1213): pid=2804 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 20:10:03.096000 audit[2804]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc300f9d0 a2=3 a3=1 items=0 ppid=1 pid=2804 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:03.102286 systemd-logind[1129]: New session 20 of user core. Oct 2 20:10:03.102386 systemd[1]: Started session-20.scope. Oct 2 20:10:03.104903 kernel: audit: type=1300 audit(1696277403.096:1213): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc300f9d0 a2=3 a3=1 items=0 ppid=1 pid=2804 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:03.104969 kernel: audit: type=1327 audit(1696277403.096:1213): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:03.096000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:03.104000 audit[2804]: USER_START pid=2804 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:03.108212 kernel: audit: type=1105 audit(1696277403.104:1214): pid=2804 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:03.108267 kernel: audit: type=1103 audit(1696277403.106:1215): pid=2806 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:03.106000 audit[2806]: CRED_ACQ pid=2806 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:03.213717 sshd[2804]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:03.213000 audit[2804]: USER_END pid=2804 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:03.216156 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 20:10:03.216709 systemd[1]: sshd@19-10.0.0.8:22-10.0.0.1:50520.service: Deactivated successfully. Oct 2 20:10:03.214000 audit[2804]: CRED_DISP pid=2804 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:03.217605 systemd-logind[1129]: Session 20 logged out. Waiting for processes to exit. Oct 2 20:10:03.218237 systemd-logind[1129]: Removed session 20. Oct 2 20:10:03.219152 kernel: audit: type=1106 audit(1696277403.213:1216): pid=2804 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:03.219215 kernel: audit: type=1104 audit(1696277403.214:1217): pid=2804 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:03.216000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.8:22-10.0.0.1:50520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:03.567058 kubelet[2022]: E1002 20:10:03.567025 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:03.567382 kubelet[2022]: E1002 20:10:03.567244 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:10:05.631803 kubelet[2022]: E1002 20:10:05.631738 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:10.632898 kubelet[2022]: E1002 20:10:10.632839 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:11.565619 kubelet[2022]: E1002 20:10:11.565569 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:13.218202 systemd[1]: Started sshd@20-10.0.0.8:22-10.0.0.1:55608.service. Oct 2 20:10:13.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.8:22-10.0.0.1:55608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:13.219087 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:13.219137 kernel: audit: type=1130 audit(1696277413.216:1219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.8:22-10.0.0.1:55608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:13.256000 audit[2817]: USER_ACCT pid=2817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:13.258550 sshd[2817]: Accepted publickey for core from 10.0.0.1 port 55608 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:10:13.260157 sshd[2817]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:13.258000 audit[2817]: CRED_ACQ pid=2817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:13.262712 kernel: audit: type=1101 audit(1696277413.256:1220): pid=2817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:13.262793 kernel: audit: type=1103 audit(1696277413.258:1221): pid=2817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:13.264700 kernel: audit: type=1006 audit(1696277413.258:1222): pid=2817 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 20:10:13.258000 audit[2817]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff2ea0180 a2=3 a3=1 items=0 ppid=1 pid=2817 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:13.267776 kernel: audit: type=1300 audit(1696277413.258:1222): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff2ea0180 a2=3 a3=1 items=0 ppid=1 pid=2817 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:13.267841 kernel: audit: type=1327 audit(1696277413.258:1222): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:13.258000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:13.270561 systemd-logind[1129]: New session 21 of user core. Oct 2 20:10:13.271012 systemd[1]: Started session-21.scope. Oct 2 20:10:13.274000 audit[2817]: USER_START pid=2817 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:13.275000 audit[2819]: CRED_ACQ pid=2819 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:13.280333 kernel: audit: type=1105 audit(1696277413.274:1223): pid=2817 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:13.280496 kernel: audit: type=1103 audit(1696277413.275:1224): pid=2819 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:13.384191 sshd[2817]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:13.383000 audit[2817]: USER_END pid=2817 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:13.383000 audit[2817]: CRED_DISP pid=2817 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:13.386911 systemd-logind[1129]: Session 21 logged out. Waiting for processes to exit. Oct 2 20:10:13.387087 systemd[1]: sshd@20-10.0.0.8:22-10.0.0.1:55608.service: Deactivated successfully. Oct 2 20:10:13.387890 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 20:10:13.388717 systemd-logind[1129]: Removed session 21. Oct 2 20:10:13.389811 kernel: audit: type=1106 audit(1696277413.383:1225): pid=2817 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:13.389865 kernel: audit: type=1104 audit(1696277413.383:1226): pid=2817 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:13.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.8:22-10.0.0.1:55608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:15.634531 kubelet[2022]: E1002 20:10:15.634489 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:16.565745 kubelet[2022]: E1002 20:10:16.565683 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:16.565964 kubelet[2022]: E1002 20:10:16.565925 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:10:18.566392 kubelet[2022]: E1002 20:10:18.566342 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:19.565344 kubelet[2022]: E1002 20:10:19.565310 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:20.635826 kubelet[2022]: E1002 20:10:20.635797 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:23.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.8:22-10.0.0.1:48890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:23.389331 systemd[1]: Started sshd@21-10.0.0.8:22-10.0.0.1:48890.service. Oct 2 20:10:23.390005 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:23.390033 kernel: audit: type=1130 audit(1696277423.388:1228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.8:22-10.0.0.1:48890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:23.428000 audit[2830]: USER_ACCT pid=2830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:23.429850 sshd[2830]: Accepted publickey for core from 10.0.0.1 port 48890 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:10:23.431203 sshd[2830]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:23.430000 audit[2830]: CRED_ACQ pid=2830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:23.434236 kernel: audit: type=1101 audit(1696277423.428:1229): pid=2830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:23.434312 kernel: audit: type=1103 audit(1696277423.430:1230): pid=2830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:23.434337 kernel: audit: type=1006 audit(1696277423.430:1231): pid=2830 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 20:10:23.436000 kernel: audit: type=1300 audit(1696277423.430:1231): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc937e7f0 a2=3 a3=1 items=0 ppid=1 pid=2830 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:23.430000 audit[2830]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc937e7f0 a2=3 a3=1 items=0 ppid=1 pid=2830 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:23.435657 systemd-logind[1129]: New session 22 of user core. Oct 2 20:10:23.436459 systemd[1]: Started session-22.scope. Oct 2 20:10:23.438755 kernel: audit: type=1327 audit(1696277423.430:1231): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:23.430000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:23.439000 audit[2830]: USER_START pid=2830 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:23.441000 audit[2832]: CRED_ACQ pid=2832 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:23.445755 kernel: audit: type=1105 audit(1696277423.439:1232): pid=2830 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:23.445824 kernel: audit: type=1103 audit(1696277423.441:1233): pid=2832 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:23.564809 sshd[2830]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:23.565000 audit[2830]: USER_END pid=2830 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:23.567462 systemd-logind[1129]: Session 22 logged out. Waiting for processes to exit. Oct 2 20:10:23.567624 systemd[1]: sshd@21-10.0.0.8:22-10.0.0.1:48890.service: Deactivated successfully. Oct 2 20:10:23.565000 audit[2830]: CRED_DISP pid=2830 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:23.568351 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 20:10:23.569094 systemd-logind[1129]: Removed session 22. Oct 2 20:10:23.570810 kernel: audit: type=1106 audit(1696277423.565:1234): pid=2830 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:23.570856 kernel: audit: type=1104 audit(1696277423.565:1235): pid=2830 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:23.567000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.8:22-10.0.0.1:48890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:25.637371 kubelet[2022]: E1002 20:10:25.637342 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:28.565047 kubelet[2022]: E1002 20:10:28.565014 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:28.565642 kubelet[2022]: E1002 20:10:28.565622 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:10:30.638415 kubelet[2022]: E1002 20:10:30.638379 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:33.570190 systemd[1]: Started sshd@22-10.0.0.8:22-10.0.0.1:60820.service. Oct 2 20:10:33.569000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.8:22-10.0.0.1:60820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:33.570985 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:33.571036 kernel: audit: type=1130 audit(1696277433.569:1237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.8:22-10.0.0.1:60820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:33.608000 audit[2845]: USER_ACCT pid=2845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:33.609533 sshd[2845]: Accepted publickey for core from 10.0.0.1 port 60820 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:10:33.610965 sshd[2845]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:33.609000 audit[2845]: CRED_ACQ pid=2845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:33.613456 kernel: audit: type=1101 audit(1696277433.608:1238): pid=2845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:33.613523 kernel: audit: type=1103 audit(1696277433.609:1239): pid=2845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:33.613545 kernel: audit: type=1006 audit(1696277433.609:1240): pid=2845 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 20:10:33.614759 kernel: audit: type=1300 audit(1696277433.609:1240): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce0f4040 a2=3 a3=1 items=0 ppid=1 pid=2845 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:33.609000 audit[2845]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce0f4040 a2=3 a3=1 items=0 ppid=1 pid=2845 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:33.614540 systemd-logind[1129]: New session 23 of user core. Oct 2 20:10:33.614948 systemd[1]: Started session-23.scope. Oct 2 20:10:33.616938 kernel: audit: type=1327 audit(1696277433.609:1240): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:33.609000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:33.617000 audit[2845]: USER_START pid=2845 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:33.619000 audit[2847]: CRED_ACQ pid=2847 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:33.623185 kernel: audit: type=1105 audit(1696277433.617:1241): pid=2845 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:33.623230 kernel: audit: type=1103 audit(1696277433.619:1242): pid=2847 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:33.728123 sshd[2845]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:33.728000 audit[2845]: USER_END pid=2845 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:33.730821 systemd[1]: sshd@22-10.0.0.8:22-10.0.0.1:60820.service: Deactivated successfully. Oct 2 20:10:33.731624 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 20:10:33.732150 systemd-logind[1129]: Session 23 logged out. Waiting for processes to exit. Oct 2 20:10:33.728000 audit[2845]: CRED_DISP pid=2845 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:33.732815 systemd-logind[1129]: Removed session 23. Oct 2 20:10:33.734193 kernel: audit: type=1106 audit(1696277433.728:1243): pid=2845 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:33.734241 kernel: audit: type=1104 audit(1696277433.728:1244): pid=2845 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:33.730000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.8:22-10.0.0.1:60820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:35.565151 kubelet[2022]: E1002 20:10:35.565116 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:35.639746 kubelet[2022]: E1002 20:10:35.639711 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:37.380000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:37.380000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400f651ce0 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:10:37.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:10:37.380000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:37.380000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400f9dbfc0 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:10:37.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:10:37.381000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4768 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:37.381000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400f9bf680 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:10:37.381000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:10:37.399000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:37.399000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400f8475c0 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:10:37.399000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:10:37.399000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:37.399000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400f9bf6b0 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:10:37.399000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:10:37.399000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:37.399000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400f92e280 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:10:37.399000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:10:37.883000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:37.883000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400263eae0 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:10:37.883000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:37.885000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:37.885000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400269b500 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:10:37.885000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:38.566097 kubelet[2022]: E1002 20:10:38.566064 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:40.640376 kubelet[2022]: E1002 20:10:40.640344 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:41.565829 kubelet[2022]: E1002 20:10:41.565791 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:41.566047 kubelet[2022]: E1002 20:10:41.566002 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:10:43.733836 systemd[1]: Started sshd@23-10.0.0.8:22-10.0.0.1:59432.service. Oct 2 20:10:43.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.8:22-10.0.0.1:59432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:43.736359 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:10:43.736455 kernel: audit: type=1130 audit(1696277443.733:1254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.8:22-10.0.0.1:59432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:43.774000 audit[2861]: USER_ACCT pid=2861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:43.775203 sshd[2861]: Accepted publickey for core from 10.0.0.1 port 59432 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:10:43.776751 sshd[2861]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:43.775000 audit[2861]: CRED_ACQ pid=2861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:43.779133 kernel: audit: type=1101 audit(1696277443.774:1255): pid=2861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:43.779207 kernel: audit: type=1103 audit(1696277443.775:1256): pid=2861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:43.779238 kernel: audit: type=1006 audit(1696277443.775:1257): pid=2861 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 20:10:43.775000 audit[2861]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe80e9340 a2=3 a3=1 items=0 ppid=1 pid=2861 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:43.781016 systemd-logind[1129]: New session 24 of user core. Oct 2 20:10:43.781812 systemd[1]: Started session-24.scope. Oct 2 20:10:43.783125 kernel: audit: type=1300 audit(1696277443.775:1257): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe80e9340 a2=3 a3=1 items=0 ppid=1 pid=2861 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:43.783187 kernel: audit: type=1327 audit(1696277443.775:1257): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:43.775000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:43.784000 audit[2861]: USER_START pid=2861 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:43.786000 audit[2863]: CRED_ACQ pid=2863 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:43.789916 kernel: audit: type=1105 audit(1696277443.784:1258): pid=2861 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:43.789963 kernel: audit: type=1103 audit(1696277443.786:1259): pid=2863 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:43.815000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:43.815000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:43.821027 kernel: audit: type=1400 audit(1696277443.815:1260): avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:43.821078 kernel: audit: type=1400 audit(1696277443.815:1261): avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:43.815000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:43.815000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400261e380 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:10:43.815000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40000c58a0 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:10:43.815000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400269b920 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:10:43.815000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:43.815000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:43.815000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:43.817000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:43.817000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001a6b060 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:10:43.817000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:43.896891 sshd[2861]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:43.897000 audit[2861]: USER_END pid=2861 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:43.897000 audit[2861]: CRED_DISP pid=2861 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:43.899000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.8:22-10.0.0.1:59432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:43.899751 systemd[1]: sshd@23-10.0.0.8:22-10.0.0.1:59432.service: Deactivated successfully. Oct 2 20:10:43.900587 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 20:10:43.901090 systemd-logind[1129]: Session 24 logged out. Waiting for processes to exit. Oct 2 20:10:43.901836 systemd-logind[1129]: Removed session 24. Oct 2 20:10:45.641039 kubelet[2022]: E1002 20:10:45.641010 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:50.642882 kubelet[2022]: E1002 20:10:50.642853 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:52.566162 kubelet[2022]: E1002 20:10:52.566123 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:52.569110 env[1142]: time="2023-10-02T20:10:52.568794680Z" level=info msg="CreateContainer within sandbox \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 20:10:52.577587 env[1142]: time="2023-10-02T20:10:52.577546456Z" level=info msg="CreateContainer within sandbox \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"1e9ec1f3fdf382c9f722f1d0b5eaa9193ed43bed1b56c06164309283a041abb7\"" Oct 2 20:10:52.578215 env[1142]: time="2023-10-02T20:10:52.578185648Z" level=info msg="StartContainer for \"1e9ec1f3fdf382c9f722f1d0b5eaa9193ed43bed1b56c06164309283a041abb7\"" Oct 2 20:10:52.599939 systemd[1]: Started cri-containerd-1e9ec1f3fdf382c9f722f1d0b5eaa9193ed43bed1b56c06164309283a041abb7.scope. Oct 2 20:10:52.624469 systemd[1]: cri-containerd-1e9ec1f3fdf382c9f722f1d0b5eaa9193ed43bed1b56c06164309283a041abb7.scope: Deactivated successfully. Oct 2 20:10:52.628051 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1e9ec1f3fdf382c9f722f1d0b5eaa9193ed43bed1b56c06164309283a041abb7-rootfs.mount: Deactivated successfully. Oct 2 20:10:52.637075 env[1142]: time="2023-10-02T20:10:52.637025790Z" level=info msg="shim disconnected" id=1e9ec1f3fdf382c9f722f1d0b5eaa9193ed43bed1b56c06164309283a041abb7 Oct 2 20:10:52.637075 env[1142]: time="2023-10-02T20:10:52.637076270Z" level=warning msg="cleaning up after shim disconnected" id=1e9ec1f3fdf382c9f722f1d0b5eaa9193ed43bed1b56c06164309283a041abb7 namespace=k8s.io Oct 2 20:10:52.637363 env[1142]: time="2023-10-02T20:10:52.637086510Z" level=info msg="cleaning up dead shim" Oct 2 20:10:52.647730 env[1142]: time="2023-10-02T20:10:52.647683904Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2898 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:10:52Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/1e9ec1f3fdf382c9f722f1d0b5eaa9193ed43bed1b56c06164309283a041abb7/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:10:52.648009 env[1142]: time="2023-10-02T20:10:52.647953061Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 20:10:52.648196 env[1142]: time="2023-10-02T20:10:52.648146978Z" level=error msg="Failed to pipe stdout of container \"1e9ec1f3fdf382c9f722f1d0b5eaa9193ed43bed1b56c06164309283a041abb7\"" error="reading from a closed fifo" Oct 2 20:10:52.648286 env[1142]: time="2023-10-02T20:10:52.648196738Z" level=error msg="Failed to pipe stderr of container \"1e9ec1f3fdf382c9f722f1d0b5eaa9193ed43bed1b56c06164309283a041abb7\"" error="reading from a closed fifo" Oct 2 20:10:52.649899 env[1142]: time="2023-10-02T20:10:52.649849518Z" level=error msg="StartContainer for \"1e9ec1f3fdf382c9f722f1d0b5eaa9193ed43bed1b56c06164309283a041abb7\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:10:52.650233 kubelet[2022]: E1002 20:10:52.650087 2022 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="1e9ec1f3fdf382c9f722f1d0b5eaa9193ed43bed1b56c06164309283a041abb7" Oct 2 20:10:52.650448 kubelet[2022]: E1002 20:10:52.650382 2022 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:10:52.650448 kubelet[2022]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:10:52.650448 kubelet[2022]: rm /hostbin/cilium-mount Oct 2 20:10:52.650448 kubelet[2022]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-drfvg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:10:52.650448 kubelet[2022]: E1002 20:10:52.650429 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:10:52.940185 kubelet[2022]: I1002 20:10:52.940157 2022 scope.go:117] "RemoveContainer" containerID="e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da" Oct 2 20:10:52.940579 kubelet[2022]: I1002 20:10:52.940555 2022 scope.go:117] "RemoveContainer" containerID="e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da" Oct 2 20:10:52.941709 env[1142]: time="2023-10-02T20:10:52.941630577Z" level=info msg="RemoveContainer for \"e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da\"" Oct 2 20:10:52.942227 env[1142]: time="2023-10-02T20:10:52.942194411Z" level=info msg="RemoveContainer for \"e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da\"" Oct 2 20:10:52.942302 env[1142]: time="2023-10-02T20:10:52.942272010Z" level=error msg="RemoveContainer for \"e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da\" failed" error="failed to set removing state for container \"e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da\": container is already in removing state" Oct 2 20:10:52.942490 kubelet[2022]: E1002 20:10:52.942400 2022 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da\": container is already in removing state" containerID="e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da" Oct 2 20:10:52.942490 kubelet[2022]: E1002 20:10:52.942443 2022 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da": container is already in removing state; Skipping pod "cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)" Oct 2 20:10:52.942574 kubelet[2022]: E1002 20:10:52.942515 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:52.942825 kubelet[2022]: E1002 20:10:52.942796 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:10:52.945175 env[1142]: time="2023-10-02T20:10:52.945139816Z" level=info msg="RemoveContainer for \"e350b7cd702dbad15fce4c5bcd8fd424cbd9e77d03d7ab87aba13d203b21a4da\" returns successfully" Oct 2 20:10:53.901000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.8:22-10.0.0.1:41010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:53.902497 systemd[1]: Started sshd@24-10.0.0.8:22-10.0.0.1:41010.service. Oct 2 20:10:53.903337 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:10:53.903389 kernel: audit: type=1130 audit(1696277453.901:1267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.8:22-10.0.0.1:41010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:53.945529 sshd[2911]: Accepted publickey for core from 10.0.0.1 port 41010 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:10:53.944000 audit[2911]: USER_ACCT pid=2911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:53.947503 sshd[2911]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:53.946000 audit[2911]: CRED_ACQ pid=2911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:53.952334 kernel: audit: type=1101 audit(1696277453.944:1268): pid=2911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:53.952412 kernel: audit: type=1103 audit(1696277453.946:1269): pid=2911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:53.952441 kernel: audit: type=1006 audit(1696277453.946:1270): pid=2911 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 20:10:53.952041 systemd-logind[1129]: New session 25 of user core. Oct 2 20:10:53.952665 systemd[1]: Started session-25.scope. Oct 2 20:10:53.946000 audit[2911]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4428630 a2=3 a3=1 items=0 ppid=1 pid=2911 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:53.955786 kernel: audit: type=1300 audit(1696277453.946:1270): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4428630 a2=3 a3=1 items=0 ppid=1 pid=2911 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:53.955860 kernel: audit: type=1327 audit(1696277453.946:1270): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:53.946000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:53.957000 audit[2911]: USER_START pid=2911 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:53.959000 audit[2913]: CRED_ACQ pid=2913 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:53.962500 kernel: audit: type=1105 audit(1696277453.957:1271): pid=2911 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:53.962573 kernel: audit: type=1103 audit(1696277453.959:1272): pid=2913 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:54.073053 sshd[2911]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:54.073000 audit[2911]: USER_END pid=2911 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:54.075704 systemd-logind[1129]: Session 25 logged out. Waiting for processes to exit. Oct 2 20:10:54.075857 systemd[1]: sshd@24-10.0.0.8:22-10.0.0.1:41010.service: Deactivated successfully. Oct 2 20:10:54.073000 audit[2911]: CRED_DISP pid=2911 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:54.076668 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 20:10:54.078018 systemd-logind[1129]: Removed session 25. Oct 2 20:10:54.078578 kernel: audit: type=1106 audit(1696277454.073:1273): pid=2911 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:54.078623 kernel: audit: type=1104 audit(1696277454.073:1274): pid=2911 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:54.075000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.8:22-10.0.0.1:41010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:55.644505 kubelet[2022]: E1002 20:10:55.644471 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:55.741368 kubelet[2022]: W1002 20:10:55.741309 2022 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc2b80e2b_061f_4777_9e68_49dd6e29bca9.slice/cri-containerd-1e9ec1f3fdf382c9f722f1d0b5eaa9193ed43bed1b56c06164309283a041abb7.scope WatchSource:0}: task 1e9ec1f3fdf382c9f722f1d0b5eaa9193ed43bed1b56c06164309283a041abb7 not found: not found Oct 2 20:11:00.645954 kubelet[2022]: E1002 20:11:00.645909 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:03.565979 kubelet[2022]: E1002 20:11:03.565940 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:03.566340 kubelet[2022]: E1002 20:11:03.566163 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:11:04.077000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.8:22-10.0.0.1:46756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:04.077811 systemd[1]: Started sshd@25-10.0.0.8:22-10.0.0.1:46756.service. Oct 2 20:11:04.080498 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:11:04.080560 kernel: audit: type=1130 audit(1696277464.077:1276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.8:22-10.0.0.1:46756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:04.116000 audit[2927]: USER_ACCT pid=2927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:04.117970 sshd[2927]: Accepted publickey for core from 10.0.0.1 port 46756 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:11:04.119166 sshd[2927]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:04.118000 audit[2927]: CRED_ACQ pid=2927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:04.122549 kernel: audit: type=1101 audit(1696277464.116:1277): pid=2927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:04.122623 kernel: audit: type=1103 audit(1696277464.118:1278): pid=2927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:04.122644 kernel: audit: type=1006 audit(1696277464.118:1279): pid=2927 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 20:11:04.123453 systemd-logind[1129]: New session 26 of user core. Oct 2 20:11:04.124178 kernel: audit: type=1300 audit(1696277464.118:1279): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc3e58760 a2=3 a3=1 items=0 ppid=1 pid=2927 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:04.118000 audit[2927]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc3e58760 a2=3 a3=1 items=0 ppid=1 pid=2927 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:04.123810 systemd[1]: Started session-26.scope. Oct 2 20:11:04.118000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:11:04.127228 kernel: audit: type=1327 audit(1696277464.118:1279): proctitle=737368643A20636F7265205B707269765D Oct 2 20:11:04.127282 kernel: audit: type=1105 audit(1696277464.126:1280): pid=2927 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:04.126000 audit[2927]: USER_START pid=2927 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:04.128000 audit[2929]: CRED_ACQ pid=2929 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:04.132053 kernel: audit: type=1103 audit(1696277464.128:1281): pid=2929 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:04.239749 sshd[2927]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:04.239000 audit[2927]: USER_END pid=2927 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:04.240000 audit[2927]: CRED_DISP pid=2927 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:04.242178 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 20:11:04.242717 systemd[1]: sshd@25-10.0.0.8:22-10.0.0.1:46756.service: Deactivated successfully. Oct 2 20:11:04.243828 systemd-logind[1129]: Session 26 logged out. Waiting for processes to exit. Oct 2 20:11:04.244417 systemd-logind[1129]: Removed session 26. Oct 2 20:11:04.245553 kernel: audit: type=1106 audit(1696277464.239:1282): pid=2927 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:04.245613 kernel: audit: type=1104 audit(1696277464.240:1283): pid=2927 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:04.242000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.8:22-10.0.0.1:46756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:05.647288 kubelet[2022]: E1002 20:11:05.646961 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:10.647770 kubelet[2022]: E1002 20:11:10.647727 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:14.243856 systemd[1]: Started sshd@26-10.0.0.8:22-10.0.0.1:45362.service. Oct 2 20:11:14.243000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.8:22-10.0.0.1:45362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:14.246630 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:11:14.246713 kernel: audit: type=1130 audit(1696277474.243:1285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.8:22-10.0.0.1:45362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:14.284000 audit[2940]: USER_ACCT pid=2940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:14.285466 sshd[2940]: Accepted publickey for core from 10.0.0.1 port 45362 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:11:14.286871 sshd[2940]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:14.285000 audit[2940]: CRED_ACQ pid=2940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:14.289639 kernel: audit: type=1101 audit(1696277474.284:1286): pid=2940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:14.289707 kernel: audit: type=1103 audit(1696277474.285:1287): pid=2940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:14.289740 kernel: audit: type=1006 audit(1696277474.285:1288): pid=2940 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 20:11:14.290968 kernel: audit: type=1300 audit(1696277474.285:1288): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff240f020 a2=3 a3=1 items=0 ppid=1 pid=2940 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:14.285000 audit[2940]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff240f020 a2=3 a3=1 items=0 ppid=1 pid=2940 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:14.291929 systemd[1]: Started session-27.scope. Oct 2 20:11:14.292264 systemd-logind[1129]: New session 27 of user core. Oct 2 20:11:14.293426 kernel: audit: type=1327 audit(1696277474.285:1288): proctitle=737368643A20636F7265205B707269765D Oct 2 20:11:14.285000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:11:14.296000 audit[2940]: USER_START pid=2940 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:14.299000 audit[2942]: CRED_ACQ pid=2942 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:14.301795 kernel: audit: type=1105 audit(1696277474.296:1289): pid=2940 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:14.304800 kernel: audit: type=1103 audit(1696277474.299:1290): pid=2942 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:14.407156 sshd[2940]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:14.407000 audit[2940]: USER_END pid=2940 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:14.407000 audit[2940]: CRED_DISP pid=2940 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:14.412336 systemd[1]: sshd@26-10.0.0.8:22-10.0.0.1:45362.service: Deactivated successfully. Oct 2 20:11:14.412725 kernel: audit: type=1106 audit(1696277474.407:1291): pid=2940 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:14.412799 kernel: audit: type=1104 audit(1696277474.407:1292): pid=2940 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:14.410000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.8:22-10.0.0.1:45362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:14.413211 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 20:11:14.413823 systemd-logind[1129]: Session 27 logged out. Waiting for processes to exit. Oct 2 20:11:14.414550 systemd-logind[1129]: Removed session 27. Oct 2 20:11:15.649492 kubelet[2022]: E1002 20:11:15.649456 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:18.565313 kubelet[2022]: E1002 20:11:18.565275 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:18.565648 kubelet[2022]: E1002 20:11:18.565499 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hpsmd_kube-system(c2b80e2b-061f-4777-9e68-49dd6e29bca9)\"" pod="kube-system/cilium-hpsmd" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" Oct 2 20:11:20.650401 kubelet[2022]: E1002 20:11:20.650371 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:24.411000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.8:22-10.0.0.1:43358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:24.412000 systemd[1]: Started sshd@27-10.0.0.8:22-10.0.0.1:43358.service. Oct 2 20:11:24.414458 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:11:24.414535 kernel: audit: type=1130 audit(1696277484.411:1294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.8:22-10.0.0.1:43358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:24.450000 audit[2953]: USER_ACCT pid=2953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:24.451667 sshd[2953]: Accepted publickey for core from 10.0.0.1 port 43358 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:11:24.452656 sshd[2953]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:24.451000 audit[2953]: CRED_ACQ pid=2953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:24.455815 kernel: audit: type=1101 audit(1696277484.450:1295): pid=2953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:24.455878 kernel: audit: type=1103 audit(1696277484.451:1296): pid=2953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:24.455906 kernel: audit: type=1006 audit(1696277484.451:1297): pid=2953 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 20:11:24.456864 systemd[1]: Started session-28.scope. Oct 2 20:11:24.457011 kernel: audit: type=1300 audit(1696277484.451:1297): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcad6c440 a2=3 a3=1 items=0 ppid=1 pid=2953 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:24.451000 audit[2953]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcad6c440 a2=3 a3=1 items=0 ppid=1 pid=2953 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:24.457181 systemd-logind[1129]: New session 28 of user core. Oct 2 20:11:24.459117 kernel: audit: type=1327 audit(1696277484.451:1297): proctitle=737368643A20636F7265205B707269765D Oct 2 20:11:24.451000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:11:24.460000 audit[2953]: USER_START pid=2953 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:24.461000 audit[2955]: CRED_ACQ pid=2955 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:24.465586 kernel: audit: type=1105 audit(1696277484.460:1298): pid=2953 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:24.465639 kernel: audit: type=1103 audit(1696277484.461:1299): pid=2955 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:24.575063 sshd[2953]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:24.577000 audit[2953]: USER_END pid=2953 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:24.578000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.8:22-10.0.0.1:43366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:24.578941 systemd[1]: Started sshd@28-10.0.0.8:22-10.0.0.1:43366.service. Oct 2 20:11:24.581358 systemd[1]: sshd@27-10.0.0.8:22-10.0.0.1:43358.service: Deactivated successfully. Oct 2 20:11:24.582110 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 20:11:24.582394 kernel: audit: type=1106 audit(1696277484.577:1300): pid=2953 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:24.582483 kernel: audit: type=1130 audit(1696277484.578:1301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.8:22-10.0.0.1:43366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:24.578000 audit[2953]: CRED_DISP pid=2953 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:24.580000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.8:22-10.0.0.1:43358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:24.582790 systemd-logind[1129]: Session 28 logged out. Waiting for processes to exit. Oct 2 20:11:24.583468 systemd-logind[1129]: Removed session 28. Oct 2 20:11:24.621000 audit[2967]: USER_ACCT pid=2967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:24.622602 sshd[2967]: Accepted publickey for core from 10.0.0.1 port 43366 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:11:24.623000 audit[2967]: CRED_ACQ pid=2967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:24.623000 audit[2967]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1cbf7c0 a2=3 a3=1 items=0 ppid=1 pid=2967 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:24.623000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:11:24.624142 sshd[2967]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:24.629835 systemd[1]: Started session-29.scope. Oct 2 20:11:24.630851 systemd-logind[1129]: New session 29 of user core. Oct 2 20:11:24.633000 audit[2967]: USER_START pid=2967 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:24.635000 audit[2971]: CRED_ACQ pid=2971 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:25.651870 kubelet[2022]: E1002 20:11:25.651843 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:26.258372 env[1142]: time="2023-10-02T20:11:26.258188615Z" level=info msg="StopPodSandbox for \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\"" Oct 2 20:11:26.258372 env[1142]: time="2023-10-02T20:11:26.258260855Z" level=info msg="Container to stop \"1e9ec1f3fdf382c9f722f1d0b5eaa9193ed43bed1b56c06164309283a041abb7\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:11:26.259641 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939-shm.mount: Deactivated successfully. Oct 2 20:11:26.265057 systemd[1]: cri-containerd-b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939.scope: Deactivated successfully. Oct 2 20:11:26.264000 audit: BPF prog-id=120 op=UNLOAD Oct 2 20:11:26.268062 env[1142]: time="2023-10-02T20:11:26.268006964Z" level=info msg="StopContainer for \"d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa\" with timeout 30 (s)" Oct 2 20:11:26.268000 audit: BPF prog-id=123 op=UNLOAD Oct 2 20:11:26.270174 env[1142]: time="2023-10-02T20:11:26.270135521Z" level=info msg="Stop container \"d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa\" with signal terminated" Oct 2 20:11:26.286078 systemd[1]: cri-containerd-d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa.scope: Deactivated successfully. Oct 2 20:11:26.285000 audit: BPF prog-id=124 op=UNLOAD Oct 2 20:11:26.290859 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939-rootfs.mount: Deactivated successfully. Oct 2 20:11:26.291000 audit: BPF prog-id=127 op=UNLOAD Oct 2 20:11:26.299302 env[1142]: time="2023-10-02T20:11:26.299253247Z" level=info msg="shim disconnected" id=b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939 Oct 2 20:11:26.299302 env[1142]: time="2023-10-02T20:11:26.299305047Z" level=warning msg="cleaning up after shim disconnected" id=b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939 namespace=k8s.io Oct 2 20:11:26.299508 env[1142]: time="2023-10-02T20:11:26.299314567Z" level=info msg="cleaning up dead shim" Oct 2 20:11:26.307436 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa-rootfs.mount: Deactivated successfully. Oct 2 20:11:26.308947 env[1142]: time="2023-10-02T20:11:26.308908435Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3019 runtime=io.containerd.runc.v2\n" Oct 2 20:11:26.309112 env[1142]: time="2023-10-02T20:11:26.309075595Z" level=info msg="shim disconnected" id=d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa Oct 2 20:11:26.309194 env[1142]: time="2023-10-02T20:11:26.309178075Z" level=warning msg="cleaning up after shim disconnected" id=d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa namespace=k8s.io Oct 2 20:11:26.309253 env[1142]: time="2023-10-02T20:11:26.309241315Z" level=info msg="cleaning up dead shim" Oct 2 20:11:26.309509 env[1142]: time="2023-10-02T20:11:26.309193835Z" level=info msg="TearDown network for sandbox \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\" successfully" Oct 2 20:11:26.309573 env[1142]: time="2023-10-02T20:11:26.309508075Z" level=info msg="StopPodSandbox for \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\" returns successfully" Oct 2 20:11:26.318677 env[1142]: time="2023-10-02T20:11:26.318637824Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3032 runtime=io.containerd.runc.v2\n" Oct 2 20:11:26.320410 env[1142]: time="2023-10-02T20:11:26.320374902Z" level=info msg="StopContainer for \"d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa\" returns successfully" Oct 2 20:11:26.321025 env[1142]: time="2023-10-02T20:11:26.320999541Z" level=info msg="StopPodSandbox for \"a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9\"" Oct 2 20:11:26.321107 env[1142]: time="2023-10-02T20:11:26.321082061Z" level=info msg="Container to stop \"d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:11:26.322266 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9-shm.mount: Deactivated successfully. Oct 2 20:11:26.328014 systemd[1]: cri-containerd-a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9.scope: Deactivated successfully. Oct 2 20:11:26.327000 audit: BPF prog-id=109 op=UNLOAD Oct 2 20:11:26.335000 audit: BPF prog-id=112 op=UNLOAD Oct 2 20:11:26.347378 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9-rootfs.mount: Deactivated successfully. Oct 2 20:11:26.360348 env[1142]: time="2023-10-02T20:11:26.360300775Z" level=info msg="shim disconnected" id=a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9 Oct 2 20:11:26.360522 env[1142]: time="2023-10-02T20:11:26.360344894Z" level=warning msg="cleaning up after shim disconnected" id=a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9 namespace=k8s.io Oct 2 20:11:26.360522 env[1142]: time="2023-10-02T20:11:26.360360494Z" level=info msg="cleaning up dead shim" Oct 2 20:11:26.368485 env[1142]: time="2023-10-02T20:11:26.368428925Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3063 runtime=io.containerd.runc.v2\n" Oct 2 20:11:26.368757 env[1142]: time="2023-10-02T20:11:26.368723285Z" level=info msg="TearDown network for sandbox \"a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9\" successfully" Oct 2 20:11:26.368757 env[1142]: time="2023-10-02T20:11:26.368750004Z" level=info msg="StopPodSandbox for \"a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9\" returns successfully" Oct 2 20:11:26.399796 kubelet[2022]: I1002 20:11:26.399745 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-host-proc-sys-kernel\") pod \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " Oct 2 20:11:26.399796 kubelet[2022]: I1002 20:11:26.399806 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c2b80e2b-061f-4777-9e68-49dd6e29bca9-clustermesh-secrets\") pod \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " Oct 2 20:11:26.399994 kubelet[2022]: I1002 20:11:26.399830 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c2b80e2b-061f-4777-9e68-49dd6e29bca9-hubble-tls\") pod \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " Oct 2 20:11:26.399994 kubelet[2022]: I1002 20:11:26.399852 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-drfvg\" (UniqueName: \"kubernetes.io/projected/c2b80e2b-061f-4777-9e68-49dd6e29bca9-kube-api-access-drfvg\") pod \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " Oct 2 20:11:26.399994 kubelet[2022]: I1002 20:11:26.399868 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-bpf-maps\") pod \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " Oct 2 20:11:26.399994 kubelet[2022]: I1002 20:11:26.399885 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-hostproc\") pod \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " Oct 2 20:11:26.399994 kubelet[2022]: I1002 20:11:26.399908 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c2b80e2b-061f-4777-9e68-49dd6e29bca9-cilium-config-path\") pod \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " Oct 2 20:11:26.399994 kubelet[2022]: I1002 20:11:26.399927 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-host-proc-sys-net\") pod \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " Oct 2 20:11:26.399994 kubelet[2022]: I1002 20:11:26.399946 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-lib-modules\") pod \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " Oct 2 20:11:26.399994 kubelet[2022]: I1002 20:11:26.399963 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-etc-cni-netd\") pod \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " Oct 2 20:11:26.400254 kubelet[2022]: I1002 20:11:26.400033 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-cilium-cgroup\") pod \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " Oct 2 20:11:26.400254 kubelet[2022]: I1002 20:11:26.400099 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-cilium-run\") pod \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " Oct 2 20:11:26.400254 kubelet[2022]: I1002 20:11:26.400119 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-xtables-lock\") pod \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " Oct 2 20:11:26.400254 kubelet[2022]: I1002 20:11:26.400137 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-cni-path\") pod \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\" (UID: \"c2b80e2b-061f-4777-9e68-49dd6e29bca9\") " Oct 2 20:11:26.400352 kubelet[2022]: I1002 20:11:26.400285 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-cni-path" (OuterVolumeSpecName: "cni-path") pod "c2b80e2b-061f-4777-9e68-49dd6e29bca9" (UID: "c2b80e2b-061f-4777-9e68-49dd6e29bca9"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:26.400352 kubelet[2022]: I1002 20:11:26.400281 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "c2b80e2b-061f-4777-9e68-49dd6e29bca9" (UID: "c2b80e2b-061f-4777-9e68-49dd6e29bca9"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:26.400352 kubelet[2022]: I1002 20:11:26.400340 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "c2b80e2b-061f-4777-9e68-49dd6e29bca9" (UID: "c2b80e2b-061f-4777-9e68-49dd6e29bca9"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:26.400424 kubelet[2022]: I1002 20:11:26.400362 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "c2b80e2b-061f-4777-9e68-49dd6e29bca9" (UID: "c2b80e2b-061f-4777-9e68-49dd6e29bca9"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:26.400424 kubelet[2022]: I1002 20:11:26.400378 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-hostproc" (OuterVolumeSpecName: "hostproc") pod "c2b80e2b-061f-4777-9e68-49dd6e29bca9" (UID: "c2b80e2b-061f-4777-9e68-49dd6e29bca9"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:26.400621 kubelet[2022]: I1002 20:11:26.400596 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "c2b80e2b-061f-4777-9e68-49dd6e29bca9" (UID: "c2b80e2b-061f-4777-9e68-49dd6e29bca9"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:26.400664 kubelet[2022]: I1002 20:11:26.400630 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "c2b80e2b-061f-4777-9e68-49dd6e29bca9" (UID: "c2b80e2b-061f-4777-9e68-49dd6e29bca9"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:26.400664 kubelet[2022]: I1002 20:11:26.400645 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "c2b80e2b-061f-4777-9e68-49dd6e29bca9" (UID: "c2b80e2b-061f-4777-9e68-49dd6e29bca9"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:26.400751 kubelet[2022]: I1002 20:11:26.400726 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "c2b80e2b-061f-4777-9e68-49dd6e29bca9" (UID: "c2b80e2b-061f-4777-9e68-49dd6e29bca9"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:26.400855 kubelet[2022]: I1002 20:11:26.400838 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "c2b80e2b-061f-4777-9e68-49dd6e29bca9" (UID: "c2b80e2b-061f-4777-9e68-49dd6e29bca9"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:26.402957 kubelet[2022]: I1002 20:11:26.402921 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/c2b80e2b-061f-4777-9e68-49dd6e29bca9-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "c2b80e2b-061f-4777-9e68-49dd6e29bca9" (UID: "c2b80e2b-061f-4777-9e68-49dd6e29bca9"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:11:26.403999 kubelet[2022]: I1002 20:11:26.403967 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/c2b80e2b-061f-4777-9e68-49dd6e29bca9-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "c2b80e2b-061f-4777-9e68-49dd6e29bca9" (UID: "c2b80e2b-061f-4777-9e68-49dd6e29bca9"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:11:26.404137 kubelet[2022]: I1002 20:11:26.404107 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c2b80e2b-061f-4777-9e68-49dd6e29bca9-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "c2b80e2b-061f-4777-9e68-49dd6e29bca9" (UID: "c2b80e2b-061f-4777-9e68-49dd6e29bca9"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:11:26.404517 kubelet[2022]: I1002 20:11:26.404477 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c2b80e2b-061f-4777-9e68-49dd6e29bca9-kube-api-access-drfvg" (OuterVolumeSpecName: "kube-api-access-drfvg") pod "c2b80e2b-061f-4777-9e68-49dd6e29bca9" (UID: "c2b80e2b-061f-4777-9e68-49dd6e29bca9"). InnerVolumeSpecName "kube-api-access-drfvg". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:11:26.500881 kubelet[2022]: I1002 20:11:26.500839 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/7cfeb067-9d94-401d-ae25-7de2143dd2f2-cilium-config-path\") pod \"7cfeb067-9d94-401d-ae25-7de2143dd2f2\" (UID: \"7cfeb067-9d94-401d-ae25-7de2143dd2f2\") " Oct 2 20:11:26.500881 kubelet[2022]: I1002 20:11:26.500884 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-xj6r4\" (UniqueName: \"kubernetes.io/projected/7cfeb067-9d94-401d-ae25-7de2143dd2f2-kube-api-access-xj6r4\") pod \"7cfeb067-9d94-401d-ae25-7de2143dd2f2\" (UID: \"7cfeb067-9d94-401d-ae25-7de2143dd2f2\") " Oct 2 20:11:26.501053 kubelet[2022]: I1002 20:11:26.500916 2022 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c2b80e2b-061f-4777-9e68-49dd6e29bca9-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:26.501053 kubelet[2022]: I1002 20:11:26.500931 2022 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:26.501053 kubelet[2022]: I1002 20:11:26.500947 2022 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:26.501053 kubelet[2022]: I1002 20:11:26.500957 2022 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:26.501053 kubelet[2022]: I1002 20:11:26.500966 2022 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:26.501053 kubelet[2022]: I1002 20:11:26.500999 2022 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:26.501053 kubelet[2022]: I1002 20:11:26.501009 2022 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:26.501053 kubelet[2022]: I1002 20:11:26.501019 2022 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:26.501053 kubelet[2022]: I1002 20:11:26.501028 2022 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:26.501053 kubelet[2022]: I1002 20:11:26.501043 2022 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c2b80e2b-061f-4777-9e68-49dd6e29bca9-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:26.501053 kubelet[2022]: I1002 20:11:26.501053 2022 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:26.501310 kubelet[2022]: I1002 20:11:26.501062 2022 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c2b80e2b-061f-4777-9e68-49dd6e29bca9-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:26.501310 kubelet[2022]: I1002 20:11:26.501071 2022 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-drfvg\" (UniqueName: \"kubernetes.io/projected/c2b80e2b-061f-4777-9e68-49dd6e29bca9-kube-api-access-drfvg\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:26.501310 kubelet[2022]: I1002 20:11:26.501081 2022 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c2b80e2b-061f-4777-9e68-49dd6e29bca9-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:26.502833 kubelet[2022]: I1002 20:11:26.502798 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/7cfeb067-9d94-401d-ae25-7de2143dd2f2-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "7cfeb067-9d94-401d-ae25-7de2143dd2f2" (UID: "7cfeb067-9d94-401d-ae25-7de2143dd2f2"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:11:26.504345 kubelet[2022]: I1002 20:11:26.504308 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/7cfeb067-9d94-401d-ae25-7de2143dd2f2-kube-api-access-xj6r4" (OuterVolumeSpecName: "kube-api-access-xj6r4") pod "7cfeb067-9d94-401d-ae25-7de2143dd2f2" (UID: "7cfeb067-9d94-401d-ae25-7de2143dd2f2"). InnerVolumeSpecName "kube-api-access-xj6r4". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:11:26.573051 systemd[1]: Removed slice kubepods-burstable-podc2b80e2b_061f_4777_9e68_49dd6e29bca9.slice. Oct 2 20:11:26.576169 systemd[1]: Removed slice kubepods-besteffort-pod7cfeb067_9d94_401d_ae25_7de2143dd2f2.slice. Oct 2 20:11:26.602223 kubelet[2022]: I1002 20:11:26.602194 2022 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/7cfeb067-9d94-401d-ae25-7de2143dd2f2-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:26.602390 kubelet[2022]: I1002 20:11:26.602363 2022 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-xj6r4\" (UniqueName: \"kubernetes.io/projected/7cfeb067-9d94-401d-ae25-7de2143dd2f2-kube-api-access-xj6r4\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:26.998882 kubelet[2022]: I1002 20:11:26.998840 2022 scope.go:117] "RemoveContainer" containerID="1e9ec1f3fdf382c9f722f1d0b5eaa9193ed43bed1b56c06164309283a041abb7" Oct 2 20:11:27.002449 env[1142]: time="2023-10-02T20:11:27.002160694Z" level=info msg="RemoveContainer for \"1e9ec1f3fdf382c9f722f1d0b5eaa9193ed43bed1b56c06164309283a041abb7\"" Oct 2 20:11:27.004699 env[1142]: time="2023-10-02T20:11:27.004593532Z" level=info msg="RemoveContainer for \"1e9ec1f3fdf382c9f722f1d0b5eaa9193ed43bed1b56c06164309283a041abb7\" returns successfully" Oct 2 20:11:27.004809 kubelet[2022]: I1002 20:11:27.004758 2022 scope.go:117] "RemoveContainer" containerID="d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa" Oct 2 20:11:27.006310 env[1142]: time="2023-10-02T20:11:27.006182051Z" level=info msg="RemoveContainer for \"d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa\"" Oct 2 20:11:27.008350 env[1142]: time="2023-10-02T20:11:27.008243609Z" level=info msg="RemoveContainer for \"d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa\" returns successfully" Oct 2 20:11:27.008474 kubelet[2022]: I1002 20:11:27.008443 2022 scope.go:117] "RemoveContainer" containerID="d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa" Oct 2 20:11:27.008732 env[1142]: time="2023-10-02T20:11:27.008629008Z" level=error msg="ContainerStatus for \"d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa\": not found" Oct 2 20:11:27.008891 kubelet[2022]: E1002 20:11:27.008876 2022 remote_runtime.go:432] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa\": not found" containerID="d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa" Oct 2 20:11:27.008946 kubelet[2022]: I1002 20:11:27.008923 2022 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa"} err="failed to get container status \"d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa\": rpc error: code = NotFound desc = an error occurred when try to find container \"d494f66c39051eb6438d664c129dd346e53bb86d6ad1ecb514c60b1e89eb5caa\": not found" Oct 2 20:11:27.259534 systemd[1]: var-lib-kubelet-pods-c2b80e2b\x2d061f\x2d4777\x2d9e68\x2d49dd6e29bca9-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:11:27.259638 systemd[1]: var-lib-kubelet-pods-c2b80e2b\x2d061f\x2d4777\x2d9e68\x2d49dd6e29bca9-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:11:27.259694 systemd[1]: var-lib-kubelet-pods-7cfeb067\x2d9d94\x2d401d\x2dae25\x2d7de2143dd2f2-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dxj6r4.mount: Deactivated successfully. Oct 2 20:11:27.259746 systemd[1]: var-lib-kubelet-pods-c2b80e2b\x2d061f\x2d4777\x2d9e68\x2d49dd6e29bca9-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2ddrfvg.mount: Deactivated successfully. Oct 2 20:11:28.231350 sshd[2967]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:28.231000 audit[2967]: USER_END pid=2967 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:28.231000 audit[2967]: CRED_DISP pid=2967 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:28.236899 systemd[1]: Started sshd@29-10.0.0.8:22-10.0.0.1:43380.service. Oct 2 20:11:28.236000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.8:22-10.0.0.1:43380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:28.237391 systemd[1]: sshd@28-10.0.0.8:22-10.0.0.1:43366.service: Deactivated successfully. Oct 2 20:11:28.236000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.8:22-10.0.0.1:43366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:28.238384 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 20:11:28.239062 systemd-logind[1129]: Session 29 logged out. Waiting for processes to exit. Oct 2 20:11:28.240220 systemd-logind[1129]: Removed session 29. Oct 2 20:11:28.278000 audit[3080]: USER_ACCT pid=3080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:28.279042 sshd[3080]: Accepted publickey for core from 10.0.0.1 port 43380 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:11:28.279000 audit[3080]: CRED_ACQ pid=3080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:28.279000 audit[3080]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc32652a0 a2=3 a3=1 items=0 ppid=1 pid=3080 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:28.279000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:11:28.280175 sshd[3080]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:28.283918 systemd-logind[1129]: New session 30 of user core. Oct 2 20:11:28.284704 systemd[1]: Started session-30.scope. Oct 2 20:11:28.288000 audit[3080]: USER_START pid=3080 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:28.290000 audit[3083]: CRED_ACQ pid=3083 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:28.568016 kubelet[2022]: I1002 20:11:28.567893 2022 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="7cfeb067-9d94-401d-ae25-7de2143dd2f2" path="/var/lib/kubelet/pods/7cfeb067-9d94-401d-ae25-7de2143dd2f2/volumes" Oct 2 20:11:28.568338 kubelet[2022]: I1002 20:11:28.568288 2022 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" path="/var/lib/kubelet/pods/c2b80e2b-061f-4777-9e68-49dd6e29bca9/volumes" Oct 2 20:11:29.912407 kubelet[2022]: I1002 20:11:29.912367 2022 topology_manager.go:215] "Topology Admit Handler" podUID="4dc0393a-d557-41db-a356-1fbc3f01ba76" podNamespace="kube-system" podName="cilium-xzbsk" Oct 2 20:11:29.912407 kubelet[2022]: E1002 20:11:29.912420 2022 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" containerName="mount-cgroup" Oct 2 20:11:29.912787 kubelet[2022]: E1002 20:11:29.912429 2022 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" containerName="mount-cgroup" Oct 2 20:11:29.912787 kubelet[2022]: E1002 20:11:29.912436 2022 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" containerName="mount-cgroup" Oct 2 20:11:29.912787 kubelet[2022]: E1002 20:11:29.912443 2022 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" containerName="mount-cgroup" Oct 2 20:11:29.912787 kubelet[2022]: E1002 20:11:29.912452 2022 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="7cfeb067-9d94-401d-ae25-7de2143dd2f2" containerName="cilium-operator" Oct 2 20:11:29.912787 kubelet[2022]: I1002 20:11:29.912470 2022 memory_manager.go:346] "RemoveStaleState removing state" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" containerName="mount-cgroup" Oct 2 20:11:29.912787 kubelet[2022]: I1002 20:11:29.912476 2022 memory_manager.go:346] "RemoveStaleState removing state" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" containerName="mount-cgroup" Oct 2 20:11:29.912787 kubelet[2022]: I1002 20:11:29.912482 2022 memory_manager.go:346] "RemoveStaleState removing state" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" containerName="mount-cgroup" Oct 2 20:11:29.912787 kubelet[2022]: I1002 20:11:29.912488 2022 memory_manager.go:346] "RemoveStaleState removing state" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" containerName="mount-cgroup" Oct 2 20:11:29.912787 kubelet[2022]: I1002 20:11:29.912495 2022 memory_manager.go:346] "RemoveStaleState removing state" podUID="7cfeb067-9d94-401d-ae25-7de2143dd2f2" containerName="cilium-operator" Oct 2 20:11:29.912787 kubelet[2022]: E1002 20:11:29.912510 2022 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" containerName="mount-cgroup" Oct 2 20:11:29.912787 kubelet[2022]: E1002 20:11:29.912516 2022 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" containerName="mount-cgroup" Oct 2 20:11:29.912787 kubelet[2022]: I1002 20:11:29.912530 2022 memory_manager.go:346] "RemoveStaleState removing state" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" containerName="mount-cgroup" Oct 2 20:11:29.912787 kubelet[2022]: I1002 20:11:29.912537 2022 memory_manager.go:346] "RemoveStaleState removing state" podUID="c2b80e2b-061f-4777-9e68-49dd6e29bca9" containerName="mount-cgroup" Oct 2 20:11:29.917711 systemd[1]: Created slice kubepods-burstable-pod4dc0393a_d557_41db_a356_1fbc3f01ba76.slice. Oct 2 20:11:29.921331 kubelet[2022]: W1002 20:11:29.921291 2022 reflector.go:535] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 20:11:29.921331 kubelet[2022]: E1002 20:11:29.921325 2022 reflector.go:147] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 20:11:30.020974 kubelet[2022]: I1002 20:11:30.020898 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/4dc0393a-d557-41db-a356-1fbc3f01ba76-hubble-tls\") pod \"cilium-xzbsk\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " pod="kube-system/cilium-xzbsk" Oct 2 20:11:30.020974 kubelet[2022]: I1002 20:11:30.020963 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-lib-modules\") pod \"cilium-xzbsk\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " pod="kube-system/cilium-xzbsk" Oct 2 20:11:30.021184 kubelet[2022]: I1002 20:11:30.021043 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qgv68\" (UniqueName: \"kubernetes.io/projected/4dc0393a-d557-41db-a356-1fbc3f01ba76-kube-api-access-qgv68\") pod \"cilium-xzbsk\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " pod="kube-system/cilium-xzbsk" Oct 2 20:11:30.021184 kubelet[2022]: I1002 20:11:30.021072 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4dc0393a-d557-41db-a356-1fbc3f01ba76-cilium-config-path\") pod \"cilium-xzbsk\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " pod="kube-system/cilium-xzbsk" Oct 2 20:11:30.021184 kubelet[2022]: I1002 20:11:30.021094 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/4dc0393a-d557-41db-a356-1fbc3f01ba76-cilium-ipsec-secrets\") pod \"cilium-xzbsk\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " pod="kube-system/cilium-xzbsk" Oct 2 20:11:30.021184 kubelet[2022]: I1002 20:11:30.021117 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-cilium-run\") pod \"cilium-xzbsk\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " pod="kube-system/cilium-xzbsk" Oct 2 20:11:30.021184 kubelet[2022]: I1002 20:11:30.021171 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-bpf-maps\") pod \"cilium-xzbsk\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " pod="kube-system/cilium-xzbsk" Oct 2 20:11:30.021304 kubelet[2022]: I1002 20:11:30.021189 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-hostproc\") pod \"cilium-xzbsk\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " pod="kube-system/cilium-xzbsk" Oct 2 20:11:30.021304 kubelet[2022]: I1002 20:11:30.021208 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-etc-cni-netd\") pod \"cilium-xzbsk\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " pod="kube-system/cilium-xzbsk" Oct 2 20:11:30.021304 kubelet[2022]: I1002 20:11:30.021227 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-host-proc-sys-kernel\") pod \"cilium-xzbsk\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " pod="kube-system/cilium-xzbsk" Oct 2 20:11:30.021304 kubelet[2022]: I1002 20:11:30.021246 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-cilium-cgroup\") pod \"cilium-xzbsk\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " pod="kube-system/cilium-xzbsk" Oct 2 20:11:30.021304 kubelet[2022]: I1002 20:11:30.021263 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-xtables-lock\") pod \"cilium-xzbsk\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " pod="kube-system/cilium-xzbsk" Oct 2 20:11:30.021304 kubelet[2022]: I1002 20:11:30.021281 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-host-proc-sys-net\") pod \"cilium-xzbsk\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " pod="kube-system/cilium-xzbsk" Oct 2 20:11:30.021304 kubelet[2022]: I1002 20:11:30.021298 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-cni-path\") pod \"cilium-xzbsk\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " pod="kube-system/cilium-xzbsk" Oct 2 20:11:30.021466 kubelet[2022]: I1002 20:11:30.021315 2022 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/4dc0393a-d557-41db-a356-1fbc3f01ba76-clustermesh-secrets\") pod \"cilium-xzbsk\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " pod="kube-system/cilium-xzbsk" Oct 2 20:11:30.653396 kubelet[2022]: E1002 20:11:30.653362 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:31.420389 kubelet[2022]: E1002 20:11:31.420345 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:31.420914 env[1142]: time="2023-10-02T20:11:31.420869736Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-xzbsk,Uid:4dc0393a-d557-41db-a356-1fbc3f01ba76,Namespace:kube-system,Attempt:0,}" Oct 2 20:11:31.747245 env[1142]: time="2023-10-02T20:11:31.747132522Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:31.748649 env[1142]: time="2023-10-02T20:11:31.748620202Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:31.750031 env[1142]: time="2023-10-02T20:11:31.749999282Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:31.751527 env[1142]: time="2023-10-02T20:11:31.751493842Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:31.763511 env[1142]: time="2023-10-02T20:11:31.763417482Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:11:31.763511 env[1142]: time="2023-10-02T20:11:31.763460162Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:11:31.763511 env[1142]: time="2023-10-02T20:11:31.763470882Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:11:31.763925 env[1142]: time="2023-10-02T20:11:31.763665642Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d pid=3103 runtime=io.containerd.runc.v2 Oct 2 20:11:31.778125 systemd[1]: Started cri-containerd-c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d.scope. Oct 2 20:11:31.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.821886 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 20:11:31.821939 kernel: audit: type=1400 audit(1696277491.820:1324): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.825782 kernel: audit: type=1400 audit(1696277491.820:1325): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.825853 kernel: audit: type=1400 audit(1696277491.820:1326): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.827492 kernel: audit: type=1400 audit(1696277491.820:1327): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.832587 kernel: audit: type=1400 audit(1696277491.820:1328): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.832664 kernel: audit: type=1400 audit(1696277491.820:1329): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.835936 kernel: audit: type=1400 audit(1696277491.820:1330): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.838107 kernel: audit: type=1400 audit(1696277491.820:1331): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.840204 kernel: audit: type=1400 audit(1696277491.820:1332): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.841976 kernel: audit: type=1400 audit(1696277491.821:1333): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.821000 audit: BPF prog-id=128 op=LOAD Oct 2 20:11:31.821000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.821000 audit[3113]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3103 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:31.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336373866646565393437316465313134653864396664363764613830 Oct 2 20:11:31.821000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.821000 audit[3113]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3103 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:31.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336373866646565393437316465313134653864396664363764613830 Oct 2 20:11:31.821000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.821000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.821000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.821000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.821000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.821000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.821000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.821000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.821000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.821000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.821000 audit: BPF prog-id=129 op=LOAD Oct 2 20:11:31.821000 audit[3113]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3103 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:31.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336373866646565393437316465313134653864396664363764613830 Oct 2 20:11:31.823000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.823000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.823000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.823000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.823000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.823000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.823000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.823000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.823000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.823000 audit: BPF prog-id=130 op=LOAD Oct 2 20:11:31.823000 audit[3113]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3103 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:31.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336373866646565393437316465313134653864396664363764613830 Oct 2 20:11:31.825000 audit: BPF prog-id=130 op=UNLOAD Oct 2 20:11:31.825000 audit: BPF prog-id=129 op=UNLOAD Oct 2 20:11:31.825000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.825000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.825000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.825000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.825000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.825000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.825000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.825000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.825000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.825000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:31.825000 audit: BPF prog-id=131 op=LOAD Oct 2 20:11:31.825000 audit[3113]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3103 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:31.825000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336373866646565393437316465313134653864396664363764613830 Oct 2 20:11:31.847020 env[1142]: time="2023-10-02T20:11:31.846962198Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-xzbsk,Uid:4dc0393a-d557-41db-a356-1fbc3f01ba76,Namespace:kube-system,Attempt:0,} returns sandbox id \"c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d\"" Oct 2 20:11:31.847929 kubelet[2022]: E1002 20:11:31.847601 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:31.850838 env[1142]: time="2023-10-02T20:11:31.850571438Z" level=info msg="CreateContainer within sandbox \"c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:11:31.860566 env[1142]: time="2023-10-02T20:11:31.860528237Z" level=info msg="CreateContainer within sandbox \"c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1\"" Oct 2 20:11:31.861845 env[1142]: time="2023-10-02T20:11:31.861155557Z" level=info msg="StartContainer for \"40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1\"" Oct 2 20:11:31.876328 systemd[1]: Started cri-containerd-40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1.scope. Oct 2 20:11:31.903421 systemd[1]: cri-containerd-40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1.scope: Deactivated successfully. Oct 2 20:11:31.916366 env[1142]: time="2023-10-02T20:11:31.916311595Z" level=info msg="shim disconnected" id=40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1 Oct 2 20:11:31.916366 env[1142]: time="2023-10-02T20:11:31.916360875Z" level=warning msg="cleaning up after shim disconnected" id=40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1 namespace=k8s.io Oct 2 20:11:31.916366 env[1142]: time="2023-10-02T20:11:31.916369475Z" level=info msg="cleaning up dead shim" Oct 2 20:11:31.924028 env[1142]: time="2023-10-02T20:11:31.923979355Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3157 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:11:31Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:11:31.924274 env[1142]: time="2023-10-02T20:11:31.924228435Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 20:11:31.924462 env[1142]: time="2023-10-02T20:11:31.924415235Z" level=error msg="Failed to pipe stdout of container \"40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1\"" error="reading from a closed fifo" Oct 2 20:11:31.927856 env[1142]: time="2023-10-02T20:11:31.927816474Z" level=error msg="Failed to pipe stderr of container \"40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1\"" error="reading from a closed fifo" Oct 2 20:11:31.929388 env[1142]: time="2023-10-02T20:11:31.929343754Z" level=error msg="StartContainer for \"40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:11:31.929941 kubelet[2022]: E1002 20:11:31.929699 2022 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1" Oct 2 20:11:31.929941 kubelet[2022]: E1002 20:11:31.929853 2022 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:11:31.929941 kubelet[2022]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:11:31.929941 kubelet[2022]: rm /hostbin/cilium-mount Oct 2 20:11:31.929941 kubelet[2022]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qgv68,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-xzbsk_kube-system(4dc0393a-d557-41db-a356-1fbc3f01ba76): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:11:31.929941 kubelet[2022]: E1002 20:11:31.929912 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-xzbsk" podUID="4dc0393a-d557-41db-a356-1fbc3f01ba76" Oct 2 20:11:32.014694 kubelet[2022]: E1002 20:11:32.014570 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:32.019617 env[1142]: time="2023-10-02T20:11:32.019366955Z" level=info msg="CreateContainer within sandbox \"c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:11:32.031806 env[1142]: time="2023-10-02T20:11:32.030342756Z" level=info msg="CreateContainer within sandbox \"c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0\"" Oct 2 20:11:32.031806 env[1142]: time="2023-10-02T20:11:32.030801637Z" level=info msg="StartContainer for \"1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0\"" Oct 2 20:11:32.048045 systemd[1]: Started cri-containerd-1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0.scope. Oct 2 20:11:32.072705 systemd[1]: cri-containerd-1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0.scope: Deactivated successfully. Oct 2 20:11:32.079316 env[1142]: time="2023-10-02T20:11:32.079258045Z" level=info msg="shim disconnected" id=1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0 Oct 2 20:11:32.079316 env[1142]: time="2023-10-02T20:11:32.079309925Z" level=warning msg="cleaning up after shim disconnected" id=1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0 namespace=k8s.io Oct 2 20:11:32.079316 env[1142]: time="2023-10-02T20:11:32.079319325Z" level=info msg="cleaning up dead shim" Oct 2 20:11:32.088093 env[1142]: time="2023-10-02T20:11:32.088045127Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3193 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:11:32Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:11:32.088339 env[1142]: time="2023-10-02T20:11:32.088292007Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 20:11:32.088522 env[1142]: time="2023-10-02T20:11:32.088474447Z" level=error msg="Failed to pipe stdout of container \"1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0\"" error="reading from a closed fifo" Oct 2 20:11:32.088595 env[1142]: time="2023-10-02T20:11:32.088564487Z" level=error msg="Failed to pipe stderr of container \"1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0\"" error="reading from a closed fifo" Oct 2 20:11:32.089667 env[1142]: time="2023-10-02T20:11:32.089631127Z" level=error msg="StartContainer for \"1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:11:32.090053 kubelet[2022]: E1002 20:11:32.089857 2022 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0" Oct 2 20:11:32.090053 kubelet[2022]: E1002 20:11:32.089980 2022 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:11:32.090053 kubelet[2022]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:11:32.090053 kubelet[2022]: rm /hostbin/cilium-mount Oct 2 20:11:32.090053 kubelet[2022]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qgv68,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-xzbsk_kube-system(4dc0393a-d557-41db-a356-1fbc3f01ba76): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:11:32.090053 kubelet[2022]: E1002 20:11:32.090025 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-xzbsk" podUID="4dc0393a-d557-41db-a356-1fbc3f01ba76" Oct 2 20:11:33.017450 kubelet[2022]: I1002 20:11:33.017380 2022 scope.go:117] "RemoveContainer" containerID="40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1" Oct 2 20:11:33.017967 kubelet[2022]: I1002 20:11:33.017749 2022 scope.go:117] "RemoveContainer" containerID="40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1" Oct 2 20:11:33.019139 env[1142]: time="2023-10-02T20:11:33.019045773Z" level=info msg="RemoveContainer for \"40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1\"" Oct 2 20:11:33.020232 env[1142]: time="2023-10-02T20:11:33.020100333Z" level=info msg="RemoveContainer for \"40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1\"" Oct 2 20:11:33.020232 env[1142]: time="2023-10-02T20:11:33.020183733Z" level=error msg="RemoveContainer for \"40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1\" failed" error="failed to set removing state for container \"40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1\": container is already in removing state" Oct 2 20:11:33.020430 kubelet[2022]: E1002 20:11:33.020409 2022 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1\": container is already in removing state" containerID="40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1" Oct 2 20:11:33.020478 kubelet[2022]: E1002 20:11:33.020448 2022 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1": container is already in removing state; Skipping pod "cilium-xzbsk_kube-system(4dc0393a-d557-41db-a356-1fbc3f01ba76)" Oct 2 20:11:33.021079 kubelet[2022]: E1002 20:11:33.021059 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:33.021349 kubelet[2022]: E1002 20:11:33.021307 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-xzbsk_kube-system(4dc0393a-d557-41db-a356-1fbc3f01ba76)\"" pod="kube-system/cilium-xzbsk" podUID="4dc0393a-d557-41db-a356-1fbc3f01ba76" Oct 2 20:11:33.022351 env[1142]: time="2023-10-02T20:11:33.022318414Z" level=info msg="RemoveContainer for \"40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1\" returns successfully" Oct 2 20:11:35.021870 kubelet[2022]: W1002 20:11:35.021832 2022 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4dc0393a_d557_41db_a356_1fbc3f01ba76.slice/cri-containerd-40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1.scope WatchSource:0}: container "40e2ff0e8c684d0768405799e9086127a991b562a65f9f414ada135d6b1c3fb1" in namespace "k8s.io": not found Oct 2 20:11:35.654157 kubelet[2022]: E1002 20:11:35.654132 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:37.381000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:37.384987 kernel: kauditd_printk_skb: 47 callbacks suppressed Oct 2 20:11:37.385095 kernel: audit: type=1400 audit(1696277497.381:1342): avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:37.385122 kernel: audit: type=1300 audit(1696277497.381:1342): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400dc71b30 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:11:37.381000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400dc71b30 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:11:37.381000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:11:37.390029 kernel: audit: type=1327 audit(1696277497.381:1342): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:11:37.390108 kernel: audit: type=1400 audit(1696277497.381:1343): avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:37.381000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:37.391975 kernel: audit: type=1300 audit(1696277497.381:1343): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400df26f40 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:11:37.381000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400df26f40 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:11:37.394601 kernel: audit: type=1327 audit(1696277497.381:1343): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:11:37.381000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:11:37.396794 kernel: audit: type=1400 audit(1696277497.382:1344): avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4768 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:37.382000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4768 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:37.398809 kernel: audit: type=1300 audit(1696277497.382:1344): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400e947230 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:11:37.382000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400e947230 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:11:37.401464 kernel: audit: type=1327 audit(1696277497.382:1344): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:11:37.382000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:11:37.403708 kernel: audit: type=1400 audit(1696277497.400:1346): avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:37.400000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:37.400000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:37.400000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400dc71c80 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:11:37.400000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400df26f60 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:11:37.400000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:11:37.400000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:11:37.400000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:37.400000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400f18e150 a2=fc6 a3=0 items=0 ppid=1735 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c727,c840 key=(null) Oct 2 20:11:37.400000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:11:37.884000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4773 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:37.884000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40016420f0 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:11:37.884000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:37.886000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:37.886000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025e7b40 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:11:37.886000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:38.130262 kubelet[2022]: W1002 20:11:38.130207 2022 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4dc0393a_d557_41db_a356_1fbc3f01ba76.slice/cri-containerd-1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0.scope WatchSource:0}: task 1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0 not found: not found Oct 2 20:11:40.527744 env[1142]: time="2023-10-02T20:11:40.527699950Z" level=info msg="StopPodSandbox for \"a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9\"" Oct 2 20:11:40.528233 env[1142]: time="2023-10-02T20:11:40.528184471Z" level=info msg="TearDown network for sandbox \"a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9\" successfully" Oct 2 20:11:40.528312 env[1142]: time="2023-10-02T20:11:40.528295831Z" level=info msg="StopPodSandbox for \"a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9\" returns successfully" Oct 2 20:11:40.528720 env[1142]: time="2023-10-02T20:11:40.528695192Z" level=info msg="RemovePodSandbox for \"a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9\"" Oct 2 20:11:40.528898 env[1142]: time="2023-10-02T20:11:40.528861712Z" level=info msg="Forcibly stopping sandbox \"a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9\"" Oct 2 20:11:40.529072 env[1142]: time="2023-10-02T20:11:40.529000992Z" level=info msg="TearDown network for sandbox \"a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9\" successfully" Oct 2 20:11:40.531479 env[1142]: time="2023-10-02T20:11:40.531323077Z" level=info msg="RemovePodSandbox \"a5a35395c7f61da96a1f34a62b6d64a10487df77efb19eeb1da8fc6d7634deb9\" returns successfully" Oct 2 20:11:40.532017 env[1142]: time="2023-10-02T20:11:40.531981078Z" level=info msg="StopPodSandbox for \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\"" Oct 2 20:11:40.532081 env[1142]: time="2023-10-02T20:11:40.532057518Z" level=info msg="TearDown network for sandbox \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\" successfully" Oct 2 20:11:40.532118 env[1142]: time="2023-10-02T20:11:40.532084278Z" level=info msg="StopPodSandbox for \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\" returns successfully" Oct 2 20:11:40.532399 env[1142]: time="2023-10-02T20:11:40.532376599Z" level=info msg="RemovePodSandbox for \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\"" Oct 2 20:11:40.532450 env[1142]: time="2023-10-02T20:11:40.532403319Z" level=info msg="Forcibly stopping sandbox \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\"" Oct 2 20:11:40.532478 env[1142]: time="2023-10-02T20:11:40.532456839Z" level=info msg="TearDown network for sandbox \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\" successfully" Oct 2 20:11:40.535660 env[1142]: time="2023-10-02T20:11:40.535624204Z" level=info msg="RemovePodSandbox \"b53c622f29b14c71bb5e55dd66c55944f2dc722c46d11700e8397d4cf413d939\" returns successfully" Oct 2 20:11:40.566835 kubelet[2022]: E1002 20:11:40.566815 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:40.655170 kubelet[2022]: E1002 20:11:40.655132 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:43.816000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:43.817213 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:11:43.817260 kernel: audit: type=1400 audit(1696277503.816:1351): avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:43.816000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:43.821267 kernel: audit: type=1400 audit(1696277503.816:1350): avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:43.821311 kernel: audit: type=1300 audit(1696277503.816:1351): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002a15120 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:11:43.816000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002a15120 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:11:43.816000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:43.826150 kernel: audit: type=1327 audit(1696277503.816:1351): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:43.826190 kernel: audit: type=1400 audit(1696277503.816:1352): avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:43.816000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:43.816000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012faf00 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:11:43.830787 kernel: audit: type=1300 audit(1696277503.816:1352): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012faf00 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:11:43.830824 kernel: audit: type=1327 audit(1696277503.816:1352): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:43.816000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:43.832973 kernel: audit: type=1300 audit(1696277503.816:1350): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000dad480 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:11:43.816000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000dad480 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:11:43.835629 kernel: audit: type=1327 audit(1696277503.816:1350): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:43.816000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:43.837878 kernel: audit: type=1400 audit(1696277503.817:1353): avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:43.817000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:43.817000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002a15240 a2=fc6 a3=0 items=0 ppid=1732 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c869 key=(null) Oct 2 20:11:43.817000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:44.565783 kubelet[2022]: E1002 20:11:44.565729 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:45.656350 kubelet[2022]: E1002 20:11:45.656321 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:46.565278 kubelet[2022]: E1002 20:11:46.565228 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:46.567670 env[1142]: time="2023-10-02T20:11:46.567620523Z" level=info msg="CreateContainer within sandbox \"c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:11:46.577091 env[1142]: time="2023-10-02T20:11:46.576999110Z" level=info msg="CreateContainer within sandbox \"c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf\"" Oct 2 20:11:46.577565 env[1142]: time="2023-10-02T20:11:46.577521192Z" level=info msg="StartContainer for \"ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf\"" Oct 2 20:11:46.597175 systemd[1]: Started cri-containerd-ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf.scope. Oct 2 20:11:46.611330 systemd[1]: cri-containerd-ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf.scope: Deactivated successfully. Oct 2 20:11:46.614898 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf-rootfs.mount: Deactivated successfully. Oct 2 20:11:46.622963 env[1142]: time="2023-10-02T20:11:46.622916203Z" level=info msg="shim disconnected" id=ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf Oct 2 20:11:46.623194 env[1142]: time="2023-10-02T20:11:46.623175084Z" level=warning msg="cleaning up after shim disconnected" id=ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf namespace=k8s.io Oct 2 20:11:46.623259 env[1142]: time="2023-10-02T20:11:46.623245884Z" level=info msg="cleaning up dead shim" Oct 2 20:11:46.637852 env[1142]: time="2023-10-02T20:11:46.637809166Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3231 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:11:46Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:11:46.638291 env[1142]: time="2023-10-02T20:11:46.638233967Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 20:11:46.638834 env[1142]: time="2023-10-02T20:11:46.638504488Z" level=error msg="Failed to pipe stdout of container \"ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf\"" error="reading from a closed fifo" Oct 2 20:11:46.642812 env[1142]: time="2023-10-02T20:11:46.638550888Z" level=error msg="Failed to pipe stderr of container \"ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf\"" error="reading from a closed fifo" Oct 2 20:11:46.643096 env[1142]: time="2023-10-02T20:11:46.643052901Z" level=error msg="StartContainer for \"ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:11:46.643924 kubelet[2022]: E1002 20:11:46.643898 2022 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf" Oct 2 20:11:46.644034 kubelet[2022]: E1002 20:11:46.644006 2022 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:11:46.644034 kubelet[2022]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:11:46.644034 kubelet[2022]: rm /hostbin/cilium-mount Oct 2 20:11:46.644034 kubelet[2022]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qgv68,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-xzbsk_kube-system(4dc0393a-d557-41db-a356-1fbc3f01ba76): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:11:46.644169 kubelet[2022]: E1002 20:11:46.644051 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-xzbsk" podUID="4dc0393a-d557-41db-a356-1fbc3f01ba76" Oct 2 20:11:47.046890 kubelet[2022]: I1002 20:11:47.046862 2022 scope.go:117] "RemoveContainer" containerID="1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0" Oct 2 20:11:47.047230 kubelet[2022]: I1002 20:11:47.047220 2022 scope.go:117] "RemoveContainer" containerID="1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0" Oct 2 20:11:47.048427 env[1142]: time="2023-10-02T20:11:47.048156919Z" level=info msg="RemoveContainer for \"1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0\"" Oct 2 20:11:47.048573 env[1142]: time="2023-10-02T20:11:47.048510040Z" level=info msg="RemoveContainer for \"1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0\"" Oct 2 20:11:47.048820 env[1142]: time="2023-10-02T20:11:47.048603601Z" level=error msg="RemoveContainer for \"1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0\" failed" error="failed to set removing state for container \"1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0\": container is already in removing state" Oct 2 20:11:47.050029 kubelet[2022]: E1002 20:11:47.048739 2022 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0\": container is already in removing state" containerID="1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0" Oct 2 20:11:47.050029 kubelet[2022]: E1002 20:11:47.048782 2022 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0": container is already in removing state; Skipping pod "cilium-xzbsk_kube-system(4dc0393a-d557-41db-a356-1fbc3f01ba76)" Oct 2 20:11:47.050029 kubelet[2022]: E1002 20:11:47.048850 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:47.050029 kubelet[2022]: E1002 20:11:47.049100 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-xzbsk_kube-system(4dc0393a-d557-41db-a356-1fbc3f01ba76)\"" pod="kube-system/cilium-xzbsk" podUID="4dc0393a-d557-41db-a356-1fbc3f01ba76" Oct 2 20:11:47.051781 env[1142]: time="2023-10-02T20:11:47.050571567Z" level=info msg="RemoveContainer for \"1b9cb123b4372dc37d58baeb110eb3bb8ce98de3bd5896d4b8e5a46ce039c3d0\" returns successfully" Oct 2 20:11:47.565504 kubelet[2022]: E1002 20:11:47.565470 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:49.727856 kubelet[2022]: W1002 20:11:49.727817 2022 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4dc0393a_d557_41db_a356_1fbc3f01ba76.slice/cri-containerd-ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf.scope WatchSource:0}: task ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf not found: not found Oct 2 20:11:50.657434 kubelet[2022]: E1002 20:11:50.657391 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:55.565956 kubelet[2022]: E1002 20:11:55.565918 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:55.658093 kubelet[2022]: E1002 20:11:55.658072 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:58.565725 kubelet[2022]: E1002 20:11:58.565693 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:58.566370 kubelet[2022]: E1002 20:11:58.566348 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-xzbsk_kube-system(4dc0393a-d557-41db-a356-1fbc3f01ba76)\"" pod="kube-system/cilium-xzbsk" podUID="4dc0393a-d557-41db-a356-1fbc3f01ba76" Oct 2 20:12:00.659138 kubelet[2022]: E1002 20:12:00.659111 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:05.660288 kubelet[2022]: E1002 20:12:05.660262 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:09.565248 kubelet[2022]: E1002 20:12:09.565131 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:12:09.567293 env[1142]: time="2023-10-02T20:12:09.567250330Z" level=info msg="CreateContainer within sandbox \"c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:12:09.574926 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3947916598.mount: Deactivated successfully. Oct 2 20:12:09.577642 env[1142]: time="2023-10-02T20:12:09.577593955Z" level=info msg="CreateContainer within sandbox \"c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"510371609b5e60fb4e0cd2ca84b5273d9bce9d5e8a8ec584c6102b27da0a0bf7\"" Oct 2 20:12:09.578141 env[1142]: time="2023-10-02T20:12:09.578105158Z" level=info msg="StartContainer for \"510371609b5e60fb4e0cd2ca84b5273d9bce9d5e8a8ec584c6102b27da0a0bf7\"" Oct 2 20:12:09.597044 systemd[1]: Started cri-containerd-510371609b5e60fb4e0cd2ca84b5273d9bce9d5e8a8ec584c6102b27da0a0bf7.scope. Oct 2 20:12:09.612209 systemd[1]: cri-containerd-510371609b5e60fb4e0cd2ca84b5273d9bce9d5e8a8ec584c6102b27da0a0bf7.scope: Deactivated successfully. Oct 2 20:12:09.619980 env[1142]: time="2023-10-02T20:12:09.619931418Z" level=info msg="shim disconnected" id=510371609b5e60fb4e0cd2ca84b5273d9bce9d5e8a8ec584c6102b27da0a0bf7 Oct 2 20:12:09.620169 env[1142]: time="2023-10-02T20:12:09.619983179Z" level=warning msg="cleaning up after shim disconnected" id=510371609b5e60fb4e0cd2ca84b5273d9bce9d5e8a8ec584c6102b27da0a0bf7 namespace=k8s.io Oct 2 20:12:09.620169 env[1142]: time="2023-10-02T20:12:09.619993339Z" level=info msg="cleaning up dead shim" Oct 2 20:12:09.628627 env[1142]: time="2023-10-02T20:12:09.628575872Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:12:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3272 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:12:09Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/510371609b5e60fb4e0cd2ca84b5273d9bce9d5e8a8ec584c6102b27da0a0bf7/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:12:09.628918 env[1142]: time="2023-10-02T20:12:09.628864274Z" level=error msg="copy shim log" error="read /proc/self/fd/30: file already closed" Oct 2 20:12:09.629096 env[1142]: time="2023-10-02T20:12:09.629051795Z" level=error msg="Failed to pipe stdout of container \"510371609b5e60fb4e0cd2ca84b5273d9bce9d5e8a8ec584c6102b27da0a0bf7\"" error="reading from a closed fifo" Oct 2 20:12:09.629242 env[1142]: time="2023-10-02T20:12:09.629217276Z" level=error msg="Failed to pipe stderr of container \"510371609b5e60fb4e0cd2ca84b5273d9bce9d5e8a8ec584c6102b27da0a0bf7\"" error="reading from a closed fifo" Oct 2 20:12:09.630521 env[1142]: time="2023-10-02T20:12:09.630479324Z" level=error msg="StartContainer for \"510371609b5e60fb4e0cd2ca84b5273d9bce9d5e8a8ec584c6102b27da0a0bf7\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:12:09.630863 kubelet[2022]: E1002 20:12:09.630828 2022 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="510371609b5e60fb4e0cd2ca84b5273d9bce9d5e8a8ec584c6102b27da0a0bf7" Oct 2 20:12:09.630962 kubelet[2022]: E1002 20:12:09.630954 2022 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:12:09.630962 kubelet[2022]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:12:09.630962 kubelet[2022]: rm /hostbin/cilium-mount Oct 2 20:12:09.630962 kubelet[2022]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qgv68,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-xzbsk_kube-system(4dc0393a-d557-41db-a356-1fbc3f01ba76): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:12:09.631109 kubelet[2022]: E1002 20:12:09.631012 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-xzbsk" podUID="4dc0393a-d557-41db-a356-1fbc3f01ba76" Oct 2 20:12:10.096819 kubelet[2022]: I1002 20:12:10.096748 2022 scope.go:117] "RemoveContainer" containerID="ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf" Oct 2 20:12:10.097173 kubelet[2022]: I1002 20:12:10.097145 2022 scope.go:117] "RemoveContainer" containerID="ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf" Oct 2 20:12:10.098708 env[1142]: time="2023-10-02T20:12:10.098673853Z" level=info msg="RemoveContainer for \"ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf\"" Oct 2 20:12:10.099430 env[1142]: time="2023-10-02T20:12:10.099401098Z" level=info msg="RemoveContainer for \"ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf\"" Oct 2 20:12:10.099820 env[1142]: time="2023-10-02T20:12:10.099784020Z" level=error msg="RemoveContainer for \"ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf\" failed" error="failed to set removing state for container \"ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf\": container is already in removing state" Oct 2 20:12:10.100838 kubelet[2022]: E1002 20:12:10.100815 2022 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf\": container is already in removing state" containerID="ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf" Oct 2 20:12:10.101171 kubelet[2022]: E1002 20:12:10.101005 2022 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf": container is already in removing state; Skipping pod "cilium-xzbsk_kube-system(4dc0393a-d557-41db-a356-1fbc3f01ba76)" Oct 2 20:12:10.101527 kubelet[2022]: E1002 20:12:10.101471 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:12:10.103797 env[1142]: time="2023-10-02T20:12:10.102369957Z" level=info msg="RemoveContainer for \"ea901131ee470fee39add8f97a955dfcecadf5a3cac93a5d39baec6750b714bf\" returns successfully" Oct 2 20:12:10.103880 kubelet[2022]: E1002 20:12:10.102836 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-xzbsk_kube-system(4dc0393a-d557-41db-a356-1fbc3f01ba76)\"" pod="kube-system/cilium-xzbsk" podUID="4dc0393a-d557-41db-a356-1fbc3f01ba76" Oct 2 20:12:10.573157 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-510371609b5e60fb4e0cd2ca84b5273d9bce9d5e8a8ec584c6102b27da0a0bf7-rootfs.mount: Deactivated successfully. Oct 2 20:12:10.661244 kubelet[2022]: E1002 20:12:10.661214 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:12.726794 kubelet[2022]: W1002 20:12:12.726252 2022 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4dc0393a_d557_41db_a356_1fbc3f01ba76.slice/cri-containerd-510371609b5e60fb4e0cd2ca84b5273d9bce9d5e8a8ec584c6102b27da0a0bf7.scope WatchSource:0}: task 510371609b5e60fb4e0cd2ca84b5273d9bce9d5e8a8ec584c6102b27da0a0bf7 not found: not found Oct 2 20:12:15.662416 kubelet[2022]: E1002 20:12:15.662388 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:15.980402 update_engine[1131]: I1002 20:12:15.980288 1131 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 20:12:15.980402 update_engine[1131]: I1002 20:12:15.980326 1131 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 20:12:15.981118 update_engine[1131]: I1002 20:12:15.981081 1131 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 20:12:15.981419 update_engine[1131]: I1002 20:12:15.981393 1131 omaha_request_params.cc:62] Current group set to lts Oct 2 20:12:15.981544 update_engine[1131]: I1002 20:12:15.981530 1131 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 20:12:15.981544 update_engine[1131]: I1002 20:12:15.981539 1131 update_attempter.cc:638] Scheduling an action processor start. Oct 2 20:12:15.981609 update_engine[1131]: I1002 20:12:15.981555 1131 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 20:12:15.981609 update_engine[1131]: I1002 20:12:15.981580 1131 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 20:12:15.981911 update_engine[1131]: I1002 20:12:15.981897 1131 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 20:12:15.981911 update_engine[1131]: I1002 20:12:15.981907 1131 omaha_request_action.cc:269] Request: Oct 2 20:12:15.981911 update_engine[1131]: Oct 2 20:12:15.981911 update_engine[1131]: Oct 2 20:12:15.981911 update_engine[1131]: Oct 2 20:12:15.981911 update_engine[1131]: Oct 2 20:12:15.981911 update_engine[1131]: Oct 2 20:12:15.981911 update_engine[1131]: Oct 2 20:12:15.981911 update_engine[1131]: Oct 2 20:12:15.981911 update_engine[1131]: Oct 2 20:12:15.981911 update_engine[1131]: I1002 20:12:15.981912 1131 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 20:12:15.982994 update_engine[1131]: I1002 20:12:15.982896 1131 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 20:12:15.983067 update_engine[1131]: I1002 20:12:15.983052 1131 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 20:12:15.983510 locksmithd[1170]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 20:12:17.144493 update_engine[1131]: I1002 20:12:17.144433 1131 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 20:12:17.144890 update_engine[1131]: I1002 20:12:17.144685 1131 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 20:12:17.144890 update_engine[1131]: I1002 20:12:17.144882 1131 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 20:12:17.428352 update_engine[1131]: I1002 20:12:17.428243 1131 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 20:12:17.429980 update_engine[1131]: I1002 20:12:17.429949 1131 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 20:12:17.429980 update_engine[1131]: I1002 20:12:17.429972 1131 omaha_request_action.cc:619] Omaha request response: Oct 2 20:12:17.429980 update_engine[1131]: Oct 2 20:12:17.434162 update_engine[1131]: I1002 20:12:17.434131 1131 omaha_request_action.cc:409] No update. Oct 2 20:12:17.434162 update_engine[1131]: I1002 20:12:17.434157 1131 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 20:12:17.434162 update_engine[1131]: I1002 20:12:17.434162 1131 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 20:12:17.434162 update_engine[1131]: I1002 20:12:17.434165 1131 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 20:12:17.434162 update_engine[1131]: I1002 20:12:17.434168 1131 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 20:12:17.434162 update_engine[1131]: I1002 20:12:17.434171 1131 update_attempter.cc:302] Processing Done. Oct 2 20:12:17.434435 update_engine[1131]: I1002 20:12:17.434185 1131 update_attempter.cc:338] No update. Oct 2 20:12:17.434435 update_engine[1131]: I1002 20:12:17.434193 1131 update_check_scheduler.cc:74] Next update check in 40m40s Oct 2 20:12:17.434545 locksmithd[1170]: LastCheckedTime=1696277537 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 20:12:20.663605 kubelet[2022]: E1002 20:12:20.663568 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:22.565116 kubelet[2022]: E1002 20:12:22.565061 2022 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:12:22.565431 kubelet[2022]: E1002 20:12:22.565325 2022 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-xzbsk_kube-system(4dc0393a-d557-41db-a356-1fbc3f01ba76)\"" pod="kube-system/cilium-xzbsk" podUID="4dc0393a-d557-41db-a356-1fbc3f01ba76" Oct 2 20:12:25.664349 kubelet[2022]: E1002 20:12:25.664309 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:30.665033 kubelet[2022]: E1002 20:12:30.664998 2022 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:31.104771 env[1142]: time="2023-10-02T20:12:31.101566189Z" level=info msg="StopPodSandbox for \"c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d\"" Oct 2 20:12:31.105120 env[1142]: time="2023-10-02T20:12:31.104817536Z" level=info msg="Container to stop \"510371609b5e60fb4e0cd2ca84b5273d9bce9d5e8a8ec584c6102b27da0a0bf7\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:12:31.106179 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d-shm.mount: Deactivated successfully. Oct 2 20:12:31.113421 systemd[1]: cri-containerd-c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d.scope: Deactivated successfully. Oct 2 20:12:31.112000 audit: BPF prog-id=128 op=UNLOAD Oct 2 20:12:31.114352 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:12:31.114503 kernel: audit: type=1334 audit(1696277551.112:1354): prog-id=128 op=UNLOAD Oct 2 20:12:31.117000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:12:31.118798 kernel: audit: type=1334 audit(1696277551.117:1355): prog-id=131 op=UNLOAD Oct 2 20:12:31.141640 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d-rootfs.mount: Deactivated successfully. Oct 2 20:12:31.149855 env[1142]: time="2023-10-02T20:12:31.149782477Z" level=info msg="shim disconnected" id=c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d Oct 2 20:12:31.149855 env[1142]: time="2023-10-02T20:12:31.149828918Z" level=warning msg="cleaning up after shim disconnected" id=c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d namespace=k8s.io Oct 2 20:12:31.149855 env[1142]: time="2023-10-02T20:12:31.149839798Z" level=info msg="cleaning up dead shim" Oct 2 20:12:31.158645 sshd[3080]: pam_unix(sshd:session): session closed for user core Oct 2 20:12:31.158000 audit[3080]: USER_END pid=3080 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:12:31.161308 systemd[1]: sshd@29-10.0.0.8:22-10.0.0.1:43380.service: Deactivated successfully. Oct 2 20:12:31.162005 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 20:12:31.162184 systemd[1]: session-30.scope: Consumed 1.868s CPU time. Oct 2 20:12:31.159000 audit[3080]: CRED_DISP pid=3080 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:12:31.164216 kernel: audit: type=1106 audit(1696277551.158:1356): pid=3080 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:12:31.164306 kernel: audit: type=1104 audit(1696277551.159:1357): pid=3080 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:12:31.164337 kernel: audit: type=1131 audit(1696277551.160:1358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.8:22-10.0.0.1:43380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:12:31.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.8:22-10.0.0.1:43380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:12:31.166828 systemd-logind[1129]: Session 30 logged out. Waiting for processes to exit. Oct 2 20:12:31.167557 systemd-logind[1129]: Removed session 30. Oct 2 20:12:31.169403 env[1142]: time="2023-10-02T20:12:31.169356883Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:12:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3304 runtime=io.containerd.runc.v2\n" Oct 2 20:12:31.169701 env[1142]: time="2023-10-02T20:12:31.169676966Z" level=info msg="TearDown network for sandbox \"c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d\" successfully" Oct 2 20:12:31.169742 env[1142]: time="2023-10-02T20:12:31.169703246Z" level=info msg="StopPodSandbox for \"c678fdee9471de114e8d9fd67da802f48401eb80c584c02752a33394be11be8d\" returns successfully" Oct 2 20:12:31.268647 kubelet[2022]: I1002 20:12:31.268594 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-qgv68\" (UniqueName: \"kubernetes.io/projected/4dc0393a-d557-41db-a356-1fbc3f01ba76-kube-api-access-qgv68\") pod \"4dc0393a-d557-41db-a356-1fbc3f01ba76\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " Oct 2 20:12:31.268647 kubelet[2022]: I1002 20:12:31.268645 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-host-proc-sys-net\") pod \"4dc0393a-d557-41db-a356-1fbc3f01ba76\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " Oct 2 20:12:31.268896 kubelet[2022]: I1002 20:12:31.268665 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-lib-modules\") pod \"4dc0393a-d557-41db-a356-1fbc3f01ba76\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " Oct 2 20:12:31.268896 kubelet[2022]: I1002 20:12:31.268687 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4dc0393a-d557-41db-a356-1fbc3f01ba76-cilium-config-path\") pod \"4dc0393a-d557-41db-a356-1fbc3f01ba76\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " Oct 2 20:12:31.268896 kubelet[2022]: I1002 20:12:31.268705 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-etc-cni-netd\") pod \"4dc0393a-d557-41db-a356-1fbc3f01ba76\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " Oct 2 20:12:31.268896 kubelet[2022]: I1002 20:12:31.268721 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-cni-path\") pod \"4dc0393a-d557-41db-a356-1fbc3f01ba76\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " Oct 2 20:12:31.268896 kubelet[2022]: I1002 20:12:31.268739 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/4dc0393a-d557-41db-a356-1fbc3f01ba76-hubble-tls\") pod \"4dc0393a-d557-41db-a356-1fbc3f01ba76\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " Oct 2 20:12:31.268896 kubelet[2022]: I1002 20:12:31.268755 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-cilium-run\") pod \"4dc0393a-d557-41db-a356-1fbc3f01ba76\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " Oct 2 20:12:31.268896 kubelet[2022]: I1002 20:12:31.268790 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-host-proc-sys-kernel\") pod \"4dc0393a-d557-41db-a356-1fbc3f01ba76\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " Oct 2 20:12:31.268896 kubelet[2022]: I1002 20:12:31.268811 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/4dc0393a-d557-41db-a356-1fbc3f01ba76-cilium-ipsec-secrets\") pod \"4dc0393a-d557-41db-a356-1fbc3f01ba76\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " Oct 2 20:12:31.268896 kubelet[2022]: I1002 20:12:31.268829 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-cilium-cgroup\") pod \"4dc0393a-d557-41db-a356-1fbc3f01ba76\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " Oct 2 20:12:31.268896 kubelet[2022]: I1002 20:12:31.268850 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/4dc0393a-d557-41db-a356-1fbc3f01ba76-clustermesh-secrets\") pod \"4dc0393a-d557-41db-a356-1fbc3f01ba76\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " Oct 2 20:12:31.268896 kubelet[2022]: I1002 20:12:31.268868 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-hostproc\") pod \"4dc0393a-d557-41db-a356-1fbc3f01ba76\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " Oct 2 20:12:31.268896 kubelet[2022]: I1002 20:12:31.268884 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-bpf-maps\") pod \"4dc0393a-d557-41db-a356-1fbc3f01ba76\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " Oct 2 20:12:31.268896 kubelet[2022]: I1002 20:12:31.268900 2022 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-xtables-lock\") pod \"4dc0393a-d557-41db-a356-1fbc3f01ba76\" (UID: \"4dc0393a-d557-41db-a356-1fbc3f01ba76\") " Oct 2 20:12:31.269225 kubelet[2022]: I1002 20:12:31.268944 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "4dc0393a-d557-41db-a356-1fbc3f01ba76" (UID: "4dc0393a-d557-41db-a356-1fbc3f01ba76"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:31.269225 kubelet[2022]: I1002 20:12:31.268970 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "4dc0393a-d557-41db-a356-1fbc3f01ba76" (UID: "4dc0393a-d557-41db-a356-1fbc3f01ba76"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:31.269225 kubelet[2022]: I1002 20:12:31.268987 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "4dc0393a-d557-41db-a356-1fbc3f01ba76" (UID: "4dc0393a-d557-41db-a356-1fbc3f01ba76"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:31.269225 kubelet[2022]: I1002 20:12:31.269020 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "4dc0393a-d557-41db-a356-1fbc3f01ba76" (UID: "4dc0393a-d557-41db-a356-1fbc3f01ba76"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:31.271109 kubelet[2022]: I1002 20:12:31.269528 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-hostproc" (OuterVolumeSpecName: "hostproc") pod "4dc0393a-d557-41db-a356-1fbc3f01ba76" (UID: "4dc0393a-d557-41db-a356-1fbc3f01ba76"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:31.271109 kubelet[2022]: I1002 20:12:31.269561 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "4dc0393a-d557-41db-a356-1fbc3f01ba76" (UID: "4dc0393a-d557-41db-a356-1fbc3f01ba76"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:31.271109 kubelet[2022]: I1002 20:12:31.269582 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "4dc0393a-d557-41db-a356-1fbc3f01ba76" (UID: "4dc0393a-d557-41db-a356-1fbc3f01ba76"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:31.271109 kubelet[2022]: I1002 20:12:31.269598 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-cni-path" (OuterVolumeSpecName: "cni-path") pod "4dc0393a-d557-41db-a356-1fbc3f01ba76" (UID: "4dc0393a-d557-41db-a356-1fbc3f01ba76"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:31.271109 kubelet[2022]: I1002 20:12:31.269614 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "4dc0393a-d557-41db-a356-1fbc3f01ba76" (UID: "4dc0393a-d557-41db-a356-1fbc3f01ba76"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:31.271109 kubelet[2022]: I1002 20:12:31.269849 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "4dc0393a-d557-41db-a356-1fbc3f01ba76" (UID: "4dc0393a-d557-41db-a356-1fbc3f01ba76"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:31.271109 kubelet[2022]: I1002 20:12:31.270969 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/4dc0393a-d557-41db-a356-1fbc3f01ba76-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "4dc0393a-d557-41db-a356-1fbc3f01ba76" (UID: "4dc0393a-d557-41db-a356-1fbc3f01ba76"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:12:31.272338 kubelet[2022]: I1002 20:12:31.272294 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/4dc0393a-d557-41db-a356-1fbc3f01ba76-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "4dc0393a-d557-41db-a356-1fbc3f01ba76" (UID: "4dc0393a-d557-41db-a356-1fbc3f01ba76"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:12:31.272423 kubelet[2022]: I1002 20:12:31.272385 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/4dc0393a-d557-41db-a356-1fbc3f01ba76-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "4dc0393a-d557-41db-a356-1fbc3f01ba76" (UID: "4dc0393a-d557-41db-a356-1fbc3f01ba76"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:12:31.274608 kubelet[2022]: I1002 20:12:31.274572 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/4dc0393a-d557-41db-a356-1fbc3f01ba76-kube-api-access-qgv68" (OuterVolumeSpecName: "kube-api-access-qgv68") pod "4dc0393a-d557-41db-a356-1fbc3f01ba76" (UID: "4dc0393a-d557-41db-a356-1fbc3f01ba76"). InnerVolumeSpecName "kube-api-access-qgv68". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:12:31.274733 kubelet[2022]: I1002 20:12:31.274710 2022 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/4dc0393a-d557-41db-a356-1fbc3f01ba76-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "4dc0393a-d557-41db-a356-1fbc3f01ba76" (UID: "4dc0393a-d557-41db-a356-1fbc3f01ba76"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:12:31.274861 systemd[1]: var-lib-kubelet-pods-4dc0393a\x2dd557\x2d41db\x2da356\x2d1fbc3f01ba76-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:12:31.274956 systemd[1]: var-lib-kubelet-pods-4dc0393a\x2dd557\x2d41db\x2da356\x2d1fbc3f01ba76-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dqgv68.mount: Deactivated successfully. Oct 2 20:12:31.275009 systemd[1]: var-lib-kubelet-pods-4dc0393a\x2dd557\x2d41db\x2da356\x2d1fbc3f01ba76-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:12:31.275060 systemd[1]: var-lib-kubelet-pods-4dc0393a\x2dd557\x2d41db\x2da356\x2d1fbc3f01ba76-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:12:31.370799 kubelet[2022]: I1002 20:12:31.369734 2022 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:31.370799 kubelet[2022]: I1002 20:12:31.370596 2022 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:31.370799 kubelet[2022]: I1002 20:12:31.370623 2022 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:31.370799 kubelet[2022]: I1002 20:12:31.370634 2022 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4dc0393a-d557-41db-a356-1fbc3f01ba76-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:31.370799 kubelet[2022]: I1002 20:12:31.370643 2022 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/4dc0393a-d557-41db-a356-1fbc3f01ba76-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:31.370799 kubelet[2022]: I1002 20:12:31.370653 2022 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:31.370799 kubelet[2022]: I1002 20:12:31.370662 2022 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:31.370799 kubelet[2022]: I1002 20:12:31.370674 2022 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/4dc0393a-d557-41db-a356-1fbc3f01ba76-cilium-ipsec-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:31.370799 kubelet[2022]: I1002 20:12:31.370683 2022 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:31.370799 kubelet[2022]: I1002 20:12:31.370693 2022 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/4dc0393a-d557-41db-a356-1fbc3f01ba76-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:31.370799 kubelet[2022]: I1002 20:12:31.370701 2022 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:31.370799 kubelet[2022]: I1002 20:12:31.370710 2022 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:31.370799 kubelet[2022]: I1002 20:12:31.370718 2022 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:31.370799 kubelet[2022]: I1002 20:12:31.370727 2022 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/4dc0393a-d557-41db-a356-1fbc3f01ba76-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:31.370799 kubelet[2022]: I1002 20:12:31.370738 2022 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-qgv68\" (UniqueName: \"kubernetes.io/projected/4dc0393a-d557-41db-a356-1fbc3f01ba76-kube-api-access-qgv68\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:32.134869 kubelet[2022]: I1002 20:12:32.134844 2022 scope.go:117] "RemoveContainer" containerID="510371609b5e60fb4e0cd2ca84b5273d9bce9d5e8a8ec584c6102b27da0a0bf7" Oct 2 20:12:32.136254 env[1142]: time="2023-10-02T20:12:32.136213247Z" level=info msg="RemoveContainer for \"510371609b5e60fb4e0cd2ca84b5273d9bce9d5e8a8ec584c6102b27da0a0bf7\"" Oct 2 20:12:32.139482 systemd[1]: Removed slice kubepods-burstable-pod4dc0393a_d557_41db_a356_1fbc3f01ba76.slice. Oct 2 20:12:32.140027 env[1142]: time="2023-10-02T20:12:32.139991880Z" level=info msg="RemoveContainer for \"510371609b5e60fb4e0cd2ca84b5273d9bce9d5e8a8ec584c6102b27da0a0bf7\" returns successfully" Oct 2 20:12:32.567359 kubelet[2022]: I1002 20:12:32.567274 2022 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="4dc0393a-d557-41db-a356-1fbc3f01ba76" path="/var/lib/kubelet/pods/4dc0393a-d557-41db-a356-1fbc3f01ba76/volumes"