Feb 12 21:55:13.194031 kernel: Linux version 5.15.148-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Feb 12 18:05:31 -00 2024 Feb 12 21:55:13.194127 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=f2beb0668e3dab90bbcf0ace3803b7ee02142bfb86913ef12ef6d2ee81a411a4 Feb 12 21:55:13.194144 kernel: BIOS-provided physical RAM map: Feb 12 21:55:13.194155 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Feb 12 21:55:13.194166 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Feb 12 21:55:13.194176 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Feb 12 21:55:13.194193 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007d9e9fff] usable Feb 12 21:55:13.194205 kernel: BIOS-e820: [mem 0x000000007d9ea000-0x000000007fffffff] reserved Feb 12 21:55:13.194217 kernel: BIOS-e820: [mem 0x00000000e0000000-0x00000000e03fffff] reserved Feb 12 21:55:13.194230 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Feb 12 21:55:13.194242 kernel: NX (Execute Disable) protection: active Feb 12 21:55:13.194255 kernel: SMBIOS 2.7 present. Feb 12 21:55:13.194268 kernel: DMI: Amazon EC2 t3.small/, BIOS 1.0 10/16/2017 Feb 12 21:55:13.194279 kernel: Hypervisor detected: KVM Feb 12 21:55:13.194297 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Feb 12 21:55:13.194308 kernel: kvm-clock: cpu 0, msr 57faa001, primary cpu clock Feb 12 21:55:13.194321 kernel: kvm-clock: using sched offset of 7293102110 cycles Feb 12 21:55:13.194335 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Feb 12 21:55:13.194406 kernel: tsc: Detected 2499.998 MHz processor Feb 12 21:55:13.194421 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Feb 12 21:55:13.194439 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Feb 12 21:55:13.194489 kernel: last_pfn = 0x7d9ea max_arch_pfn = 0x400000000 Feb 12 21:55:13.194503 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Feb 12 21:55:13.194516 kernel: Using GB pages for direct mapping Feb 12 21:55:13.194596 kernel: ACPI: Early table checksum verification disabled Feb 12 21:55:13.194685 kernel: ACPI: RSDP 0x00000000000F8F40 000014 (v00 AMAZON) Feb 12 21:55:13.194697 kernel: ACPI: RSDT 0x000000007D9EE350 000044 (v01 AMAZON AMZNRSDT 00000001 AMZN 00000001) Feb 12 21:55:13.194708 kernel: ACPI: FACP 0x000000007D9EFF80 000074 (v01 AMAZON AMZNFACP 00000001 AMZN 00000001) Feb 12 21:55:13.194720 kernel: ACPI: DSDT 0x000000007D9EE3A0 0010E9 (v01 AMAZON AMZNDSDT 00000001 AMZN 00000001) Feb 12 21:55:13.194737 kernel: ACPI: FACS 0x000000007D9EFF40 000040 Feb 12 21:55:13.194750 kernel: ACPI: SSDT 0x000000007D9EF6C0 00087A (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Feb 12 21:55:13.194763 kernel: ACPI: APIC 0x000000007D9EF5D0 000076 (v01 AMAZON AMZNAPIC 00000001 AMZN 00000001) Feb 12 21:55:13.194777 kernel: ACPI: SRAT 0x000000007D9EF530 0000A0 (v01 AMAZON AMZNSRAT 00000001 AMZN 00000001) Feb 12 21:55:13.194790 kernel: ACPI: SLIT 0x000000007D9EF4C0 00006C (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Feb 12 21:55:13.194803 kernel: ACPI: WAET 0x000000007D9EF490 000028 (v01 AMAZON AMZNWAET 00000001 AMZN 00000001) Feb 12 21:55:13.194816 kernel: ACPI: HPET 0x00000000000C9000 000038 (v01 AMAZON AMZNHPET 00000001 AMZN 00000001) Feb 12 21:55:13.194829 kernel: ACPI: SSDT 0x00000000000C9040 00007B (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Feb 12 21:55:13.194845 kernel: ACPI: Reserving FACP table memory at [mem 0x7d9eff80-0x7d9efff3] Feb 12 21:55:13.194907 kernel: ACPI: Reserving DSDT table memory at [mem 0x7d9ee3a0-0x7d9ef488] Feb 12 21:55:13.194923 kernel: ACPI: Reserving FACS table memory at [mem 0x7d9eff40-0x7d9eff7f] Feb 12 21:55:13.194940 kernel: ACPI: Reserving SSDT table memory at [mem 0x7d9ef6c0-0x7d9eff39] Feb 12 21:55:13.194954 kernel: ACPI: Reserving APIC table memory at [mem 0x7d9ef5d0-0x7d9ef645] Feb 12 21:55:13.195007 kernel: ACPI: Reserving SRAT table memory at [mem 0x7d9ef530-0x7d9ef5cf] Feb 12 21:55:13.195024 kernel: ACPI: Reserving SLIT table memory at [mem 0x7d9ef4c0-0x7d9ef52b] Feb 12 21:55:13.195041 kernel: ACPI: Reserving WAET table memory at [mem 0x7d9ef490-0x7d9ef4b7] Feb 12 21:55:13.195116 kernel: ACPI: Reserving HPET table memory at [mem 0xc9000-0xc9037] Feb 12 21:55:13.195132 kernel: ACPI: Reserving SSDT table memory at [mem 0xc9040-0xc90ba] Feb 12 21:55:13.195147 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Feb 12 21:55:13.195161 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Feb 12 21:55:13.195176 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] Feb 12 21:55:13.195190 kernel: NUMA: Initialized distance table, cnt=1 Feb 12 21:55:13.195203 kernel: NODE_DATA(0) allocated [mem 0x7d9e3000-0x7d9e8fff] Feb 12 21:55:13.195328 kernel: Zone ranges: Feb 12 21:55:13.195342 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Feb 12 21:55:13.195356 kernel: DMA32 [mem 0x0000000001000000-0x000000007d9e9fff] Feb 12 21:55:13.195370 kernel: Normal empty Feb 12 21:55:13.195383 kernel: Movable zone start for each node Feb 12 21:55:13.195396 kernel: Early memory node ranges Feb 12 21:55:13.195409 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Feb 12 21:55:13.195423 kernel: node 0: [mem 0x0000000000100000-0x000000007d9e9fff] Feb 12 21:55:13.195437 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007d9e9fff] Feb 12 21:55:13.195455 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Feb 12 21:55:13.195469 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Feb 12 21:55:13.195483 kernel: On node 0, zone DMA32: 9750 pages in unavailable ranges Feb 12 21:55:13.195497 kernel: ACPI: PM-Timer IO Port: 0xb008 Feb 12 21:55:13.195511 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Feb 12 21:55:13.195525 kernel: IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 Feb 12 21:55:13.195539 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Feb 12 21:55:13.195628 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Feb 12 21:55:13.195643 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Feb 12 21:55:13.195661 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Feb 12 21:55:13.195721 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Feb 12 21:55:13.195735 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Feb 12 21:55:13.195750 kernel: TSC deadline timer available Feb 12 21:55:13.195764 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Feb 12 21:55:13.195778 kernel: [mem 0x80000000-0xdfffffff] available for PCI devices Feb 12 21:55:13.195792 kernel: Booting paravirtualized kernel on KVM Feb 12 21:55:13.195806 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Feb 12 21:55:13.195821 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Feb 12 21:55:13.195838 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Feb 12 21:55:13.195853 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Feb 12 21:55:13.195866 kernel: pcpu-alloc: [0] 0 1 Feb 12 21:55:13.195880 kernel: kvm-guest: stealtime: cpu 0, msr 7b61c0c0 Feb 12 21:55:13.195894 kernel: kvm-guest: PV spinlocks enabled Feb 12 21:55:13.195908 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Feb 12 21:55:13.195922 kernel: Built 1 zonelists, mobility grouping on. Total pages: 506242 Feb 12 21:55:13.195936 kernel: Policy zone: DMA32 Feb 12 21:55:13.195953 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=f2beb0668e3dab90bbcf0ace3803b7ee02142bfb86913ef12ef6d2ee81a411a4 Feb 12 21:55:13.195970 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Feb 12 21:55:13.195984 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Feb 12 21:55:13.196031 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Feb 12 21:55:13.196112 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Feb 12 21:55:13.196127 kernel: Memory: 1936476K/2057760K available (12294K kernel code, 2275K rwdata, 13700K rodata, 45496K init, 4048K bss, 121024K reserved, 0K cma-reserved) Feb 12 21:55:13.196141 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Feb 12 21:55:13.196155 kernel: Kernel/User page tables isolation: enabled Feb 12 21:55:13.196169 kernel: ftrace: allocating 34475 entries in 135 pages Feb 12 21:55:13.196186 kernel: ftrace: allocated 135 pages with 4 groups Feb 12 21:55:13.196198 kernel: rcu: Hierarchical RCU implementation. Feb 12 21:55:13.196212 kernel: rcu: RCU event tracing is enabled. Feb 12 21:55:13.196224 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Feb 12 21:55:13.196239 kernel: Rude variant of Tasks RCU enabled. Feb 12 21:55:13.196252 kernel: Tracing variant of Tasks RCU enabled. Feb 12 21:55:13.196266 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Feb 12 21:55:13.196280 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Feb 12 21:55:13.196294 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Feb 12 21:55:13.196387 kernel: random: crng init done Feb 12 21:55:13.196403 kernel: Console: colour VGA+ 80x25 Feb 12 21:55:13.196418 kernel: printk: console [ttyS0] enabled Feb 12 21:55:13.196432 kernel: ACPI: Core revision 20210730 Feb 12 21:55:13.196447 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns Feb 12 21:55:13.196462 kernel: APIC: Switch to symmetric I/O mode setup Feb 12 21:55:13.196476 kernel: x2apic enabled Feb 12 21:55:13.196491 kernel: Switched APIC routing to physical x2apic. Feb 12 21:55:13.196505 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x240937b9988, max_idle_ns: 440795218083 ns Feb 12 21:55:13.196522 kernel: Calibrating delay loop (skipped) preset value.. 4999.99 BogoMIPS (lpj=2499998) Feb 12 21:55:13.196536 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Feb 12 21:55:13.196550 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Feb 12 21:55:13.196565 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Feb 12 21:55:13.196589 kernel: Spectre V2 : Mitigation: Retpolines Feb 12 21:55:13.196606 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Feb 12 21:55:13.196621 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Feb 12 21:55:13.196636 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Feb 12 21:55:13.196651 kernel: RETBleed: Vulnerable Feb 12 21:55:13.196676 kernel: Speculative Store Bypass: Vulnerable Feb 12 21:55:13.196690 kernel: MDS: Vulnerable: Clear CPU buffers attempted, no microcode Feb 12 21:55:13.196705 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Feb 12 21:55:13.196720 kernel: GDS: Unknown: Dependent on hypervisor status Feb 12 21:55:13.196734 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Feb 12 21:55:13.196784 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Feb 12 21:55:13.196799 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Feb 12 21:55:13.196814 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Feb 12 21:55:13.196829 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Feb 12 21:55:13.196844 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Feb 12 21:55:13.196861 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Feb 12 21:55:13.196876 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Feb 12 21:55:13.196891 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Feb 12 21:55:13.196906 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Feb 12 21:55:13.196920 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Feb 12 21:55:13.196935 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Feb 12 21:55:13.196950 kernel: x86/fpu: xstate_offset[5]: 960, xstate_sizes[5]: 64 Feb 12 21:55:13.196964 kernel: x86/fpu: xstate_offset[6]: 1024, xstate_sizes[6]: 512 Feb 12 21:55:13.196979 kernel: x86/fpu: xstate_offset[7]: 1536, xstate_sizes[7]: 1024 Feb 12 21:55:13.197081 kernel: x86/fpu: xstate_offset[9]: 2560, xstate_sizes[9]: 8 Feb 12 21:55:13.197100 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2568 bytes, using 'compacted' format. Feb 12 21:55:13.197155 kernel: Freeing SMP alternatives memory: 32K Feb 12 21:55:13.197353 kernel: pid_max: default: 32768 minimum: 301 Feb 12 21:55:13.197370 kernel: LSM: Security Framework initializing Feb 12 21:55:13.197385 kernel: SELinux: Initializing. Feb 12 21:55:13.197400 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Feb 12 21:55:13.197536 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Feb 12 21:55:13.197551 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz (family: 0x6, model: 0x55, stepping: 0x7) Feb 12 21:55:13.197565 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Feb 12 21:55:13.197580 kernel: signal: max sigframe size: 3632 Feb 12 21:55:13.197595 kernel: rcu: Hierarchical SRCU implementation. Feb 12 21:55:13.197610 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Feb 12 21:55:13.197628 kernel: smp: Bringing up secondary CPUs ... Feb 12 21:55:13.197644 kernel: x86: Booting SMP configuration: Feb 12 21:55:13.197659 kernel: .... node #0, CPUs: #1 Feb 12 21:55:13.197691 kernel: kvm-clock: cpu 1, msr 57faa041, secondary cpu clock Feb 12 21:55:13.197703 kernel: kvm-guest: stealtime: cpu 1, msr 7b71c0c0 Feb 12 21:55:13.197716 kernel: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. Feb 12 21:55:13.197729 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Feb 12 21:55:13.197741 kernel: smp: Brought up 1 node, 2 CPUs Feb 12 21:55:13.197755 kernel: smpboot: Max logical packages: 1 Feb 12 21:55:13.197773 kernel: smpboot: Total of 2 processors activated (9999.99 BogoMIPS) Feb 12 21:55:13.197786 kernel: devtmpfs: initialized Feb 12 21:55:13.197798 kernel: x86/mm: Memory block size: 128MB Feb 12 21:55:13.197810 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Feb 12 21:55:13.197858 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Feb 12 21:55:13.197871 kernel: pinctrl core: initialized pinctrl subsystem Feb 12 21:55:13.197883 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Feb 12 21:55:13.197896 kernel: audit: initializing netlink subsys (disabled) Feb 12 21:55:13.197910 kernel: audit: type=2000 audit(1707774911.599:1): state=initialized audit_enabled=0 res=1 Feb 12 21:55:13.197927 kernel: thermal_sys: Registered thermal governor 'step_wise' Feb 12 21:55:13.197941 kernel: thermal_sys: Registered thermal governor 'user_space' Feb 12 21:55:13.197955 kernel: cpuidle: using governor menu Feb 12 21:55:13.198128 kernel: ACPI: bus type PCI registered Feb 12 21:55:13.198148 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Feb 12 21:55:13.198161 kernel: dca service started, version 1.12.1 Feb 12 21:55:13.198214 kernel: PCI: Using configuration type 1 for base access Feb 12 21:55:13.198232 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Feb 12 21:55:13.198247 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Feb 12 21:55:13.198265 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Feb 12 21:55:13.198278 kernel: ACPI: Added _OSI(Module Device) Feb 12 21:55:13.198290 kernel: ACPI: Added _OSI(Processor Device) Feb 12 21:55:13.198303 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Feb 12 21:55:13.198316 kernel: ACPI: Added _OSI(Processor Aggregator Device) Feb 12 21:55:13.198329 kernel: ACPI: Added _OSI(Linux-Dell-Video) Feb 12 21:55:13.198342 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Feb 12 21:55:13.198355 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Feb 12 21:55:13.198368 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded Feb 12 21:55:13.198386 kernel: ACPI: Interpreter enabled Feb 12 21:55:13.198398 kernel: ACPI: PM: (supports S0 S5) Feb 12 21:55:13.198411 kernel: ACPI: Using IOAPIC for interrupt routing Feb 12 21:55:13.198426 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Feb 12 21:55:13.198485 kernel: ACPI: Enabled 16 GPEs in block 00 to 0F Feb 12 21:55:13.198503 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Feb 12 21:55:13.198798 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Feb 12 21:55:13.199010 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Feb 12 21:55:13.199037 kernel: acpiphp: Slot [3] registered Feb 12 21:55:13.199053 kernel: acpiphp: Slot [4] registered Feb 12 21:55:13.199112 kernel: acpiphp: Slot [5] registered Feb 12 21:55:13.199129 kernel: acpiphp: Slot [6] registered Feb 12 21:55:13.199143 kernel: acpiphp: Slot [7] registered Feb 12 21:55:13.199158 kernel: acpiphp: Slot [8] registered Feb 12 21:55:13.199316 kernel: acpiphp: Slot [9] registered Feb 12 21:55:13.199333 kernel: acpiphp: Slot [10] registered Feb 12 21:55:13.199347 kernel: acpiphp: Slot [11] registered Feb 12 21:55:13.199366 kernel: acpiphp: Slot [12] registered Feb 12 21:55:13.199478 kernel: acpiphp: Slot [13] registered Feb 12 21:55:13.199496 kernel: acpiphp: Slot [14] registered Feb 12 21:55:13.199547 kernel: acpiphp: Slot [15] registered Feb 12 21:55:13.199562 kernel: acpiphp: Slot [16] registered Feb 12 21:55:13.199577 kernel: acpiphp: Slot [17] registered Feb 12 21:55:13.199623 kernel: acpiphp: Slot [18] registered Feb 12 21:55:13.199641 kernel: acpiphp: Slot [19] registered Feb 12 21:55:13.199656 kernel: acpiphp: Slot [20] registered Feb 12 21:55:13.199718 kernel: acpiphp: Slot [21] registered Feb 12 21:55:13.199735 kernel: acpiphp: Slot [22] registered Feb 12 21:55:13.199750 kernel: acpiphp: Slot [23] registered Feb 12 21:55:13.199885 kernel: acpiphp: Slot [24] registered Feb 12 21:55:13.199901 kernel: acpiphp: Slot [25] registered Feb 12 21:55:13.199915 kernel: acpiphp: Slot [26] registered Feb 12 21:55:13.199928 kernel: acpiphp: Slot [27] registered Feb 12 21:55:13.199941 kernel: acpiphp: Slot [28] registered Feb 12 21:55:13.199986 kernel: acpiphp: Slot [29] registered Feb 12 21:55:13.200001 kernel: acpiphp: Slot [30] registered Feb 12 21:55:13.200019 kernel: acpiphp: Slot [31] registered Feb 12 21:55:13.200034 kernel: PCI host bridge to bus 0000:00 Feb 12 21:55:13.200233 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Feb 12 21:55:13.200402 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Feb 12 21:55:13.200524 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Feb 12 21:55:13.200640 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Feb 12 21:55:13.200766 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Feb 12 21:55:13.200912 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Feb 12 21:55:13.201130 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Feb 12 21:55:13.201285 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x000000 Feb 12 21:55:13.201456 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Feb 12 21:55:13.201608 kernel: pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB Feb 12 21:55:13.201754 kernel: pci 0000:00:01.3: PIIX4 devres E PIO at fff0-ffff Feb 12 21:55:13.201873 kernel: pci 0000:00:01.3: PIIX4 devres F MMIO at ffc00000-ffffffff Feb 12 21:55:13.202228 kernel: pci 0000:00:01.3: PIIX4 devres G PIO at fff0-ffff Feb 12 21:55:13.202371 kernel: pci 0000:00:01.3: PIIX4 devres H MMIO at ffc00000-ffffffff Feb 12 21:55:13.202587 kernel: pci 0000:00:01.3: PIIX4 devres I PIO at fff0-ffff Feb 12 21:55:13.202728 kernel: pci 0000:00:01.3: PIIX4 devres J PIO at fff0-ffff Feb 12 21:55:13.202906 kernel: pci 0000:00:03.0: [1d0f:1111] type 00 class 0x030000 Feb 12 21:55:13.203282 kernel: pci 0000:00:03.0: reg 0x10: [mem 0xfe400000-0xfe7fffff pref] Feb 12 21:55:13.203419 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref] Feb 12 21:55:13.203544 kernel: pci 0000:00:03.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Feb 12 21:55:13.203724 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Feb 12 21:55:13.203845 kernel: pci 0000:00:04.0: reg 0x10: [mem 0xfebf0000-0xfebf3fff] Feb 12 21:55:13.203969 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Feb 12 21:55:13.204136 kernel: pci 0000:00:05.0: reg 0x10: [mem 0xfebf4000-0xfebf7fff] Feb 12 21:55:13.204155 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Feb 12 21:55:13.204173 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Feb 12 21:55:13.204186 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Feb 12 21:55:13.204200 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Feb 12 21:55:13.204213 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Feb 12 21:55:13.204225 kernel: iommu: Default domain type: Translated Feb 12 21:55:13.204237 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Feb 12 21:55:13.206017 kernel: pci 0000:00:03.0: vgaarb: setting as boot VGA device Feb 12 21:55:13.206326 kernel: pci 0000:00:03.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Feb 12 21:55:13.206610 kernel: pci 0000:00:03.0: vgaarb: bridge control possible Feb 12 21:55:13.206741 kernel: vgaarb: loaded Feb 12 21:55:13.206817 kernel: pps_core: LinuxPPS API ver. 1 registered Feb 12 21:55:13.206837 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Feb 12 21:55:13.206999 kernel: PTP clock support registered Feb 12 21:55:13.207017 kernel: PCI: Using ACPI for IRQ routing Feb 12 21:55:13.207031 kernel: PCI: pci_cache_line_size set to 64 bytes Feb 12 21:55:13.207045 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Feb 12 21:55:13.207099 kernel: e820: reserve RAM buffer [mem 0x7d9ea000-0x7fffffff] Feb 12 21:55:13.207120 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 Feb 12 21:55:13.207135 kernel: hpet0: 8 comparators, 32-bit 62.500000 MHz counter Feb 12 21:55:13.207150 kernel: clocksource: Switched to clocksource kvm-clock Feb 12 21:55:13.207165 kernel: VFS: Disk quotas dquot_6.6.0 Feb 12 21:55:13.207181 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Feb 12 21:55:13.207196 kernel: pnp: PnP ACPI init Feb 12 21:55:13.207211 kernel: pnp: PnP ACPI: found 5 devices Feb 12 21:55:13.207226 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Feb 12 21:55:13.207241 kernel: NET: Registered PF_INET protocol family Feb 12 21:55:13.207260 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Feb 12 21:55:13.207275 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Feb 12 21:55:13.207291 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Feb 12 21:55:13.207306 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Feb 12 21:55:13.207322 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Feb 12 21:55:13.207336 kernel: TCP: Hash tables configured (established 16384 bind 16384) Feb 12 21:55:13.207352 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Feb 12 21:55:13.207368 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Feb 12 21:55:13.207463 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Feb 12 21:55:13.207485 kernel: NET: Registered PF_XDP protocol family Feb 12 21:55:13.207653 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Feb 12 21:55:13.207787 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Feb 12 21:55:13.207936 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Feb 12 21:55:13.208051 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Feb 12 21:55:13.209152 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Feb 12 21:55:13.209855 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Feb 12 21:55:13.209891 kernel: PCI: CLS 0 bytes, default 64 Feb 12 21:55:13.209907 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Feb 12 21:55:13.209923 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x240937b9988, max_idle_ns: 440795218083 ns Feb 12 21:55:13.209938 kernel: clocksource: Switched to clocksource tsc Feb 12 21:55:13.209961 kernel: Initialise system trusted keyrings Feb 12 21:55:13.209976 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Feb 12 21:55:13.209992 kernel: Key type asymmetric registered Feb 12 21:55:13.210007 kernel: Asymmetric key parser 'x509' registered Feb 12 21:55:13.210022 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Feb 12 21:55:13.210040 kernel: io scheduler mq-deadline registered Feb 12 21:55:13.210056 kernel: io scheduler kyber registered Feb 12 21:55:13.210070 kernel: io scheduler bfq registered Feb 12 21:55:13.210086 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Feb 12 21:55:13.210101 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Feb 12 21:55:13.210116 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Feb 12 21:55:13.210130 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Feb 12 21:55:13.210152 kernel: i8042: Warning: Keylock active Feb 12 21:55:13.210167 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Feb 12 21:55:13.210186 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Feb 12 21:55:13.210333 kernel: rtc_cmos 00:00: RTC can wake from S4 Feb 12 21:55:13.212180 kernel: rtc_cmos 00:00: registered as rtc0 Feb 12 21:55:13.213625 kernel: rtc_cmos 00:00: setting system clock to 2024-02-12T21:55:12 UTC (1707774912) Feb 12 21:55:13.213896 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram Feb 12 21:55:13.213919 kernel: intel_pstate: CPU model not supported Feb 12 21:55:13.213936 kernel: NET: Registered PF_INET6 protocol family Feb 12 21:55:13.213950 kernel: Segment Routing with IPv6 Feb 12 21:55:13.213970 kernel: In-situ OAM (IOAM) with IPv6 Feb 12 21:55:13.213986 kernel: NET: Registered PF_PACKET protocol family Feb 12 21:55:13.214001 kernel: Key type dns_resolver registered Feb 12 21:55:13.214016 kernel: IPI shorthand broadcast: enabled Feb 12 21:55:13.214031 kernel: sched_clock: Marking stable (441333425, 355307422)->(1009084935, -212444088) Feb 12 21:55:13.214046 kernel: registered taskstats version 1 Feb 12 21:55:13.214061 kernel: Loading compiled-in X.509 certificates Feb 12 21:55:13.214076 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.148-flatcar: 253e5c5c936b12e2ff2626e7f3214deb753330c8' Feb 12 21:55:13.214092 kernel: Key type .fscrypt registered Feb 12 21:55:13.214109 kernel: Key type fscrypt-provisioning registered Feb 12 21:55:13.214125 kernel: ima: No TPM chip found, activating TPM-bypass! Feb 12 21:55:13.214140 kernel: ima: Allocated hash algorithm: sha1 Feb 12 21:55:13.214155 kernel: ima: No architecture policies found Feb 12 21:55:13.214170 kernel: Freeing unused kernel image (initmem) memory: 45496K Feb 12 21:55:13.214185 kernel: Write protecting the kernel read-only data: 28672k Feb 12 21:55:13.214201 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Feb 12 21:55:13.214216 kernel: Freeing unused kernel image (rodata/data gap) memory: 636K Feb 12 21:55:13.214397 kernel: Run /init as init process Feb 12 21:55:13.214416 kernel: with arguments: Feb 12 21:55:13.214432 kernel: /init Feb 12 21:55:13.214447 kernel: with environment: Feb 12 21:55:13.214461 kernel: HOME=/ Feb 12 21:55:13.214476 kernel: TERM=linux Feb 12 21:55:13.214490 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Feb 12 21:55:13.214510 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 12 21:55:13.214532 systemd[1]: Detected virtualization amazon. Feb 12 21:55:13.214549 systemd[1]: Detected architecture x86-64. Feb 12 21:55:13.214564 systemd[1]: Running in initrd. Feb 12 21:55:13.214579 systemd[1]: No hostname configured, using default hostname. Feb 12 21:55:13.214595 systemd[1]: Hostname set to . Feb 12 21:55:13.214629 systemd[1]: Initializing machine ID from VM UUID. Feb 12 21:55:13.214648 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Feb 12 21:55:13.214675 systemd[1]: Queued start job for default target initrd.target. Feb 12 21:55:13.214692 systemd[1]: Started systemd-ask-password-console.path. Feb 12 21:55:13.214707 systemd[1]: Reached target cryptsetup.target. Feb 12 21:55:13.214724 systemd[1]: Reached target paths.target. Feb 12 21:55:13.214740 systemd[1]: Reached target slices.target. Feb 12 21:55:13.214756 systemd[1]: Reached target swap.target. Feb 12 21:55:13.214772 systemd[1]: Reached target timers.target. Feb 12 21:55:13.214793 systemd[1]: Listening on iscsid.socket. Feb 12 21:55:13.214809 systemd[1]: Listening on iscsiuio.socket. Feb 12 21:55:13.214825 systemd[1]: Listening on systemd-journald-audit.socket. Feb 12 21:55:13.214842 systemd[1]: Listening on systemd-journald-dev-log.socket. Feb 12 21:55:13.215699 systemd[1]: Listening on systemd-journald.socket. Feb 12 21:55:13.215874 systemd[1]: Listening on systemd-networkd.socket. Feb 12 21:55:13.215891 systemd[1]: Listening on systemd-udevd-control.socket. Feb 12 21:55:13.215904 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 12 21:55:13.215919 systemd[1]: Reached target sockets.target. Feb 12 21:55:13.216225 systemd[1]: Starting kmod-static-nodes.service... Feb 12 21:55:13.216240 systemd[1]: Finished network-cleanup.service. Feb 12 21:55:13.216255 systemd[1]: Starting systemd-fsck-usr.service... Feb 12 21:55:13.216500 systemd[1]: Starting systemd-journald.service... Feb 12 21:55:13.216519 systemd[1]: Starting systemd-modules-load.service... Feb 12 21:55:13.216532 systemd[1]: Starting systemd-resolved.service... Feb 12 21:55:13.216546 systemd[1]: Starting systemd-vconsole-setup.service... Feb 12 21:55:13.216567 systemd-journald[185]: Journal started Feb 12 21:55:13.216649 systemd-journald[185]: Runtime Journal (/run/log/journal/ec21d8747ee91e09efa78a52a289bd34) is 4.8M, max 38.7M, 33.9M free. Feb 12 21:55:13.219694 systemd[1]: Started systemd-journald.service. Feb 12 21:55:13.236634 systemd-modules-load[186]: Inserted module 'overlay' Feb 12 21:55:13.394330 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Feb 12 21:55:13.394365 kernel: Bridge firewalling registered Feb 12 21:55:13.394384 kernel: SCSI subsystem initialized Feb 12 21:55:13.394401 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Feb 12 21:55:13.400089 kernel: device-mapper: uevent: version 1.0.3 Feb 12 21:55:13.400136 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Feb 12 21:55:13.400157 kernel: audit: type=1130 audit(1707774913.386:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.400176 kernel: audit: type=1130 audit(1707774913.391:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.386000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.293118 systemd-resolved[187]: Positive Trust Anchors: Feb 12 21:55:13.407639 kernel: audit: type=1130 audit(1707774913.399:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.407693 kernel: audit: type=1130 audit(1707774913.406:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.399000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.293134 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 12 21:55:13.293183 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 12 21:55:13.303415 systemd-resolved[187]: Defaulting to hostname 'linux'. Feb 12 21:55:13.309107 systemd-modules-load[186]: Inserted module 'br_netfilter' Feb 12 21:55:13.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.355488 systemd-modules-load[186]: Inserted module 'dm_multipath' Feb 12 21:55:13.435901 kernel: audit: type=1130 audit(1707774913.415:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.387410 systemd[1]: Started systemd-resolved.service. Feb 12 21:55:13.392205 systemd[1]: Finished kmod-static-nodes.service. Feb 12 21:55:13.400371 systemd[1]: Finished systemd-fsck-usr.service. Feb 12 21:55:13.406845 systemd[1]: Finished systemd-modules-load.service. Feb 12 21:55:13.429592 systemd[1]: Finished systemd-vconsole-setup.service. Feb 12 21:55:13.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.443518 systemd[1]: Reached target nss-lookup.target. Feb 12 21:55:13.458328 kernel: audit: type=1130 audit(1707774913.442:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.462806 systemd[1]: Starting dracut-cmdline-ask.service... Feb 12 21:55:13.469096 systemd[1]: Starting systemd-sysctl.service... Feb 12 21:55:13.475312 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 12 21:55:13.491044 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 12 21:55:13.492000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.496678 systemd[1]: Finished systemd-sysctl.service. Feb 12 21:55:13.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.505823 kernel: audit: type=1130 audit(1707774913.492:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.505868 kernel: audit: type=1130 audit(1707774913.498:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.510089 systemd[1]: Finished dracut-cmdline-ask.service. Feb 12 21:55:13.512498 systemd[1]: Starting dracut-cmdline.service... Feb 12 21:55:13.510000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.519714 kernel: audit: type=1130 audit(1707774913.510:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.531272 dracut-cmdline[205]: dracut-dracut-053 Feb 12 21:55:13.535318 dracut-cmdline[205]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=f2beb0668e3dab90bbcf0ace3803b7ee02142bfb86913ef12ef6d2ee81a411a4 Feb 12 21:55:13.679739 kernel: Loading iSCSI transport class v2.0-870. Feb 12 21:55:13.700729 kernel: iscsi: registered transport (tcp) Feb 12 21:55:13.731192 kernel: iscsi: registered transport (qla4xxx) Feb 12 21:55:13.731275 kernel: QLogic iSCSI HBA Driver Feb 12 21:55:13.838944 systemd[1]: Finished dracut-cmdline.service. Feb 12 21:55:13.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:13.844386 systemd[1]: Starting dracut-pre-udev.service... Feb 12 21:55:13.911922 kernel: raid6: avx512x4 gen() 11135 MB/s Feb 12 21:55:13.928711 kernel: raid6: avx512x4 xor() 2973 MB/s Feb 12 21:55:13.945724 kernel: raid6: avx512x2 gen() 13645 MB/s Feb 12 21:55:13.963714 kernel: raid6: avx512x2 xor() 19243 MB/s Feb 12 21:55:13.981723 kernel: raid6: avx512x1 gen() 14121 MB/s Feb 12 21:55:13.999715 kernel: raid6: avx512x1 xor() 17981 MB/s Feb 12 21:55:14.017726 kernel: raid6: avx2x4 gen() 10125 MB/s Feb 12 21:55:14.035726 kernel: raid6: avx2x4 xor() 2250 MB/s Feb 12 21:55:14.057446 kernel: raid6: avx2x2 gen() 9181 MB/s Feb 12 21:55:14.074819 kernel: raid6: avx2x2 xor() 9475 MB/s Feb 12 21:55:14.091719 kernel: raid6: avx2x1 gen() 10538 MB/s Feb 12 21:55:14.109724 kernel: raid6: avx2x1 xor() 12637 MB/s Feb 12 21:55:14.127714 kernel: raid6: sse2x4 gen() 6518 MB/s Feb 12 21:55:14.145703 kernel: raid6: sse2x4 xor() 4532 MB/s Feb 12 21:55:14.171698 kernel: raid6: sse2x2 gen() 2100 MB/s Feb 12 21:55:14.190420 kernel: raid6: sse2x2 xor() 1694 MB/s Feb 12 21:55:14.207852 kernel: raid6: sse2x1 gen() 6963 MB/s Feb 12 21:55:14.225900 kernel: raid6: sse2x1 xor() 3455 MB/s Feb 12 21:55:14.225976 kernel: raid6: using algorithm avx512x1 gen() 14121 MB/s Feb 12 21:55:14.225995 kernel: raid6: .... xor() 17981 MB/s, rmw enabled Feb 12 21:55:14.226963 kernel: raid6: using avx512x2 recovery algorithm Feb 12 21:55:14.244748 kernel: xor: automatically using best checksumming function avx Feb 12 21:55:14.441698 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Feb 12 21:55:14.453644 systemd[1]: Finished dracut-pre-udev.service. Feb 12 21:55:14.455000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:14.455000 audit: BPF prog-id=7 op=LOAD Feb 12 21:55:14.455000 audit: BPF prog-id=8 op=LOAD Feb 12 21:55:14.456959 systemd[1]: Starting systemd-udevd.service... Feb 12 21:55:14.476304 systemd-udevd[384]: Using default interface naming scheme 'v252'. Feb 12 21:55:14.484098 systemd[1]: Started systemd-udevd.service. Feb 12 21:55:14.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:14.487311 systemd[1]: Starting dracut-pre-trigger.service... Feb 12 21:55:14.514460 dracut-pre-trigger[388]: rd.md=0: removing MD RAID activation Feb 12 21:55:14.554427 systemd[1]: Finished dracut-pre-trigger.service. Feb 12 21:55:14.556000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:14.557835 systemd[1]: Starting systemd-udev-trigger.service... Feb 12 21:55:14.613788 systemd[1]: Finished systemd-udev-trigger.service. Feb 12 21:55:14.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:14.696300 kernel: ena 0000:00:05.0: ENA device version: 0.10 Feb 12 21:55:14.696626 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Feb 12 21:55:14.701689 kernel: ena 0000:00:05.0: LLQ is not supported Fallback to host mode policy. Feb 12 21:55:14.710490 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem febf4000, mac addr 06:01:7f:9e:be:9f Feb 12 21:55:14.717708 kernel: cryptd: max_cpu_qlen set to 1000 Feb 12 21:55:14.731409 (udev-worker)[437]: Network interface NamePolicy= disabled on kernel command line. Feb 12 21:55:14.761693 kernel: nvme nvme0: pci function 0000:00:04.0 Feb 12 21:55:14.770695 kernel: AVX2 version of gcm_enc/dec engaged. Feb 12 21:55:14.770771 kernel: AES CTR mode by8 optimization enabled Feb 12 21:55:14.778948 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Feb 12 21:55:14.794894 kernel: nvme nvme0: 2/0/0 default/read/poll queues Feb 12 21:55:14.800048 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Feb 12 21:55:14.800101 kernel: GPT:9289727 != 16777215 Feb 12 21:55:14.800119 kernel: GPT:Alternate GPT header not at the end of the disk. Feb 12 21:55:14.800136 kernel: GPT:9289727 != 16777215 Feb 12 21:55:14.800151 kernel: GPT: Use GNU Parted to correct GPT errors. Feb 12 21:55:14.800167 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Feb 12 21:55:14.882689 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (438) Feb 12 21:55:14.956112 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Feb 12 21:55:15.006092 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Feb 12 21:55:15.014205 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Feb 12 21:55:15.014327 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Feb 12 21:55:15.024207 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 12 21:55:15.030580 systemd[1]: Starting disk-uuid.service... Feb 12 21:55:15.041929 disk-uuid[593]: Primary Header is updated. Feb 12 21:55:15.041929 disk-uuid[593]: Secondary Entries is updated. Feb 12 21:55:15.041929 disk-uuid[593]: Secondary Header is updated. Feb 12 21:55:15.048694 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Feb 12 21:55:15.058699 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Feb 12 21:55:16.055634 disk-uuid[594]: The operation has completed successfully. Feb 12 21:55:16.057176 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Feb 12 21:55:16.219106 systemd[1]: disk-uuid.service: Deactivated successfully. Feb 12 21:55:16.219219 systemd[1]: Finished disk-uuid.service. Feb 12 21:55:16.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:16.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:16.228161 systemd[1]: Starting verity-setup.service... Feb 12 21:55:16.258692 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Feb 12 21:55:16.339323 systemd[1]: Found device dev-mapper-usr.device. Feb 12 21:55:16.341868 systemd[1]: Finished verity-setup.service. Feb 12 21:55:16.343000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:16.344497 systemd[1]: Mounting sysusr-usr.mount... Feb 12 21:55:16.439970 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Feb 12 21:55:16.440419 systemd[1]: Mounted sysusr-usr.mount. Feb 12 21:55:16.441673 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Feb 12 21:55:16.444078 systemd[1]: Starting ignition-setup.service... Feb 12 21:55:16.448542 systemd[1]: Starting parse-ip-for-networkd.service... Feb 12 21:55:16.467331 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Feb 12 21:55:16.467398 kernel: BTRFS info (device nvme0n1p6): using free space tree Feb 12 21:55:16.467417 kernel: BTRFS info (device nvme0n1p6): has skinny extents Feb 12 21:55:16.474712 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Feb 12 21:55:16.490017 systemd[1]: mnt-oem.mount: Deactivated successfully. Feb 12 21:55:16.560145 systemd[1]: Finished ignition-setup.service. Feb 12 21:55:16.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:16.563361 systemd[1]: Starting ignition-fetch-offline.service... Feb 12 21:55:16.586130 systemd[1]: Finished parse-ip-for-networkd.service. Feb 12 21:55:16.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:16.587000 audit: BPF prog-id=9 op=LOAD Feb 12 21:55:16.588713 systemd[1]: Starting systemd-networkd.service... Feb 12 21:55:16.627177 systemd-networkd[1023]: lo: Link UP Feb 12 21:55:16.627189 systemd-networkd[1023]: lo: Gained carrier Feb 12 21:55:16.629957 systemd-networkd[1023]: Enumeration completed Feb 12 21:55:16.630263 systemd-networkd[1023]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 12 21:55:16.630489 systemd[1]: Started systemd-networkd.service. Feb 12 21:55:16.635000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:16.636847 systemd[1]: Reached target network.target. Feb 12 21:55:16.639791 systemd[1]: Starting iscsiuio.service... Feb 12 21:55:16.645062 systemd-networkd[1023]: eth0: Link UP Feb 12 21:55:16.645073 systemd-networkd[1023]: eth0: Gained carrier Feb 12 21:55:16.650520 systemd[1]: Started iscsiuio.service. Feb 12 21:55:16.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:16.653085 systemd[1]: Starting iscsid.service... Feb 12 21:55:16.659922 iscsid[1028]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Feb 12 21:55:16.659922 iscsid[1028]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Feb 12 21:55:16.659922 iscsid[1028]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Feb 12 21:55:16.659922 iscsid[1028]: If using hardware iscsi like qla4xxx this message can be ignored. Feb 12 21:55:16.659922 iscsid[1028]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Feb 12 21:55:16.675433 iscsid[1028]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Feb 12 21:55:16.678211 systemd[1]: Started iscsid.service. Feb 12 21:55:16.679807 systemd-networkd[1023]: eth0: DHCPv4 address 172.31.28.103/20, gateway 172.31.16.1 acquired from 172.31.16.1 Feb 12 21:55:16.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:16.682360 systemd[1]: Starting dracut-initqueue.service... Feb 12 21:55:16.696914 systemd[1]: Finished dracut-initqueue.service. Feb 12 21:55:16.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:16.699943 systemd[1]: Reached target remote-fs-pre.target. Feb 12 21:55:16.701484 systemd[1]: Reached target remote-cryptsetup.target. Feb 12 21:55:16.704159 systemd[1]: Reached target remote-fs.target. Feb 12 21:55:16.714931 systemd[1]: Starting dracut-pre-mount.service... Feb 12 21:55:16.722937 systemd[1]: Finished dracut-pre-mount.service. Feb 12 21:55:16.725000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:17.250362 ignition[1019]: Ignition 2.14.0 Feb 12 21:55:17.250377 ignition[1019]: Stage: fetch-offline Feb 12 21:55:17.250521 ignition[1019]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 12 21:55:17.250563 ignition[1019]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 12 21:55:17.268835 ignition[1019]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 12 21:55:17.269321 ignition[1019]: Ignition finished successfully Feb 12 21:55:17.272738 systemd[1]: Finished ignition-fetch-offline.service. Feb 12 21:55:17.281411 kernel: kauditd_printk_skb: 18 callbacks suppressed Feb 12 21:55:17.281438 kernel: audit: type=1130 audit(1707774917.273:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:17.273000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:17.275250 systemd[1]: Starting ignition-fetch.service... Feb 12 21:55:17.300970 ignition[1047]: Ignition 2.14.0 Feb 12 21:55:17.300983 ignition[1047]: Stage: fetch Feb 12 21:55:17.301194 ignition[1047]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 12 21:55:17.301226 ignition[1047]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 12 21:55:17.314152 ignition[1047]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 12 21:55:17.315677 ignition[1047]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 12 21:55:17.328144 ignition[1047]: INFO : PUT result: OK Feb 12 21:55:17.333085 ignition[1047]: DEBUG : parsed url from cmdline: "" Feb 12 21:55:17.333085 ignition[1047]: INFO : no config URL provided Feb 12 21:55:17.333085 ignition[1047]: INFO : reading system config file "/usr/lib/ignition/user.ign" Feb 12 21:55:17.333085 ignition[1047]: INFO : no config at "/usr/lib/ignition/user.ign" Feb 12 21:55:17.351482 ignition[1047]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 12 21:55:17.351482 ignition[1047]: INFO : PUT result: OK Feb 12 21:55:17.351482 ignition[1047]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Feb 12 21:55:17.365246 ignition[1047]: INFO : GET result: OK Feb 12 21:55:17.367016 ignition[1047]: DEBUG : parsing config with SHA512: c2eaaca6fa3de8bd15b8ee92f47f8a6f16676696ea91726ff199de069573f5a12ba72743ec20637d5006eaa28408d652e4ffaed007e88d74741db2816a393b0a Feb 12 21:55:17.416350 unknown[1047]: fetched base config from "system" Feb 12 21:55:17.416516 unknown[1047]: fetched base config from "system" Feb 12 21:55:17.416523 unknown[1047]: fetched user config from "aws" Feb 12 21:55:17.418302 ignition[1047]: fetch: fetch complete Feb 12 21:55:17.418309 ignition[1047]: fetch: fetch passed Feb 12 21:55:17.418367 ignition[1047]: Ignition finished successfully Feb 12 21:55:17.423652 systemd[1]: Finished ignition-fetch.service. Feb 12 21:55:17.425890 systemd[1]: Starting ignition-kargs.service... Feb 12 21:55:17.432757 kernel: audit: type=1130 audit(1707774917.424:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:17.424000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:17.445511 ignition[1053]: Ignition 2.14.0 Feb 12 21:55:17.445525 ignition[1053]: Stage: kargs Feb 12 21:55:17.445754 ignition[1053]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 12 21:55:17.445786 ignition[1053]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 12 21:55:17.457723 ignition[1053]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 12 21:55:17.461070 ignition[1053]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 12 21:55:17.464224 ignition[1053]: INFO : PUT result: OK Feb 12 21:55:17.469611 ignition[1053]: kargs: kargs passed Feb 12 21:55:17.470309 ignition[1053]: Ignition finished successfully Feb 12 21:55:17.474622 systemd[1]: Finished ignition-kargs.service. Feb 12 21:55:17.483753 kernel: audit: type=1130 audit(1707774917.474:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:17.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:17.476383 systemd[1]: Starting ignition-disks.service... Feb 12 21:55:17.491849 ignition[1059]: Ignition 2.14.0 Feb 12 21:55:17.491862 ignition[1059]: Stage: disks Feb 12 21:55:17.492077 ignition[1059]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 12 21:55:17.492110 ignition[1059]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 12 21:55:17.502344 ignition[1059]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 12 21:55:17.504514 ignition[1059]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 12 21:55:17.506253 ignition[1059]: INFO : PUT result: OK Feb 12 21:55:17.512269 ignition[1059]: disks: disks passed Feb 12 21:55:17.512343 ignition[1059]: Ignition finished successfully Feb 12 21:55:17.523334 systemd[1]: Finished ignition-disks.service. Feb 12 21:55:17.528515 systemd[1]: Reached target initrd-root-device.target. Feb 12 21:55:17.535602 kernel: audit: type=1130 audit(1707774917.527:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:17.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:17.535293 systemd[1]: Reached target local-fs-pre.target. Feb 12 21:55:17.536726 systemd[1]: Reached target local-fs.target. Feb 12 21:55:17.538540 systemd[1]: Reached target sysinit.target. Feb 12 21:55:17.539633 systemd[1]: Reached target basic.target. Feb 12 21:55:17.540721 systemd[1]: Starting systemd-fsck-root.service... Feb 12 21:55:17.590856 systemd-fsck[1067]: ROOT: clean, 602/553520 files, 56013/553472 blocks Feb 12 21:55:17.602000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:17.599978 systemd[1]: Finished systemd-fsck-root.service. Feb 12 21:55:17.615169 kernel: audit: type=1130 audit(1707774917.602:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:17.605614 systemd[1]: Mounting sysroot.mount... Feb 12 21:55:17.637692 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Feb 12 21:55:17.642288 systemd[1]: Mounted sysroot.mount. Feb 12 21:55:17.646037 systemd[1]: Reached target initrd-root-fs.target. Feb 12 21:55:17.667955 systemd[1]: Mounting sysroot-usr.mount... Feb 12 21:55:17.670389 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Feb 12 21:55:17.670474 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Feb 12 21:55:17.670516 systemd[1]: Reached target ignition-diskful.target. Feb 12 21:55:17.676749 systemd[1]: Mounted sysroot-usr.mount. Feb 12 21:55:17.697178 systemd[1]: Mounting sysroot-usr-share-oem.mount... Feb 12 21:55:17.702347 systemd[1]: Starting initrd-setup-root.service... Feb 12 21:55:17.710782 initrd-setup-root[1089]: cut: /sysroot/etc/passwd: No such file or directory Feb 12 21:55:17.715725 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1084) Feb 12 21:55:17.719772 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Feb 12 21:55:17.719820 kernel: BTRFS info (device nvme0n1p6): using free space tree Feb 12 21:55:17.719833 kernel: BTRFS info (device nvme0n1p6): has skinny extents Feb 12 21:55:17.726692 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Feb 12 21:55:17.732119 systemd[1]: Mounted sysroot-usr-share-oem.mount. Feb 12 21:55:17.743341 initrd-setup-root[1115]: cut: /sysroot/etc/group: No such file or directory Feb 12 21:55:17.749643 initrd-setup-root[1123]: cut: /sysroot/etc/shadow: No such file or directory Feb 12 21:55:17.756215 initrd-setup-root[1131]: cut: /sysroot/etc/gshadow: No such file or directory Feb 12 21:55:17.935692 systemd[1]: Finished initrd-setup-root.service. Feb 12 21:55:17.945836 kernel: audit: type=1130 audit(1707774917.935:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:17.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:17.937063 systemd[1]: Starting ignition-mount.service... Feb 12 21:55:17.951587 systemd[1]: Starting sysroot-boot.service... Feb 12 21:55:17.956708 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Feb 12 21:55:17.956862 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Feb 12 21:55:17.992026 ignition[1150]: INFO : Ignition 2.14.0 Feb 12 21:55:17.992026 ignition[1150]: INFO : Stage: mount Feb 12 21:55:17.994409 ignition[1150]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 12 21:55:17.994409 ignition[1150]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 12 21:55:18.010134 systemd[1]: Finished sysroot-boot.service. Feb 12 21:55:18.016854 kernel: audit: type=1130 audit(1707774918.011:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:18.011000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:18.016928 ignition[1150]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 12 21:55:18.016928 ignition[1150]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 12 21:55:18.020418 ignition[1150]: INFO : PUT result: OK Feb 12 21:55:18.023927 ignition[1150]: INFO : mount: mount passed Feb 12 21:55:18.026018 ignition[1150]: INFO : Ignition finished successfully Feb 12 21:55:18.028379 systemd[1]: Finished ignition-mount.service. Feb 12 21:55:18.035926 kernel: audit: type=1130 audit(1707774918.027:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:18.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:18.031842 systemd[1]: Starting ignition-files.service... Feb 12 21:55:18.046514 systemd[1]: Mounting sysroot-usr-share-oem.mount... Feb 12 21:55:18.059715 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1159) Feb 12 21:55:18.064973 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Feb 12 21:55:18.065043 kernel: BTRFS info (device nvme0n1p6): using free space tree Feb 12 21:55:18.065063 kernel: BTRFS info (device nvme0n1p6): has skinny extents Feb 12 21:55:18.072703 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Feb 12 21:55:18.076003 systemd[1]: Mounted sysroot-usr-share-oem.mount. Feb 12 21:55:18.099016 ignition[1178]: INFO : Ignition 2.14.0 Feb 12 21:55:18.099016 ignition[1178]: INFO : Stage: files Feb 12 21:55:18.102837 ignition[1178]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 12 21:55:18.102837 ignition[1178]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 12 21:55:18.116118 ignition[1178]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 12 21:55:18.117784 ignition[1178]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 12 21:55:18.120015 ignition[1178]: INFO : PUT result: OK Feb 12 21:55:18.125656 ignition[1178]: DEBUG : files: compiled without relabeling support, skipping Feb 12 21:55:18.131021 ignition[1178]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Feb 12 21:55:18.132917 ignition[1178]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Feb 12 21:55:18.149370 ignition[1178]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Feb 12 21:55:18.151212 ignition[1178]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Feb 12 21:55:18.153652 unknown[1178]: wrote ssh authorized keys file for user: core Feb 12 21:55:18.155482 ignition[1178]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Feb 12 21:55:18.158270 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Feb 12 21:55:18.158270 ignition[1178]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Feb 12 21:55:18.609365 ignition[1178]: INFO : GET result: OK Feb 12 21:55:18.681806 systemd-networkd[1023]: eth0: Gained IPv6LL Feb 12 21:55:18.977854 ignition[1178]: DEBUG : file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Feb 12 21:55:18.980782 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Feb 12 21:55:18.980782 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Feb 12 21:55:18.980782 ignition[1178]: INFO : GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Feb 12 21:55:19.018765 ignition[1178]: INFO : GET result: OK Feb 12 21:55:19.120409 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Feb 12 21:55:19.127155 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Feb 12 21:55:19.130266 ignition[1178]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Feb 12 21:55:19.494415 ignition[1178]: INFO : GET result: OK Feb 12 21:55:19.682496 ignition[1178]: DEBUG : file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Feb 12 21:55:19.685444 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Feb 12 21:55:19.685444 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubectl" Feb 12 21:55:19.685444 ignition[1178]: INFO : GET https://dl.k8s.io/release/v1.27.2/bin/linux/amd64/kubectl: attempt #1 Feb 12 21:55:19.808112 ignition[1178]: INFO : GET result: OK Feb 12 21:55:20.171590 ignition[1178]: DEBUG : file matches expected sum of: 857e67001e74840518413593d90c6e64ad3f00d55fa44ad9a8e2ed6135392c908caff7ec19af18cbe10784b8f83afe687a0bc3bacbc9eee984cdeb9c0749cb83 Feb 12 21:55:20.176432 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubectl" Feb 12 21:55:20.176432 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Feb 12 21:55:20.176432 ignition[1178]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Feb 12 21:55:20.185367 ignition[1178]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1147451468" Feb 12 21:55:20.187193 ignition[1178]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1147451468": device or resource busy Feb 12 21:55:20.187193 ignition[1178]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1147451468", trying btrfs: device or resource busy Feb 12 21:55:20.203801 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1178) Feb 12 21:55:20.203842 ignition[1178]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1147451468" Feb 12 21:55:20.203842 ignition[1178]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1147451468" Feb 12 21:55:20.203842 ignition[1178]: INFO : op(3): [started] unmounting "/mnt/oem1147451468" Feb 12 21:55:20.209787 ignition[1178]: INFO : op(3): [finished] unmounting "/mnt/oem1147451468" Feb 12 21:55:20.209787 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Feb 12 21:55:20.209787 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubeadm" Feb 12 21:55:20.209787 ignition[1178]: INFO : GET https://dl.k8s.io/release/v1.27.2/bin/linux/amd64/kubeadm: attempt #1 Feb 12 21:55:20.227288 systemd[1]: mnt-oem1147451468.mount: Deactivated successfully. Feb 12 21:55:20.275126 ignition[1178]: INFO : GET result: OK Feb 12 21:55:20.566895 ignition[1178]: DEBUG : file matches expected sum of: f40216b7d14046931c58072d10c7122934eac5a23c08821371f8b08ac1779443ad11d3458a4c5dcde7cf80fc600a9fefb14b1942aa46a52330248d497ca88836 Feb 12 21:55:20.572358 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubeadm" Feb 12 21:55:20.572358 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubelet" Feb 12 21:55:20.572358 ignition[1178]: INFO : GET https://dl.k8s.io/release/v1.27.2/bin/linux/amd64/kubelet: attempt #1 Feb 12 21:55:20.637714 ignition[1178]: INFO : GET result: OK Feb 12 21:55:21.310616 ignition[1178]: DEBUG : file matches expected sum of: a283da2224d456958b2cb99b4f6faf4457c4ed89e9e95f37d970c637f6a7f64ff4dd4d2bfce538759b2d2090933bece599a285ef8fd132eb383fece9a3941560 Feb 12 21:55:21.313761 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubelet" Feb 12 21:55:21.313761 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/docker/daemon.json" Feb 12 21:55:21.318852 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/docker/daemon.json" Feb 12 21:55:21.318852 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Feb 12 21:55:21.323089 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Feb 12 21:55:21.323089 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Feb 12 21:55:21.327195 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Feb 12 21:55:21.327195 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 12 21:55:21.339712 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 12 21:55:21.339712 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 12 21:55:21.339712 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 12 21:55:21.348389 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/flatcar/update.conf" Feb 12 21:55:21.348389 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/flatcar/update.conf" Feb 12 21:55:21.348389 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Feb 12 21:55:21.348389 ignition[1178]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Feb 12 21:55:21.368950 ignition[1178]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2910438093" Feb 12 21:55:21.371893 ignition[1178]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2910438093": device or resource busy Feb 12 21:55:21.371893 ignition[1178]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2910438093", trying btrfs: device or resource busy Feb 12 21:55:21.371893 ignition[1178]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2910438093" Feb 12 21:55:21.380880 ignition[1178]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2910438093" Feb 12 21:55:21.380880 ignition[1178]: INFO : op(6): [started] unmounting "/mnt/oem2910438093" Feb 12 21:55:21.380880 ignition[1178]: INFO : op(6): [finished] unmounting "/mnt/oem2910438093" Feb 12 21:55:21.380880 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Feb 12 21:55:21.380880 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(11): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Feb 12 21:55:21.380880 ignition[1178]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Feb 12 21:55:21.398280 systemd[1]: mnt-oem2910438093.mount: Deactivated successfully. Feb 12 21:55:21.410577 ignition[1178]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem733465055" Feb 12 21:55:21.412370 ignition[1178]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem733465055": device or resource busy Feb 12 21:55:21.412370 ignition[1178]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem733465055", trying btrfs: device or resource busy Feb 12 21:55:21.412370 ignition[1178]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem733465055" Feb 12 21:55:21.419120 ignition[1178]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem733465055" Feb 12 21:55:21.419120 ignition[1178]: INFO : op(9): [started] unmounting "/mnt/oem733465055" Feb 12 21:55:21.419120 ignition[1178]: INFO : op(9): [finished] unmounting "/mnt/oem733465055" Feb 12 21:55:21.419120 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(11): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Feb 12 21:55:21.419120 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(12): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Feb 12 21:55:21.419120 ignition[1178]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Feb 12 21:55:21.436355 systemd[1]: mnt-oem733465055.mount: Deactivated successfully. Feb 12 21:55:21.447912 ignition[1178]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1434073239" Feb 12 21:55:21.450224 ignition[1178]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1434073239": device or resource busy Feb 12 21:55:21.450224 ignition[1178]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1434073239", trying btrfs: device or resource busy Feb 12 21:55:21.450224 ignition[1178]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1434073239" Feb 12 21:55:21.458241 ignition[1178]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1434073239" Feb 12 21:55:21.458241 ignition[1178]: INFO : op(c): [started] unmounting "/mnt/oem1434073239" Feb 12 21:55:21.458241 ignition[1178]: INFO : op(c): [finished] unmounting "/mnt/oem1434073239" Feb 12 21:55:21.458241 ignition[1178]: INFO : files: createFilesystemsFiles: createFiles: op(12): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Feb 12 21:55:21.458241 ignition[1178]: INFO : files: op(13): [started] processing unit "coreos-metadata-sshkeys@.service" Feb 12 21:55:21.458241 ignition[1178]: INFO : files: op(13): [finished] processing unit "coreos-metadata-sshkeys@.service" Feb 12 21:55:21.458241 ignition[1178]: INFO : files: op(14): [started] processing unit "amazon-ssm-agent.service" Feb 12 21:55:21.458241 ignition[1178]: INFO : files: op(14): op(15): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Feb 12 21:55:21.458241 ignition[1178]: INFO : files: op(14): op(15): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Feb 12 21:55:21.458241 ignition[1178]: INFO : files: op(14): [finished] processing unit "amazon-ssm-agent.service" Feb 12 21:55:21.458241 ignition[1178]: INFO : files: op(16): [started] processing unit "nvidia.service" Feb 12 21:55:21.458241 ignition[1178]: INFO : files: op(16): [finished] processing unit "nvidia.service" Feb 12 21:55:21.458241 ignition[1178]: INFO : files: op(17): [started] processing unit "prepare-cni-plugins.service" Feb 12 21:55:21.458241 ignition[1178]: INFO : files: op(17): op(18): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 12 21:55:21.458241 ignition[1178]: INFO : files: op(17): op(18): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 12 21:55:21.458241 ignition[1178]: INFO : files: op(17): [finished] processing unit "prepare-cni-plugins.service" Feb 12 21:55:21.458241 ignition[1178]: INFO : files: op(19): [started] processing unit "prepare-critools.service" Feb 12 21:55:21.458241 ignition[1178]: INFO : files: op(19): op(1a): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 12 21:55:21.458241 ignition[1178]: INFO : files: op(19): op(1a): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 12 21:55:21.458241 ignition[1178]: INFO : files: op(19): [finished] processing unit "prepare-critools.service" Feb 12 21:55:21.502815 ignition[1178]: INFO : files: op(1b): [started] processing unit "prepare-helm.service" Feb 12 21:55:21.502815 ignition[1178]: INFO : files: op(1b): op(1c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 12 21:55:21.502815 ignition[1178]: INFO : files: op(1b): op(1c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 12 21:55:21.502815 ignition[1178]: INFO : files: op(1b): [finished] processing unit "prepare-helm.service" Feb 12 21:55:21.502815 ignition[1178]: INFO : files: op(1d): [started] setting preset to enabled for "amazon-ssm-agent.service" Feb 12 21:55:21.502815 ignition[1178]: INFO : files: op(1d): [finished] setting preset to enabled for "amazon-ssm-agent.service" Feb 12 21:55:21.502815 ignition[1178]: INFO : files: op(1e): [started] setting preset to enabled for "nvidia.service" Feb 12 21:55:21.502815 ignition[1178]: INFO : files: op(1e): [finished] setting preset to enabled for "nvidia.service" Feb 12 21:55:21.502815 ignition[1178]: INFO : files: op(1f): [started] setting preset to enabled for "prepare-cni-plugins.service" Feb 12 21:55:21.502815 ignition[1178]: INFO : files: op(1f): [finished] setting preset to enabled for "prepare-cni-plugins.service" Feb 12 21:55:21.502815 ignition[1178]: INFO : files: op(20): [started] setting preset to enabled for "prepare-critools.service" Feb 12 21:55:21.502815 ignition[1178]: INFO : files: op(20): [finished] setting preset to enabled for "prepare-critools.service" Feb 12 21:55:21.502815 ignition[1178]: INFO : files: op(21): [started] setting preset to enabled for "prepare-helm.service" Feb 12 21:55:21.502815 ignition[1178]: INFO : files: op(21): [finished] setting preset to enabled for "prepare-helm.service" Feb 12 21:55:21.502815 ignition[1178]: INFO : files: op(22): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Feb 12 21:55:21.502815 ignition[1178]: INFO : files: op(22): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Feb 12 21:55:21.539740 ignition[1178]: INFO : files: createResultFile: createFiles: op(23): [started] writing file "/sysroot/etc/.ignition-result.json" Feb 12 21:55:21.543083 ignition[1178]: INFO : files: createResultFile: createFiles: op(23): [finished] writing file "/sysroot/etc/.ignition-result.json" Feb 12 21:55:21.543083 ignition[1178]: INFO : files: files passed Feb 12 21:55:21.543083 ignition[1178]: INFO : Ignition finished successfully Feb 12 21:55:21.549793 systemd[1]: Finished ignition-files.service. Feb 12 21:55:21.568279 kernel: audit: type=1130 audit(1707774921.551:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.571580 systemd[1]: Starting initrd-setup-root-after-ignition.service... Feb 12 21:55:21.578272 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Feb 12 21:55:21.588758 systemd[1]: Starting ignition-quench.service... Feb 12 21:55:21.602615 initrd-setup-root-after-ignition[1203]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Feb 12 21:55:21.605092 systemd[1]: Finished initrd-setup-root-after-ignition.service. Feb 12 21:55:21.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.613061 systemd[1]: ignition-quench.service: Deactivated successfully. Feb 12 21:55:21.616869 kernel: audit: type=1130 audit(1707774921.606:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.613190 systemd[1]: Finished ignition-quench.service. Feb 12 21:55:21.616000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.617046 systemd[1]: Reached target ignition-complete.target. Feb 12 21:55:21.622450 systemd[1]: Starting initrd-parse-etc.service... Feb 12 21:55:21.650314 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Feb 12 21:55:21.650811 systemd[1]: Finished initrd-parse-etc.service. Feb 12 21:55:21.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.655000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.655973 systemd[1]: Reached target initrd-fs.target. Feb 12 21:55:21.657959 systemd[1]: Reached target initrd.target. Feb 12 21:55:21.659645 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Feb 12 21:55:21.663377 systemd[1]: Starting dracut-pre-pivot.service... Feb 12 21:55:21.688706 systemd[1]: Finished dracut-pre-pivot.service. Feb 12 21:55:21.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.693959 systemd[1]: Starting initrd-cleanup.service... Feb 12 21:55:21.716685 systemd[1]: Stopped target nss-lookup.target. Feb 12 21:55:21.720219 systemd[1]: Stopped target remote-cryptsetup.target. Feb 12 21:55:21.722936 systemd[1]: Stopped target timers.target. Feb 12 21:55:21.725503 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Feb 12 21:55:21.727261 systemd[1]: Stopped dracut-pre-pivot.service. Feb 12 21:55:21.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.730490 systemd[1]: Stopped target initrd.target. Feb 12 21:55:21.738460 systemd[1]: Stopped target basic.target. Feb 12 21:55:21.740329 systemd[1]: Stopped target ignition-complete.target. Feb 12 21:55:21.742838 systemd[1]: Stopped target ignition-diskful.target. Feb 12 21:55:21.746928 systemd[1]: Stopped target initrd-root-device.target. Feb 12 21:55:21.752043 systemd[1]: Stopped target remote-fs.target. Feb 12 21:55:21.757100 systemd[1]: Stopped target remote-fs-pre.target. Feb 12 21:55:21.760862 systemd[1]: Stopped target sysinit.target. Feb 12 21:55:21.764248 systemd[1]: Stopped target local-fs.target. Feb 12 21:55:21.766829 systemd[1]: Stopped target local-fs-pre.target. Feb 12 21:55:21.769015 systemd[1]: Stopped target swap.target. Feb 12 21:55:21.770658 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Feb 12 21:55:21.771947 systemd[1]: Stopped dracut-pre-mount.service. Feb 12 21:55:21.773000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.773921 systemd[1]: Stopped target cryptsetup.target. Feb 12 21:55:21.775598 systemd[1]: dracut-initqueue.service: Deactivated successfully. Feb 12 21:55:21.775774 systemd[1]: Stopped dracut-initqueue.service. Feb 12 21:55:21.779057 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Feb 12 21:55:21.778000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.783000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.779166 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Feb 12 21:55:21.781565 systemd[1]: ignition-files.service: Deactivated successfully. Feb 12 21:55:21.781823 systemd[1]: Stopped ignition-files.service. Feb 12 21:55:21.785801 systemd[1]: Stopping ignition-mount.service... Feb 12 21:55:21.787554 systemd[1]: Stopping iscsiuio.service... Feb 12 21:55:21.793825 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Feb 12 21:55:21.793973 systemd[1]: Stopped kmod-static-nodes.service. Feb 12 21:55:21.800000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.801868 systemd[1]: Stopping sysroot-boot.service... Feb 12 21:55:21.803835 ignition[1216]: INFO : Ignition 2.14.0 Feb 12 21:55:21.803835 ignition[1216]: INFO : Stage: umount Feb 12 21:55:21.803835 ignition[1216]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 12 21:55:21.803835 ignition[1216]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 12 21:55:21.822239 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Feb 12 21:55:21.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.831184 ignition[1216]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 12 21:55:21.831184 ignition[1216]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 12 21:55:21.831184 ignition[1216]: INFO : PUT result: OK Feb 12 21:55:21.831184 ignition[1216]: INFO : umount: umount passed Feb 12 21:55:21.831184 ignition[1216]: INFO : Ignition finished successfully Feb 12 21:55:21.837000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.825565 systemd[1]: Stopped systemd-udev-trigger.service. Feb 12 21:55:21.831088 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Feb 12 21:55:21.831259 systemd[1]: Stopped dracut-pre-trigger.service. Feb 12 21:55:21.844840 systemd[1]: iscsiuio.service: Deactivated successfully. Feb 12 21:55:21.844944 systemd[1]: Stopped iscsiuio.service. Feb 12 21:55:21.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.848865 systemd[1]: ignition-mount.service: Deactivated successfully. Feb 12 21:55:21.850982 systemd[1]: Stopped ignition-mount.service. Feb 12 21:55:21.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.853873 systemd[1]: sysroot-boot.service: Deactivated successfully. Feb 12 21:55:21.855129 systemd[1]: Stopped sysroot-boot.service. Feb 12 21:55:21.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.857909 systemd[1]: ignition-disks.service: Deactivated successfully. Feb 12 21:55:21.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.858022 systemd[1]: Stopped ignition-disks.service. Feb 12 21:55:21.860278 systemd[1]: ignition-kargs.service: Deactivated successfully. Feb 12 21:55:21.863000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.865000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.870000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.860346 systemd[1]: Stopped ignition-kargs.service. Feb 12 21:55:21.863927 systemd[1]: ignition-fetch.service: Deactivated successfully. Feb 12 21:55:21.864055 systemd[1]: Stopped ignition-fetch.service. Feb 12 21:55:21.865888 systemd[1]: Stopped target network.target. Feb 12 21:55:21.867436 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Feb 12 21:55:21.867510 systemd[1]: Stopped ignition-fetch-offline.service. Feb 12 21:55:21.870434 systemd[1]: Stopped target paths.target. Feb 12 21:55:21.872464 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Feb 12 21:55:21.923000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.875719 systemd[1]: Stopped systemd-ask-password-console.path. Feb 12 21:55:21.877049 systemd[1]: Stopped target slices.target. Feb 12 21:55:21.886100 systemd[1]: Stopped target sockets.target. Feb 12 21:55:21.896521 systemd[1]: iscsid.socket: Deactivated successfully. Feb 12 21:55:21.896569 systemd[1]: Closed iscsid.socket. Feb 12 21:55:21.906041 systemd[1]: iscsiuio.socket: Deactivated successfully. Feb 12 21:55:21.906101 systemd[1]: Closed iscsiuio.socket. Feb 12 21:55:21.912566 systemd[1]: ignition-setup.service: Deactivated successfully. Feb 12 21:55:21.936000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.912646 systemd[1]: Stopped ignition-setup.service. Feb 12 21:55:21.924024 systemd[1]: initrd-setup-root.service: Deactivated successfully. Feb 12 21:55:21.924109 systemd[1]: Stopped initrd-setup-root.service. Feb 12 21:55:21.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.943000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.926543 systemd[1]: Stopping systemd-networkd.service... Feb 12 21:55:21.929718 systemd-networkd[1023]: eth0: DHCPv6 lease lost Feb 12 21:55:21.929774 systemd[1]: Stopping systemd-resolved.service... Feb 12 21:55:21.946000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.934967 systemd[1]: systemd-networkd.service: Deactivated successfully. Feb 12 21:55:21.935957 systemd[1]: Stopped systemd-networkd.service. Feb 12 21:55:21.939974 systemd[1]: initrd-cleanup.service: Deactivated successfully. Feb 12 21:55:21.941386 systemd[1]: Finished initrd-cleanup.service. Feb 12 21:55:21.944713 systemd[1]: systemd-resolved.service: Deactivated successfully. Feb 12 21:55:21.944811 systemd[1]: Stopped systemd-resolved.service. Feb 12 21:55:21.956000 audit: BPF prog-id=9 op=UNLOAD Feb 12 21:55:21.956000 audit: BPF prog-id=6 op=UNLOAD Feb 12 21:55:21.957615 systemd[1]: systemd-networkd.socket: Deactivated successfully. Feb 12 21:55:21.957780 systemd[1]: Closed systemd-networkd.socket. Feb 12 21:55:21.963759 systemd[1]: Stopping network-cleanup.service... Feb 12 21:55:21.969000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.965366 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Feb 12 21:55:21.965429 systemd[1]: Stopped parse-ip-for-networkd.service. Feb 12 21:55:21.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.970183 systemd[1]: systemd-sysctl.service: Deactivated successfully. Feb 12 21:55:21.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:21.970251 systemd[1]: Stopped systemd-sysctl.service. Feb 12 21:55:21.974510 systemd[1]: systemd-modules-load.service: Deactivated successfully. Feb 12 21:55:21.974565 systemd[1]: Stopped systemd-modules-load.service. Feb 12 21:55:21.976322 systemd[1]: Stopping systemd-udevd.service... Feb 12 21:55:22.004154 systemd[1]: systemd-udevd.service: Deactivated successfully. Feb 12 21:55:22.005894 systemd[1]: Stopped systemd-udevd.service. Feb 12 21:55:22.010000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:22.012834 systemd[1]: network-cleanup.service: Deactivated successfully. Feb 12 21:55:22.012963 systemd[1]: Stopped network-cleanup.service. Feb 12 21:55:22.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:22.017443 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Feb 12 21:55:22.017758 systemd[1]: Closed systemd-udevd-control.socket. Feb 12 21:55:22.021350 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Feb 12 21:55:22.021944 systemd[1]: Closed systemd-udevd-kernel.socket. Feb 12 21:55:22.026145 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Feb 12 21:55:22.027027 systemd[1]: Stopped dracut-pre-udev.service. Feb 12 21:55:22.028000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:22.030069 systemd[1]: dracut-cmdline.service: Deactivated successfully. Feb 12 21:55:22.031000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:22.030159 systemd[1]: Stopped dracut-cmdline.service. Feb 12 21:55:22.032339 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Feb 12 21:55:22.034000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:22.032404 systemd[1]: Stopped dracut-cmdline-ask.service. Feb 12 21:55:22.040657 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Feb 12 21:55:22.046000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:22.043899 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Feb 12 21:55:22.043990 systemd[1]: Stopped systemd-vconsole-setup.service. Feb 12 21:55:22.060897 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Feb 12 21:55:22.062132 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Feb 12 21:55:22.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:22.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:22.064328 systemd[1]: Reached target initrd-switch-root.target. Feb 12 21:55:22.067592 systemd[1]: Starting initrd-switch-root.service... Feb 12 21:55:22.081547 systemd[1]: Switching root. Feb 12 21:55:22.110034 iscsid[1028]: iscsid shutting down. Feb 12 21:55:22.111523 systemd-journald[185]: Received SIGTERM from PID 1 (n/a). Feb 12 21:55:22.111578 systemd-journald[185]: Journal stopped Feb 12 21:55:27.537554 kernel: SELinux: Class mctp_socket not defined in policy. Feb 12 21:55:27.537622 kernel: SELinux: Class anon_inode not defined in policy. Feb 12 21:55:27.537646 kernel: SELinux: the above unknown classes and permissions will be allowed Feb 12 21:55:27.537699 kernel: SELinux: policy capability network_peer_controls=1 Feb 12 21:55:27.537721 kernel: SELinux: policy capability open_perms=1 Feb 12 21:55:27.537744 kernel: SELinux: policy capability extended_socket_class=1 Feb 12 21:55:27.537765 kernel: SELinux: policy capability always_check_network=0 Feb 12 21:55:27.537787 kernel: SELinux: policy capability cgroup_seclabel=1 Feb 12 21:55:27.537809 kernel: SELinux: policy capability nnp_nosuid_transition=1 Feb 12 21:55:27.537828 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Feb 12 21:55:27.537846 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Feb 12 21:55:27.537863 kernel: kauditd_printk_skb: 39 callbacks suppressed Feb 12 21:55:27.537885 kernel: audit: type=1403 audit(1707774922.805:78): auid=4294967295 ses=4294967295 lsm=selinux res=1 Feb 12 21:55:27.537908 systemd[1]: Successfully loaded SELinux policy in 113.877ms. Feb 12 21:55:27.537944 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 40.465ms. Feb 12 21:55:27.537965 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 12 21:55:27.537984 systemd[1]: Detected virtualization amazon. Feb 12 21:55:27.538002 systemd[1]: Detected architecture x86-64. Feb 12 21:55:27.538022 systemd[1]: Detected first boot. Feb 12 21:55:27.538041 systemd[1]: Initializing machine ID from VM UUID. Feb 12 21:55:27.538059 kernel: audit: type=1400 audit(1707774923.018:79): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 12 21:55:27.538078 kernel: audit: type=1400 audit(1707774923.018:80): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 12 21:55:27.538100 kernel: audit: type=1334 audit(1707774923.022:81): prog-id=10 op=LOAD Feb 12 21:55:27.538117 kernel: audit: type=1334 audit(1707774923.022:82): prog-id=10 op=UNLOAD Feb 12 21:55:27.538134 kernel: audit: type=1334 audit(1707774923.027:83): prog-id=11 op=LOAD Feb 12 21:55:27.538151 kernel: audit: type=1334 audit(1707774923.027:84): prog-id=11 op=UNLOAD Feb 12 21:55:27.538169 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Feb 12 21:55:27.538187 kernel: audit: type=1400 audit(1707774923.285:85): avc: denied { associate } for pid=1250 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Feb 12 21:55:27.538208 kernel: audit: type=1300 audit(1707774923.285:85): arch=c000003e syscall=188 success=yes exit=0 a0=c0001078dc a1=c00002ae40 a2=c000029b00 a3=32 items=0 ppid=1233 pid=1250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:27.538227 kernel: audit: type=1327 audit(1707774923.285:85): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 12 21:55:27.538244 systemd[1]: Populated /etc with preset unit settings. Feb 12 21:55:27.538263 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 12 21:55:27.538281 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 12 21:55:27.538301 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 12 21:55:27.538322 systemd[1]: iscsid.service: Deactivated successfully. Feb 12 21:55:27.538342 systemd[1]: Stopped iscsid.service. Feb 12 21:55:27.538406 systemd[1]: initrd-switch-root.service: Deactivated successfully. Feb 12 21:55:27.538426 systemd[1]: Stopped initrd-switch-root.service. Feb 12 21:55:27.539718 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Feb 12 21:55:27.539744 systemd[1]: Created slice system-addon\x2dconfig.slice. Feb 12 21:55:27.539765 systemd[1]: Created slice system-addon\x2drun.slice. Feb 12 21:55:27.539789 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Feb 12 21:55:27.539809 systemd[1]: Created slice system-getty.slice. Feb 12 21:55:27.539827 systemd[1]: Created slice system-modprobe.slice. Feb 12 21:55:27.539847 systemd[1]: Created slice system-serial\x2dgetty.slice. Feb 12 21:55:27.539867 systemd[1]: Created slice system-system\x2dcloudinit.slice. Feb 12 21:55:27.539886 systemd[1]: Created slice system-systemd\x2dfsck.slice. Feb 12 21:55:27.539904 systemd[1]: Created slice user.slice. Feb 12 21:55:27.539923 systemd[1]: Started systemd-ask-password-console.path. Feb 12 21:55:27.539941 systemd[1]: Started systemd-ask-password-wall.path. Feb 12 21:55:27.539964 systemd[1]: Set up automount boot.automount. Feb 12 21:55:27.539983 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Feb 12 21:55:27.540002 systemd[1]: Stopped target initrd-switch-root.target. Feb 12 21:55:27.540019 systemd[1]: Stopped target initrd-fs.target. Feb 12 21:55:27.540037 systemd[1]: Stopped target initrd-root-fs.target. Feb 12 21:55:27.540057 systemd[1]: Reached target integritysetup.target. Feb 12 21:55:27.540076 systemd[1]: Reached target remote-cryptsetup.target. Feb 12 21:55:27.540094 systemd[1]: Reached target remote-fs.target. Feb 12 21:55:27.540117 systemd[1]: Reached target slices.target. Feb 12 21:55:27.540144 systemd[1]: Reached target swap.target. Feb 12 21:55:27.540162 systemd[1]: Reached target torcx.target. Feb 12 21:55:27.540181 systemd[1]: Reached target veritysetup.target. Feb 12 21:55:27.540200 systemd[1]: Listening on systemd-coredump.socket. Feb 12 21:55:27.540219 systemd[1]: Listening on systemd-initctl.socket. Feb 12 21:55:27.540240 systemd[1]: Listening on systemd-networkd.socket. Feb 12 21:55:27.540260 systemd[1]: Listening on systemd-udevd-control.socket. Feb 12 21:55:27.540278 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 12 21:55:27.540297 systemd[1]: Listening on systemd-userdbd.socket. Feb 12 21:55:27.540316 systemd[1]: Mounting dev-hugepages.mount... Feb 12 21:55:27.540335 systemd[1]: Mounting dev-mqueue.mount... Feb 12 21:55:27.540354 systemd[1]: Mounting media.mount... Feb 12 21:55:27.540374 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Feb 12 21:55:27.540392 systemd[1]: Mounting sys-kernel-debug.mount... Feb 12 21:55:27.540413 systemd[1]: Mounting sys-kernel-tracing.mount... Feb 12 21:55:27.540432 systemd[1]: Mounting tmp.mount... Feb 12 21:55:27.540450 systemd[1]: Starting flatcar-tmpfiles.service... Feb 12 21:55:27.540468 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Feb 12 21:55:27.540487 systemd[1]: Starting kmod-static-nodes.service... Feb 12 21:55:27.540506 systemd[1]: Starting modprobe@configfs.service... Feb 12 21:55:27.540523 systemd[1]: Starting modprobe@dm_mod.service... Feb 12 21:55:27.540542 systemd[1]: Starting modprobe@drm.service... Feb 12 21:55:27.540561 systemd[1]: Starting modprobe@efi_pstore.service... Feb 12 21:55:27.540699 systemd[1]: Starting modprobe@fuse.service... Feb 12 21:55:27.540725 systemd[1]: Starting modprobe@loop.service... Feb 12 21:55:27.540747 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Feb 12 21:55:27.540766 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Feb 12 21:55:27.540785 systemd[1]: Stopped systemd-fsck-root.service. Feb 12 21:55:27.540804 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Feb 12 21:55:27.540826 systemd[1]: Stopped systemd-fsck-usr.service. Feb 12 21:55:27.540846 systemd[1]: Stopped systemd-journald.service. Feb 12 21:55:27.540866 kernel: loop: module loaded Feb 12 21:55:27.540890 systemd[1]: Starting systemd-journald.service... Feb 12 21:55:27.540910 systemd[1]: Starting systemd-modules-load.service... Feb 12 21:55:27.540928 systemd[1]: Starting systemd-network-generator.service... Feb 12 21:55:27.540947 systemd[1]: Starting systemd-remount-fs.service... Feb 12 21:55:27.540966 systemd[1]: Starting systemd-udev-trigger.service... Feb 12 21:55:27.540985 systemd[1]: verity-setup.service: Deactivated successfully. Feb 12 21:55:27.541003 systemd[1]: Stopped verity-setup.service. Feb 12 21:55:27.541022 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Feb 12 21:55:27.541041 kernel: fuse: init (API version 7.34) Feb 12 21:55:27.541061 systemd[1]: Mounted dev-hugepages.mount. Feb 12 21:55:27.541145 systemd[1]: Mounted dev-mqueue.mount. Feb 12 21:55:27.541166 systemd[1]: Mounted media.mount. Feb 12 21:55:27.541184 systemd[1]: Mounted sys-kernel-debug.mount. Feb 12 21:55:27.541202 systemd[1]: Mounted sys-kernel-tracing.mount. Feb 12 21:55:27.541222 systemd[1]: Mounted tmp.mount. Feb 12 21:55:27.541240 systemd[1]: Finished kmod-static-nodes.service. Feb 12 21:55:27.541286 systemd[1]: modprobe@configfs.service: Deactivated successfully. Feb 12 21:55:27.541305 systemd[1]: Finished modprobe@configfs.service. Feb 12 21:55:27.541326 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Feb 12 21:55:27.541346 systemd[1]: Finished modprobe@dm_mod.service. Feb 12 21:55:27.541364 systemd[1]: modprobe@drm.service: Deactivated successfully. Feb 12 21:55:27.541384 systemd[1]: Finished modprobe@drm.service. Feb 12 21:55:27.541403 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Feb 12 21:55:27.541432 systemd[1]: Finished modprobe@efi_pstore.service. Feb 12 21:55:27.541452 systemd[1]: modprobe@fuse.service: Deactivated successfully. Feb 12 21:55:27.541471 systemd[1]: Finished modprobe@fuse.service. Feb 12 21:55:27.541490 systemd[1]: modprobe@loop.service: Deactivated successfully. Feb 12 21:55:27.541509 systemd[1]: Finished modprobe@loop.service. Feb 12 21:55:27.541530 systemd[1]: Finished systemd-modules-load.service. Feb 12 21:55:27.541549 systemd[1]: Finished systemd-network-generator.service. Feb 12 21:55:27.541568 systemd[1]: Finished systemd-remount-fs.service. Feb 12 21:55:27.541587 systemd[1]: Reached target network-pre.target. Feb 12 21:55:27.541611 systemd-journald[1329]: Journal started Feb 12 21:55:27.541690 systemd-journald[1329]: Runtime Journal (/run/log/journal/ec21d8747ee91e09efa78a52a289bd34) is 4.8M, max 38.7M, 33.9M free. Feb 12 21:55:27.549723 systemd[1]: Mounting sys-fs-fuse-connections.mount... Feb 12 21:55:22.805000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Feb 12 21:55:23.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 12 21:55:23.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 12 21:55:23.022000 audit: BPF prog-id=10 op=LOAD Feb 12 21:55:23.022000 audit: BPF prog-id=10 op=UNLOAD Feb 12 21:55:23.027000 audit: BPF prog-id=11 op=LOAD Feb 12 21:55:23.027000 audit: BPF prog-id=11 op=UNLOAD Feb 12 21:55:23.285000 audit[1250]: AVC avc: denied { associate } for pid=1250 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Feb 12 21:55:23.285000 audit[1250]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001078dc a1=c00002ae40 a2=c000029b00 a3=32 items=0 ppid=1233 pid=1250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:23.285000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 12 21:55:23.288000 audit[1250]: AVC avc: denied { associate } for pid=1250 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Feb 12 21:55:23.288000 audit[1250]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001079b5 a2=1ed a3=0 items=2 ppid=1233 pid=1250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:23.288000 audit: CWD cwd="/" Feb 12 21:55:23.288000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:23.288000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:23.288000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 12 21:55:27.136000 audit: BPF prog-id=12 op=LOAD Feb 12 21:55:27.136000 audit: BPF prog-id=3 op=UNLOAD Feb 12 21:55:27.137000 audit: BPF prog-id=13 op=LOAD Feb 12 21:55:27.137000 audit: BPF prog-id=14 op=LOAD Feb 12 21:55:27.137000 audit: BPF prog-id=4 op=UNLOAD Feb 12 21:55:27.137000 audit: BPF prog-id=5 op=UNLOAD Feb 12 21:55:27.137000 audit: BPF prog-id=15 op=LOAD Feb 12 21:55:27.137000 audit: BPF prog-id=12 op=UNLOAD Feb 12 21:55:27.137000 audit: BPF prog-id=16 op=LOAD Feb 12 21:55:27.137000 audit: BPF prog-id=17 op=LOAD Feb 12 21:55:27.137000 audit: BPF prog-id=13 op=UNLOAD Feb 12 21:55:27.137000 audit: BPF prog-id=14 op=UNLOAD Feb 12 21:55:27.138000 audit: BPF prog-id=18 op=LOAD Feb 12 21:55:27.138000 audit: BPF prog-id=15 op=UNLOAD Feb 12 21:55:27.138000 audit: BPF prog-id=19 op=LOAD Feb 12 21:55:27.138000 audit: BPF prog-id=20 op=LOAD Feb 12 21:55:27.138000 audit: BPF prog-id=16 op=UNLOAD Feb 12 21:55:27.138000 audit: BPF prog-id=17 op=UNLOAD Feb 12 21:55:27.139000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.147000 audit: BPF prog-id=18 op=UNLOAD Feb 12 21:55:27.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.150000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.401000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.552696 systemd[1]: Mounting sys-kernel-config.mount... Feb 12 21:55:27.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.406000 audit: BPF prog-id=21 op=LOAD Feb 12 21:55:27.407000 audit: BPF prog-id=22 op=LOAD Feb 12 21:55:27.407000 audit: BPF prog-id=23 op=LOAD Feb 12 21:55:27.407000 audit: BPF prog-id=19 op=UNLOAD Feb 12 21:55:27.407000 audit: BPF prog-id=20 op=UNLOAD Feb 12 21:55:27.446000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.486000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.492000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.492000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.506000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.506000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.513000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.522000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.522000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.534000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Feb 12 21:55:27.534000 audit[1329]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7fff158ecaf0 a2=4000 a3=7fff158ecb8c items=0 ppid=1 pid=1329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:27.534000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Feb 12 21:55:27.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:23.268286 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:23Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 12 21:55:27.134033 systemd[1]: Queued start job for default target multi-user.target. Feb 12 21:55:23.268944 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:23Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 12 21:55:27.140045 systemd[1]: systemd-journald.service: Deactivated successfully. Feb 12 21:55:23.269067 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:23Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 12 21:55:23.269157 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:23Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Feb 12 21:55:23.269168 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:23Z" level=debug msg="skipped missing lower profile" missing profile=oem Feb 12 21:55:27.564859 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Feb 12 21:55:23.269203 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:23Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Feb 12 21:55:23.269216 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:23Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Feb 12 21:55:23.269414 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:23Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Feb 12 21:55:23.269481 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:23Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 12 21:55:23.269496 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:23Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 12 21:55:23.274660 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:23Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Feb 12 21:55:23.274720 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:23Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Feb 12 21:55:23.274742 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:23Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.2: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.2 Feb 12 21:55:23.274758 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:23Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Feb 12 21:55:23.274776 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:23Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.2: no such file or directory" path=/var/lib/torcx/store/3510.3.2 Feb 12 21:55:27.575863 systemd[1]: Starting systemd-hwdb-update.service... Feb 12 21:55:27.575927 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Feb 12 21:55:23.274790 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:23Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Feb 12 21:55:26.583130 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:26Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 12 21:55:26.583939 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:26Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 12 21:55:26.584065 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:26Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 12 21:55:26.584244 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:26Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 12 21:55:26.584293 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:26Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Feb 12 21:55:26.584351 /usr/lib/systemd/system-generators/torcx-generator[1250]: time="2024-02-12T21:55:26Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Feb 12 21:55:27.585686 systemd[1]: Starting systemd-random-seed.service... Feb 12 21:55:27.588692 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Feb 12 21:55:27.599452 systemd[1]: Starting systemd-sysctl.service... Feb 12 21:55:27.606243 systemd[1]: Started systemd-journald.service. Feb 12 21:55:27.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.608129 systemd[1]: Finished flatcar-tmpfiles.service. Feb 12 21:55:27.609000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.609985 systemd[1]: Mounted sys-fs-fuse-connections.mount. Feb 12 21:55:27.611524 systemd[1]: Mounted sys-kernel-config.mount. Feb 12 21:55:27.613556 systemd[1]: Finished systemd-random-seed.service. Feb 12 21:55:27.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.615929 systemd[1]: Reached target first-boot-complete.target. Feb 12 21:55:27.619478 systemd[1]: Starting systemd-journal-flush.service... Feb 12 21:55:27.623140 systemd[1]: Starting systemd-sysusers.service... Feb 12 21:55:27.638464 systemd-journald[1329]: Time spent on flushing to /var/log/journal/ec21d8747ee91e09efa78a52a289bd34 is 97.315ms for 1231 entries. Feb 12 21:55:27.638464 systemd-journald[1329]: System Journal (/var/log/journal/ec21d8747ee91e09efa78a52a289bd34) is 8.0M, max 195.6M, 187.6M free. Feb 12 21:55:27.752323 systemd-journald[1329]: Received client request to flush runtime journal. Feb 12 21:55:27.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.681000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:27.671981 systemd[1]: Finished systemd-sysctl.service. Feb 12 21:55:27.754484 udevadm[1365]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Feb 12 21:55:27.680646 systemd[1]: Finished systemd-udev-trigger.service. Feb 12 21:55:27.683764 systemd[1]: Starting systemd-udev-settle.service... Feb 12 21:55:27.722186 systemd[1]: Finished systemd-sysusers.service. Feb 12 21:55:27.754243 systemd[1]: Finished systemd-journal-flush.service. Feb 12 21:55:27.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:28.437381 systemd[1]: Finished systemd-hwdb-update.service. Feb 12 21:55:28.447939 kernel: kauditd_printk_skb: 65 callbacks suppressed Feb 12 21:55:28.448151 kernel: audit: type=1130 audit(1707774928.438:144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:28.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:28.451290 kernel: audit: type=1334 audit(1707774928.439:145): prog-id=24 op=LOAD Feb 12 21:55:28.439000 audit: BPF prog-id=24 op=LOAD Feb 12 21:55:28.449777 systemd[1]: Starting systemd-udevd.service... Feb 12 21:55:28.447000 audit: BPF prog-id=25 op=LOAD Feb 12 21:55:28.447000 audit: BPF prog-id=7 op=UNLOAD Feb 12 21:55:28.447000 audit: BPF prog-id=8 op=UNLOAD Feb 12 21:55:28.453838 kernel: audit: type=1334 audit(1707774928.447:146): prog-id=25 op=LOAD Feb 12 21:55:28.454023 kernel: audit: type=1334 audit(1707774928.447:147): prog-id=7 op=UNLOAD Feb 12 21:55:28.454165 kernel: audit: type=1334 audit(1707774928.447:148): prog-id=8 op=UNLOAD Feb 12 21:55:28.487873 systemd-udevd[1367]: Using default interface naming scheme 'v252'. Feb 12 21:55:28.528861 systemd[1]: Started systemd-udevd.service. Feb 12 21:55:28.546622 kernel: audit: type=1130 audit(1707774928.535:149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:28.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:28.546490 systemd[1]: Starting systemd-networkd.service... Feb 12 21:55:28.553892 kernel: audit: type=1334 audit(1707774928.544:150): prog-id=26 op=LOAD Feb 12 21:55:28.544000 audit: BPF prog-id=26 op=LOAD Feb 12 21:55:28.573000 audit: BPF prog-id=27 op=LOAD Feb 12 21:55:28.580831 kernel: audit: type=1334 audit(1707774928.573:151): prog-id=27 op=LOAD Feb 12 21:55:28.580878 kernel: audit: type=1334 audit(1707774928.576:152): prog-id=28 op=LOAD Feb 12 21:55:28.580904 kernel: audit: type=1334 audit(1707774928.578:153): prog-id=29 op=LOAD Feb 12 21:55:28.576000 audit: BPF prog-id=28 op=LOAD Feb 12 21:55:28.578000 audit: BPF prog-id=29 op=LOAD Feb 12 21:55:28.580833 systemd[1]: Starting systemd-userdbd.service... Feb 12 21:55:28.655332 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Feb 12 21:55:28.690714 systemd[1]: Started systemd-userdbd.service. Feb 12 21:55:28.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:28.698961 (udev-worker)[1376]: Network interface NamePolicy= disabled on kernel command line. Feb 12 21:55:28.810768 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Feb 12 21:55:28.822690 kernel: ACPI: button: Power Button [PWRF] Feb 12 21:55:28.826864 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input3 Feb 12 21:55:28.826952 kernel: ACPI: button: Sleep Button [SLPF] Feb 12 21:55:28.809000 audit[1373]: AVC avc: denied { confidentiality } for pid=1373 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Feb 12 21:55:28.848407 systemd-networkd[1383]: lo: Link UP Feb 12 21:55:28.848422 systemd-networkd[1383]: lo: Gained carrier Feb 12 21:55:28.850144 systemd-networkd[1383]: Enumeration completed Feb 12 21:55:28.850306 systemd[1]: Started systemd-networkd.service. Feb 12 21:55:28.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:28.850952 systemd-networkd[1383]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 12 21:55:28.853836 systemd[1]: Starting systemd-networkd-wait-online.service... Feb 12 21:55:28.859344 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 12 21:55:28.859466 systemd-networkd[1383]: eth0: Link UP Feb 12 21:55:28.860157 systemd-networkd[1383]: eth0: Gained carrier Feb 12 21:55:28.809000 audit[1373]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=557b42dfe750 a1=32194 a2=7fd295025bc5 a3=5 items=108 ppid=1367 pid=1373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:28.809000 audit: CWD cwd="/" Feb 12 21:55:28.809000 audit: PATH item=0 name=(null) inode=41 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=1 name=(null) inode=13811 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=2 name=(null) inode=13811 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=3 name=(null) inode=13812 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=4 name=(null) inode=13811 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=5 name=(null) inode=13813 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=6 name=(null) inode=13811 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=7 name=(null) inode=13814 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=8 name=(null) inode=13814 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=9 name=(null) inode=13815 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=10 name=(null) inode=13814 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=11 name=(null) inode=13816 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=12 name=(null) inode=13814 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=13 name=(null) inode=13817 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=14 name=(null) inode=13814 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=15 name=(null) inode=13818 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=16 name=(null) inode=13814 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=17 name=(null) inode=13819 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=18 name=(null) inode=13811 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=19 name=(null) inode=13820 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=20 name=(null) inode=13820 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=21 name=(null) inode=13821 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=22 name=(null) inode=13820 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=23 name=(null) inode=13822 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=24 name=(null) inode=13820 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=25 name=(null) inode=13823 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=26 name=(null) inode=13820 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=27 name=(null) inode=13824 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=28 name=(null) inode=13820 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=29 name=(null) inode=13825 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=30 name=(null) inode=13811 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=31 name=(null) inode=13826 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=32 name=(null) inode=13826 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=33 name=(null) inode=13827 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=34 name=(null) inode=13826 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=35 name=(null) inode=13828 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=36 name=(null) inode=13826 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=37 name=(null) inode=13829 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=38 name=(null) inode=13826 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=39 name=(null) inode=13830 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=40 name=(null) inode=13826 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=41 name=(null) inode=13831 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=42 name=(null) inode=13811 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=43 name=(null) inode=13832 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=44 name=(null) inode=13832 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=45 name=(null) inode=13833 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=46 name=(null) inode=13832 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=47 name=(null) inode=13834 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=48 name=(null) inode=13832 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=49 name=(null) inode=13835 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=50 name=(null) inode=13832 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=51 name=(null) inode=13836 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=52 name=(null) inode=13832 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=53 name=(null) inode=13837 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=54 name=(null) inode=41 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=55 name=(null) inode=13838 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=56 name=(null) inode=13838 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=57 name=(null) inode=13839 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=58 name=(null) inode=13838 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=59 name=(null) inode=13840 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=60 name=(null) inode=13838 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=61 name=(null) inode=13841 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=62 name=(null) inode=13841 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=63 name=(null) inode=13842 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=64 name=(null) inode=13841 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=65 name=(null) inode=13843 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=66 name=(null) inode=13841 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=67 name=(null) inode=13844 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=68 name=(null) inode=13841 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=69 name=(null) inode=13845 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=70 name=(null) inode=13841 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=71 name=(null) inode=13846 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=72 name=(null) inode=13838 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=73 name=(null) inode=13847 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=74 name=(null) inode=13847 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=75 name=(null) inode=13848 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=76 name=(null) inode=13847 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=77 name=(null) inode=13849 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=78 name=(null) inode=13847 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=79 name=(null) inode=13850 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=80 name=(null) inode=13847 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=81 name=(null) inode=13851 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=82 name=(null) inode=13847 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=83 name=(null) inode=13852 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=84 name=(null) inode=13838 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=85 name=(null) inode=13853 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=86 name=(null) inode=13853 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=87 name=(null) inode=13854 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=88 name=(null) inode=13853 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=89 name=(null) inode=13855 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=90 name=(null) inode=13853 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=91 name=(null) inode=13856 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=92 name=(null) inode=13853 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=93 name=(null) inode=13857 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=94 name=(null) inode=13853 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=95 name=(null) inode=13858 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=96 name=(null) inode=13838 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=97 name=(null) inode=13859 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=98 name=(null) inode=13859 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=99 name=(null) inode=13860 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=100 name=(null) inode=13859 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=101 name=(null) inode=13861 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=102 name=(null) inode=13859 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=103 name=(null) inode=13862 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=104 name=(null) inode=13859 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=105 name=(null) inode=13863 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=106 name=(null) inode=13859 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PATH item=107 name=(null) inode=13864 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:55:28.809000 audit: PROCTITLE proctitle="(udev-worker)" Feb 12 21:55:28.873808 systemd-networkd[1383]: eth0: DHCPv4 address 172.31.28.103/20, gateway 172.31.16.1 acquired from 172.31.16.1 Feb 12 21:55:28.906805 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1378) Feb 12 21:55:28.920688 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0xb100, revision 255 Feb 12 21:55:28.933771 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input4 Feb 12 21:55:28.938697 kernel: mousedev: PS/2 mouse device common for all mice Feb 12 21:55:29.052645 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 12 21:55:29.185236 systemd[1]: Finished systemd-udev-settle.service. Feb 12 21:55:29.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:29.188808 systemd[1]: Starting lvm2-activation-early.service... Feb 12 21:55:29.251843 lvm[1481]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 12 21:55:29.286306 systemd[1]: Finished lvm2-activation-early.service. Feb 12 21:55:29.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:29.287689 systemd[1]: Reached target cryptsetup.target. Feb 12 21:55:29.291951 systemd[1]: Starting lvm2-activation.service... Feb 12 21:55:29.298453 lvm[1482]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 12 21:55:29.328003 systemd[1]: Finished lvm2-activation.service. Feb 12 21:55:29.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:29.329279 systemd[1]: Reached target local-fs-pre.target. Feb 12 21:55:29.330414 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Feb 12 21:55:29.330449 systemd[1]: Reached target local-fs.target. Feb 12 21:55:29.331404 systemd[1]: Reached target machines.target. Feb 12 21:55:29.333883 systemd[1]: Starting ldconfig.service... Feb 12 21:55:29.335395 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Feb 12 21:55:29.335445 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 12 21:55:29.336796 systemd[1]: Starting systemd-boot-update.service... Feb 12 21:55:29.338879 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Feb 12 21:55:29.341252 systemd[1]: Starting systemd-machine-id-commit.service... Feb 12 21:55:29.342420 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Feb 12 21:55:29.342481 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Feb 12 21:55:29.343479 systemd[1]: Starting systemd-tmpfiles-setup.service... Feb 12 21:55:29.353212 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1484 (bootctl) Feb 12 21:55:29.354493 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Feb 12 21:55:29.375153 systemd-tmpfiles[1487]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Feb 12 21:55:29.378436 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Feb 12 21:55:29.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:29.407338 systemd-tmpfiles[1487]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Feb 12 21:55:29.414796 systemd-tmpfiles[1487]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Feb 12 21:55:29.499769 systemd-fsck[1492]: fsck.fat 4.2 (2021-01-31) Feb 12 21:55:29.499769 systemd-fsck[1492]: /dev/nvme0n1p1: 789 files, 115339/258078 clusters Feb 12 21:55:29.503241 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Feb 12 21:55:29.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:29.506412 systemd[1]: Mounting boot.mount... Feb 12 21:55:29.534309 systemd[1]: Mounted boot.mount. Feb 12 21:55:29.578193 systemd[1]: Finished systemd-boot-update.service. Feb 12 21:55:29.578000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:29.654869 systemd[1]: Finished systemd-tmpfiles-setup.service. Feb 12 21:55:29.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:29.657625 systemd[1]: Starting audit-rules.service... Feb 12 21:55:29.660596 systemd[1]: Starting clean-ca-certificates.service... Feb 12 21:55:29.668000 audit: BPF prog-id=30 op=LOAD Feb 12 21:55:29.666001 systemd[1]: Starting systemd-journal-catalog-update.service... Feb 12 21:55:29.670210 systemd[1]: Starting systemd-resolved.service... Feb 12 21:55:29.671000 audit: BPF prog-id=31 op=LOAD Feb 12 21:55:29.679940 systemd[1]: Starting systemd-timesyncd.service... Feb 12 21:55:29.684265 systemd[1]: Starting systemd-update-utmp.service... Feb 12 21:55:29.688584 systemd[1]: Finished clean-ca-certificates.service. Feb 12 21:55:29.689000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:29.690990 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Feb 12 21:55:29.722000 audit[1512]: SYSTEM_BOOT pid=1512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Feb 12 21:55:29.727477 systemd[1]: Finished systemd-update-utmp.service. Feb 12 21:55:29.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:29.788838 systemd[1]: Finished systemd-journal-catalog-update.service. Feb 12 21:55:29.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:29.833000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Feb 12 21:55:29.833000 audit[1526]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffdb73d0c30 a2=420 a3=0 items=0 ppid=1506 pid=1526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:29.833000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Feb 12 21:55:29.834220 augenrules[1526]: No rules Feb 12 21:55:29.835041 systemd[1]: Finished audit-rules.service. Feb 12 21:55:29.853314 systemd[1]: Started systemd-timesyncd.service. Feb 12 21:55:29.854685 systemd[1]: Reached target time-set.target. Feb 12 21:55:29.869904 systemd-resolved[1509]: Positive Trust Anchors: Feb 12 21:55:29.869918 systemd-resolved[1509]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 12 21:55:29.869967 systemd-resolved[1509]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 12 21:55:29.902084 systemd-resolved[1509]: Defaulting to hostname 'linux'. Feb 12 21:55:29.904054 systemd[1]: Started systemd-resolved.service. Feb 12 21:55:29.905326 systemd[1]: Reached target network.target. Feb 12 21:55:29.906514 systemd[1]: Reached target nss-lookup.target. Feb 12 21:55:30.182334 ldconfig[1483]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Feb 12 21:55:30.214651 systemd-timesyncd[1511]: Contacted time server 45.84.199.136:123 (0.flatcar.pool.ntp.org). Feb 12 21:55:30.214847 systemd-timesyncd[1511]: Initial clock synchronization to Mon 2024-02-12 21:55:30.237457 UTC. Feb 12 21:55:30.232088 systemd[1]: Finished ldconfig.service. Feb 12 21:55:30.237701 systemd[1]: Starting systemd-update-done.service... Feb 12 21:55:30.274116 systemd[1]: Finished systemd-update-done.service. Feb 12 21:55:30.275618 systemd[1]: Reached target sysinit.target. Feb 12 21:55:30.276764 systemd[1]: Started motdgen.path. Feb 12 21:55:30.277926 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Feb 12 21:55:30.279488 systemd[1]: Started logrotate.timer. Feb 12 21:55:30.280491 systemd[1]: Started mdadm.timer. Feb 12 21:55:30.281329 systemd[1]: Started systemd-tmpfiles-clean.timer. Feb 12 21:55:30.282559 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Feb 12 21:55:30.282591 systemd[1]: Reached target paths.target. Feb 12 21:55:30.283750 systemd[1]: Reached target timers.target. Feb 12 21:55:30.285175 systemd[1]: Listening on dbus.socket. Feb 12 21:55:30.288089 systemd[1]: Starting docker.socket... Feb 12 21:55:30.311272 systemd[1]: Listening on sshd.socket. Feb 12 21:55:30.312637 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 12 21:55:30.313553 systemd[1]: Listening on docker.socket. Feb 12 21:55:30.314697 systemd[1]: Reached target sockets.target. Feb 12 21:55:30.316006 systemd[1]: Reached target basic.target. Feb 12 21:55:30.316986 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 12 21:55:30.317014 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 12 21:55:30.318180 systemd[1]: Starting containerd.service... Feb 12 21:55:30.320321 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Feb 12 21:55:30.323050 systemd[1]: Starting dbus.service... Feb 12 21:55:30.325496 systemd[1]: Starting enable-oem-cloudinit.service... Feb 12 21:55:30.329020 systemd[1]: Starting extend-filesystems.service... Feb 12 21:55:30.330748 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Feb 12 21:55:30.332079 systemd[1]: Starting motdgen.service... Feb 12 21:55:30.334254 systemd[1]: Starting prepare-cni-plugins.service... Feb 12 21:55:30.336731 systemd[1]: Starting prepare-critools.service... Feb 12 21:55:30.339070 systemd[1]: Starting prepare-helm.service... Feb 12 21:55:30.340983 systemd[1]: Starting ssh-key-proc-cmdline.service... Feb 12 21:55:30.343835 systemd[1]: Starting sshd-keygen.service... Feb 12 21:55:30.347921 systemd[1]: Starting systemd-logind.service... Feb 12 21:55:30.348858 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 12 21:55:30.348935 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Feb 12 21:55:30.349560 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Feb 12 21:55:30.350893 systemd[1]: Starting update-engine.service... Feb 12 21:55:30.354728 systemd[1]: Starting update-ssh-keys-after-ignition.service... Feb 12 21:55:30.389686 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Feb 12 21:55:30.389907 systemd[1]: Finished ssh-key-proc-cmdline.service. Feb 12 21:55:30.435106 jq[1542]: false Feb 12 21:55:30.436055 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Feb 12 21:55:30.436322 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Feb 12 21:55:30.438192 jq[1552]: true Feb 12 21:55:30.461834 extend-filesystems[1543]: Found nvme0n1 Feb 12 21:55:30.470425 extend-filesystems[1543]: Found nvme0n1p1 Feb 12 21:55:30.470425 extend-filesystems[1543]: Found nvme0n1p2 Feb 12 21:55:30.470425 extend-filesystems[1543]: Found nvme0n1p3 Feb 12 21:55:30.470425 extend-filesystems[1543]: Found usr Feb 12 21:55:30.470425 extend-filesystems[1543]: Found nvme0n1p4 Feb 12 21:55:30.470425 extend-filesystems[1543]: Found nvme0n1p6 Feb 12 21:55:30.470425 extend-filesystems[1543]: Found nvme0n1p7 Feb 12 21:55:30.470425 extend-filesystems[1543]: Found nvme0n1p9 Feb 12 21:55:30.470425 extend-filesystems[1543]: Checking size of /dev/nvme0n1p9 Feb 12 21:55:30.485690 jq[1566]: true Feb 12 21:55:30.492338 systemd[1]: motdgen.service: Deactivated successfully. Feb 12 21:55:30.492635 systemd[1]: Finished motdgen.service. Feb 12 21:55:30.531967 env[1564]: time="2024-02-12T21:55:30.531914996Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Feb 12 21:55:30.558733 env[1564]: time="2024-02-12T21:55:30.558685638Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Feb 12 21:55:30.572885 env[1564]: time="2024-02-12T21:55:30.559065348Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Feb 12 21:55:30.572885 env[1564]: time="2024-02-12T21:55:30.560531518Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.148-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Feb 12 21:55:30.572885 env[1564]: time="2024-02-12T21:55:30.560558211Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Feb 12 21:55:30.572885 env[1564]: time="2024-02-12T21:55:30.560800843Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 12 21:55:30.572885 env[1564]: time="2024-02-12T21:55:30.560818231Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Feb 12 21:55:30.572885 env[1564]: time="2024-02-12T21:55:30.560830285Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Feb 12 21:55:30.572885 env[1564]: time="2024-02-12T21:55:30.560839931Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Feb 12 21:55:30.572885 env[1564]: time="2024-02-12T21:55:30.560914047Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Feb 12 21:55:30.572885 env[1564]: time="2024-02-12T21:55:30.561117558Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Feb 12 21:55:30.572885 env[1564]: time="2024-02-12T21:55:30.561249620Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 12 21:55:30.573371 env[1564]: time="2024-02-12T21:55:30.561265448Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Feb 12 21:55:30.573371 env[1564]: time="2024-02-12T21:55:30.561365249Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Feb 12 21:55:30.573371 env[1564]: time="2024-02-12T21:55:30.561380053Z" level=info msg="metadata content store policy set" policy=shared Feb 12 21:55:30.592782 tar[1554]: ./ Feb 12 21:55:30.592782 tar[1554]: ./loopback Feb 12 21:55:30.610202 tar[1556]: linux-amd64/helm Feb 12 21:55:30.610877 tar[1555]: crictl Feb 12 21:55:30.620459 systemd-logind[1550]: Watching system buttons on /dev/input/event1 (Power Button) Feb 12 21:55:30.629842 systemd-logind[1550]: Watching system buttons on /dev/input/event2 (Sleep Button) Feb 12 21:55:30.630339 systemd-logind[1550]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Feb 12 21:55:30.641546 systemd-logind[1550]: New seat seat0. Feb 12 21:55:30.649106 env[1564]: time="2024-02-12T21:55:30.648943272Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Feb 12 21:55:30.649484 env[1564]: time="2024-02-12T21:55:30.649458972Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Feb 12 21:55:30.649707 env[1564]: time="2024-02-12T21:55:30.649661921Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Feb 12 21:55:30.650324 env[1564]: time="2024-02-12T21:55:30.650272444Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Feb 12 21:55:30.650526 env[1564]: time="2024-02-12T21:55:30.650506406Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Feb 12 21:55:30.651780 env[1564]: time="2024-02-12T21:55:30.650704009Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Feb 12 21:55:30.651780 env[1564]: time="2024-02-12T21:55:30.650729730Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Feb 12 21:55:30.651780 env[1564]: time="2024-02-12T21:55:30.650766494Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Feb 12 21:55:30.651780 env[1564]: time="2024-02-12T21:55:30.650787811Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Feb 12 21:55:30.651780 env[1564]: time="2024-02-12T21:55:30.650896465Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Feb 12 21:55:30.651780 env[1564]: time="2024-02-12T21:55:30.650933501Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Feb 12 21:55:30.651780 env[1564]: time="2024-02-12T21:55:30.650954379Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Feb 12 21:55:30.652242 env[1564]: time="2024-02-12T21:55:30.652213498Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Feb 12 21:55:30.652441 env[1564]: time="2024-02-12T21:55:30.652422142Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Feb 12 21:55:30.653138 env[1564]: time="2024-02-12T21:55:30.653102068Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Feb 12 21:55:30.653378 env[1564]: time="2024-02-12T21:55:30.653357053Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Feb 12 21:55:30.653502 env[1564]: time="2024-02-12T21:55:30.653485006Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Feb 12 21:55:30.653662 env[1564]: time="2024-02-12T21:55:30.653631804Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Feb 12 21:55:30.654247 env[1564]: time="2024-02-12T21:55:30.654226701Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Feb 12 21:55:30.654378 env[1564]: time="2024-02-12T21:55:30.654359738Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Feb 12 21:55:30.654479 env[1564]: time="2024-02-12T21:55:30.654462994Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Feb 12 21:55:30.655466 env[1564]: time="2024-02-12T21:55:30.654555559Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Feb 12 21:55:30.655585 env[1564]: time="2024-02-12T21:55:30.655566678Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Feb 12 21:55:30.655804 env[1564]: time="2024-02-12T21:55:30.655754789Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Feb 12 21:55:30.655916 env[1564]: time="2024-02-12T21:55:30.655898949Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Feb 12 21:55:30.656112 env[1564]: time="2024-02-12T21:55:30.656091550Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Feb 12 21:55:30.656380 env[1564]: time="2024-02-12T21:55:30.656360355Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Feb 12 21:55:30.656446 extend-filesystems[1543]: Resized partition /dev/nvme0n1p9 Feb 12 21:55:30.657911 env[1564]: time="2024-02-12T21:55:30.657887408Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Feb 12 21:55:30.658028 env[1564]: time="2024-02-12T21:55:30.658010621Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Feb 12 21:55:30.658113 env[1564]: time="2024-02-12T21:55:30.658095059Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Feb 12 21:55:30.658203 env[1564]: time="2024-02-12T21:55:30.658184198Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Feb 12 21:55:30.661741 env[1564]: time="2024-02-12T21:55:30.661712886Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Feb 12 21:55:30.661887 env[1564]: time="2024-02-12T21:55:30.661867876Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Feb 12 21:55:30.663349 env[1564]: time="2024-02-12T21:55:30.661956085Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Feb 12 21:55:30.663511 env[1564]: time="2024-02-12T21:55:30.662251368Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Feb 12 21:55:30.663511 env[1564]: time="2024-02-12T21:55:30.662335446Z" level=info msg="Connect containerd service" Feb 12 21:55:30.668458 env[1564]: time="2024-02-12T21:55:30.668419913Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Feb 12 21:55:30.670065 env[1564]: time="2024-02-12T21:55:30.670029122Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 12 21:55:30.671334 env[1564]: time="2024-02-12T21:55:30.671307424Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Feb 12 21:55:30.673182 env[1564]: time="2024-02-12T21:55:30.673155185Z" level=info msg=serving... address=/run/containerd/containerd.sock Feb 12 21:55:30.673378 systemd[1]: Started containerd.service. Feb 12 21:55:30.675694 bash[1593]: Updated "/home/core/.ssh/authorized_keys" Feb 12 21:55:30.677631 systemd[1]: Finished update-ssh-keys-after-ignition.service. Feb 12 21:55:30.686518 extend-filesystems[1606]: resize2fs 1.46.5 (30-Dec-2021) Feb 12 21:55:30.688542 env[1564]: time="2024-02-12T21:55:30.688426431Z" level=info msg="Start subscribing containerd event" Feb 12 21:55:30.688542 env[1564]: time="2024-02-12T21:55:30.688450318Z" level=info msg="containerd successfully booted in 0.167354s" Feb 12 21:55:30.688542 env[1564]: time="2024-02-12T21:55:30.688504670Z" level=info msg="Start recovering state" Feb 12 21:55:30.690059 env[1564]: time="2024-02-12T21:55:30.690019611Z" level=info msg="Start event monitor" Feb 12 21:55:30.690365 env[1564]: time="2024-02-12T21:55:30.690334310Z" level=info msg="Start snapshots syncer" Feb 12 21:55:30.694345 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Feb 12 21:55:30.700788 update_engine[1551]: I0212 21:55:30.700129 1551 main.cc:92] Flatcar Update Engine starting Feb 12 21:55:30.720718 update_engine[1551]: I0212 21:55:30.714864 1551 update_check_scheduler.cc:74] Next update check in 7m0s Feb 12 21:55:30.720823 env[1564]: time="2024-02-12T21:55:30.690462058Z" level=info msg="Start cni network conf syncer for default" Feb 12 21:55:30.720823 env[1564]: time="2024-02-12T21:55:30.719164452Z" level=info msg="Start streaming server" Feb 12 21:55:30.702780 systemd[1]: Started dbus.service. Feb 12 21:55:30.702562 dbus-daemon[1541]: [system] SELinux support is enabled Feb 12 21:55:30.708194 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Feb 12 21:55:30.705433 dbus-daemon[1541]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.1' (uid=244 pid=1383 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Feb 12 21:55:30.708292 systemd[1]: Reached target system-config.target. Feb 12 21:55:30.710872 dbus-daemon[1541]: [system] Successfully activated service 'org.freedesktop.systemd1' Feb 12 21:55:30.711557 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Feb 12 21:55:30.711941 systemd[1]: Reached target user-config.target. Feb 12 21:55:30.717354 systemd[1]: Started update-engine.service. Feb 12 21:55:30.719380 systemd[1]: Started systemd-logind.service. Feb 12 21:55:30.723298 systemd[1]: Started locksmithd.service. Feb 12 21:55:30.727954 systemd[1]: Starting systemd-hostnamed.service... Feb 12 21:55:30.770559 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Feb 12 21:55:30.800625 extend-filesystems[1606]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Feb 12 21:55:30.800625 extend-filesystems[1606]: old_desc_blocks = 1, new_desc_blocks = 1 Feb 12 21:55:30.800625 extend-filesystems[1606]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Feb 12 21:55:30.809433 extend-filesystems[1543]: Resized filesystem in /dev/nvme0n1p9 Feb 12 21:55:30.800645 systemd[1]: extend-filesystems.service: Deactivated successfully. Feb 12 21:55:30.800891 systemd[1]: Finished extend-filesystems.service. Feb 12 21:55:30.807087 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Feb 12 21:55:30.810705 systemd[1]: Finished systemd-machine-id-commit.service. Feb 12 21:55:30.842030 systemd-networkd[1383]: eth0: Gained IPv6LL Feb 12 21:55:30.844648 systemd[1]: Finished systemd-networkd-wait-online.service. Feb 12 21:55:30.847560 systemd[1]: Reached target network-online.target. Feb 12 21:55:30.850688 systemd[1]: Started amazon-ssm-agent.service. Feb 12 21:55:30.854271 systemd[1]: Started nvidia.service. Feb 12 21:55:30.910125 tar[1554]: ./bandwidth Feb 12 21:55:31.095572 amazon-ssm-agent[1618]: 2024/02/12 21:55:31 Failed to load instance info from vault. RegistrationKey does not exist. Feb 12 21:55:31.119394 amazon-ssm-agent[1618]: Initializing new seelog logger Feb 12 21:55:31.127991 amazon-ssm-agent[1618]: New Seelog Logger Creation Complete Feb 12 21:55:31.128257 amazon-ssm-agent[1618]: 2024/02/12 21:55:31 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Feb 12 21:55:31.128346 amazon-ssm-agent[1618]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Feb 12 21:55:31.128711 amazon-ssm-agent[1618]: 2024/02/12 21:55:31 processing appconfig overrides Feb 12 21:55:31.288371 dbus-daemon[1541]: [system] Successfully activated service 'org.freedesktop.hostname1' Feb 12 21:55:31.288555 systemd[1]: Started systemd-hostnamed.service. Feb 12 21:55:31.291613 dbus-daemon[1541]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1609 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Feb 12 21:55:31.296113 systemd[1]: Starting polkit.service... Feb 12 21:55:31.321298 tar[1554]: ./ptp Feb 12 21:55:31.360723 systemd[1]: Created slice system-sshd.slice. Feb 12 21:55:31.375866 polkitd[1646]: Started polkitd version 121 Feb 12 21:55:31.402845 polkitd[1646]: Loading rules from directory /etc/polkit-1/rules.d Feb 12 21:55:31.403098 polkitd[1646]: Loading rules from directory /usr/share/polkit-1/rules.d Feb 12 21:55:31.403707 systemd[1]: nvidia.service: Deactivated successfully. Feb 12 21:55:31.405816 polkitd[1646]: Finished loading, compiling and executing 2 rules Feb 12 21:55:31.406600 dbus-daemon[1541]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Feb 12 21:55:31.406811 systemd[1]: Started polkit.service. Feb 12 21:55:31.409374 polkitd[1646]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Feb 12 21:55:31.443230 systemd-hostnamed[1609]: Hostname set to (transient) Feb 12 21:55:31.443350 systemd-resolved[1509]: System hostname changed to 'ip-172-31-28-103'. Feb 12 21:55:31.555885 tar[1554]: ./vlan Feb 12 21:55:31.606227 coreos-metadata[1540]: Feb 12 21:55:31.602 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Feb 12 21:55:31.608652 coreos-metadata[1540]: Feb 12 21:55:31.608 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Feb 12 21:55:31.610108 coreos-metadata[1540]: Feb 12 21:55:31.610 INFO Fetch successful Feb 12 21:55:31.610282 coreos-metadata[1540]: Feb 12 21:55:31.610 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Feb 12 21:55:31.611392 coreos-metadata[1540]: Feb 12 21:55:31.611 INFO Fetch successful Feb 12 21:55:31.646614 unknown[1540]: wrote ssh authorized keys file for user: core Feb 12 21:55:31.680739 update-ssh-keys[1717]: Updated "/home/core/.ssh/authorized_keys" Feb 12 21:55:31.681128 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Feb 12 21:55:31.744340 tar[1554]: ./host-device Feb 12 21:55:31.792265 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO Create new startup processor Feb 12 21:55:31.793539 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [LongRunningPluginsManager] registered plugins: {} Feb 12 21:55:31.793652 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO Initializing bookkeeping folders Feb 12 21:55:31.793741 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO removing the completed state files Feb 12 21:55:31.793803 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO Initializing bookkeeping folders for long running plugins Feb 12 21:55:31.793875 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Feb 12 21:55:31.793942 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO Initializing healthcheck folders for long running plugins Feb 12 21:55:31.794003 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO Initializing locations for inventory plugin Feb 12 21:55:31.794075 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO Initializing default location for custom inventory Feb 12 21:55:31.794140 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO Initializing default location for file inventory Feb 12 21:55:31.794204 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO Initializing default location for role inventory Feb 12 21:55:31.794269 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO Init the cloudwatchlogs publisher Feb 12 21:55:31.794335 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [instanceID=i-0b2b557b3e8dd983a] Successfully loaded platform independent plugin aws:softwareInventory Feb 12 21:55:31.794405 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [instanceID=i-0b2b557b3e8dd983a] Successfully loaded platform independent plugin aws:runPowerShellScript Feb 12 21:55:31.794467 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [instanceID=i-0b2b557b3e8dd983a] Successfully loaded platform independent plugin aws:configureDocker Feb 12 21:55:31.794540 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [instanceID=i-0b2b557b3e8dd983a] Successfully loaded platform independent plugin aws:runDockerAction Feb 12 21:55:31.794610 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [instanceID=i-0b2b557b3e8dd983a] Successfully loaded platform independent plugin aws:refreshAssociation Feb 12 21:55:31.794694 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [instanceID=i-0b2b557b3e8dd983a] Successfully loaded platform independent plugin aws:downloadContent Feb 12 21:55:31.794769 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [instanceID=i-0b2b557b3e8dd983a] Successfully loaded platform independent plugin aws:runDocument Feb 12 21:55:31.794832 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [instanceID=i-0b2b557b3e8dd983a] Successfully loaded platform independent plugin aws:updateSsmAgent Feb 12 21:55:31.794892 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [instanceID=i-0b2b557b3e8dd983a] Successfully loaded platform independent plugin aws:configurePackage Feb 12 21:55:31.794961 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [instanceID=i-0b2b557b3e8dd983a] Successfully loaded platform dependent plugin aws:runShellScript Feb 12 21:55:31.795023 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Feb 12 21:55:31.795085 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO OS: linux, Arch: amd64 Feb 12 21:55:31.795477 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessagingDeliveryService] Starting document processing engine... Feb 12 21:55:31.795926 amazon-ssm-agent[1618]: datastore file /var/lib/amazon/ssm/i-0b2b557b3e8dd983a/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Feb 12 21:55:31.895228 tar[1554]: ./tuning Feb 12 21:55:31.895424 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessagingDeliveryService] [EngineProcessor] Starting Feb 12 21:55:31.990381 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Feb 12 21:55:32.013285 tar[1554]: ./vrf Feb 12 21:55:32.084794 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessagingDeliveryService] Starting message polling Feb 12 21:55:32.099351 tar[1554]: ./sbr Feb 12 21:55:32.179540 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessagingDeliveryService] Starting send replies to MDS Feb 12 21:55:32.182320 tar[1554]: ./tap Feb 12 21:55:32.274481 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [instanceID=i-0b2b557b3e8dd983a] Starting association polling Feb 12 21:55:32.296092 tar[1554]: ./dhcp Feb 12 21:55:32.369574 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Feb 12 21:55:32.464839 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessagingDeliveryService] [Association] Launching response handler Feb 12 21:55:32.560419 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Feb 12 21:55:32.627344 tar[1556]: linux-amd64/LICENSE Feb 12 21:55:32.627838 tar[1556]: linux-amd64/README.md Feb 12 21:55:32.644305 tar[1554]: ./static Feb 12 21:55:32.647197 systemd[1]: Finished prepare-helm.service. Feb 12 21:55:32.655977 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Feb 12 21:55:32.688311 tar[1554]: ./firewall Feb 12 21:55:32.751986 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Feb 12 21:55:32.781893 tar[1554]: ./macvlan Feb 12 21:55:32.847897 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessageGatewayService] Starting session document processing engine... Feb 12 21:55:32.850675 tar[1554]: ./dummy Feb 12 21:55:32.869789 systemd[1]: Finished prepare-critools.service. Feb 12 21:55:32.940662 tar[1554]: ./bridge Feb 12 21:55:32.944185 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessageGatewayService] [EngineProcessor] Starting Feb 12 21:55:33.015399 tar[1554]: ./ipvlan Feb 12 21:55:33.040664 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Feb 12 21:55:33.085344 tar[1554]: ./portmap Feb 12 21:55:33.137355 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-0b2b557b3e8dd983a, requestId: 6773911b-1495-4200-82ce-fe9319b93f6f Feb 12 21:55:33.142588 tar[1554]: ./host-local Feb 12 21:55:33.227366 systemd[1]: Finished prepare-cni-plugins.service. Feb 12 21:55:33.234154 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessageGatewayService] listening reply. Feb 12 21:55:33.331257 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [LongRunningPluginsManager] starting long running plugin manager Feb 12 21:55:33.332159 locksmithd[1608]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Feb 12 21:55:33.428787 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Feb 12 21:55:33.526081 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [OfflineService] Starting document processing engine... Feb 12 21:55:33.623822 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [OfflineService] [EngineProcessor] Starting Feb 12 21:55:33.721804 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [OfflineService] [EngineProcessor] Initial processing Feb 12 21:55:33.819880 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [OfflineService] Starting message polling Feb 12 21:55:33.918330 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [HealthCheck] HealthCheck reporting agent health. Feb 12 21:55:34.016898 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Feb 12 21:55:34.115480 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [OfflineService] Starting send replies to MDS Feb 12 21:55:34.135652 sshd_keygen[1567]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Feb 12 21:55:34.160602 systemd[1]: Finished sshd-keygen.service. Feb 12 21:55:34.163680 systemd[1]: Starting issuegen.service... Feb 12 21:55:34.166224 systemd[1]: Started sshd@0-172.31.28.103:22-139.178.89.65:54066.service. Feb 12 21:55:34.179510 systemd[1]: issuegen.service: Deactivated successfully. Feb 12 21:55:34.180192 systemd[1]: Finished issuegen.service. Feb 12 21:55:34.187643 systemd[1]: Starting systemd-user-sessions.service... Feb 12 21:55:34.211223 systemd[1]: Finished systemd-user-sessions.service. Feb 12 21:55:34.219601 systemd[1]: Started getty@tty1.service. Feb 12 21:55:34.222191 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [StartupProcessor] Executing startup processor tasks Feb 12 21:55:34.226222 systemd[1]: Started serial-getty@ttyS0.service. Feb 12 21:55:34.228756 systemd[1]: Reached target getty.target. Feb 12 21:55:34.230222 systemd[1]: Reached target multi-user.target. Feb 12 21:55:34.233097 systemd[1]: Starting systemd-update-utmp-runlevel.service... Feb 12 21:55:34.243466 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Feb 12 21:55:34.243639 systemd[1]: Finished systemd-update-utmp-runlevel.service. Feb 12 21:55:34.245712 systemd[1]: Startup finished in 802ms (kernel) + 9.743s (initrd) + 11.621s (userspace) = 22.166s. Feb 12 21:55:34.319914 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Feb 12 21:55:34.399931 sshd[1753]: Accepted publickey for core from 139.178.89.65 port 54066 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:55:34.402849 sshd[1753]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:55:34.419607 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Feb 12 21:55:34.426294 systemd[1]: Created slice user-500.slice. Feb 12 21:55:34.427868 systemd[1]: Starting user-runtime-dir@500.service... Feb 12 21:55:34.446265 systemd-logind[1550]: New session 1 of user core. Feb 12 21:55:34.464256 systemd[1]: Finished user-runtime-dir@500.service. Feb 12 21:55:34.467862 systemd[1]: Starting user@500.service... Feb 12 21:55:34.475338 (systemd)[1762]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:55:34.518969 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.2 Feb 12 21:55:34.574424 systemd[1762]: Queued start job for default target default.target. Feb 12 21:55:34.575094 systemd[1762]: Reached target paths.target. Feb 12 21:55:34.575127 systemd[1762]: Reached target sockets.target. Feb 12 21:55:34.575146 systemd[1762]: Reached target timers.target. Feb 12 21:55:34.575163 systemd[1762]: Reached target basic.target. Feb 12 21:55:34.575220 systemd[1762]: Reached target default.target. Feb 12 21:55:34.575259 systemd[1762]: Startup finished in 91ms. Feb 12 21:55:34.575618 systemd[1]: Started user@500.service. Feb 12 21:55:34.577777 systemd[1]: Started session-1.scope. Feb 12 21:55:34.618731 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0b2b557b3e8dd983a?role=subscribe&stream=input Feb 12 21:55:34.722536 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0b2b557b3e8dd983a?role=subscribe&stream=input Feb 12 21:55:34.743869 systemd[1]: Started sshd@1-172.31.28.103:22-139.178.89.65:54082.service. Feb 12 21:55:34.822550 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessageGatewayService] Starting receiving message from control channel Feb 12 21:55:34.911145 sshd[1771]: Accepted publickey for core from 139.178.89.65 port 54082 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:55:34.913080 sshd[1771]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:55:34.924937 systemd-logind[1550]: New session 2 of user core. Feb 12 21:55:34.925857 amazon-ssm-agent[1618]: 2024-02-12 21:55:31 INFO [MessageGatewayService] [EngineProcessor] Initial processing Feb 12 21:55:34.925050 systemd[1]: Started session-2.scope. Feb 12 21:55:35.055247 sshd[1771]: pam_unix(sshd:session): session closed for user core Feb 12 21:55:35.058594 systemd-logind[1550]: Session 2 logged out. Waiting for processes to exit. Feb 12 21:55:35.059137 systemd[1]: sshd@1-172.31.28.103:22-139.178.89.65:54082.service: Deactivated successfully. Feb 12 21:55:35.060117 systemd[1]: session-2.scope: Deactivated successfully. Feb 12 21:55:35.061040 systemd-logind[1550]: Removed session 2. Feb 12 21:55:35.081622 systemd[1]: Started sshd@2-172.31.28.103:22-139.178.89.65:54096.service. Feb 12 21:55:35.246992 sshd[1777]: Accepted publickey for core from 139.178.89.65 port 54096 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:55:35.248982 sshd[1777]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:55:35.258120 systemd[1]: Started session-3.scope. Feb 12 21:55:35.258899 systemd-logind[1550]: New session 3 of user core. Feb 12 21:55:35.379520 sshd[1777]: pam_unix(sshd:session): session closed for user core Feb 12 21:55:35.383771 systemd[1]: sshd@2-172.31.28.103:22-139.178.89.65:54096.service: Deactivated successfully. Feb 12 21:55:35.385003 systemd[1]: session-3.scope: Deactivated successfully. Feb 12 21:55:35.385723 systemd-logind[1550]: Session 3 logged out. Waiting for processes to exit. Feb 12 21:55:35.386655 systemd-logind[1550]: Removed session 3. Feb 12 21:55:35.404858 systemd[1]: Started sshd@3-172.31.28.103:22-139.178.89.65:54104.service. Feb 12 21:55:35.577501 sshd[1783]: Accepted publickey for core from 139.178.89.65 port 54104 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:55:35.578494 sshd[1783]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:55:35.584585 systemd[1]: Started session-4.scope. Feb 12 21:55:35.585089 systemd-logind[1550]: New session 4 of user core. Feb 12 21:55:35.709637 sshd[1783]: pam_unix(sshd:session): session closed for user core Feb 12 21:55:35.713302 systemd[1]: sshd@3-172.31.28.103:22-139.178.89.65:54104.service: Deactivated successfully. Feb 12 21:55:35.714654 systemd[1]: session-4.scope: Deactivated successfully. Feb 12 21:55:35.715614 systemd-logind[1550]: Session 4 logged out. Waiting for processes to exit. Feb 12 21:55:35.716520 systemd-logind[1550]: Removed session 4. Feb 12 21:55:35.735915 systemd[1]: Started sshd@4-172.31.28.103:22-139.178.89.65:54114.service. Feb 12 21:55:35.900713 sshd[1789]: Accepted publickey for core from 139.178.89.65 port 54114 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:55:35.901842 sshd[1789]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:55:35.907993 systemd[1]: Started session-5.scope. Feb 12 21:55:35.908556 systemd-logind[1550]: New session 5 of user core. Feb 12 21:55:36.029508 sudo[1792]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Feb 12 21:55:36.029834 sudo[1792]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 12 21:55:36.038153 dbus-daemon[1541]: \xd0m5ޙU: received setenforce notice (enforcing=-1346344736) Feb 12 21:55:36.040630 sudo[1792]: pam_unix(sudo:session): session closed for user root Feb 12 21:55:36.064389 sshd[1789]: pam_unix(sshd:session): session closed for user core Feb 12 21:55:36.069721 systemd[1]: sshd@4-172.31.28.103:22-139.178.89.65:54114.service: Deactivated successfully. Feb 12 21:55:36.070984 systemd[1]: session-5.scope: Deactivated successfully. Feb 12 21:55:36.071984 systemd-logind[1550]: Session 5 logged out. Waiting for processes to exit. Feb 12 21:55:36.072952 systemd-logind[1550]: Removed session 5. Feb 12 21:55:36.090338 systemd[1]: Started sshd@5-172.31.28.103:22-139.178.89.65:54118.service. Feb 12 21:55:36.258768 sshd[1796]: Accepted publickey for core from 139.178.89.65 port 54118 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:55:36.259734 sshd[1796]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:55:36.265239 systemd[1]: Started session-6.scope. Feb 12 21:55:36.265831 systemd-logind[1550]: New session 6 of user core. Feb 12 21:55:36.368479 sudo[1800]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Feb 12 21:55:36.368800 sudo[1800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 12 21:55:36.372421 sudo[1800]: pam_unix(sudo:session): session closed for user root Feb 12 21:55:36.378863 sudo[1799]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Feb 12 21:55:36.379176 sudo[1799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 12 21:55:36.391252 systemd[1]: Stopping audit-rules.service... Feb 12 21:55:36.391000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 12 21:55:36.394674 kernel: kauditd_printk_skb: 130 callbacks suppressed Feb 12 21:55:36.394740 kernel: audit: type=1305 audit(1707774936.391:171): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 12 21:55:36.396112 auditctl[1803]: No rules Feb 12 21:55:36.406268 kernel: audit: type=1300 audit(1707774936.391:171): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd34440e60 a2=420 a3=0 items=0 ppid=1 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:36.391000 audit[1803]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd34440e60 a2=420 a3=0 items=0 ppid=1 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:36.396694 systemd[1]: audit-rules.service: Deactivated successfully. Feb 12 21:55:36.397003 systemd[1]: Stopped audit-rules.service. Feb 12 21:55:36.407297 systemd[1]: Starting audit-rules.service... Feb 12 21:55:36.391000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Feb 12 21:55:36.395000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:36.416990 kernel: audit: type=1327 audit(1707774936.391:171): proctitle=2F7362696E2F617564697463746C002D44 Feb 12 21:55:36.417076 kernel: audit: type=1131 audit(1707774936.395:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:36.447456 augenrules[1820]: No rules Feb 12 21:55:36.449078 systemd[1]: Finished audit-rules.service. Feb 12 21:55:36.447000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:36.453000 audit[1799]: USER_END pid=1799 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 21:55:36.454993 sudo[1799]: pam_unix(sudo:session): session closed for user root Feb 12 21:55:36.461716 kernel: audit: type=1130 audit(1707774936.447:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:36.461817 kernel: audit: type=1106 audit(1707774936.453:174): pid=1799 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 21:55:36.462862 kernel: audit: type=1104 audit(1707774936.453:175): pid=1799 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 21:55:36.453000 audit[1799]: CRED_DISP pid=1799 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 21:55:36.479240 sshd[1796]: pam_unix(sshd:session): session closed for user core Feb 12 21:55:36.480000 audit[1796]: USER_END pid=1796 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:55:36.484516 systemd[1]: sshd@5-172.31.28.103:22-139.178.89.65:54118.service: Deactivated successfully. Feb 12 21:55:36.485953 systemd[1]: session-6.scope: Deactivated successfully. Feb 12 21:55:36.487965 systemd-logind[1550]: Session 6 logged out. Waiting for processes to exit. Feb 12 21:55:36.489388 systemd-logind[1550]: Removed session 6. Feb 12 21:55:36.480000 audit[1796]: CRED_DISP pid=1796 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:55:36.495364 kernel: audit: type=1106 audit(1707774936.480:176): pid=1796 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:55:36.495542 kernel: audit: type=1104 audit(1707774936.480:177): pid=1796 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:55:36.495574 kernel: audit: type=1131 audit(1707774936.480:178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.28.103:22-139.178.89.65:54118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:36.480000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.28.103:22-139.178.89.65:54118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:36.507504 systemd[1]: Started sshd@6-172.31.28.103:22-139.178.89.65:54128.service. Feb 12 21:55:36.506000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.28.103:22-139.178.89.65:54128 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:36.668000 audit[1826]: USER_ACCT pid=1826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:55:36.669401 sshd[1826]: Accepted publickey for core from 139.178.89.65 port 54128 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:55:36.670000 audit[1826]: CRED_ACQ pid=1826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:55:36.670000 audit[1826]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2990f6a0 a2=3 a3=0 items=0 ppid=1 pid=1826 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:36.670000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:55:36.671480 sshd[1826]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:55:36.677117 systemd[1]: Started session-7.scope. Feb 12 21:55:36.677595 systemd-logind[1550]: New session 7 of user core. Feb 12 21:55:36.682000 audit[1826]: USER_START pid=1826 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:55:36.685000 audit[1828]: CRED_ACQ pid=1828 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:55:36.778000 audit[1829]: USER_ACCT pid=1829 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 21:55:36.779747 sudo[1829]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Feb 12 21:55:36.779000 audit[1829]: CRED_REFR pid=1829 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 21:55:36.780117 sudo[1829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 12 21:55:36.781000 audit[1829]: USER_START pid=1829 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 21:55:37.687388 systemd[1]: Starting docker.service... Feb 12 21:55:37.750722 env[1844]: time="2024-02-12T21:55:37.750645422Z" level=info msg="Starting up" Feb 12 21:55:37.759530 env[1844]: time="2024-02-12T21:55:37.759481366Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 12 21:55:37.759530 env[1844]: time="2024-02-12T21:55:37.759511819Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 12 21:55:37.759720 env[1844]: time="2024-02-12T21:55:37.759548997Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 12 21:55:37.759720 env[1844]: time="2024-02-12T21:55:37.759562635Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 12 21:55:37.763096 env[1844]: time="2024-02-12T21:55:37.763060018Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 12 21:55:37.763096 env[1844]: time="2024-02-12T21:55:37.763084563Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 12 21:55:37.763338 env[1844]: time="2024-02-12T21:55:37.763107281Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 12 21:55:37.763338 env[1844]: time="2024-02-12T21:55:37.763121132Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 12 21:55:37.772732 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport2617903937-merged.mount: Deactivated successfully. Feb 12 21:55:38.056589 env[1844]: time="2024-02-12T21:55:38.056015671Z" level=info msg="Loading containers: start." Feb 12 21:55:38.121000 audit[1874]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1874 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.121000 audit[1874]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffde1b26440 a2=0 a3=7ffde1b2642c items=0 ppid=1844 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.121000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Feb 12 21:55:38.124000 audit[1876]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1876 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.124000 audit[1876]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff49c29b00 a2=0 a3=7fff49c29aec items=0 ppid=1844 pid=1876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.124000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Feb 12 21:55:38.126000 audit[1878]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1878 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.126000 audit[1878]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fffc08de130 a2=0 a3=7fffc08de11c items=0 ppid=1844 pid=1878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.126000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 12 21:55:38.129000 audit[1880]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1880 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.129000 audit[1880]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffdb6c7b710 a2=0 a3=7ffdb6c7b6fc items=0 ppid=1844 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.129000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 12 21:55:38.132000 audit[1882]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1882 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.132000 audit[1882]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd6fa70d70 a2=0 a3=7ffd6fa70d5c items=0 ppid=1844 pid=1882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.132000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Feb 12 21:55:38.152000 audit[1887]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1887 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.152000 audit[1887]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffea9bf4900 a2=0 a3=7ffea9bf48ec items=0 ppid=1844 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.152000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Feb 12 21:55:38.164000 audit[1889]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1889 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.164000 audit[1889]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe953eaf00 a2=0 a3=7ffe953eaeec items=0 ppid=1844 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.164000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Feb 12 21:55:38.167000 audit[1891]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1891 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.167000 audit[1891]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffd920d5730 a2=0 a3=7ffd920d571c items=0 ppid=1844 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.167000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Feb 12 21:55:38.169000 audit[1893]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1893 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.169000 audit[1893]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff70203b80 a2=0 a3=7fff70203b6c items=0 ppid=1844 pid=1893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.169000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 12 21:55:38.183000 audit[1897]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1897 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.183000 audit[1897]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffea7b29e30 a2=0 a3=7ffea7b29e1c items=0 ppid=1844 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.183000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 12 21:55:38.184000 audit[1898]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1898 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.184000 audit[1898]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffea32cc4b0 a2=0 a3=7ffea32cc49c items=0 ppid=1844 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.184000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 12 21:55:38.196695 kernel: Initializing XFRM netlink socket Feb 12 21:55:38.240235 env[1844]: time="2024-02-12T21:55:38.240193489Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Feb 12 21:55:38.241441 (udev-worker)[1853]: Network interface NamePolicy= disabled on kernel command line. Feb 12 21:55:38.294000 audit[1906]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1906 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.294000 audit[1906]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7fff8723e070 a2=0 a3=7fff8723e05c items=0 ppid=1844 pid=1906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.294000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Feb 12 21:55:38.364000 audit[1909]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1909 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.364000 audit[1909]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffe1ea35c70 a2=0 a3=7ffe1ea35c5c items=0 ppid=1844 pid=1909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.364000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Feb 12 21:55:38.368000 audit[1912]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1912 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.368000 audit[1912]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fffeae0e860 a2=0 a3=7fffeae0e84c items=0 ppid=1844 pid=1912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.368000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Feb 12 21:55:38.371000 audit[1914]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1914 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.371000 audit[1914]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd113131c0 a2=0 a3=7ffd113131ac items=0 ppid=1844 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.371000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Feb 12 21:55:38.374000 audit[1916]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1916 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.374000 audit[1916]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7fffdaf50400 a2=0 a3=7fffdaf503ec items=0 ppid=1844 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.374000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Feb 12 21:55:38.376000 audit[1918]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1918 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.376000 audit[1918]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffca9231280 a2=0 a3=7ffca923126c items=0 ppid=1844 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.376000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Feb 12 21:55:38.378000 audit[1920]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1920 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.378000 audit[1920]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd215e5960 a2=0 a3=7ffd215e594c items=0 ppid=1844 pid=1920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.378000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Feb 12 21:55:38.389000 audit[1923]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1923 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.389000 audit[1923]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fffe9f01020 a2=0 a3=7fffe9f0100c items=0 ppid=1844 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.389000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Feb 12 21:55:38.392000 audit[1925]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1925 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.392000 audit[1925]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffef5ba7d10 a2=0 a3=7ffef5ba7cfc items=0 ppid=1844 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.392000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 12 21:55:38.412000 audit[1927]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1927 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.412000 audit[1927]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffc2fdf3ed0 a2=0 a3=7ffc2fdf3ebc items=0 ppid=1844 pid=1927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.412000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 12 21:55:38.414000 audit[1929]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1929 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.414000 audit[1929]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffee87ba310 a2=0 a3=7ffee87ba2fc items=0 ppid=1844 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.414000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Feb 12 21:55:38.417301 systemd-networkd[1383]: docker0: Link UP Feb 12 21:55:38.434000 audit[1933]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1933 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.434000 audit[1933]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc262fb6e0 a2=0 a3=7ffc262fb6cc items=0 ppid=1844 pid=1933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.434000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 12 21:55:38.435000 audit[1934]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1934 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:55:38.435000 audit[1934]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff811856e0 a2=0 a3=7fff811856cc items=0 ppid=1844 pid=1934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:55:38.435000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 12 21:55:38.438045 env[1844]: time="2024-02-12T21:55:38.438006517Z" level=info msg="Loading containers: done." Feb 12 21:55:38.452362 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3884516571-merged.mount: Deactivated successfully. Feb 12 21:55:38.470645 env[1844]: time="2024-02-12T21:55:38.470605171Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Feb 12 21:55:38.471092 env[1844]: time="2024-02-12T21:55:38.470866514Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Feb 12 21:55:38.471277 env[1844]: time="2024-02-12T21:55:38.471247433Z" level=info msg="Daemon has completed initialization" Feb 12 21:55:38.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:38.500860 systemd[1]: Started docker.service. Feb 12 21:55:38.511751 env[1844]: time="2024-02-12T21:55:38.511693601Z" level=info msg="API listen on /run/docker.sock" Feb 12 21:55:38.535526 systemd[1]: Reloading. Feb 12 21:55:38.701374 /usr/lib/systemd/system-generators/torcx-generator[1982]: time="2024-02-12T21:55:38Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 12 21:55:38.705472 /usr/lib/systemd/system-generators/torcx-generator[1982]: time="2024-02-12T21:55:38Z" level=info msg="torcx already run" Feb 12 21:55:38.811881 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 12 21:55:38.811904 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 12 21:55:38.837755 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 12 21:55:38.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.939000 audit: BPF prog-id=40 op=LOAD Feb 12 21:55:38.939000 audit: BPF prog-id=30 op=UNLOAD Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit: BPF prog-id=41 op=LOAD Feb 12 21:55:38.943000 audit: BPF prog-id=27 op=UNLOAD Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit: BPF prog-id=42 op=LOAD Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.943000 audit: BPF prog-id=43 op=LOAD Feb 12 21:55:38.943000 audit: BPF prog-id=28 op=UNLOAD Feb 12 21:55:38.943000 audit: BPF prog-id=29 op=UNLOAD Feb 12 21:55:38.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.944000 audit: BPF prog-id=44 op=LOAD Feb 12 21:55:38.945000 audit: BPF prog-id=26 op=UNLOAD Feb 12 21:55:38.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.950000 audit: BPF prog-id=45 op=LOAD Feb 12 21:55:38.950000 audit: BPF prog-id=36 op=UNLOAD Feb 12 21:55:38.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.951000 audit: BPF prog-id=46 op=LOAD Feb 12 21:55:38.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.951000 audit: BPF prog-id=47 op=LOAD Feb 12 21:55:38.951000 audit: BPF prog-id=37 op=UNLOAD Feb 12 21:55:38.951000 audit: BPF prog-id=38 op=UNLOAD Feb 12 21:55:38.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.958000 audit: BPF prog-id=48 op=LOAD Feb 12 21:55:38.958000 audit: BPF prog-id=32 op=UNLOAD Feb 12 21:55:38.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.959000 audit: BPF prog-id=49 op=LOAD Feb 12 21:55:38.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.960000 audit: BPF prog-id=50 op=LOAD Feb 12 21:55:38.960000 audit: BPF prog-id=33 op=UNLOAD Feb 12 21:55:38.960000 audit: BPF prog-id=34 op=UNLOAD Feb 12 21:55:38.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.961000 audit: BPF prog-id=51 op=LOAD Feb 12 21:55:38.961000 audit: BPF prog-id=31 op=UNLOAD Feb 12 21:55:38.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit: BPF prog-id=52 op=LOAD Feb 12 21:55:38.962000 audit: BPF prog-id=21 op=UNLOAD Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit: BPF prog-id=53 op=LOAD Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.962000 audit: BPF prog-id=54 op=LOAD Feb 12 21:55:38.962000 audit: BPF prog-id=22 op=UNLOAD Feb 12 21:55:38.962000 audit: BPF prog-id=23 op=UNLOAD Feb 12 21:55:38.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit: BPF prog-id=55 op=LOAD Feb 12 21:55:38.964000 audit: BPF prog-id=35 op=UNLOAD Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit: BPF prog-id=56 op=LOAD Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:55:38.964000 audit: BPF prog-id=57 op=LOAD Feb 12 21:55:38.964000 audit: BPF prog-id=24 op=UNLOAD Feb 12 21:55:38.964000 audit: BPF prog-id=25 op=UNLOAD Feb 12 21:55:38.980000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:38.981166 systemd[1]: Started kubelet.service. Feb 12 21:55:39.098325 kubelet[2034]: E0212 21:55:39.098266 2034 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Feb 12 21:55:39.102826 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 12 21:55:39.102999 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 12 21:55:39.102000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 12 21:55:39.610093 env[1564]: time="2024-02-12T21:55:39.609789279Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.10\"" Feb 12 21:55:39.774560 amazon-ssm-agent[1618]: 2024-02-12 21:55:39 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Feb 12 21:55:40.322251 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount660279194.mount: Deactivated successfully. Feb 12 21:55:43.186655 env[1564]: time="2024-02-12T21:55:43.186613371Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:43.190502 env[1564]: time="2024-02-12T21:55:43.190454397Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7968fc5c824ed95404f421a90882835f250220c0fd799b4fceef340dd5585ed5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:43.193840 env[1564]: time="2024-02-12T21:55:43.193791983Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:43.197331 env[1564]: time="2024-02-12T21:55:43.197287715Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:cfcebda74d6e665b68931d3589ee69fde81cd503ff3169888e4502af65579d98,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:43.198233 env[1564]: time="2024-02-12T21:55:43.198192400Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.10\" returns image reference \"sha256:7968fc5c824ed95404f421a90882835f250220c0fd799b4fceef340dd5585ed5\"" Feb 12 21:55:43.211767 env[1564]: time="2024-02-12T21:55:43.211721280Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.10\"" Feb 12 21:55:46.196594 env[1564]: time="2024-02-12T21:55:46.196536921Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:46.204812 env[1564]: time="2024-02-12T21:55:46.200475208Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c8134be729ba23c6e0c3e5dd52c393fc8d3cfc688bcec33540f64bb0137b67e0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:46.213236 env[1564]: time="2024-02-12T21:55:46.213185199Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:46.220489 env[1564]: time="2024-02-12T21:55:46.220441074Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:fa168ebca1f6dbfe86ef0a690e007531c1f53569274fc7dc2774fe228b6ce8c2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:46.221747 env[1564]: time="2024-02-12T21:55:46.221654143Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.10\" returns image reference \"sha256:c8134be729ba23c6e0c3e5dd52c393fc8d3cfc688bcec33540f64bb0137b67e0\"" Feb 12 21:55:46.238616 env[1564]: time="2024-02-12T21:55:46.238421215Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.10\"" Feb 12 21:55:48.297660 env[1564]: time="2024-02-12T21:55:48.297604470Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:48.306362 env[1564]: time="2024-02-12T21:55:48.306221598Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5eed9876e7181341b7015e3486dfd234f8e0d0d7d3d19b1bb971d720cd320975,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:48.309435 env[1564]: time="2024-02-12T21:55:48.309395320Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:48.312543 env[1564]: time="2024-02-12T21:55:48.312508060Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:09294de61e63987f181077cbc2f5c82463878af9cd8ecc6110c54150c9ae3143,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:48.313571 env[1564]: time="2024-02-12T21:55:48.313533688Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.10\" returns image reference \"sha256:5eed9876e7181341b7015e3486dfd234f8e0d0d7d3d19b1bb971d720cd320975\"" Feb 12 21:55:48.332777 env[1564]: time="2024-02-12T21:55:48.332730025Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.10\"" Feb 12 21:55:49.253923 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Feb 12 21:55:49.264491 kernel: kauditd_printk_skb: 292 callbacks suppressed Feb 12 21:55:49.264587 kernel: audit: type=1130 audit(1707774949.252:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:49.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:49.254206 systemd[1]: Stopped kubelet.service. Feb 12 21:55:49.256950 systemd[1]: Started kubelet.service. Feb 12 21:55:49.252000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:49.274972 kernel: audit: type=1131 audit(1707774949.252:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:49.255000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:49.280695 kernel: audit: type=1130 audit(1707774949.255:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:49.387776 kubelet[2067]: E0212 21:55:49.387731 2067 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Feb 12 21:55:49.393346 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 12 21:55:49.393558 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 12 21:55:49.392000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 12 21:55:49.399694 kernel: audit: type=1131 audit(1707774949.392:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 12 21:55:49.765531 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4094251688.mount: Deactivated successfully. Feb 12 21:55:50.774976 env[1564]: time="2024-02-12T21:55:50.774923691Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:50.778325 env[1564]: time="2024-02-12T21:55:50.778252364Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:db7b01e105753475c198490cf875df1314fd1a599f67ea1b184586cb399e1cae,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:50.781457 env[1564]: time="2024-02-12T21:55:50.781416754Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:50.783694 env[1564]: time="2024-02-12T21:55:50.783642863Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d084b53c772f62ec38fddb2348a82d4234016daf6cd43fedbf0b3281f3790f88,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:50.784285 env[1564]: time="2024-02-12T21:55:50.784248350Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.10\" returns image reference \"sha256:db7b01e105753475c198490cf875df1314fd1a599f67ea1b184586cb399e1cae\"" Feb 12 21:55:50.799523 env[1564]: time="2024-02-12T21:55:50.799477110Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Feb 12 21:55:51.315948 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount960041652.mount: Deactivated successfully. Feb 12 21:55:51.332795 env[1564]: time="2024-02-12T21:55:51.332689406Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:51.336818 env[1564]: time="2024-02-12T21:55:51.336767543Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:51.340863 env[1564]: time="2024-02-12T21:55:51.340819110Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:51.343734 env[1564]: time="2024-02-12T21:55:51.343691147Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:51.344259 env[1564]: time="2024-02-12T21:55:51.344219899Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Feb 12 21:55:51.385632 env[1564]: time="2024-02-12T21:55:51.385574060Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Feb 12 21:55:52.345453 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1393669870.mount: Deactivated successfully. Feb 12 21:55:58.527339 env[1564]: time="2024-02-12T21:55:58.527280517Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:58.531411 env[1564]: time="2024-02-12T21:55:58.531365684Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:58.534847 env[1564]: time="2024-02-12T21:55:58.534803376Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:58.537927 env[1564]: time="2024-02-12T21:55:58.537883869Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:55:58.538739 env[1564]: time="2024-02-12T21:55:58.538701490Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681\"" Feb 12 21:55:58.554349 env[1564]: time="2024-02-12T21:55:58.554300760Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Feb 12 21:55:59.154136 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2373486988.mount: Deactivated successfully. Feb 12 21:55:59.637155 kernel: audit: type=1130 audit(1707774959.600:425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:59.637351 kernel: audit: type=1131 audit(1707774959.600:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:59.600000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:59.600000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:59.601054 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Feb 12 21:55:59.601337 systemd[1]: Stopped kubelet.service. Feb 12 21:55:59.625313 systemd[1]: Started kubelet.service. Feb 12 21:55:59.624000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:59.667803 kernel: audit: type=1130 audit(1707774959.624:427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:55:59.792047 kubelet[2089]: E0212 21:55:59.792002 2089 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Feb 12 21:55:59.794000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 12 21:55:59.795059 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 12 21:55:59.795232 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 12 21:55:59.801690 kernel: audit: type=1131 audit(1707774959.794:428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 12 21:56:00.213069 env[1564]: time="2024-02-12T21:56:00.213011136Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:00.220783 env[1564]: time="2024-02-12T21:56:00.220496629Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:00.227728 env[1564]: time="2024-02-12T21:56:00.227683398Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:00.233419 env[1564]: time="2024-02-12T21:56:00.233374248Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:00.234328 env[1564]: time="2024-02-12T21:56:00.234147703Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Feb 12 21:56:01.477215 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Feb 12 21:56:01.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:56:01.486763 kernel: audit: type=1131 audit(1707774961.476:429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:56:01.501000 audit: BPF prog-id=47 op=UNLOAD Feb 12 21:56:01.506440 kernel: audit: type=1334 audit(1707774961.501:430): prog-id=47 op=UNLOAD Feb 12 21:56:01.506551 kernel: audit: type=1334 audit(1707774961.501:431): prog-id=46 op=UNLOAD Feb 12 21:56:01.501000 audit: BPF prog-id=46 op=UNLOAD Feb 12 21:56:01.501000 audit: BPF prog-id=45 op=UNLOAD Feb 12 21:56:01.509701 kernel: audit: type=1334 audit(1707774961.501:432): prog-id=45 op=UNLOAD Feb 12 21:56:04.580324 systemd[1]: Stopped kubelet.service. Feb 12 21:56:04.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:56:04.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:56:04.605711 kernel: audit: type=1130 audit(1707774964.579:433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:56:04.607509 kernel: audit: type=1131 audit(1707774964.579:434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:56:04.625365 systemd[1]: Reloading. Feb 12 21:56:04.754466 /usr/lib/systemd/system-generators/torcx-generator[2183]: time="2024-02-12T21:56:04Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 12 21:56:04.754986 /usr/lib/systemd/system-generators/torcx-generator[2183]: time="2024-02-12T21:56:04Z" level=info msg="torcx already run" Feb 12 21:56:04.873564 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 12 21:56:04.873590 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 12 21:56:04.926051 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 12 21:56:05.110694 kernel: audit: type=1400 audit(1707774965.099:435): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110877 kernel: audit: type=1400 audit(1707774965.099:436): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.121680 kernel: audit: type=1400 audit(1707774965.099:437): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.121745 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Feb 12 21:56:05.128924 kernel: audit: type=1400 audit(1707774965.099:438): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.129176 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Feb 12 21:56:05.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.137325 kernel: audit: backlog limit exceeded Feb 12 21:56:05.137451 kernel: audit: type=1400 audit(1707774965.099:439): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.137487 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Feb 12 21:56:05.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.143426 kernel: audit: type=1400 audit(1707774965.099:440): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.104000 audit: BPF prog-id=58 op=LOAD Feb 12 21:56:05.104000 audit: BPF prog-id=40 op=UNLOAD Feb 12 21:56:05.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.109000 audit: BPF prog-id=59 op=LOAD Feb 12 21:56:05.110000 audit: BPF prog-id=41 op=UNLOAD Feb 12 21:56:05.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110000 audit: BPF prog-id=60 op=LOAD Feb 12 21:56:05.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.110000 audit: BPF prog-id=61 op=LOAD Feb 12 21:56:05.110000 audit: BPF prog-id=42 op=UNLOAD Feb 12 21:56:05.110000 audit: BPF prog-id=43 op=UNLOAD Feb 12 21:56:05.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.111000 audit: BPF prog-id=62 op=LOAD Feb 12 21:56:05.111000 audit: BPF prog-id=44 op=UNLOAD Feb 12 21:56:05.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.120000 audit: BPF prog-id=63 op=LOAD Feb 12 21:56:05.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.143000 audit: BPF prog-id=66 op=LOAD Feb 12 21:56:05.143000 audit: BPF prog-id=51 op=UNLOAD Feb 12 21:56:05.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit: BPF prog-id=70 op=LOAD Feb 12 21:56:05.146000 audit: BPF prog-id=55 op=UNLOAD Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit: BPF prog-id=71 op=LOAD Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.146000 audit: BPF prog-id=57 op=UNLOAD Feb 12 21:56:05.170182 systemd[1]: Started kubelet.service. Feb 12 21:56:05.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:56:05.243980 kubelet[2235]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 12 21:56:05.244349 kubelet[2235]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Feb 12 21:56:05.244392 kubelet[2235]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 12 21:56:05.244506 kubelet[2235]: I0212 21:56:05.244483 2235 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 12 21:56:05.520798 kubelet[2235]: I0212 21:56:05.515082 2235 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Feb 12 21:56:05.520798 kubelet[2235]: I0212 21:56:05.515190 2235 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 12 21:56:05.520798 kubelet[2235]: I0212 21:56:05.515700 2235 server.go:837] "Client rotation is on, will bootstrap in background" Feb 12 21:56:05.529818 kubelet[2235]: E0212 21:56:05.529789 2235 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.28.103:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:05.529965 kubelet[2235]: I0212 21:56:05.529855 2235 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 12 21:56:05.533023 kubelet[2235]: I0212 21:56:05.532985 2235 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 12 21:56:05.533252 kubelet[2235]: I0212 21:56:05.533233 2235 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 12 21:56:05.533378 kubelet[2235]: I0212 21:56:05.533335 2235 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Feb 12 21:56:05.533514 kubelet[2235]: I0212 21:56:05.533387 2235 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Feb 12 21:56:05.533514 kubelet[2235]: I0212 21:56:05.533404 2235 container_manager_linux.go:302] "Creating device plugin manager" Feb 12 21:56:05.533777 kubelet[2235]: I0212 21:56:05.533530 2235 state_mem.go:36] "Initialized new in-memory state store" Feb 12 21:56:05.538022 kubelet[2235]: I0212 21:56:05.537993 2235 kubelet.go:405] "Attempting to sync node with API server" Feb 12 21:56:05.538022 kubelet[2235]: I0212 21:56:05.538025 2235 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 12 21:56:05.538180 kubelet[2235]: I0212 21:56:05.538047 2235 kubelet.go:309] "Adding apiserver pod source" Feb 12 21:56:05.538180 kubelet[2235]: I0212 21:56:05.538066 2235 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 12 21:56:05.538872 kubelet[2235]: W0212 21:56:05.538828 2235 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.28.103:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-28-103&limit=500&resourceVersion=0": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:05.539018 kubelet[2235]: E0212 21:56:05.539006 2235 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.28.103:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-28-103&limit=500&resourceVersion=0": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:05.539196 kubelet[2235]: I0212 21:56:05.539185 2235 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 12 21:56:05.539675 kubelet[2235]: W0212 21:56:05.539648 2235 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Feb 12 21:56:05.540353 kubelet[2235]: I0212 21:56:05.540336 2235 server.go:1168] "Started kubelet" Feb 12 21:56:05.543000 audit[2235]: AVC avc: denied { mac_admin } for pid=2235 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.543000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 21:56:05.543000 audit[2235]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009ae660 a1=c0007788b8 a2=c0009ae630 a3=25 items=0 ppid=1 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:05.543000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 21:56:05.543000 audit[2235]: AVC avc: denied { mac_admin } for pid=2235 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.543000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 21:56:05.543000 audit[2235]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0006ffc00 a1=c0007788d0 a2=c0009ae6f0 a3=25 items=0 ppid=1 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:05.543000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 21:56:05.545301 kubelet[2235]: I0212 21:56:05.544586 2235 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 12 21:56:05.545301 kubelet[2235]: I0212 21:56:05.544634 2235 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 12 21:56:05.545301 kubelet[2235]: I0212 21:56:05.544743 2235 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 12 21:56:05.550195 kubelet[2235]: E0212 21:56:05.550163 2235 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 12 21:56:05.550195 kubelet[2235]: E0212 21:56:05.550195 2235 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 12 21:56:05.550561 kubelet[2235]: W0212 21:56:05.550517 2235 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.28.103:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:05.550634 kubelet[2235]: E0212 21:56:05.550566 2235 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.28.103:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:05.550746 kubelet[2235]: E0212 21:56:05.550623 2235 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-28-103.17b33c487155230c", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-28-103", UID:"ip-172-31-28-103", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-28-103"}, FirstTimestamp:time.Date(2024, time.February, 12, 21, 56, 5, 540266764, time.Local), LastTimestamp:time.Date(2024, time.February, 12, 21, 56, 5, 540266764, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.28.103:6443/api/v1/namespaces/default/events": dial tcp 172.31.28.103:6443: connect: connection refused'(may retry after sleeping) Feb 12 21:56:05.553475 kubelet[2235]: I0212 21:56:05.553450 2235 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Feb 12 21:56:05.554143 kubelet[2235]: I0212 21:56:05.554115 2235 volume_manager.go:284] "Starting Kubelet Volume Manager" Feb 12 21:56:05.555647 kubelet[2235]: I0212 21:56:05.555437 2235 server.go:461] "Adding debug handlers to kubelet server" Feb 12 21:56:05.556058 kubelet[2235]: I0212 21:56:05.556040 2235 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Feb 12 21:56:05.556655 kubelet[2235]: W0212 21:56:05.556616 2235 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.28.103:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:05.556804 kubelet[2235]: E0212 21:56:05.556793 2235 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.28.103:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:05.557019 kubelet[2235]: E0212 21:56:05.557007 2235 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.28.103:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-28-103?timeout=10s\": dial tcp 172.31.28.103:6443: connect: connection refused" interval="200ms" Feb 12 21:56:05.558087 kubelet[2235]: I0212 21:56:05.558073 2235 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Feb 12 21:56:05.569000 audit[2246]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2246 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:05.569000 audit[2246]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffb88a67b0 a2=0 a3=7fffb88a679c items=0 ppid=2235 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:05.569000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 12 21:56:05.583000 audit[2248]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2248 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:05.583000 audit[2248]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc8c211bc0 a2=0 a3=7ffc8c211bac items=0 ppid=2235 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:05.583000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 12 21:56:05.590000 audit[2251]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2251 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:05.590000 audit[2251]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc998ff020 a2=0 a3=7ffc998ff00c items=0 ppid=2235 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:05.590000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 12 21:56:05.596000 audit[2253]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2253 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:05.596000 audit[2253]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcca03f860 a2=0 a3=7ffcca03f84c items=0 ppid=2235 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:05.596000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 12 21:56:05.619922 kubelet[2235]: I0212 21:56:05.619806 2235 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 12 21:56:05.620247 kubelet[2235]: I0212 21:56:05.620229 2235 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 12 21:56:05.620374 kubelet[2235]: I0212 21:56:05.620364 2235 state_mem.go:36] "Initialized new in-memory state store" Feb 12 21:56:05.620000 audit[2256]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2256 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:05.620000 audit[2256]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffc819726e0 a2=0 a3=7ffc819726cc items=0 ppid=2235 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:05.620000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Feb 12 21:56:05.622000 audit[2258]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:05.622000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff7a533100 a2=0 a3=7fff7a5330ec items=0 ppid=2235 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:05.622000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 12 21:56:05.624000 audit[2259]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2259 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:05.624000 audit[2259]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc15c74540 a2=0 a3=7ffc15c7452c items=0 ppid=2235 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:05.624000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 12 21:56:05.625000 audit[2260]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=2260 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:05.625000 audit[2260]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe478ab500 a2=0 a3=7ffe478ab4ec items=0 ppid=2235 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:05.625000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 12 21:56:05.626000 audit[2261]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=2261 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:05.626000 audit[2261]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeb53dd7a0 a2=0 a3=7ffeb53dd78c items=0 ppid=2235 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:05.626000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 12 21:56:05.628000 audit[2262]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:05.628000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffa5f9ed20 a2=0 a3=7fffa5f9ed0c items=0 ppid=2235 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:05.628000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 12 21:56:05.629000 audit[2263]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=2263 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:05.629000 audit[2263]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffcf617d1e0 a2=0 a3=7ffcf617d1cc items=0 ppid=2235 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:05.629000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 12 21:56:05.633000 audit[2264]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2264 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:05.633000 audit[2264]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe333e82b0 a2=0 a3=7ffe333e829c items=0 ppid=2235 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:05.633000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 12 21:56:05.665397 kubelet[2235]: I0212 21:56:05.621784 2235 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Feb 12 21:56:05.665397 kubelet[2235]: I0212 21:56:05.623551 2235 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Feb 12 21:56:05.665397 kubelet[2235]: I0212 21:56:05.623574 2235 status_manager.go:207] "Starting to sync pod status with apiserver" Feb 12 21:56:05.665397 kubelet[2235]: I0212 21:56:05.623601 2235 kubelet.go:2257] "Starting kubelet main sync loop" Feb 12 21:56:05.665397 kubelet[2235]: E0212 21:56:05.623689 2235 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Feb 12 21:56:05.665397 kubelet[2235]: W0212 21:56:05.634243 2235 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.28.103:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:05.665397 kubelet[2235]: E0212 21:56:05.634570 2235 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.28.103:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:05.665397 kubelet[2235]: I0212 21:56:05.656582 2235 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-103" Feb 12 21:56:05.665397 kubelet[2235]: E0212 21:56:05.656953 2235 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.28.103:6443/api/v1/nodes\": dial tcp 172.31.28.103:6443: connect: connection refused" node="ip-172-31-28-103" Feb 12 21:56:05.668613 kubelet[2235]: I0212 21:56:05.668581 2235 policy_none.go:49] "None policy: Start" Feb 12 21:56:05.669479 kubelet[2235]: I0212 21:56:05.669462 2235 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 12 21:56:05.669569 kubelet[2235]: I0212 21:56:05.669528 2235 state_mem.go:35] "Initializing new in-memory state store" Feb 12 21:56:05.696837 systemd[1]: Created slice kubepods.slice. Feb 12 21:56:05.703654 systemd[1]: Created slice kubepods-burstable.slice. Feb 12 21:56:05.708446 systemd[1]: Created slice kubepods-besteffort.slice. Feb 12 21:56:05.716451 kubelet[2235]: I0212 21:56:05.716420 2235 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 12 21:56:05.715000 audit[2235]: AVC avc: denied { mac_admin } for pid=2235 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:05.715000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 21:56:05.715000 audit[2235]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000cbe990 a1=c000c84e70 a2=c000cbe960 a3=25 items=0 ppid=1 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:05.715000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 21:56:05.717237 kubelet[2235]: I0212 21:56:05.716636 2235 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 12 21:56:05.717237 kubelet[2235]: I0212 21:56:05.717124 2235 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 12 21:56:05.720806 kubelet[2235]: E0212 21:56:05.720424 2235 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-28-103\" not found" Feb 12 21:56:05.724259 kubelet[2235]: I0212 21:56:05.724224 2235 topology_manager.go:212] "Topology Admit Handler" Feb 12 21:56:05.726117 kubelet[2235]: I0212 21:56:05.726091 2235 topology_manager.go:212] "Topology Admit Handler" Feb 12 21:56:05.727796 kubelet[2235]: I0212 21:56:05.727769 2235 topology_manager.go:212] "Topology Admit Handler" Feb 12 21:56:05.735931 systemd[1]: Created slice kubepods-burstable-pod28df846329fd8a5f0f31661ae35f08f3.slice. Feb 12 21:56:05.754906 systemd[1]: Created slice kubepods-burstable-pod9ae5ff5b2112251047b54b7d81905705.slice. Feb 12 21:56:05.759589 kubelet[2235]: E0212 21:56:05.757845 2235 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.28.103:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-28-103?timeout=10s\": dial tcp 172.31.28.103:6443: connect: connection refused" interval="400ms" Feb 12 21:56:05.760742 systemd[1]: Created slice kubepods-burstable-pod0c8d1c12cde814e1566de4643b8fc692.slice. Feb 12 21:56:05.761459 kubelet[2235]: I0212 21:56:05.761438 2235 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/28df846329fd8a5f0f31661ae35f08f3-ca-certs\") pod \"kube-apiserver-ip-172-31-28-103\" (UID: \"28df846329fd8a5f0f31661ae35f08f3\") " pod="kube-system/kube-apiserver-ip-172-31-28-103" Feb 12 21:56:05.859047 kubelet[2235]: I0212 21:56:05.859017 2235 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-103" Feb 12 21:56:05.859698 kubelet[2235]: E0212 21:56:05.859660 2235 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.28.103:6443/api/v1/nodes\": dial tcp 172.31.28.103:6443: connect: connection refused" node="ip-172-31-28-103" Feb 12 21:56:05.862846 kubelet[2235]: I0212 21:56:05.862810 2235 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/0c8d1c12cde814e1566de4643b8fc692-kubeconfig\") pod \"kube-scheduler-ip-172-31-28-103\" (UID: \"0c8d1c12cde814e1566de4643b8fc692\") " pod="kube-system/kube-scheduler-ip-172-31-28-103" Feb 12 21:56:05.862969 kubelet[2235]: I0212 21:56:05.862893 2235 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/28df846329fd8a5f0f31661ae35f08f3-k8s-certs\") pod \"kube-apiserver-ip-172-31-28-103\" (UID: \"28df846329fd8a5f0f31661ae35f08f3\") " pod="kube-system/kube-apiserver-ip-172-31-28-103" Feb 12 21:56:05.862969 kubelet[2235]: I0212 21:56:05.862927 2235 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9ae5ff5b2112251047b54b7d81905705-ca-certs\") pod \"kube-controller-manager-ip-172-31-28-103\" (UID: \"9ae5ff5b2112251047b54b7d81905705\") " pod="kube-system/kube-controller-manager-ip-172-31-28-103" Feb 12 21:56:05.862969 kubelet[2235]: I0212 21:56:05.862964 2235 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/9ae5ff5b2112251047b54b7d81905705-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-28-103\" (UID: \"9ae5ff5b2112251047b54b7d81905705\") " pod="kube-system/kube-controller-manager-ip-172-31-28-103" Feb 12 21:56:05.863127 kubelet[2235]: I0212 21:56:05.862997 2235 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9ae5ff5b2112251047b54b7d81905705-kubeconfig\") pod \"kube-controller-manager-ip-172-31-28-103\" (UID: \"9ae5ff5b2112251047b54b7d81905705\") " pod="kube-system/kube-controller-manager-ip-172-31-28-103" Feb 12 21:56:05.863127 kubelet[2235]: I0212 21:56:05.863034 2235 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9ae5ff5b2112251047b54b7d81905705-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-28-103\" (UID: \"9ae5ff5b2112251047b54b7d81905705\") " pod="kube-system/kube-controller-manager-ip-172-31-28-103" Feb 12 21:56:05.863127 kubelet[2235]: I0212 21:56:05.863068 2235 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/28df846329fd8a5f0f31661ae35f08f3-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-28-103\" (UID: \"28df846329fd8a5f0f31661ae35f08f3\") " pod="kube-system/kube-apiserver-ip-172-31-28-103" Feb 12 21:56:05.863127 kubelet[2235]: I0212 21:56:05.863100 2235 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9ae5ff5b2112251047b54b7d81905705-k8s-certs\") pod \"kube-controller-manager-ip-172-31-28-103\" (UID: \"9ae5ff5b2112251047b54b7d81905705\") " pod="kube-system/kube-controller-manager-ip-172-31-28-103" Feb 12 21:56:06.056863 env[1564]: time="2024-02-12T21:56:06.054524706Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-28-103,Uid:28df846329fd8a5f0f31661ae35f08f3,Namespace:kube-system,Attempt:0,}" Feb 12 21:56:06.064536 env[1564]: time="2024-02-12T21:56:06.064489803Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-28-103,Uid:9ae5ff5b2112251047b54b7d81905705,Namespace:kube-system,Attempt:0,}" Feb 12 21:56:06.066564 env[1564]: time="2024-02-12T21:56:06.065313175Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-28-103,Uid:0c8d1c12cde814e1566de4643b8fc692,Namespace:kube-system,Attempt:0,}" Feb 12 21:56:06.158958 kubelet[2235]: E0212 21:56:06.158851 2235 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.28.103:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-28-103?timeout=10s\": dial tcp 172.31.28.103:6443: connect: connection refused" interval="800ms" Feb 12 21:56:06.262545 kubelet[2235]: I0212 21:56:06.262468 2235 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-103" Feb 12 21:56:06.264518 kubelet[2235]: E0212 21:56:06.263013 2235 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.28.103:6443/api/v1/nodes\": dial tcp 172.31.28.103:6443: connect: connection refused" node="ip-172-31-28-103" Feb 12 21:56:06.478700 kubelet[2235]: W0212 21:56:06.478378 2235 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.28.103:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:06.478700 kubelet[2235]: E0212 21:56:06.478470 2235 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.28.103:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:06.597350 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1786302724.mount: Deactivated successfully. Feb 12 21:56:06.628194 env[1564]: time="2024-02-12T21:56:06.628142051Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:06.630555 env[1564]: time="2024-02-12T21:56:06.630507944Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:06.634243 env[1564]: time="2024-02-12T21:56:06.634094443Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:06.638253 env[1564]: time="2024-02-12T21:56:06.638111083Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:06.644604 env[1564]: time="2024-02-12T21:56:06.644543553Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:06.647771 env[1564]: time="2024-02-12T21:56:06.647727862Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:06.649708 env[1564]: time="2024-02-12T21:56:06.649653242Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:06.653557 env[1564]: time="2024-02-12T21:56:06.653511145Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:06.666972 env[1564]: time="2024-02-12T21:56:06.666923194Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:06.671033 env[1564]: time="2024-02-12T21:56:06.670988624Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:06.672433 env[1564]: time="2024-02-12T21:56:06.672385367Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:06.673403 env[1564]: time="2024-02-12T21:56:06.673367301Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:06.687394 kubelet[2235]: W0212 21:56:06.687259 2235 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.28.103:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-28-103&limit=500&resourceVersion=0": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:06.687394 kubelet[2235]: E0212 21:56:06.687407 2235 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.28.103:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-28-103&limit=500&resourceVersion=0": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:06.711237 env[1564]: time="2024-02-12T21:56:06.711143022Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 21:56:06.711408 env[1564]: time="2024-02-12T21:56:06.711251857Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 21:56:06.711408 env[1564]: time="2024-02-12T21:56:06.711285197Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 21:56:06.711972 env[1564]: time="2024-02-12T21:56:06.711916391Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d93e6b5956e712b7437dd729c6c3b8af31ff78ece51b809482e64363ee42590d pid=2274 runtime=io.containerd.runc.v2 Feb 12 21:56:06.713297 kubelet[2235]: W0212 21:56:06.713236 2235 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.28.103:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:06.713398 kubelet[2235]: E0212 21:56:06.713313 2235 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.28.103:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:06.751429 systemd[1]: Started cri-containerd-d93e6b5956e712b7437dd729c6c3b8af31ff78ece51b809482e64363ee42590d.scope. Feb 12 21:56:06.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.773000 audit: BPF prog-id=73 op=LOAD Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2274 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:06.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439336536623539353665373132623734333764643732396336633362 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2274 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:06.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439336536623539353665373132623734333764643732396336633362 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit: BPF prog-id=74 op=LOAD Feb 12 21:56:06.778000 audit[2285]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00037afd0 items=0 ppid=2274 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:06.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439336536623539353665373132623734333764643732396336633362 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit: BPF prog-id=75 op=LOAD Feb 12 21:56:06.778000 audit[2285]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00037b018 items=0 ppid=2274 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:06.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439336536623539353665373132623734333764643732396336633362 Feb 12 21:56:06.778000 audit: BPF prog-id=75 op=UNLOAD Feb 12 21:56:06.778000 audit: BPF prog-id=74 op=UNLOAD Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { perfmon } for pid=2285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit[2285]: AVC avc: denied { bpf } for pid=2285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.778000 audit: BPF prog-id=76 op=LOAD Feb 12 21:56:06.778000 audit[2285]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00037b428 items=0 ppid=2274 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:06.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439336536623539353665373132623734333764643732396336633362 Feb 12 21:56:06.809868 env[1564]: time="2024-02-12T21:56:06.806447399Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 21:56:06.809868 env[1564]: time="2024-02-12T21:56:06.806613192Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 21:56:06.809868 env[1564]: time="2024-02-12T21:56:06.806648875Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 21:56:06.809868 env[1564]: time="2024-02-12T21:56:06.806964051Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2bda8eb26d602534cd932a54a1abab7a1a3310d419690c99a6da7b058fafd003 pid=2310 runtime=io.containerd.runc.v2 Feb 12 21:56:06.850489 systemd[1]: Started cri-containerd-2bda8eb26d602534cd932a54a1abab7a1a3310d419690c99a6da7b058fafd003.scope. Feb 12 21:56:06.873019 env[1564]: time="2024-02-12T21:56:06.872913443Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 21:56:06.873200 env[1564]: time="2024-02-12T21:56:06.873024752Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 21:56:06.873200 env[1564]: time="2024-02-12T21:56:06.873054547Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 21:56:06.873301 env[1564]: time="2024-02-12T21:56:06.873214144Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/db0f9a5c78436ed89cff80f59c174ec6d4cbba63259c00d32e78b1f46b698324 pid=2341 runtime=io.containerd.runc.v2 Feb 12 21:56:06.877086 env[1564]: time="2024-02-12T21:56:06.877032888Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-28-103,Uid:9ae5ff5b2112251047b54b7d81905705,Namespace:kube-system,Attempt:0,} returns sandbox id \"d93e6b5956e712b7437dd729c6c3b8af31ff78ece51b809482e64363ee42590d\"" Feb 12 21:56:06.890274 env[1564]: time="2024-02-12T21:56:06.890225865Z" level=info msg="CreateContainer within sandbox \"d93e6b5956e712b7437dd729c6c3b8af31ff78ece51b809482e64363ee42590d\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Feb 12 21:56:06.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit: BPF prog-id=77 op=LOAD Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2310 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:06.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262646138656232366436303235333463643933326135346131616261 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2310 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:06.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262646138656232366436303235333463643933326135346131616261 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit: BPF prog-id=78 op=LOAD Feb 12 21:56:06.903000 audit[2321]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000221200 items=0 ppid=2310 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:06.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262646138656232366436303235333463643933326135346131616261 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.903000 audit: BPF prog-id=79 op=LOAD Feb 12 21:56:06.903000 audit[2321]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000221248 items=0 ppid=2310 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:06.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262646138656232366436303235333463643933326135346131616261 Feb 12 21:56:06.904000 audit: BPF prog-id=79 op=UNLOAD Feb 12 21:56:06.904000 audit: BPF prog-id=78 op=UNLOAD Feb 12 21:56:06.904000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.904000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.904000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.904000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.904000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.904000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.904000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.904000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.904000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.904000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.904000 audit: BPF prog-id=80 op=LOAD Feb 12 21:56:06.904000 audit[2321]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000221658 items=0 ppid=2310 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:06.904000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262646138656232366436303235333463643933326135346131616261 Feb 12 21:56:06.935340 systemd[1]: Started cri-containerd-db0f9a5c78436ed89cff80f59c174ec6d4cbba63259c00d32e78b1f46b698324.scope. Feb 12 21:56:06.939655 env[1564]: time="2024-02-12T21:56:06.939603523Z" level=info msg="CreateContainer within sandbox \"d93e6b5956e712b7437dd729c6c3b8af31ff78ece51b809482e64363ee42590d\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"4f3ebf1bb5dc591b1931441593cd8f90edce75a6f305452d1362aed5bf651925\"" Feb 12 21:56:06.940487 env[1564]: time="2024-02-12T21:56:06.940447561Z" level=info msg="StartContainer for \"4f3ebf1bb5dc591b1931441593cd8f90edce75a6f305452d1362aed5bf651925\"" Feb 12 21:56:06.960574 kubelet[2235]: E0212 21:56:06.960523 2235 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.28.103:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-28-103?timeout=10s\": dial tcp 172.31.28.103:6443: connect: connection refused" interval="1.6s" Feb 12 21:56:06.974759 env[1564]: time="2024-02-12T21:56:06.974645339Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-28-103,Uid:0c8d1c12cde814e1566de4643b8fc692,Namespace:kube-system,Attempt:0,} returns sandbox id \"2bda8eb26d602534cd932a54a1abab7a1a3310d419690c99a6da7b058fafd003\"" Feb 12 21:56:06.985134 systemd[1]: Started cri-containerd-4f3ebf1bb5dc591b1931441593cd8f90edce75a6f305452d1362aed5bf651925.scope. Feb 12 21:56:06.986627 env[1564]: time="2024-02-12T21:56:06.986577454Z" level=info msg="CreateContainer within sandbox \"2bda8eb26d602534cd932a54a1abab7a1a3310d419690c99a6da7b058fafd003\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Feb 12 21:56:06.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit: BPF prog-id=81 op=LOAD Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2341 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:06.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462306639613563373834333665643839636666383066353963313734 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=2341 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:06.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462306639613563373834333665643839636666383066353963313734 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit: BPF prog-id=82 op=LOAD Feb 12 21:56:06.992000 audit[2360]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0003a9d00 items=0 ppid=2341 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:06.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462306639613563373834333665643839636666383066353963313734 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.992000 audit: BPF prog-id=83 op=LOAD Feb 12 21:56:06.992000 audit[2360]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0003a9d48 items=0 ppid=2341 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:06.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462306639613563373834333665643839636666383066353963313734 Feb 12 21:56:06.993000 audit: BPF prog-id=83 op=UNLOAD Feb 12 21:56:06.993000 audit: BPF prog-id=82 op=UNLOAD Feb 12 21:56:06.993000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.993000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.993000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.993000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.993000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.993000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.993000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.993000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.993000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.993000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:06.993000 audit: BPF prog-id=84 op=LOAD Feb 12 21:56:06.993000 audit[2360]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c00042c158 items=0 ppid=2341 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:06.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462306639613563373834333665643839636666383066353963313734 Feb 12 21:56:07.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.021000 audit: BPF prog-id=85 op=LOAD Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2274 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:07.027000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466336562663162623564633539316231393331343431353933636438 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2274 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:07.027000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466336562663162623564633539316231393331343431353933636438 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit: BPF prog-id=86 op=LOAD Feb 12 21:56:07.027000 audit[2376]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000388fe0 items=0 ppid=2274 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:07.027000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466336562663162623564633539316231393331343431353933636438 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit: BPF prog-id=87 op=LOAD Feb 12 21:56:07.027000 audit[2376]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000389028 items=0 ppid=2274 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:07.027000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466336562663162623564633539316231393331343431353933636438 Feb 12 21:56:07.027000 audit: BPF prog-id=87 op=UNLOAD Feb 12 21:56:07.027000 audit: BPF prog-id=86 op=UNLOAD Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.027000 audit: BPF prog-id=88 op=LOAD Feb 12 21:56:07.027000 audit[2376]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000389438 items=0 ppid=2274 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:07.027000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466336562663162623564633539316231393331343431353933636438 Feb 12 21:56:07.048646 env[1564]: time="2024-02-12T21:56:07.048596797Z" level=info msg="CreateContainer within sandbox \"2bda8eb26d602534cd932a54a1abab7a1a3310d419690c99a6da7b058fafd003\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"090d17da541d4876f88f2921507245bdae6d8955b6860d2d25ca82eeef8c0997\"" Feb 12 21:56:07.049371 env[1564]: time="2024-02-12T21:56:07.049339058Z" level=info msg="StartContainer for \"090d17da541d4876f88f2921507245bdae6d8955b6860d2d25ca82eeef8c0997\"" Feb 12 21:56:07.058187 env[1564]: time="2024-02-12T21:56:07.058140750Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-28-103,Uid:28df846329fd8a5f0f31661ae35f08f3,Namespace:kube-system,Attempt:0,} returns sandbox id \"db0f9a5c78436ed89cff80f59c174ec6d4cbba63259c00d32e78b1f46b698324\"" Feb 12 21:56:07.061634 env[1564]: time="2024-02-12T21:56:07.061596326Z" level=info msg="CreateContainer within sandbox \"db0f9a5c78436ed89cff80f59c174ec6d4cbba63259c00d32e78b1f46b698324\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Feb 12 21:56:07.069520 kubelet[2235]: I0212 21:56:07.069094 2235 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-103" Feb 12 21:56:07.069520 kubelet[2235]: E0212 21:56:07.069482 2235 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.28.103:6443/api/v1/nodes\": dial tcp 172.31.28.103:6443: connect: connection refused" node="ip-172-31-28-103" Feb 12 21:56:07.095518 env[1564]: time="2024-02-12T21:56:07.095473554Z" level=info msg="CreateContainer within sandbox \"db0f9a5c78436ed89cff80f59c174ec6d4cbba63259c00d32e78b1f46b698324\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"7531d4d93096139a9e236f2cd2e8a8ba4a0b6a11c0bd3ed1dc07f464a2cf0071\"" Feb 12 21:56:07.096284 env[1564]: time="2024-02-12T21:56:07.096253968Z" level=info msg="StartContainer for \"7531d4d93096139a9e236f2cd2e8a8ba4a0b6a11c0bd3ed1dc07f464a2cf0071\"" Feb 12 21:56:07.100274 systemd[1]: Started cri-containerd-090d17da541d4876f88f2921507245bdae6d8955b6860d2d25ca82eeef8c0997.scope. Feb 12 21:56:07.103259 env[1564]: time="2024-02-12T21:56:07.103210589Z" level=info msg="StartContainer for \"4f3ebf1bb5dc591b1931441593cd8f90edce75a6f305452d1362aed5bf651925\" returns successfully" Feb 12 21:56:07.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.128000 audit: BPF prog-id=89 op=LOAD Feb 12 21:56:07.133538 kubelet[2235]: W0212 21:56:07.131444 2235 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.28.103:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:07.133538 kubelet[2235]: E0212 21:56:07.131508 2235 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.28.103:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:07.132000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.132000 audit[2425]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2310 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:07.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039306431376461353431643438373666383866323932313530373234 Feb 12 21:56:07.133000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.133000 audit[2425]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2310 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:07.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039306431376461353431643438373666383866323932313530373234 Feb 12 21:56:07.133000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.133000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.133000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.133000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.133000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.133000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.133000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.133000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.133000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.133000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.133000 audit: BPF prog-id=90 op=LOAD Feb 12 21:56:07.133000 audit[2425]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c4670 items=0 ppid=2310 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:07.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039306431376461353431643438373666383866323932313530373234 Feb 12 21:56:07.134000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.134000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.134000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.134000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.134000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.134000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.134000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.134000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.134000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.134000 audit: BPF prog-id=91 op=LOAD Feb 12 21:56:07.134000 audit[2425]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c46b8 items=0 ppid=2310 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:07.134000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039306431376461353431643438373666383866323932313530373234 Feb 12 21:56:07.135000 audit: BPF prog-id=91 op=UNLOAD Feb 12 21:56:07.135000 audit: BPF prog-id=90 op=UNLOAD Feb 12 21:56:07.135000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.135000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.135000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.135000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.135000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.135000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.135000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.135000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.135000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.135000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.135000 audit: BPF prog-id=92 op=LOAD Feb 12 21:56:07.135000 audit[2425]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c4ac8 items=0 ppid=2310 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:07.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039306431376461353431643438373666383866323932313530373234 Feb 12 21:56:07.145606 systemd[1]: Started cri-containerd-7531d4d93096139a9e236f2cd2e8a8ba4a0b6a11c0bd3ed1dc07f464a2cf0071.scope. Feb 12 21:56:07.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.168000 audit: BPF prog-id=93 op=LOAD Feb 12 21:56:07.170000 audit[2456]: AVC avc: denied { bpf } for pid=2456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.170000 audit[2456]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2341 pid=2456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:07.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735333164346439333039363133396139653233366632636432653861 Feb 12 21:56:07.171000 audit[2456]: AVC avc: denied { perfmon } for pid=2456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.171000 audit[2456]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2341 pid=2456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:07.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735333164346439333039363133396139653233366632636432653861 Feb 12 21:56:07.171000 audit[2456]: AVC avc: denied { bpf } for pid=2456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.171000 audit[2456]: AVC avc: denied { bpf } for pid=2456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.171000 audit[2456]: AVC avc: denied { bpf } for pid=2456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.171000 audit[2456]: AVC avc: denied { perfmon } for pid=2456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.171000 audit[2456]: AVC avc: denied { perfmon } for pid=2456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.171000 audit[2456]: AVC avc: denied { perfmon } for pid=2456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.171000 audit[2456]: AVC avc: denied { perfmon } for pid=2456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.171000 audit[2456]: AVC avc: denied { perfmon } for pid=2456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.171000 audit[2456]: AVC avc: denied { bpf } for pid=2456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.171000 audit[2456]: AVC avc: denied { bpf } for pid=2456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.171000 audit: BPF prog-id=94 op=LOAD Feb 12 21:56:07.171000 audit[2456]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c4a00 items=0 ppid=2341 pid=2456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:07.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735333164346439333039363133396139653233366632636432653861 Feb 12 21:56:07.174000 audit[2456]: AVC avc: denied { bpf } for pid=2456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.174000 audit[2456]: AVC avc: denied { bpf } for pid=2456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.174000 audit[2456]: AVC avc: denied { perfmon } for pid=2456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.174000 audit[2456]: AVC avc: denied { perfmon } for pid=2456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.174000 audit[2456]: AVC avc: denied { perfmon } for pid=2456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.174000 audit[2456]: AVC avc: denied { perfmon } for pid=2456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.174000 audit[2456]: AVC avc: denied { perfmon } for pid=2456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.174000 audit[2456]: AVC avc: denied { bpf } for pid=2456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.174000 audit[2456]: AVC avc: denied { bpf } for pid=2456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.174000 audit: BPF prog-id=95 op=LOAD Feb 12 21:56:07.174000 audit[2456]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c4a48 items=0 ppid=2341 pid=2456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:07.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735333164346439333039363133396139653233366632636432653861 Feb 12 21:56:07.176000 audit: BPF prog-id=95 op=UNLOAD Feb 12 21:56:07.176000 audit: BPF prog-id=94 op=UNLOAD Feb 12 21:56:07.176000 audit[2456]: AVC avc: denied { bpf } for pid=2456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.176000 audit[2456]: AVC avc: denied { bpf } for pid=2456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.176000 audit[2456]: AVC avc: denied { bpf } for pid=2456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.176000 audit[2456]: AVC avc: denied { perfmon } for pid=2456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.176000 audit[2456]: AVC avc: denied { perfmon } for pid=2456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.176000 audit[2456]: AVC avc: denied { perfmon } for pid=2456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.176000 audit[2456]: AVC avc: denied { perfmon } for pid=2456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.176000 audit[2456]: AVC avc: denied { perfmon } for pid=2456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.176000 audit[2456]: AVC avc: denied { bpf } for pid=2456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.176000 audit[2456]: AVC avc: denied { bpf } for pid=2456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:07.176000 audit: BPF prog-id=96 op=LOAD Feb 12 21:56:07.176000 audit[2456]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c4e58 items=0 ppid=2341 pid=2456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:07.176000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735333164346439333039363133396139653233366632636432653861 Feb 12 21:56:07.206762 env[1564]: time="2024-02-12T21:56:07.206712533Z" level=info msg="StartContainer for \"090d17da541d4876f88f2921507245bdae6d8955b6860d2d25ca82eeef8c0997\" returns successfully" Feb 12 21:56:07.234175 env[1564]: time="2024-02-12T21:56:07.234112362Z" level=info msg="StartContainer for \"7531d4d93096139a9e236f2cd2e8a8ba4a0b6a11c0bd3ed1dc07f464a2cf0071\" returns successfully" Feb 12 21:56:07.539424 kubelet[2235]: E0212 21:56:07.539383 2235 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.28.103:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:08.447578 kubelet[2235]: W0212 21:56:08.447532 2235 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.28.103:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-28-103&limit=500&resourceVersion=0": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:08.447774 kubelet[2235]: E0212 21:56:08.447592 2235 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.28.103:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-28-103&limit=500&resourceVersion=0": dial tcp 172.31.28.103:6443: connect: connection refused Feb 12 21:56:08.561270 kubelet[2235]: E0212 21:56:08.561233 2235 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.28.103:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-28-103?timeout=10s\": dial tcp 172.31.28.103:6443: connect: connection refused" interval="3.2s" Feb 12 21:56:08.672364 kubelet[2235]: I0212 21:56:08.672331 2235 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-103" Feb 12 21:56:08.673593 kubelet[2235]: E0212 21:56:08.673570 2235 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.28.103:6443/api/v1/nodes\": dial tcp 172.31.28.103:6443: connect: connection refused" node="ip-172-31-28-103" Feb 12 21:56:08.772000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:56:08.772000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000330720 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:56:08.772000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:56:08.772000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:56:08.772000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00033d1c0 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:56:08.772000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:56:09.796273 amazon-ssm-agent[1618]: 2024-02-12 21:56:09 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Feb 12 21:56:10.216751 kernel: kauditd_printk_skb: 669 callbacks suppressed Feb 12 21:56:10.216902 kernel: audit: type=1400 audit(1707774970.213:678): avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:56:10.213000 audit[2475]: AVC avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:56:10.215000 audit[2475]: AVC avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:56:10.215000 audit[2475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c000bce990 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:56:10.234733 kernel: audit: type=1400 audit(1707774970.215:679): avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:56:10.234917 kernel: audit: type=1300 audit(1707774970.215:679): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c000bce990 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:56:10.241568 kernel: audit: type=1327 audit(1707774970.215:679): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:56:10.215000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:56:10.213000 audit[2475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c000bbe060 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:56:10.260254 kernel: audit: type=1300 audit(1707774970.213:678): arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c000bbe060 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:56:10.260510 kernel: audit: type=1327 audit(1707774970.213:678): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:56:10.213000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:56:10.216000 audit[2475]: AVC avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:56:10.278694 kernel: audit: type=1400 audit(1707774970.216:680): avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:56:10.216000 audit[2475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00682c280 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:56:10.287890 kernel: audit: type=1300 audit(1707774970.216:680): arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00682c280 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:56:10.216000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:56:10.299677 kernel: audit: type=1327 audit(1707774970.216:680): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:56:10.299809 kernel: audit: type=1400 audit(1707774970.223:681): avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:56:10.223000 audit[2475]: AVC avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:56:10.223000 audit[2475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c000bdbbf0 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:56:10.223000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:56:10.232000 audit[2475]: AVC avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:56:10.232000 audit[2475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c00474ae80 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:56:10.232000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:56:10.233000 audit[2475]: AVC avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:56:10.233000 audit[2475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c003998d50 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:56:10.233000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:56:10.863383 kubelet[2235]: E0212 21:56:10.863347 2235 csi_plugin.go:295] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "ip-172-31-28-103" not found Feb 12 21:56:11.220260 kubelet[2235]: E0212 21:56:11.220104 2235 csi_plugin.go:295] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "ip-172-31-28-103" not found Feb 12 21:56:11.677702 kubelet[2235]: E0212 21:56:11.677648 2235 csi_plugin.go:295] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "ip-172-31-28-103" not found Feb 12 21:56:11.767297 kubelet[2235]: E0212 21:56:11.767262 2235 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-28-103\" not found" node="ip-172-31-28-103" Feb 12 21:56:11.875995 kubelet[2235]: I0212 21:56:11.875966 2235 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-103" Feb 12 21:56:11.886118 kubelet[2235]: I0212 21:56:11.886076 2235 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-28-103" Feb 12 21:56:11.894599 kubelet[2235]: E0212 21:56:11.894558 2235 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ip-172-31-28-103\" not found" Feb 12 21:56:11.995134 kubelet[2235]: E0212 21:56:11.995004 2235 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ip-172-31-28-103\" not found" Feb 12 21:56:12.095899 kubelet[2235]: E0212 21:56:12.095836 2235 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ip-172-31-28-103\" not found" Feb 12 21:56:12.555895 kubelet[2235]: I0212 21:56:12.555852 2235 apiserver.go:52] "Watching apiserver" Feb 12 21:56:12.656505 kubelet[2235]: I0212 21:56:12.656461 2235 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Feb 12 21:56:12.709961 kubelet[2235]: I0212 21:56:12.709921 2235 reconciler.go:41] "Reconciler: start to sync state" Feb 12 21:56:13.288888 systemd[1]: Reloading. Feb 12 21:56:13.443441 /usr/lib/systemd/system-generators/torcx-generator[2531]: time="2024-02-12T21:56:13Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 12 21:56:13.446953 /usr/lib/systemd/system-generators/torcx-generator[2531]: time="2024-02-12T21:56:13Z" level=info msg="torcx already run" Feb 12 21:56:13.563188 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 12 21:56:13.563217 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 12 21:56:13.587497 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 12 21:56:13.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.704000 audit: BPF prog-id=97 op=LOAD Feb 12 21:56:13.705000 audit: BPF prog-id=89 op=UNLOAD Feb 12 21:56:13.707000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.707000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.707000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.707000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.707000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.707000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.707000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.707000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.707000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.707000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.707000 audit: BPF prog-id=98 op=LOAD Feb 12 21:56:13.707000 audit: BPF prog-id=93 op=UNLOAD Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.709000 audit: BPF prog-id=99 op=LOAD Feb 12 21:56:13.709000 audit: BPF prog-id=73 op=UNLOAD Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.710000 audit: BPF prog-id=100 op=LOAD Feb 12 21:56:13.710000 audit: BPF prog-id=58 op=UNLOAD Feb 12 21:56:13.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.711000 audit: BPF prog-id=101 op=LOAD Feb 12 21:56:13.711000 audit: BPF prog-id=81 op=UNLOAD Feb 12 21:56:13.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.712000 audit: BPF prog-id=102 op=LOAD Feb 12 21:56:13.712000 audit: BPF prog-id=59 op=UNLOAD Feb 12 21:56:13.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.713000 audit: BPF prog-id=103 op=LOAD Feb 12 21:56:13.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.713000 audit: BPF prog-id=104 op=LOAD Feb 12 21:56:13.713000 audit: BPF prog-id=60 op=UNLOAD Feb 12 21:56:13.713000 audit: BPF prog-id=61 op=UNLOAD Feb 12 21:56:13.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.714000 audit: BPF prog-id=105 op=LOAD Feb 12 21:56:13.715000 audit: BPF prog-id=62 op=UNLOAD Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.716000 audit: BPF prog-id=106 op=LOAD Feb 12 21:56:13.716000 audit: BPF prog-id=85 op=UNLOAD Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.717000 audit: BPF prog-id=107 op=LOAD Feb 12 21:56:13.717000 audit: BPF prog-id=77 op=UNLOAD Feb 12 21:56:13.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.720000 audit: BPF prog-id=108 op=LOAD Feb 12 21:56:13.720000 audit: BPF prog-id=63 op=UNLOAD Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit: BPF prog-id=109 op=LOAD Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit: BPF prog-id=110 op=LOAD Feb 12 21:56:13.721000 audit: BPF prog-id=64 op=UNLOAD Feb 12 21:56:13.721000 audit: BPF prog-id=65 op=UNLOAD Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.722000 audit: BPF prog-id=111 op=LOAD Feb 12 21:56:13.722000 audit: BPF prog-id=66 op=UNLOAD Feb 12 21:56:13.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit: BPF prog-id=112 op=LOAD Feb 12 21:56:13.723000 audit: BPF prog-id=67 op=UNLOAD Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit: BPF prog-id=113 op=LOAD Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.723000 audit: BPF prog-id=114 op=LOAD Feb 12 21:56:13.723000 audit: BPF prog-id=68 op=UNLOAD Feb 12 21:56:13.723000 audit: BPF prog-id=69 op=UNLOAD Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit: BPF prog-id=115 op=LOAD Feb 12 21:56:13.725000 audit: BPF prog-id=70 op=UNLOAD Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit: BPF prog-id=116 op=LOAD Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.726000 audit: BPF prog-id=117 op=LOAD Feb 12 21:56:13.726000 audit: BPF prog-id=71 op=UNLOAD Feb 12 21:56:13.726000 audit: BPF prog-id=72 op=UNLOAD Feb 12 21:56:13.745966 systemd[1]: Stopping kubelet.service... Feb 12 21:56:13.746773 kubelet[2235]: I0212 21:56:13.746259 2235 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 12 21:56:13.768112 systemd[1]: kubelet.service: Deactivated successfully. Feb 12 21:56:13.767000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:56:13.768376 systemd[1]: Stopped kubelet.service. Feb 12 21:56:13.771093 systemd[1]: Started kubelet.service. Feb 12 21:56:13.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:56:13.867479 kubelet[2584]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 12 21:56:13.867479 kubelet[2584]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Feb 12 21:56:13.867479 kubelet[2584]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 12 21:56:13.867982 kubelet[2584]: I0212 21:56:13.867587 2584 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 12 21:56:13.878154 kubelet[2584]: I0212 21:56:13.878105 2584 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Feb 12 21:56:13.878154 kubelet[2584]: I0212 21:56:13.878134 2584 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 12 21:56:13.879081 kubelet[2584]: I0212 21:56:13.878459 2584 server.go:837] "Client rotation is on, will bootstrap in background" Feb 12 21:56:13.881278 kubelet[2584]: I0212 21:56:13.881246 2584 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Feb 12 21:56:13.886109 kubelet[2584]: I0212 21:56:13.886083 2584 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 12 21:56:13.887158 kubelet[2584]: I0212 21:56:13.887088 2584 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 12 21:56:13.887575 kubelet[2584]: I0212 21:56:13.887554 2584 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 12 21:56:13.887692 kubelet[2584]: I0212 21:56:13.887657 2584 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Feb 12 21:56:13.887963 kubelet[2584]: I0212 21:56:13.887717 2584 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Feb 12 21:56:13.887963 kubelet[2584]: I0212 21:56:13.887735 2584 container_manager_linux.go:302] "Creating device plugin manager" Feb 12 21:56:13.887963 kubelet[2584]: I0212 21:56:13.887776 2584 state_mem.go:36] "Initialized new in-memory state store" Feb 12 21:56:13.895528 kubelet[2584]: I0212 21:56:13.895504 2584 kubelet.go:405] "Attempting to sync node with API server" Feb 12 21:56:13.895743 kubelet[2584]: I0212 21:56:13.895731 2584 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 12 21:56:13.895857 kubelet[2584]: I0212 21:56:13.895847 2584 kubelet.go:309] "Adding apiserver pod source" Feb 12 21:56:13.895964 kubelet[2584]: I0212 21:56:13.895956 2584 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 12 21:56:13.913972 kubelet[2584]: I0212 21:56:13.913940 2584 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 12 21:56:13.914552 kubelet[2584]: I0212 21:56:13.914514 2584 server.go:1168] "Started kubelet" Feb 12 21:56:13.919630 kubelet[2584]: I0212 21:56:13.919610 2584 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Feb 12 21:56:13.920898 kubelet[2584]: I0212 21:56:13.920864 2584 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Feb 12 21:56:13.926000 audit[2584]: AVC avc: denied { mac_admin } for pid=2584 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.926000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 21:56:13.926000 audit[2584]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009072f0 a1=c00005d7e8 a2=c0009072c0 a3=25 items=0 ppid=1 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:13.926000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 21:56:13.926000 audit[2584]: AVC avc: denied { mac_admin } for pid=2584 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:13.926000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 21:56:13.926000 audit[2584]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0002aad40 a1=c00005d800 a2=c000907380 a3=25 items=0 ppid=1 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:13.926000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 21:56:13.928231 kubelet[2584]: I0212 21:56:13.926977 2584 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 12 21:56:13.928231 kubelet[2584]: I0212 21:56:13.927024 2584 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 12 21:56:13.928231 kubelet[2584]: I0212 21:56:13.927053 2584 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 12 21:56:13.929947 kubelet[2584]: E0212 21:56:13.929909 2584 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 12 21:56:13.930068 kubelet[2584]: E0212 21:56:13.930058 2584 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 12 21:56:13.930922 kubelet[2584]: I0212 21:56:13.930907 2584 server.go:461] "Adding debug handlers to kubelet server" Feb 12 21:56:13.935754 kubelet[2584]: I0212 21:56:13.935730 2584 volume_manager.go:284] "Starting Kubelet Volume Manager" Feb 12 21:56:13.936187 kubelet[2584]: I0212 21:56:13.936164 2584 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Feb 12 21:56:13.947908 kubelet[2584]: I0212 21:56:13.947850 2584 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Feb 12 21:56:13.949338 kubelet[2584]: I0212 21:56:13.949320 2584 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Feb 12 21:56:13.949476 kubelet[2584]: I0212 21:56:13.949467 2584 status_manager.go:207] "Starting to sync pod status with apiserver" Feb 12 21:56:13.949555 kubelet[2584]: I0212 21:56:13.949548 2584 kubelet.go:2257] "Starting kubelet main sync loop" Feb 12 21:56:13.949682 kubelet[2584]: E0212 21:56:13.949655 2584 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Feb 12 21:56:14.050395 kubelet[2584]: E0212 21:56:14.050252 2584 kubelet.go:2281] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Feb 12 21:56:14.051894 kubelet[2584]: I0212 21:56:14.051871 2584 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-103" Feb 12 21:56:14.134761 kubelet[2584]: I0212 21:56:14.132382 2584 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 12 21:56:14.134761 kubelet[2584]: I0212 21:56:14.132410 2584 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 12 21:56:14.134761 kubelet[2584]: I0212 21:56:14.132432 2584 state_mem.go:36] "Initialized new in-memory state store" Feb 12 21:56:14.134761 kubelet[2584]: I0212 21:56:14.133536 2584 state_mem.go:88] "Updated default CPUSet" cpuSet="" Feb 12 21:56:14.134761 kubelet[2584]: I0212 21:56:14.133557 2584 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Feb 12 21:56:14.134761 kubelet[2584]: I0212 21:56:14.133565 2584 policy_none.go:49] "None policy: Start" Feb 12 21:56:14.134761 kubelet[2584]: I0212 21:56:14.134245 2584 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-28-103" Feb 12 21:56:14.138112 kubelet[2584]: I0212 21:56:14.138083 2584 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-28-103" Feb 12 21:56:14.139063 kubelet[2584]: I0212 21:56:14.139032 2584 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 12 21:56:14.139169 kubelet[2584]: I0212 21:56:14.139079 2584 state_mem.go:35] "Initializing new in-memory state store" Feb 12 21:56:14.142068 kubelet[2584]: I0212 21:56:14.142041 2584 state_mem.go:75] "Updated machine memory state" Feb 12 21:56:14.154129 kubelet[2584]: I0212 21:56:14.154105 2584 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 12 21:56:14.153000 audit[2584]: AVC avc: denied { mac_admin } for pid=2584 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:14.153000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 21:56:14.153000 audit[2584]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00094b740 a1=c000dc4bb8 a2=c00094b710 a3=25 items=0 ppid=1 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:14.153000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 21:56:14.156829 kubelet[2584]: I0212 21:56:14.154617 2584 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 12 21:56:14.158117 kubelet[2584]: I0212 21:56:14.158088 2584 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 12 21:56:14.252518 kubelet[2584]: I0212 21:56:14.252479 2584 topology_manager.go:212] "Topology Admit Handler" Feb 12 21:56:14.252953 kubelet[2584]: I0212 21:56:14.252931 2584 topology_manager.go:212] "Topology Admit Handler" Feb 12 21:56:14.253300 kubelet[2584]: I0212 21:56:14.253285 2584 topology_manager.go:212] "Topology Admit Handler" Feb 12 21:56:14.270335 kubelet[2584]: E0212 21:56:14.270302 2584 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-28-103\" already exists" pod="kube-system/kube-scheduler-ip-172-31-28-103" Feb 12 21:56:14.338403 kubelet[2584]: I0212 21:56:14.338360 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9ae5ff5b2112251047b54b7d81905705-k8s-certs\") pod \"kube-controller-manager-ip-172-31-28-103\" (UID: \"9ae5ff5b2112251047b54b7d81905705\") " pod="kube-system/kube-controller-manager-ip-172-31-28-103" Feb 12 21:56:14.338731 kubelet[2584]: I0212 21:56:14.338715 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9ae5ff5b2112251047b54b7d81905705-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-28-103\" (UID: \"9ae5ff5b2112251047b54b7d81905705\") " pod="kube-system/kube-controller-manager-ip-172-31-28-103" Feb 12 21:56:14.338880 kubelet[2584]: I0212 21:56:14.338868 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/0c8d1c12cde814e1566de4643b8fc692-kubeconfig\") pod \"kube-scheduler-ip-172-31-28-103\" (UID: \"0c8d1c12cde814e1566de4643b8fc692\") " pod="kube-system/kube-scheduler-ip-172-31-28-103" Feb 12 21:56:14.339010 kubelet[2584]: I0212 21:56:14.338997 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/28df846329fd8a5f0f31661ae35f08f3-ca-certs\") pod \"kube-apiserver-ip-172-31-28-103\" (UID: \"28df846329fd8a5f0f31661ae35f08f3\") " pod="kube-system/kube-apiserver-ip-172-31-28-103" Feb 12 21:56:14.339112 kubelet[2584]: I0212 21:56:14.339104 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9ae5ff5b2112251047b54b7d81905705-ca-certs\") pod \"kube-controller-manager-ip-172-31-28-103\" (UID: \"9ae5ff5b2112251047b54b7d81905705\") " pod="kube-system/kube-controller-manager-ip-172-31-28-103" Feb 12 21:56:14.339199 kubelet[2584]: I0212 21:56:14.339193 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/9ae5ff5b2112251047b54b7d81905705-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-28-103\" (UID: \"9ae5ff5b2112251047b54b7d81905705\") " pod="kube-system/kube-controller-manager-ip-172-31-28-103" Feb 12 21:56:14.339283 kubelet[2584]: I0212 21:56:14.339276 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/28df846329fd8a5f0f31661ae35f08f3-k8s-certs\") pod \"kube-apiserver-ip-172-31-28-103\" (UID: \"28df846329fd8a5f0f31661ae35f08f3\") " pod="kube-system/kube-apiserver-ip-172-31-28-103" Feb 12 21:56:14.339361 kubelet[2584]: I0212 21:56:14.339354 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/28df846329fd8a5f0f31661ae35f08f3-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-28-103\" (UID: \"28df846329fd8a5f0f31661ae35f08f3\") " pod="kube-system/kube-apiserver-ip-172-31-28-103" Feb 12 21:56:14.339480 kubelet[2584]: I0212 21:56:14.339467 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9ae5ff5b2112251047b54b7d81905705-kubeconfig\") pod \"kube-controller-manager-ip-172-31-28-103\" (UID: \"9ae5ff5b2112251047b54b7d81905705\") " pod="kube-system/kube-controller-manager-ip-172-31-28-103" Feb 12 21:56:14.632000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:56:14.632000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a18560 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:56:14.632000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:56:14.641000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:56:14.641000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a185a0 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:56:14.641000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:56:14.644000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:56:14.644000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a18720 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:56:14.644000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:56:14.650000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:56:14.650000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a18880 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:56:14.650000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:56:14.911404 kubelet[2584]: I0212 21:56:14.911017 2584 apiserver.go:52] "Watching apiserver" Feb 12 21:56:14.936539 kubelet[2584]: I0212 21:56:14.936499 2584 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Feb 12 21:56:14.948280 kubelet[2584]: I0212 21:56:14.948253 2584 reconciler.go:41] "Reconciler: start to sync state" Feb 12 21:56:15.049616 kubelet[2584]: E0212 21:56:15.049590 2584 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-28-103\" already exists" pod="kube-system/kube-apiserver-ip-172-31-28-103" Feb 12 21:56:15.052302 kubelet[2584]: E0212 21:56:15.052272 2584 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-28-103\" already exists" pod="kube-system/kube-scheduler-ip-172-31-28-103" Feb 12 21:56:15.077124 kubelet[2584]: I0212 21:56:15.077086 2584 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-28-103" podStartSLOduration=2.075266429 podCreationTimestamp="2024-02-12 21:56:13 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 21:56:15.07288242 +0000 UTC m=+1.292551401" watchObservedRunningTime="2024-02-12 21:56:15.075266429 +0000 UTC m=+1.294935418" Feb 12 21:56:15.086462 kubelet[2584]: I0212 21:56:15.086428 2584 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-28-103" podStartSLOduration=1.086369161 podCreationTimestamp="2024-02-12 21:56:14 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 21:56:15.085301255 +0000 UTC m=+1.304970240" watchObservedRunningTime="2024-02-12 21:56:15.086369161 +0000 UTC m=+1.306038137" Feb 12 21:56:15.120492 kubelet[2584]: I0212 21:56:15.120457 2584 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-28-103" podStartSLOduration=1.120422604 podCreationTimestamp="2024-02-12 21:56:14 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 21:56:15.104295906 +0000 UTC m=+1.323964891" watchObservedRunningTime="2024-02-12 21:56:15.120422604 +0000 UTC m=+1.340091589" Feb 12 21:56:15.390721 kernel: kauditd_printk_skb: 278 callbacks suppressed Feb 12 21:56:15.390876 kernel: audit: type=1400 audit(1707774975.383:937): avc: denied { watch } for pid=2400 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Feb 12 21:56:15.383000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Feb 12 21:56:15.398878 kernel: audit: type=1300 audit(1707774975.383:937): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00013a880 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:56:15.383000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00013a880 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:56:15.383000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:56:15.405154 kernel: audit: type=1327 audit(1707774975.383:937): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:56:16.085361 update_engine[1551]: I0212 21:56:16.084518 1551 update_attempter.cc:509] Updating boot flags... Feb 12 21:56:19.521125 sudo[1829]: pam_unix(sudo:session): session closed for user root Feb 12 21:56:19.519000 audit[1829]: USER_END pid=1829 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 21:56:19.519000 audit[1829]: CRED_DISP pid=1829 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 21:56:19.531529 kernel: audit: type=1106 audit(1707774979.519:938): pid=1829 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 21:56:19.531641 kernel: audit: type=1104 audit(1707774979.519:939): pid=1829 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 21:56:19.555811 sshd[1826]: pam_unix(sshd:session): session closed for user core Feb 12 21:56:19.562000 audit[1826]: USER_END pid=1826 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:56:19.579222 systemd[1]: sshd@6-172.31.28.103:22-139.178.89.65:54128.service: Deactivated successfully. Feb 12 21:56:19.580191 systemd[1]: session-7.scope: Deactivated successfully. Feb 12 21:56:19.580383 systemd[1]: session-7.scope: Consumed 5.170s CPU time. Feb 12 21:56:19.588722 kernel: audit: type=1106 audit(1707774979.562:940): pid=1826 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:56:19.588855 kernel: audit: type=1104 audit(1707774979.565:941): pid=1826 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:56:19.565000 audit[1826]: CRED_DISP pid=1826 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:56:19.590813 systemd-logind[1550]: Session 7 logged out. Waiting for processes to exit. Feb 12 21:56:19.592270 systemd-logind[1550]: Removed session 7. Feb 12 21:56:19.575000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.28.103:22-139.178.89.65:54128 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:56:19.597692 kernel: audit: type=1131 audit(1707774979.575:942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.28.103:22-139.178.89.65:54128 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:56:27.322091 kubelet[2584]: I0212 21:56:27.322043 2584 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Feb 12 21:56:27.322640 env[1564]: time="2024-02-12T21:56:27.322595680Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Feb 12 21:56:27.323015 kubelet[2584]: I0212 21:56:27.322892 2584 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Feb 12 21:56:27.792127 kubelet[2584]: I0212 21:56:27.792092 2584 topology_manager.go:212] "Topology Admit Handler" Feb 12 21:56:27.799348 systemd[1]: Created slice kubepods-besteffort-pod4d45f7e3_1de5_4cfa_9db9_4d7ee7672a76.slice. Feb 12 21:56:27.842774 kubelet[2584]: I0212 21:56:27.842729 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4d45f7e3-1de5-4cfa-9db9-4d7ee7672a76-lib-modules\") pod \"kube-proxy-tfsqc\" (UID: \"4d45f7e3-1de5-4cfa-9db9-4d7ee7672a76\") " pod="kube-system/kube-proxy-tfsqc" Feb 12 21:56:27.842774 kubelet[2584]: I0212 21:56:27.842782 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/4d45f7e3-1de5-4cfa-9db9-4d7ee7672a76-kube-proxy\") pod \"kube-proxy-tfsqc\" (UID: \"4d45f7e3-1de5-4cfa-9db9-4d7ee7672a76\") " pod="kube-system/kube-proxy-tfsqc" Feb 12 21:56:27.843094 kubelet[2584]: I0212 21:56:27.842815 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4d45f7e3-1de5-4cfa-9db9-4d7ee7672a76-xtables-lock\") pod \"kube-proxy-tfsqc\" (UID: \"4d45f7e3-1de5-4cfa-9db9-4d7ee7672a76\") " pod="kube-system/kube-proxy-tfsqc" Feb 12 21:56:27.843094 kubelet[2584]: I0212 21:56:27.842841 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jn5lr\" (UniqueName: \"kubernetes.io/projected/4d45f7e3-1de5-4cfa-9db9-4d7ee7672a76-kube-api-access-jn5lr\") pod \"kube-proxy-tfsqc\" (UID: \"4d45f7e3-1de5-4cfa-9db9-4d7ee7672a76\") " pod="kube-system/kube-proxy-tfsqc" Feb 12 21:56:28.048371 kubelet[2584]: I0212 21:56:28.048252 2584 topology_manager.go:212] "Topology Admit Handler" Feb 12 21:56:28.056269 systemd[1]: Created slice kubepods-besteffort-pod4d170a82_a2d1_4aa4_bf73_44bf9dd259f4.slice. Feb 12 21:56:28.066035 kubelet[2584]: W0212 21:56:28.066003 2584 reflector.go:533] object-"tigera-operator"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-28-103" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ip-172-31-28-103' and this object Feb 12 21:56:28.066312 kubelet[2584]: E0212 21:56:28.066295 2584 reflector.go:148] object-"tigera-operator"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-28-103" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ip-172-31-28-103' and this object Feb 12 21:56:28.066523 kubelet[2584]: W0212 21:56:28.066510 2584 reflector.go:533] object-"tigera-operator"/"kubernetes-services-endpoint": failed to list *v1.ConfigMap: configmaps "kubernetes-services-endpoint" is forbidden: User "system:node:ip-172-31-28-103" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ip-172-31-28-103' and this object Feb 12 21:56:28.066651 kubelet[2584]: E0212 21:56:28.066640 2584 reflector.go:148] object-"tigera-operator"/"kubernetes-services-endpoint": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kubernetes-services-endpoint" is forbidden: User "system:node:ip-172-31-28-103" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ip-172-31-28-103' and this object Feb 12 21:56:28.111414 env[1564]: time="2024-02-12T21:56:28.111361283Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-tfsqc,Uid:4d45f7e3-1de5-4cfa-9db9-4d7ee7672a76,Namespace:kube-system,Attempt:0,}" Feb 12 21:56:28.143221 env[1564]: time="2024-02-12T21:56:28.143131967Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 21:56:28.143221 env[1564]: time="2024-02-12T21:56:28.143181133Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 21:56:28.143221 env[1564]: time="2024-02-12T21:56:28.143196478Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 21:56:28.143922 env[1564]: time="2024-02-12T21:56:28.143860473Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/036ee14b6eca4869714326fdbf000a0667637135fe5dd7b6c3d3b765040c5801 pid=2763 runtime=io.containerd.runc.v2 Feb 12 21:56:28.144452 kubelet[2584]: I0212 21:56:28.144416 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/4d170a82-a2d1-4aa4-bf73-44bf9dd259f4-var-lib-calico\") pod \"tigera-operator-7ff8dc855-dw5t9\" (UID: \"4d170a82-a2d1-4aa4-bf73-44bf9dd259f4\") " pod="tigera-operator/tigera-operator-7ff8dc855-dw5t9" Feb 12 21:56:28.144622 kubelet[2584]: I0212 21:56:28.144608 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-z4q45\" (UniqueName: \"kubernetes.io/projected/4d170a82-a2d1-4aa4-bf73-44bf9dd259f4-kube-api-access-z4q45\") pod \"tigera-operator-7ff8dc855-dw5t9\" (UID: \"4d170a82-a2d1-4aa4-bf73-44bf9dd259f4\") " pod="tigera-operator/tigera-operator-7ff8dc855-dw5t9" Feb 12 21:56:28.170406 systemd[1]: Started cri-containerd-036ee14b6eca4869714326fdbf000a0667637135fe5dd7b6c3d3b765040c5801.scope. Feb 12 21:56:28.176154 systemd[1]: run-containerd-runc-k8s.io-036ee14b6eca4869714326fdbf000a0667637135fe5dd7b6c3d3b765040c5801-runc.ft32lO.mount: Deactivated successfully. Feb 12 21:56:28.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.206203 kernel: audit: type=1400 audit(1707774988.195:943): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.206308 kernel: audit: type=1400 audit(1707774988.195:944): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.206340 kernel: audit: type=1400 audit(1707774988.195:945): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.215437 kernel: audit: type=1400 audit(1707774988.195:946): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.220435 kernel: audit: type=1400 audit(1707774988.195:947): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.226819 kernel: audit: type=1400 audit(1707774988.195:948): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.232699 kernel: audit: type=1400 audit(1707774988.195:949): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.238734 kernel: audit: type=1400 audit(1707774988.195:950): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.245697 kernel: audit: type=1400 audit(1707774988.195:951): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.254701 kernel: audit: type=1400 audit(1707774988.205:952): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.205000 audit: BPF prog-id=118 op=LOAD Feb 12 21:56:28.207000 audit[2774]: AVC avc: denied { bpf } for pid=2774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.207000 audit[2774]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2763 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:28.207000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033366565313462366563613438363937313433323666646266303030 Feb 12 21:56:28.207000 audit[2774]: AVC avc: denied { perfmon } for pid=2774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.207000 audit[2774]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2763 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:28.207000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033366565313462366563613438363937313433323666646266303030 Feb 12 21:56:28.207000 audit[2774]: AVC avc: denied { bpf } for pid=2774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.207000 audit[2774]: AVC avc: denied { bpf } for pid=2774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.207000 audit[2774]: AVC avc: denied { bpf } for pid=2774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.207000 audit[2774]: AVC avc: denied { perfmon } for pid=2774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.207000 audit[2774]: AVC avc: denied { perfmon } for pid=2774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.207000 audit[2774]: AVC avc: denied { perfmon } for pid=2774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.207000 audit[2774]: AVC avc: denied { perfmon } for pid=2774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.207000 audit[2774]: AVC avc: denied { perfmon } for pid=2774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.207000 audit[2774]: AVC avc: denied { bpf } for pid=2774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.207000 audit[2774]: AVC avc: denied { bpf } for pid=2774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.207000 audit: BPF prog-id=119 op=LOAD Feb 12 21:56:28.207000 audit[2774]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003365d0 items=0 ppid=2763 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:28.207000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033366565313462366563613438363937313433323666646266303030 Feb 12 21:56:28.210000 audit[2774]: AVC avc: denied { bpf } for pid=2774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.210000 audit[2774]: AVC avc: denied { bpf } for pid=2774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.210000 audit[2774]: AVC avc: denied { perfmon } for pid=2774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.210000 audit[2774]: AVC avc: denied { perfmon } for pid=2774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.210000 audit[2774]: AVC avc: denied { perfmon } for pid=2774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.210000 audit[2774]: AVC avc: denied { perfmon } for pid=2774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.210000 audit[2774]: AVC avc: denied { perfmon } for pid=2774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.210000 audit[2774]: AVC avc: denied { bpf } for pid=2774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.210000 audit[2774]: AVC avc: denied { bpf } for pid=2774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.210000 audit: BPF prog-id=120 op=LOAD Feb 12 21:56:28.210000 audit[2774]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000336618 items=0 ppid=2763 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:28.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033366565313462366563613438363937313433323666646266303030 Feb 12 21:56:28.215000 audit: BPF prog-id=120 op=UNLOAD Feb 12 21:56:28.215000 audit: BPF prog-id=119 op=UNLOAD Feb 12 21:56:28.215000 audit[2774]: AVC avc: denied { bpf } for pid=2774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.215000 audit[2774]: AVC avc: denied { bpf } for pid=2774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.215000 audit[2774]: AVC avc: denied { bpf } for pid=2774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.215000 audit[2774]: AVC avc: denied { perfmon } for pid=2774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.215000 audit[2774]: AVC avc: denied { perfmon } for pid=2774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.215000 audit[2774]: AVC avc: denied { perfmon } for pid=2774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.215000 audit[2774]: AVC avc: denied { perfmon } for pid=2774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.215000 audit[2774]: AVC avc: denied { perfmon } for pid=2774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.215000 audit[2774]: AVC avc: denied { bpf } for pid=2774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.215000 audit[2774]: AVC avc: denied { bpf } for pid=2774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.215000 audit: BPF prog-id=121 op=LOAD Feb 12 21:56:28.215000 audit[2774]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000336a28 items=0 ppid=2763 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:28.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033366565313462366563613438363937313433323666646266303030 Feb 12 21:56:28.262842 env[1564]: time="2024-02-12T21:56:28.262606968Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-tfsqc,Uid:4d45f7e3-1de5-4cfa-9db9-4d7ee7672a76,Namespace:kube-system,Attempt:0,} returns sandbox id \"036ee14b6eca4869714326fdbf000a0667637135fe5dd7b6c3d3b765040c5801\"" Feb 12 21:56:28.267651 env[1564]: time="2024-02-12T21:56:28.267610726Z" level=info msg="CreateContainer within sandbox \"036ee14b6eca4869714326fdbf000a0667637135fe5dd7b6c3d3b765040c5801\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Feb 12 21:56:28.305387 env[1564]: time="2024-02-12T21:56:28.301103563Z" level=info msg="CreateContainer within sandbox \"036ee14b6eca4869714326fdbf000a0667637135fe5dd7b6c3d3b765040c5801\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"13d415051dd62705fa1796fc99641bf87d857b8bba8212b01f52cc52e0dbd789\"" Feb 12 21:56:28.305387 env[1564]: time="2024-02-12T21:56:28.302547311Z" level=info msg="StartContainer for \"13d415051dd62705fa1796fc99641bf87d857b8bba8212b01f52cc52e0dbd789\"" Feb 12 21:56:28.333640 systemd[1]: Started cri-containerd-13d415051dd62705fa1796fc99641bf87d857b8bba8212b01f52cc52e0dbd789.scope. Feb 12 21:56:28.368000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.368000 audit[2806]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f74e233ad58 items=0 ppid=2763 pid=2806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:28.368000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133643431353035316464363237303566613137393666633939363431 Feb 12 21:56:28.368000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.368000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.368000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.368000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.368000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.368000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.368000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.368000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.368000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.368000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.368000 audit: BPF prog-id=122 op=LOAD Feb 12 21:56:28.368000 audit[2806]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00039e608 items=0 ppid=2763 pid=2806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:28.368000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133643431353035316464363237303566613137393666633939363431 Feb 12 21:56:28.369000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.369000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.369000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.369000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.369000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.369000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.369000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.369000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.369000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.369000 audit: BPF prog-id=123 op=LOAD Feb 12 21:56:28.369000 audit[2806]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00039e658 items=0 ppid=2763 pid=2806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:28.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133643431353035316464363237303566613137393666633939363431 Feb 12 21:56:28.370000 audit: BPF prog-id=123 op=UNLOAD Feb 12 21:56:28.370000 audit: BPF prog-id=122 op=UNLOAD Feb 12 21:56:28.370000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.370000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.370000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.370000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.370000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.370000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.370000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.370000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.370000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.370000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:28.370000 audit: BPF prog-id=124 op=LOAD Feb 12 21:56:28.370000 audit[2806]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00039e6e8 items=0 ppid=2763 pid=2806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:28.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133643431353035316464363237303566613137393666633939363431 Feb 12 21:56:28.415303 env[1564]: time="2024-02-12T21:56:28.415230847Z" level=info msg="StartContainer for \"13d415051dd62705fa1796fc99641bf87d857b8bba8212b01f52cc52e0dbd789\" returns successfully" Feb 12 21:56:28.914000 audit[2857]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2857 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:28.914000 audit[2857]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd8e6bd880 a2=0 a3=7ffd8e6bd86c items=0 ppid=2818 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:28.914000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 12 21:56:28.916000 audit[2859]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2859 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:28.916000 audit[2859]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcc0cc2b60 a2=0 a3=7ffcc0cc2b4c items=0 ppid=2818 pid=2859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:28.916000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 12 21:56:28.917000 audit[2858]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=2858 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:28.917000 audit[2858]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe3d7998d0 a2=0 a3=7ffe3d7998bc items=0 ppid=2818 pid=2858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:28.917000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 12 21:56:28.921000 audit[2860]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=2860 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:28.921000 audit[2860]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff5e9a5d50 a2=0 a3=7fff5e9a5d3c items=0 ppid=2818 pid=2860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:28.921000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 12 21:56:28.923000 audit[2861]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2861 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:28.923000 audit[2861]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe2f5484c0 a2=0 a3=7ffe2f5484ac items=0 ppid=2818 pid=2861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:28.923000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 12 21:56:28.929000 audit[2862]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2862 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:28.929000 audit[2862]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe4c27e4f0 a2=0 a3=7ffe4c27e4dc items=0 ppid=2818 pid=2862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:28.929000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 12 21:56:29.026000 audit[2863]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2863 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.026000 audit[2863]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc14d127f0 a2=0 a3=7ffc14d127dc items=0 ppid=2818 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.026000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 12 21:56:29.031000 audit[2865]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2865 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.031000 audit[2865]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffdc4589170 a2=0 a3=7ffdc458915c items=0 ppid=2818 pid=2865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.031000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Feb 12 21:56:29.047000 audit[2868]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2868 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.047000 audit[2868]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc083b5d00 a2=0 a3=7ffc083b5cec items=0 ppid=2818 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.047000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Feb 12 21:56:29.049000 audit[2869]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2869 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.049000 audit[2869]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffffea32cf0 a2=0 a3=7ffffea32cdc items=0 ppid=2818 pid=2869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.049000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 12 21:56:29.053000 audit[2871]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2871 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.053000 audit[2871]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff6f341e70 a2=0 a3=7fff6f341e5c items=0 ppid=2818 pid=2871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.053000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 12 21:56:29.055000 audit[2872]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2872 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.055000 audit[2872]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe97eab050 a2=0 a3=7ffe97eab03c items=0 ppid=2818 pid=2872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.055000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 12 21:56:29.060000 audit[2874]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2874 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.060000 audit[2874]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe025bfb80 a2=0 a3=7ffe025bfb6c items=0 ppid=2818 pid=2874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.060000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 12 21:56:29.069000 audit[2877]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2877 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.069000 audit[2877]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffefd5e1440 a2=0 a3=7ffefd5e142c items=0 ppid=2818 pid=2877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.069000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Feb 12 21:56:29.072000 audit[2878]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2878 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.072000 audit[2878]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff8246f4a0 a2=0 a3=7fff8246f48c items=0 ppid=2818 pid=2878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.072000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 12 21:56:29.079000 audit[2880]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2880 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.079000 audit[2880]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcbe48c070 a2=0 a3=7ffcbe48c05c items=0 ppid=2818 pid=2880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.079000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 12 21:56:29.081000 audit[2881]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2881 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.081000 audit[2881]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffff48bfa60 a2=0 a3=7ffff48bfa4c items=0 ppid=2818 pid=2881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.081000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 12 21:56:29.088000 audit[2883]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2883 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.088000 audit[2883]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcbbb29750 a2=0 a3=7ffcbbb2973c items=0 ppid=2818 pid=2883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.088000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 12 21:56:29.094000 audit[2886]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2886 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.094000 audit[2886]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffde7d54aa0 a2=0 a3=7ffde7d54a8c items=0 ppid=2818 pid=2886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.094000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 12 21:56:29.101000 audit[2889]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2889 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.101000 audit[2889]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdb2ba78e0 a2=0 a3=7ffdb2ba78cc items=0 ppid=2818 pid=2889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.101000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 12 21:56:29.103000 audit[2890]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2890 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.103000 audit[2890]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcc508e9c0 a2=0 a3=7ffcc508e9ac items=0 ppid=2818 pid=2890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.103000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 12 21:56:29.107000 audit[2892]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2892 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.107000 audit[2892]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fff6e7fd190 a2=0 a3=7fff6e7fd17c items=0 ppid=2818 pid=2892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.107000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 12 21:56:29.111000 audit[2895]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2895 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.111000 audit[2895]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd797eea70 a2=0 a3=7ffd797eea5c items=0 ppid=2818 pid=2895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.111000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 12 21:56:29.119000 audit[2900]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2900 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.119000 audit[2900]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffec0b0c410 a2=0 a3=7ffec0b0c3fc items=0 ppid=2818 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.119000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 12 21:56:29.123000 audit[2902]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2902 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 21:56:29.123000 audit[2902]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffde315f280 a2=0 a3=7ffde315f26c items=0 ppid=2818 pid=2902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.123000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 12 21:56:29.144000 audit[2904]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2904 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:56:29.144000 audit[2904]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffeb2a37ee0 a2=0 a3=7ffeb2a37ecc items=0 ppid=2818 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.144000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:56:29.153000 audit[2904]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2904 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:56:29.153000 audit[2904]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffeb2a37ee0 a2=0 a3=7ffeb2a37ecc items=0 ppid=2818 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.153000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:56:29.156000 audit[2910]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2910 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.156000 audit[2910]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc1c862630 a2=0 a3=7ffc1c86261c items=0 ppid=2818 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.156000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 12 21:56:29.161000 audit[2912]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2912 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.161000 audit[2912]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffeceac1150 a2=0 a3=7ffeceac113c items=0 ppid=2818 pid=2912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.161000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Feb 12 21:56:29.166000 audit[2915]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2915 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.166000 audit[2915]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe2293ede0 a2=0 a3=7ffe2293edcc items=0 ppid=2818 pid=2915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.166000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Feb 12 21:56:29.169000 audit[2916]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2916 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.169000 audit[2916]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffb52186d0 a2=0 a3=7fffb52186bc items=0 ppid=2818 pid=2916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.169000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 12 21:56:29.176000 audit[2918]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2918 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.176000 audit[2918]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd383ccef0 a2=0 a3=7ffd383ccedc items=0 ppid=2818 pid=2918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.176000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 12 21:56:29.177000 audit[2919]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2919 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.177000 audit[2919]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff23dc4b90 a2=0 a3=7fff23dc4b7c items=0 ppid=2818 pid=2919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.177000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 12 21:56:29.181000 audit[2921]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2921 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.181000 audit[2921]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc2c117840 a2=0 a3=7ffc2c11782c items=0 ppid=2818 pid=2921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.181000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Feb 12 21:56:29.186000 audit[2924]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2924 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.186000 audit[2924]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffcde2104a0 a2=0 a3=7ffcde21048c items=0 ppid=2818 pid=2924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.186000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 12 21:56:29.188000 audit[2925]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2925 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.188000 audit[2925]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff5a91ef10 a2=0 a3=7fff5a91eefc items=0 ppid=2818 pid=2925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.188000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 12 21:56:29.191000 audit[2927]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2927 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.191000 audit[2927]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd61d71fb0 a2=0 a3=7ffd61d71f9c items=0 ppid=2818 pid=2927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.191000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 12 21:56:29.192000 audit[2928]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2928 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.192000 audit[2928]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe1e611110 a2=0 a3=7ffe1e6110fc items=0 ppid=2818 pid=2928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.192000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 12 21:56:29.195000 audit[2930]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2930 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.195000 audit[2930]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd119bfa50 a2=0 a3=7ffd119bfa3c items=0 ppid=2818 pid=2930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.195000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 12 21:56:29.202000 audit[2933]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2933 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.202000 audit[2933]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcf0f32c80 a2=0 a3=7ffcf0f32c6c items=0 ppid=2818 pid=2933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.202000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 12 21:56:29.207000 audit[2936]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2936 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.207000 audit[2936]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe7d8935a0 a2=0 a3=7ffe7d89358c items=0 ppid=2818 pid=2936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.207000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Feb 12 21:56:29.208000 audit[2937]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2937 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.208000 audit[2937]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc30606160 a2=0 a3=7ffc3060614c items=0 ppid=2818 pid=2937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.208000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 12 21:56:29.212000 audit[2939]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2939 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.212000 audit[2939]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffc32e8f080 a2=0 a3=7ffc32e8f06c items=0 ppid=2818 pid=2939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.212000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 12 21:56:29.217000 audit[2942]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2942 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.217000 audit[2942]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffd4d9b0e00 a2=0 a3=7ffd4d9b0dec items=0 ppid=2818 pid=2942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.217000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 12 21:56:29.218000 audit[2943]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=2943 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.218000 audit[2943]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe4b370d50 a2=0 a3=7ffe4b370d3c items=0 ppid=2818 pid=2943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.218000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 12 21:56:29.221000 audit[2945]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=2945 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.221000 audit[2945]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe77628360 a2=0 a3=7ffe7762834c items=0 ppid=2818 pid=2945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.221000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 12 21:56:29.228000 audit[2948]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=2948 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.228000 audit[2948]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffb56e8610 a2=0 a3=7fffb56e85fc items=0 ppid=2818 pid=2948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.228000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 12 21:56:29.230000 audit[2949]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=2949 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.230000 audit[2949]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff95788570 a2=0 a3=7fff9578855c items=0 ppid=2818 pid=2949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.230000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 12 21:56:29.235000 audit[2951]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2951 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 21:56:29.235000 audit[2951]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffdcc02f1f0 a2=0 a3=7ffdcc02f1dc items=0 ppid=2818 pid=2951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.235000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 12 21:56:29.240000 audit[2953]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2953 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 12 21:56:29.240000 audit[2953]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffe12498f10 a2=0 a3=7ffe12498efc items=0 ppid=2818 pid=2953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.240000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:56:29.241000 audit[2953]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2953 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 12 21:56:29.241000 audit[2953]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffe12498f10 a2=0 a3=7ffe12498efc items=0 ppid=2818 pid=2953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:29.241000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:56:29.261018 kubelet[2584]: E0212 21:56:29.260978 2584 projected.go:292] Couldn't get configMap tigera-operator/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Feb 12 21:56:29.261018 kubelet[2584]: E0212 21:56:29.261021 2584 projected.go:198] Error preparing data for projected volume kube-api-access-z4q45 for pod tigera-operator/tigera-operator-7ff8dc855-dw5t9: failed to sync configmap cache: timed out waiting for the condition Feb 12 21:56:29.261584 kubelet[2584]: E0212 21:56:29.261134 2584 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/4d170a82-a2d1-4aa4-bf73-44bf9dd259f4-kube-api-access-z4q45 podName:4d170a82-a2d1-4aa4-bf73-44bf9dd259f4 nodeName:}" failed. No retries permitted until 2024-02-12 21:56:29.761107575 +0000 UTC m=+15.980776551 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-z4q45" (UniqueName: "kubernetes.io/projected/4d170a82-a2d1-4aa4-bf73-44bf9dd259f4-kube-api-access-z4q45") pod "tigera-operator-7ff8dc855-dw5t9" (UID: "4d170a82-a2d1-4aa4-bf73-44bf9dd259f4") : failed to sync configmap cache: timed out waiting for the condition Feb 12 21:56:30.162254 env[1564]: time="2024-02-12T21:56:30.162200341Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7ff8dc855-dw5t9,Uid:4d170a82-a2d1-4aa4-bf73-44bf9dd259f4,Namespace:tigera-operator,Attempt:0,}" Feb 12 21:56:30.218168 env[1564]: time="2024-02-12T21:56:30.218026370Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 21:56:30.218168 env[1564]: time="2024-02-12T21:56:30.218120830Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 21:56:30.218802 env[1564]: time="2024-02-12T21:56:30.218141303Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 21:56:30.218941 env[1564]: time="2024-02-12T21:56:30.218810022Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/800e0c5c69750c650d37b3eb5037c9b1e1f8b56b0b595d7df6db794ab452b819 pid=2961 runtime=io.containerd.runc.v2 Feb 12 21:56:30.276512 systemd[1]: run-containerd-runc-k8s.io-800e0c5c69750c650d37b3eb5037c9b1e1f8b56b0b595d7df6db794ab452b819-runc.wKLJTy.mount: Deactivated successfully. Feb 12 21:56:30.284139 systemd[1]: Started cri-containerd-800e0c5c69750c650d37b3eb5037c9b1e1f8b56b0b595d7df6db794ab452b819.scope. Feb 12 21:56:30.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.309000 audit: BPF prog-id=125 op=LOAD Feb 12 21:56:30.309000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.309000 audit[2971]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2961 pid=2971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:30.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830306530633563363937353063363530643337623365623530333763 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2961 pid=2971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:30.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830306530633563363937353063363530643337623365623530333763 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit: BPF prog-id=126 op=LOAD Feb 12 21:56:30.310000 audit[2971]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002c3dc0 items=0 ppid=2961 pid=2971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:30.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830306530633563363937353063363530643337623365623530333763 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit: BPF prog-id=127 op=LOAD Feb 12 21:56:30.310000 audit[2971]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002c3e08 items=0 ppid=2961 pid=2971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:30.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830306530633563363937353063363530643337623365623530333763 Feb 12 21:56:30.310000 audit: BPF prog-id=127 op=UNLOAD Feb 12 21:56:30.310000 audit: BPF prog-id=126 op=UNLOAD Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { perfmon } for pid=2971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit[2971]: AVC avc: denied { bpf } for pid=2971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:30.310000 audit: BPF prog-id=128 op=LOAD Feb 12 21:56:30.310000 audit[2971]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003b8218 items=0 ppid=2961 pid=2971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:30.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830306530633563363937353063363530643337623365623530333763 Feb 12 21:56:30.371847 env[1564]: time="2024-02-12T21:56:30.371682919Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7ff8dc855-dw5t9,Uid:4d170a82-a2d1-4aa4-bf73-44bf9dd259f4,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"800e0c5c69750c650d37b3eb5037c9b1e1f8b56b0b595d7df6db794ab452b819\"" Feb 12 21:56:30.375776 env[1564]: time="2024-02-12T21:56:30.374983493Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\"" Feb 12 21:56:32.064172 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3070203222.mount: Deactivated successfully. Feb 12 21:56:33.843015 env[1564]: time="2024-02-12T21:56:33.842966160Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:33.847686 env[1564]: time="2024-02-12T21:56:33.847621730Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7bc79e0d3be4fa8c35133127424f9b1ec775af43145b7dd58637905c76084827,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:33.850504 env[1564]: time="2024-02-12T21:56:33.850465156Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:33.853770 env[1564]: time="2024-02-12T21:56:33.853728932Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:715ac9a30f8a9579e44258af20de354715429e11836b493918e9e1a696e9b028,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:33.854846 env[1564]: time="2024-02-12T21:56:33.854804804Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\" returns image reference \"sha256:7bc79e0d3be4fa8c35133127424f9b1ec775af43145b7dd58637905c76084827\"" Feb 12 21:56:33.859943 env[1564]: time="2024-02-12T21:56:33.859901231Z" level=info msg="CreateContainer within sandbox \"800e0c5c69750c650d37b3eb5037c9b1e1f8b56b0b595d7df6db794ab452b819\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Feb 12 21:56:33.894520 env[1564]: time="2024-02-12T21:56:33.894457997Z" level=info msg="CreateContainer within sandbox \"800e0c5c69750c650d37b3eb5037c9b1e1f8b56b0b595d7df6db794ab452b819\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"6a28a32cf02f32e4955382e93d27778fcef0d4ec739bba368672433ef0d55ecc\"" Feb 12 21:56:33.902500 env[1564]: time="2024-02-12T21:56:33.902448433Z" level=info msg="StartContainer for \"6a28a32cf02f32e4955382e93d27778fcef0d4ec739bba368672433ef0d55ecc\"" Feb 12 21:56:33.940710 systemd[1]: run-containerd-runc-k8s.io-6a28a32cf02f32e4955382e93d27778fcef0d4ec739bba368672433ef0d55ecc-runc.7IGrcM.mount: Deactivated successfully. Feb 12 21:56:33.950135 systemd[1]: Started cri-containerd-6a28a32cf02f32e4955382e93d27778fcef0d4ec739bba368672433ef0d55ecc.scope. Feb 12 21:56:33.974045 kernel: kauditd_printk_skb: 300 callbacks suppressed Feb 12 21:56:33.974202 kernel: audit: type=1400 audit(1707774993.967:1036): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.986897 kernel: audit: type=1400 audit(1707774993.967:1037): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.987029 kernel: audit: type=1400 audit(1707774993.967:1038): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.993267 kernel: audit: type=1400 audit(1707774993.967:1039): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.998792 kernel: audit: type=1400 audit(1707774993.967:1040): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:34.010611 kernel: audit: type=1400 audit(1707774993.967:1041): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:34.011044 kernel: audit: type=1400 audit(1707774993.967:1042): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:34.016814 kernel: audit: type=1400 audit(1707774993.967:1043): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:34.029041 kernel: audit: type=1400 audit(1707774993.967:1044): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:34.031195 kernel: audit: type=1400 audit(1707774993.973:1045): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.973000 audit: BPF prog-id=129 op=LOAD Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2961 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:33.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661323861333263663032663332653439353533383265393364323737 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2961 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:33.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661323861333263663032663332653439353533383265393364323737 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit: BPF prog-id=130 op=LOAD Feb 12 21:56:33.974000 audit[3004]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003a1700 items=0 ppid=2961 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:33.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661323861333263663032663332653439353533383265393364323737 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.974000 audit: BPF prog-id=131 op=LOAD Feb 12 21:56:33.974000 audit[3004]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003a1748 items=0 ppid=2961 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:33.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661323861333263663032663332653439353533383265393364323737 Feb 12 21:56:33.974000 audit: BPF prog-id=131 op=UNLOAD Feb 12 21:56:33.974000 audit: BPF prog-id=130 op=UNLOAD Feb 12 21:56:33.975000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.975000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.975000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.975000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.975000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.975000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.975000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.975000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.975000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.975000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:33.975000 audit: BPF prog-id=132 op=LOAD Feb 12 21:56:33.975000 audit[3004]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003a1b58 items=0 ppid=2961 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:33.975000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661323861333263663032663332653439353533383265393364323737 Feb 12 21:56:34.036282 env[1564]: time="2024-02-12T21:56:34.036227181Z" level=info msg="StartContainer for \"6a28a32cf02f32e4955382e93d27778fcef0d4ec739bba368672433ef0d55ecc\" returns successfully" Feb 12 21:56:34.122159 kubelet[2584]: I0212 21:56:34.122124 2584 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-tfsqc" podStartSLOduration=7.122075654 podCreationTimestamp="2024-02-12 21:56:27 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 21:56:29.088250118 +0000 UTC m=+15.307919103" watchObservedRunningTime="2024-02-12 21:56:34.122075654 +0000 UTC m=+20.341744641" Feb 12 21:56:36.207000 audit[3036]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=3036 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:56:36.207000 audit[3036]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffd72f11cd0 a2=0 a3=7ffd72f11cbc items=0 ppid=2818 pid=3036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:36.207000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:56:36.209000 audit[3036]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3036 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:56:36.209000 audit[3036]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffd72f11cd0 a2=0 a3=31030 items=0 ppid=2818 pid=3036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:36.209000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:56:36.217000 audit[3038]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=3038 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:56:36.217000 audit[3038]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffef9188950 a2=0 a3=7ffef918893c items=0 ppid=2818 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:36.217000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:56:36.218000 audit[3038]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3038 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:56:36.218000 audit[3038]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffef9188950 a2=0 a3=31030 items=0 ppid=2818 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:36.218000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:56:36.381964 kubelet[2584]: I0212 21:56:36.381891 2584 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7ff8dc855-dw5t9" podStartSLOduration=5.899848529 podCreationTimestamp="2024-02-12 21:56:27 +0000 UTC" firstStartedPulling="2024-02-12 21:56:30.373315033 +0000 UTC m=+16.592984010" lastFinishedPulling="2024-02-12 21:56:33.855276454 +0000 UTC m=+20.074945433" observedRunningTime="2024-02-12 21:56:34.124437676 +0000 UTC m=+20.344106662" watchObservedRunningTime="2024-02-12 21:56:36.381809952 +0000 UTC m=+22.601478934" Feb 12 21:56:36.382575 kubelet[2584]: I0212 21:56:36.382420 2584 topology_manager.go:212] "Topology Admit Handler" Feb 12 21:56:36.391637 systemd[1]: Created slice kubepods-besteffort-pode74c7bcf_7416_49dd_ab64_b6433151e9d4.slice. Feb 12 21:56:36.416993 kubelet[2584]: I0212 21:56:36.416967 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/e74c7bcf-7416-49dd-ab64-b6433151e9d4-typha-certs\") pod \"calico-typha-699fb544d8-bjg5h\" (UID: \"e74c7bcf-7416-49dd-ab64-b6433151e9d4\") " pod="calico-system/calico-typha-699fb544d8-bjg5h" Feb 12 21:56:36.417281 kubelet[2584]: I0212 21:56:36.417264 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qbdz8\" (UniqueName: \"kubernetes.io/projected/e74c7bcf-7416-49dd-ab64-b6433151e9d4-kube-api-access-qbdz8\") pod \"calico-typha-699fb544d8-bjg5h\" (UID: \"e74c7bcf-7416-49dd-ab64-b6433151e9d4\") " pod="calico-system/calico-typha-699fb544d8-bjg5h" Feb 12 21:56:36.417467 kubelet[2584]: I0212 21:56:36.417453 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e74c7bcf-7416-49dd-ab64-b6433151e9d4-tigera-ca-bundle\") pod \"calico-typha-699fb544d8-bjg5h\" (UID: \"e74c7bcf-7416-49dd-ab64-b6433151e9d4\") " pod="calico-system/calico-typha-699fb544d8-bjg5h" Feb 12 21:56:36.492546 kubelet[2584]: I0212 21:56:36.492433 2584 topology_manager.go:212] "Topology Admit Handler" Feb 12 21:56:36.502969 systemd[1]: Created slice kubepods-besteffort-pod6a9cb5fb_c075_41ca_a0eb_6094b7b2aa03.slice. Feb 12 21:56:36.520517 kubelet[2584]: I0212 21:56:36.520489 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03-xtables-lock\") pod \"calico-node-lvxxt\" (UID: \"6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03\") " pod="calico-system/calico-node-lvxxt" Feb 12 21:56:36.520705 kubelet[2584]: I0212 21:56:36.520550 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03-tigera-ca-bundle\") pod \"calico-node-lvxxt\" (UID: \"6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03\") " pod="calico-system/calico-node-lvxxt" Feb 12 21:56:36.520705 kubelet[2584]: I0212 21:56:36.520576 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03-cni-log-dir\") pod \"calico-node-lvxxt\" (UID: \"6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03\") " pod="calico-system/calico-node-lvxxt" Feb 12 21:56:36.520705 kubelet[2584]: I0212 21:56:36.520633 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03-var-run-calico\") pod \"calico-node-lvxxt\" (UID: \"6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03\") " pod="calico-system/calico-node-lvxxt" Feb 12 21:56:36.520705 kubelet[2584]: I0212 21:56:36.520661 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03-cni-bin-dir\") pod \"calico-node-lvxxt\" (UID: \"6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03\") " pod="calico-system/calico-node-lvxxt" Feb 12 21:56:36.520908 kubelet[2584]: I0212 21:56:36.520730 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03-lib-modules\") pod \"calico-node-lvxxt\" (UID: \"6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03\") " pod="calico-system/calico-node-lvxxt" Feb 12 21:56:36.520908 kubelet[2584]: I0212 21:56:36.520777 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03-node-certs\") pod \"calico-node-lvxxt\" (UID: \"6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03\") " pod="calico-system/calico-node-lvxxt" Feb 12 21:56:36.520908 kubelet[2584]: I0212 21:56:36.520812 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03-var-lib-calico\") pod \"calico-node-lvxxt\" (UID: \"6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03\") " pod="calico-system/calico-node-lvxxt" Feb 12 21:56:36.520908 kubelet[2584]: I0212 21:56:36.520859 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03-flexvol-driver-host\") pod \"calico-node-lvxxt\" (UID: \"6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03\") " pod="calico-system/calico-node-lvxxt" Feb 12 21:56:36.520908 kubelet[2584]: I0212 21:56:36.520893 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03-cni-net-dir\") pod \"calico-node-lvxxt\" (UID: \"6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03\") " pod="calico-system/calico-node-lvxxt" Feb 12 21:56:36.521125 kubelet[2584]: I0212 21:56:36.520945 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b4trh\" (UniqueName: \"kubernetes.io/projected/6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03-kube-api-access-b4trh\") pod \"calico-node-lvxxt\" (UID: \"6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03\") " pod="calico-system/calico-node-lvxxt" Feb 12 21:56:36.521125 kubelet[2584]: I0212 21:56:36.520996 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03-policysync\") pod \"calico-node-lvxxt\" (UID: \"6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03\") " pod="calico-system/calico-node-lvxxt" Feb 12 21:56:36.615063 kubelet[2584]: I0212 21:56:36.615001 2584 topology_manager.go:212] "Topology Admit Handler" Feb 12 21:56:36.616001 kubelet[2584]: E0212 21:56:36.615980 2584 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9wk5p" podUID=9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3 Feb 12 21:56:36.634861 kubelet[2584]: E0212 21:56:36.634836 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.635257 kubelet[2584]: W0212 21:56:36.635236 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.635654 kubelet[2584]: E0212 21:56:36.635637 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.639792 kubelet[2584]: E0212 21:56:36.639771 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.639944 kubelet[2584]: W0212 21:56:36.639926 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.640038 kubelet[2584]: E0212 21:56:36.640027 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.663583 kubelet[2584]: E0212 21:56:36.663561 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.663817 kubelet[2584]: W0212 21:56:36.663798 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.663929 kubelet[2584]: E0212 21:56:36.663918 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.696808 env[1564]: time="2024-02-12T21:56:36.696757459Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-699fb544d8-bjg5h,Uid:e74c7bcf-7416-49dd-ab64-b6433151e9d4,Namespace:calico-system,Attempt:0,}" Feb 12 21:56:36.707984 kubelet[2584]: E0212 21:56:36.707956 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.711106 kubelet[2584]: W0212 21:56:36.708156 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.711106 kubelet[2584]: E0212 21:56:36.708225 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.711106 kubelet[2584]: E0212 21:56:36.708722 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.711106 kubelet[2584]: W0212 21:56:36.708735 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.711106 kubelet[2584]: E0212 21:56:36.708754 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.711106 kubelet[2584]: E0212 21:56:36.708983 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.711106 kubelet[2584]: W0212 21:56:36.708993 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.711106 kubelet[2584]: E0212 21:56:36.709010 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.711106 kubelet[2584]: E0212 21:56:36.710417 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.711106 kubelet[2584]: W0212 21:56:36.710430 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.711933 kubelet[2584]: E0212 21:56:36.710447 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.711933 kubelet[2584]: E0212 21:56:36.710744 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.711933 kubelet[2584]: W0212 21:56:36.710755 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.711933 kubelet[2584]: E0212 21:56:36.710772 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.715949 kubelet[2584]: E0212 21:56:36.715925 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.716437 kubelet[2584]: W0212 21:56:36.716384 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.716622 kubelet[2584]: E0212 21:56:36.716606 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.717223 kubelet[2584]: E0212 21:56:36.717209 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.717327 kubelet[2584]: W0212 21:56:36.717313 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.717410 kubelet[2584]: E0212 21:56:36.717400 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.718232 kubelet[2584]: E0212 21:56:36.717857 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.718232 kubelet[2584]: W0212 21:56:36.717871 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.718232 kubelet[2584]: E0212 21:56:36.717889 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.718232 kubelet[2584]: E0212 21:56:36.718113 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.718232 kubelet[2584]: W0212 21:56:36.718122 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.718232 kubelet[2584]: E0212 21:56:36.718137 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.718559 kubelet[2584]: E0212 21:56:36.718402 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.718559 kubelet[2584]: W0212 21:56:36.718427 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.718559 kubelet[2584]: E0212 21:56:36.718444 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.718714 kubelet[2584]: E0212 21:56:36.718636 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.718714 kubelet[2584]: W0212 21:56:36.718645 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.718714 kubelet[2584]: E0212 21:56:36.718661 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.719447 kubelet[2584]: E0212 21:56:36.718885 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.719447 kubelet[2584]: W0212 21:56:36.718897 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.719447 kubelet[2584]: E0212 21:56:36.718911 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.719447 kubelet[2584]: E0212 21:56:36.719161 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.719447 kubelet[2584]: W0212 21:56:36.719171 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.719447 kubelet[2584]: E0212 21:56:36.719185 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.719447 kubelet[2584]: E0212 21:56:36.719403 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.719447 kubelet[2584]: W0212 21:56:36.719413 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.719447 kubelet[2584]: E0212 21:56:36.719427 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.720599 kubelet[2584]: E0212 21:56:36.719612 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.720599 kubelet[2584]: W0212 21:56:36.719621 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.720599 kubelet[2584]: E0212 21:56:36.719636 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.724069 kubelet[2584]: E0212 21:56:36.724047 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.724178 kubelet[2584]: W0212 21:56:36.724071 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.724178 kubelet[2584]: E0212 21:56:36.724116 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.724178 kubelet[2584]: I0212 21:56:36.724154 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3-varrun\") pod \"csi-node-driver-9wk5p\" (UID: \"9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3\") " pod="calico-system/csi-node-driver-9wk5p" Feb 12 21:56:36.734611 kubelet[2584]: E0212 21:56:36.724447 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.734611 kubelet[2584]: W0212 21:56:36.724460 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.734611 kubelet[2584]: E0212 21:56:36.724505 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.734611 kubelet[2584]: I0212 21:56:36.724534 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3-socket-dir\") pod \"csi-node-driver-9wk5p\" (UID: \"9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3\") " pod="calico-system/csi-node-driver-9wk5p" Feb 12 21:56:36.734611 kubelet[2584]: E0212 21:56:36.724837 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.734611 kubelet[2584]: W0212 21:56:36.724850 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.734611 kubelet[2584]: E0212 21:56:36.724867 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.734611 kubelet[2584]: I0212 21:56:36.724914 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3-kubelet-dir\") pod \"csi-node-driver-9wk5p\" (UID: \"9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3\") " pod="calico-system/csi-node-driver-9wk5p" Feb 12 21:56:36.734611 kubelet[2584]: E0212 21:56:36.731392 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.735613 kubelet[2584]: W0212 21:56:36.731414 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.735613 kubelet[2584]: E0212 21:56:36.731444 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.735613 kubelet[2584]: I0212 21:56:36.731483 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3-registration-dir\") pod \"csi-node-driver-9wk5p\" (UID: \"9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3\") " pod="calico-system/csi-node-driver-9wk5p" Feb 12 21:56:36.735613 kubelet[2584]: E0212 21:56:36.731890 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.735613 kubelet[2584]: W0212 21:56:36.731922 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.735613 kubelet[2584]: E0212 21:56:36.731943 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.735613 kubelet[2584]: I0212 21:56:36.731976 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fdlk7\" (UniqueName: \"kubernetes.io/projected/9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3-kube-api-access-fdlk7\") pod \"csi-node-driver-9wk5p\" (UID: \"9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3\") " pod="calico-system/csi-node-driver-9wk5p" Feb 12 21:56:36.735613 kubelet[2584]: E0212 21:56:36.732349 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.736080 kubelet[2584]: W0212 21:56:36.732362 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.736080 kubelet[2584]: E0212 21:56:36.732380 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.736080 kubelet[2584]: E0212 21:56:36.732614 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.736080 kubelet[2584]: W0212 21:56:36.732624 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.736080 kubelet[2584]: E0212 21:56:36.732659 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.736080 kubelet[2584]: E0212 21:56:36.733154 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.736080 kubelet[2584]: W0212 21:56:36.733165 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.736080 kubelet[2584]: E0212 21:56:36.733181 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.736080 kubelet[2584]: E0212 21:56:36.733951 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.736080 kubelet[2584]: W0212 21:56:36.734120 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.736530 kubelet[2584]: E0212 21:56:36.734168 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.738206 kubelet[2584]: E0212 21:56:36.737045 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.738206 kubelet[2584]: W0212 21:56:36.737064 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.738206 kubelet[2584]: E0212 21:56:36.737104 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.738206 kubelet[2584]: E0212 21:56:36.737515 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.738206 kubelet[2584]: W0212 21:56:36.737549 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.738206 kubelet[2584]: E0212 21:56:36.737569 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.738206 kubelet[2584]: E0212 21:56:36.737841 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.738206 kubelet[2584]: W0212 21:56:36.737902 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.738206 kubelet[2584]: E0212 21:56:36.737922 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.738657 kubelet[2584]: E0212 21:56:36.738238 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.738657 kubelet[2584]: W0212 21:56:36.738247 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.738657 kubelet[2584]: E0212 21:56:36.738263 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.738657 kubelet[2584]: E0212 21:56:36.738558 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.738657 kubelet[2584]: W0212 21:56:36.738567 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.738657 kubelet[2584]: E0212 21:56:36.738593 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.743526 kubelet[2584]: E0212 21:56:36.739854 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.743526 kubelet[2584]: W0212 21:56:36.739869 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.743526 kubelet[2584]: E0212 21:56:36.739886 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.761199 env[1564]: time="2024-02-12T21:56:36.752575622Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 21:56:36.761199 env[1564]: time="2024-02-12T21:56:36.752701228Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 21:56:36.761199 env[1564]: time="2024-02-12T21:56:36.752735321Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 21:56:36.761199 env[1564]: time="2024-02-12T21:56:36.752934109Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1c74c945454cadca0c266e3dddae8002013cf4eb01b96b4d4149ae6df000af4f pid=3083 runtime=io.containerd.runc.v2 Feb 12 21:56:36.797008 systemd[1]: Started cri-containerd-1c74c945454cadca0c266e3dddae8002013cf4eb01b96b4d4149ae6df000af4f.scope. Feb 12 21:56:36.811805 env[1564]: time="2024-02-12T21:56:36.811259653Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-lvxxt,Uid:6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03,Namespace:calico-system,Attempt:0,}" Feb 12 21:56:36.832980 kubelet[2584]: E0212 21:56:36.832738 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.832980 kubelet[2584]: W0212 21:56:36.832760 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.832980 kubelet[2584]: E0212 21:56:36.832821 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.833594 kubelet[2584]: E0212 21:56:36.833499 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.833594 kubelet[2584]: W0212 21:56:36.833512 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.833594 kubelet[2584]: E0212 21:56:36.833531 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.833816 kubelet[2584]: E0212 21:56:36.833798 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.833816 kubelet[2584]: W0212 21:56:36.833809 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.833917 kubelet[2584]: E0212 21:56:36.833830 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.834080 kubelet[2584]: E0212 21:56:36.834065 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.834080 kubelet[2584]: W0212 21:56:36.834080 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.834212 kubelet[2584]: E0212 21:56:36.834098 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.834739 kubelet[2584]: E0212 21:56:36.834716 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.834828 kubelet[2584]: W0212 21:56:36.834741 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.834828 kubelet[2584]: E0212 21:56:36.834761 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.835050 kubelet[2584]: E0212 21:56:36.835036 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.835050 kubelet[2584]: W0212 21:56:36.835051 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.835184 kubelet[2584]: E0212 21:56:36.835072 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.835426 kubelet[2584]: E0212 21:56:36.835411 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.835426 kubelet[2584]: W0212 21:56:36.835426 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.835549 kubelet[2584]: E0212 21:56:36.835445 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.837755 kubelet[2584]: E0212 21:56:36.835855 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.837755 kubelet[2584]: W0212 21:56:36.835866 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.837755 kubelet[2584]: E0212 21:56:36.835896 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.837755 kubelet[2584]: E0212 21:56:36.836633 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.837755 kubelet[2584]: W0212 21:56:36.836697 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.837755 kubelet[2584]: E0212 21:56:36.836849 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.837755 kubelet[2584]: E0212 21:56:36.837279 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.837755 kubelet[2584]: W0212 21:56:36.837289 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.837755 kubelet[2584]: E0212 21:56:36.837499 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.837755 kubelet[2584]: E0212 21:56:36.837719 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.838361 kubelet[2584]: W0212 21:56:36.837729 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.838361 kubelet[2584]: E0212 21:56:36.837838 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.838361 kubelet[2584]: E0212 21:56:36.837993 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.838361 kubelet[2584]: W0212 21:56:36.838002 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.838361 kubelet[2584]: E0212 21:56:36.838103 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.838361 kubelet[2584]: E0212 21:56:36.838282 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.838361 kubelet[2584]: W0212 21:56:36.838292 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.838825 kubelet[2584]: E0212 21:56:36.838386 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.838825 kubelet[2584]: E0212 21:56:36.838540 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.838825 kubelet[2584]: W0212 21:56:36.838548 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.838825 kubelet[2584]: E0212 21:56:36.838733 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.839034 kubelet[2584]: E0212 21:56:36.838921 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.839034 kubelet[2584]: W0212 21:56:36.838931 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.839034 kubelet[2584]: E0212 21:56:36.838950 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.839502 kubelet[2584]: E0212 21:56:36.839487 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.839574 kubelet[2584]: W0212 21:56:36.839507 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.839574 kubelet[2584]: E0212 21:56:36.839529 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.839853 kubelet[2584]: E0212 21:56:36.839839 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.839853 kubelet[2584]: W0212 21:56:36.839853 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.842828 kubelet[2584]: E0212 21:56:36.842758 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.846482 kubelet[2584]: E0212 21:56:36.846376 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.846621 kubelet[2584]: W0212 21:56:36.846482 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.846698 kubelet[2584]: E0212 21:56:36.846630 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.847295 kubelet[2584]: E0212 21:56:36.847259 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.847295 kubelet[2584]: W0212 21:56:36.847273 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.847428 kubelet[2584]: E0212 21:56:36.847404 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.847599 kubelet[2584]: E0212 21:56:36.847583 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.847599 kubelet[2584]: W0212 21:56:36.847599 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.847821 kubelet[2584]: E0212 21:56:36.847751 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.847955 kubelet[2584]: E0212 21:56:36.847940 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.848026 kubelet[2584]: W0212 21:56:36.847955 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.848026 kubelet[2584]: E0212 21:56:36.847983 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.848360 kubelet[2584]: E0212 21:56:36.848342 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.848360 kubelet[2584]: W0212 21:56:36.848359 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.848484 kubelet[2584]: E0212 21:56:36.848380 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.848645 kubelet[2584]: E0212 21:56:36.848622 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.848645 kubelet[2584]: W0212 21:56:36.848637 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.848771 kubelet[2584]: E0212 21:56:36.848657 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.848940 kubelet[2584]: E0212 21:56:36.848921 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.848940 kubelet[2584]: W0212 21:56:36.848939 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.849078 kubelet[2584]: E0212 21:56:36.849064 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.849548 kubelet[2584]: E0212 21:56:36.849529 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.849548 kubelet[2584]: W0212 21:56:36.849545 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.849696 kubelet[2584]: E0212 21:56:36.849562 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.861000 audit: BPF prog-id=133 op=LOAD Feb 12 21:56:36.863000 audit[3094]: AVC avc: denied { bpf } for pid=3094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.863000 audit[3094]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3083 pid=3094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:36.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163373463393435343534636164636130633236366533646464616538 Feb 12 21:56:36.864000 audit[3094]: AVC avc: denied { perfmon } for pid=3094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.864000 audit[3094]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=3083 pid=3094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:36.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163373463393435343534636164636130633236366533646464616538 Feb 12 21:56:36.864000 audit[3094]: AVC avc: denied { bpf } for pid=3094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.864000 audit[3094]: AVC avc: denied { bpf } for pid=3094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.864000 audit[3094]: AVC avc: denied { bpf } for pid=3094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.864000 audit[3094]: AVC avc: denied { perfmon } for pid=3094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.864000 audit[3094]: AVC avc: denied { perfmon } for pid=3094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.864000 audit[3094]: AVC avc: denied { perfmon } for pid=3094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.864000 audit[3094]: AVC avc: denied { perfmon } for pid=3094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.864000 audit[3094]: AVC avc: denied { perfmon } for pid=3094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.864000 audit[3094]: AVC avc: denied { bpf } for pid=3094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.864000 audit[3094]: AVC avc: denied { bpf } for pid=3094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.864000 audit: BPF prog-id=134 op=LOAD Feb 12 21:56:36.864000 audit[3094]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c0003ee860 items=0 ppid=3083 pid=3094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:36.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163373463393435343534636164636130633236366533646464616538 Feb 12 21:56:36.866000 audit[3094]: AVC avc: denied { bpf } for pid=3094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.866000 audit[3094]: AVC avc: denied { bpf } for pid=3094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.866000 audit[3094]: AVC avc: denied { perfmon } for pid=3094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.866000 audit[3094]: AVC avc: denied { perfmon } for pid=3094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.866000 audit[3094]: AVC avc: denied { perfmon } for pid=3094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.866000 audit[3094]: AVC avc: denied { perfmon } for pid=3094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.866000 audit[3094]: AVC avc: denied { perfmon } for pid=3094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.866000 audit[3094]: AVC avc: denied { bpf } for pid=3094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.866000 audit[3094]: AVC avc: denied { bpf } for pid=3094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.866000 audit: BPF prog-id=135 op=LOAD Feb 12 21:56:36.866000 audit[3094]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c0003ee8a8 items=0 ppid=3083 pid=3094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:36.866000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163373463393435343534636164636130633236366533646464616538 Feb 12 21:56:36.867000 audit: BPF prog-id=135 op=UNLOAD Feb 12 21:56:36.867000 audit: BPF prog-id=134 op=UNLOAD Feb 12 21:56:36.868000 audit[3094]: AVC avc: denied { bpf } for pid=3094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.868000 audit[3094]: AVC avc: denied { bpf } for pid=3094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.868000 audit[3094]: AVC avc: denied { bpf } for pid=3094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.868000 audit[3094]: AVC avc: denied { perfmon } for pid=3094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.868000 audit[3094]: AVC avc: denied { perfmon } for pid=3094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.868000 audit[3094]: AVC avc: denied { perfmon } for pid=3094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.868000 audit[3094]: AVC avc: denied { perfmon } for pid=3094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.868000 audit[3094]: AVC avc: denied { perfmon } for pid=3094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.868000 audit[3094]: AVC avc: denied { bpf } for pid=3094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.868000 audit[3094]: AVC avc: denied { bpf } for pid=3094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.868000 audit: BPF prog-id=136 op=LOAD Feb 12 21:56:36.868000 audit[3094]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c0003eecb8 items=0 ppid=3083 pid=3094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:36.868000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163373463393435343534636164636130633236366533646464616538 Feb 12 21:56:36.886928 kubelet[2584]: E0212 21:56:36.886904 2584 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 21:56:36.887129 kubelet[2584]: W0212 21:56:36.887110 2584 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 21:56:36.887244 kubelet[2584]: E0212 21:56:36.887230 2584 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 21:56:36.888972 env[1564]: time="2024-02-12T21:56:36.887601804Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 21:56:36.888972 env[1564]: time="2024-02-12T21:56:36.887682086Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 21:56:36.888972 env[1564]: time="2024-02-12T21:56:36.887702499Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 21:56:36.888972 env[1564]: time="2024-02-12T21:56:36.887960664Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ba009f45700f8e620324b6d5c184f32670843347898f821730dcb8d0ae280e51 pid=3147 runtime=io.containerd.runc.v2 Feb 12 21:56:36.915172 systemd[1]: Started cri-containerd-ba009f45700f8e620324b6d5c184f32670843347898f821730dcb8d0ae280e51.scope. Feb 12 21:56:36.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.950000 audit: BPF prog-id=137 op=LOAD Feb 12 21:56:36.952000 audit[3158]: AVC avc: denied { bpf } for pid=3158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.952000 audit[3158]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3147 pid=3158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:36.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261303039663435373030663865363230333234623664356331383466 Feb 12 21:56:36.953000 audit[3158]: AVC avc: denied { perfmon } for pid=3158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.953000 audit[3158]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3147 pid=3158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:36.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261303039663435373030663865363230333234623664356331383466 Feb 12 21:56:36.953000 audit[3158]: AVC avc: denied { bpf } for pid=3158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.953000 audit[3158]: AVC avc: denied { bpf } for pid=3158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.953000 audit[3158]: AVC avc: denied { bpf } for pid=3158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.953000 audit[3158]: AVC avc: denied { perfmon } for pid=3158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.953000 audit[3158]: AVC avc: denied { perfmon } for pid=3158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.953000 audit[3158]: AVC avc: denied { perfmon } for pid=3158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.953000 audit[3158]: AVC avc: denied { perfmon } for pid=3158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.953000 audit[3158]: AVC avc: denied { perfmon } for pid=3158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.953000 audit[3158]: AVC avc: denied { bpf } for pid=3158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.953000 audit[3158]: AVC avc: denied { bpf } for pid=3158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.953000 audit: BPF prog-id=138 op=LOAD Feb 12 21:56:36.953000 audit[3158]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000251e20 items=0 ppid=3147 pid=3158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:36.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261303039663435373030663865363230333234623664356331383466 Feb 12 21:56:36.954000 audit[3158]: AVC avc: denied { bpf } for pid=3158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.954000 audit[3158]: AVC avc: denied { bpf } for pid=3158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.954000 audit[3158]: AVC avc: denied { perfmon } for pid=3158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.954000 audit[3158]: AVC avc: denied { perfmon } for pid=3158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.954000 audit[3158]: AVC avc: denied { perfmon } for pid=3158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.954000 audit[3158]: AVC avc: denied { perfmon } for pid=3158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.954000 audit[3158]: AVC avc: denied { perfmon } for pid=3158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.954000 audit[3158]: AVC avc: denied { bpf } for pid=3158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.954000 audit[3158]: AVC avc: denied { bpf } for pid=3158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.954000 audit: BPF prog-id=139 op=LOAD Feb 12 21:56:36.954000 audit[3158]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000251e68 items=0 ppid=3147 pid=3158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:36.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261303039663435373030663865363230333234623664356331383466 Feb 12 21:56:36.955000 audit: BPF prog-id=139 op=UNLOAD Feb 12 21:56:36.955000 audit: BPF prog-id=138 op=UNLOAD Feb 12 21:56:36.955000 audit[3158]: AVC avc: denied { bpf } for pid=3158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.955000 audit[3158]: AVC avc: denied { bpf } for pid=3158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.955000 audit[3158]: AVC avc: denied { bpf } for pid=3158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.955000 audit[3158]: AVC avc: denied { perfmon } for pid=3158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.955000 audit[3158]: AVC avc: denied { perfmon } for pid=3158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.955000 audit[3158]: AVC avc: denied { perfmon } for pid=3158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.955000 audit[3158]: AVC avc: denied { perfmon } for pid=3158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.955000 audit[3158]: AVC avc: denied { perfmon } for pid=3158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.955000 audit[3158]: AVC avc: denied { bpf } for pid=3158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.955000 audit[3158]: AVC avc: denied { bpf } for pid=3158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:36.955000 audit: BPF prog-id=140 op=LOAD Feb 12 21:56:36.955000 audit[3158]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000328278 items=0 ppid=3147 pid=3158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:36.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261303039663435373030663865363230333234623664356331383466 Feb 12 21:56:36.982620 env[1564]: time="2024-02-12T21:56:36.982575332Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-lvxxt,Uid:6a9cb5fb-c075-41ca-a0eb-6094b7b2aa03,Namespace:calico-system,Attempt:0,} returns sandbox id \"ba009f45700f8e620324b6d5c184f32670843347898f821730dcb8d0ae280e51\"" Feb 12 21:56:36.985247 env[1564]: time="2024-02-12T21:56:36.985214105Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\"" Feb 12 21:56:37.024813 env[1564]: time="2024-02-12T21:56:37.024690332Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-699fb544d8-bjg5h,Uid:e74c7bcf-7416-49dd-ab64-b6433151e9d4,Namespace:calico-system,Attempt:0,} returns sandbox id \"1c74c945454cadca0c266e3dddae8002013cf4eb01b96b4d4149ae6df000af4f\"" Feb 12 21:56:37.239000 audit[3190]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=3190 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:56:37.239000 audit[3190]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffe0d871820 a2=0 a3=7ffe0d87180c items=0 ppid=2818 pid=3190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:37.239000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:56:37.240000 audit[3190]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3190 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:56:37.240000 audit[3190]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffe0d871820 a2=0 a3=31030 items=0 ppid=2818 pid=3190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:37.240000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:56:37.953044 kubelet[2584]: E0212 21:56:37.953018 2584 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9wk5p" podUID=9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3 Feb 12 21:56:39.310842 env[1564]: time="2024-02-12T21:56:39.310792118Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:39.314495 env[1564]: time="2024-02-12T21:56:39.314450694Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6506d2e0be2d5ec9cb8dbe00c4b4f037c67b6ab4ec14a1f0c83333ac51f4da9a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:39.317849 env[1564]: time="2024-02-12T21:56:39.317810143Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:39.321083 env[1564]: time="2024-02-12T21:56:39.321041140Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:b05edbd1f80db4ada229e6001a666a7dd36bb6ab617143684fb3d28abfc4b71e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:39.322141 env[1564]: time="2024-02-12T21:56:39.322103946Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\" returns image reference \"sha256:6506d2e0be2d5ec9cb8dbe00c4b4f037c67b6ab4ec14a1f0c83333ac51f4da9a\"" Feb 12 21:56:39.323636 env[1564]: time="2024-02-12T21:56:39.323607109Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\"" Feb 12 21:56:39.324657 env[1564]: time="2024-02-12T21:56:39.324629745Z" level=info msg="CreateContainer within sandbox \"ba009f45700f8e620324b6d5c184f32670843347898f821730dcb8d0ae280e51\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Feb 12 21:56:39.350377 env[1564]: time="2024-02-12T21:56:39.350318044Z" level=info msg="CreateContainer within sandbox \"ba009f45700f8e620324b6d5c184f32670843347898f821730dcb8d0ae280e51\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"5e1a99d54890dc315f6fec64203945bc5b017d8b5fca9c135bb063c801f3fa4e\"" Feb 12 21:56:39.351054 env[1564]: time="2024-02-12T21:56:39.351019986Z" level=info msg="StartContainer for \"5e1a99d54890dc315f6fec64203945bc5b017d8b5fca9c135bb063c801f3fa4e\"" Feb 12 21:56:39.386700 systemd[1]: Started cri-containerd-5e1a99d54890dc315f6fec64203945bc5b017d8b5fca9c135bb063c801f3fa4e.scope. Feb 12 21:56:39.388803 systemd[1]: run-containerd-runc-k8s.io-5e1a99d54890dc315f6fec64203945bc5b017d8b5fca9c135bb063c801f3fa4e-runc.msoOe0.mount: Deactivated successfully. Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.434061 kernel: kauditd_printk_skb: 179 callbacks suppressed Feb 12 21:56:39.434209 kernel: audit: type=1400 audit(1707774999.426:1096): avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f5c01a2acb8 items=0 ppid=3147 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:39.440985 kernel: audit: type=1300 audit(1707774999.426:1096): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f5c01a2acb8 items=0 ppid=3147 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:39.447243 kernel: audit: type=1327 audit(1707774999.426:1096): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565316139396435343839306463333135663666656336343230333934 Feb 12 21:56:39.426000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565316139396435343839306463333135663666656336343230333934 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.458111 kernel: audit: type=1400 audit(1707774999.426:1097): avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.458260 kernel: audit: type=1400 audit(1707774999.426:1097): avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.463041 kernel: audit: type=1400 audit(1707774999.426:1097): avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.467957 kernel: audit: type=1400 audit(1707774999.426:1097): avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.473019 kernel: audit: type=1400 audit(1707774999.426:1097): avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.477624 kernel: audit: type=1400 audit(1707774999.426:1097): avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.483756 kernel: audit: type=1400 audit(1707774999.426:1097): avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit: BPF prog-id=141 op=LOAD Feb 12 21:56:39.426000 audit[3199]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c0001b4f88 items=0 ppid=3147 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:39.426000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565316139396435343839306463333135663666656336343230333934 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit: BPF prog-id=142 op=LOAD Feb 12 21:56:39.426000 audit[3199]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c0001b4fd8 items=0 ppid=3147 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:39.426000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565316139396435343839306463333135663666656336343230333934 Feb 12 21:56:39.426000 audit: BPF prog-id=142 op=UNLOAD Feb 12 21:56:39.426000 audit: BPF prog-id=141 op=UNLOAD Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:39.426000 audit: BPF prog-id=143 op=LOAD Feb 12 21:56:39.426000 audit[3199]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c0001b5068 items=0 ppid=3147 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:39.426000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565316139396435343839306463333135663666656336343230333934 Feb 12 21:56:39.501457 env[1564]: time="2024-02-12T21:56:39.501409131Z" level=info msg="StartContainer for \"5e1a99d54890dc315f6fec64203945bc5b017d8b5fca9c135bb063c801f3fa4e\" returns successfully" Feb 12 21:56:39.545207 systemd[1]: cri-containerd-5e1a99d54890dc315f6fec64203945bc5b017d8b5fca9c135bb063c801f3fa4e.scope: Deactivated successfully. Feb 12 21:56:39.548000 audit: BPF prog-id=143 op=UNLOAD Feb 12 21:56:39.577622 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5e1a99d54890dc315f6fec64203945bc5b017d8b5fca9c135bb063c801f3fa4e-rootfs.mount: Deactivated successfully. Feb 12 21:56:39.647490 env[1564]: time="2024-02-12T21:56:39.647435414Z" level=info msg="shim disconnected" id=5e1a99d54890dc315f6fec64203945bc5b017d8b5fca9c135bb063c801f3fa4e Feb 12 21:56:39.647490 env[1564]: time="2024-02-12T21:56:39.647487599Z" level=warning msg="cleaning up after shim disconnected" id=5e1a99d54890dc315f6fec64203945bc5b017d8b5fca9c135bb063c801f3fa4e namespace=k8s.io Feb 12 21:56:39.647860 env[1564]: time="2024-02-12T21:56:39.647501443Z" level=info msg="cleaning up dead shim" Feb 12 21:56:39.662462 env[1564]: time="2024-02-12T21:56:39.662414732Z" level=warning msg="cleanup warnings time=\"2024-02-12T21:56:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3239 runtime=io.containerd.runc.v2\n" Feb 12 21:56:39.951277 kubelet[2584]: E0212 21:56:39.950778 2584 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9wk5p" podUID=9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3 Feb 12 21:56:40.602739 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3537941848.mount: Deactivated successfully. Feb 12 21:56:41.951148 kubelet[2584]: E0212 21:56:41.951110 2584 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9wk5p" podUID=9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3 Feb 12 21:56:42.623539 env[1564]: time="2024-02-12T21:56:42.623489819Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:42.629923 env[1564]: time="2024-02-12T21:56:42.629826901Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b33768e0da1f8a5788a6a5d8ac2dcf15292ea9f3717de450f946c0a055b3532c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:42.636624 env[1564]: time="2024-02-12T21:56:42.636432473Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:42.650289 env[1564]: time="2024-02-12T21:56:42.650238886Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:5f2d3b8c354a4eb6de46e786889913916e620c6c256982fb8d0f1a1d36a282bc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:42.651022 env[1564]: time="2024-02-12T21:56:42.650986132Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\" returns image reference \"sha256:b33768e0da1f8a5788a6a5d8ac2dcf15292ea9f3717de450f946c0a055b3532c\"" Feb 12 21:56:42.652242 env[1564]: time="2024-02-12T21:56:42.652211876Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\"" Feb 12 21:56:42.685769 env[1564]: time="2024-02-12T21:56:42.685721027Z" level=info msg="CreateContainer within sandbox \"1c74c945454cadca0c266e3dddae8002013cf4eb01b96b4d4149ae6df000af4f\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Feb 12 21:56:42.705302 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount962528192.mount: Deactivated successfully. Feb 12 21:56:42.714101 env[1564]: time="2024-02-12T21:56:42.714047250Z" level=info msg="CreateContainer within sandbox \"1c74c945454cadca0c266e3dddae8002013cf4eb01b96b4d4149ae6df000af4f\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"36766ccaa5131b9a2144b8fae42f42d595ba2908e33dcc54af68a8d76395a632\"" Feb 12 21:56:42.716985 env[1564]: time="2024-02-12T21:56:42.715848231Z" level=info msg="StartContainer for \"36766ccaa5131b9a2144b8fae42f42d595ba2908e33dcc54af68a8d76395a632\"" Feb 12 21:56:42.767515 systemd[1]: Started cri-containerd-36766ccaa5131b9a2144b8fae42f42d595ba2908e33dcc54af68a8d76395a632.scope. Feb 12 21:56:42.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit: BPF prog-id=144 op=LOAD Feb 12 21:56:42.797000 audit[3268]: AVC avc: denied { bpf } for pid=3268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[3268]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3083 pid=3268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:42.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336373636636361613531333162396132313434623866616534326634 Feb 12 21:56:42.797000 audit[3268]: AVC avc: denied { perfmon } for pid=3268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[3268]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=3083 pid=3268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:42.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336373636636361613531333162396132313434623866616534326634 Feb 12 21:56:42.797000 audit[3268]: AVC avc: denied { bpf } for pid=3268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[3268]: AVC avc: denied { bpf } for pid=3268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[3268]: AVC avc: denied { bpf } for pid=3268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[3268]: AVC avc: denied { perfmon } for pid=3268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[3268]: AVC avc: denied { perfmon } for pid=3268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[3268]: AVC avc: denied { perfmon } for pid=3268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[3268]: AVC avc: denied { perfmon } for pid=3268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[3268]: AVC avc: denied { perfmon } for pid=3268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[3268]: AVC avc: denied { bpf } for pid=3268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit[3268]: AVC avc: denied { bpf } for pid=3268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.797000 audit: BPF prog-id=145 op=LOAD Feb 12 21:56:42.797000 audit[3268]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000218450 items=0 ppid=3083 pid=3268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:42.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336373636636361613531333162396132313434623866616534326634 Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { bpf } for pid=3268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { bpf } for pid=3268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { perfmon } for pid=3268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { perfmon } for pid=3268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { perfmon } for pid=3268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { perfmon } for pid=3268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { perfmon } for pid=3268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { bpf } for pid=3268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { bpf } for pid=3268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit: BPF prog-id=146 op=LOAD Feb 12 21:56:42.798000 audit[3268]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000218498 items=0 ppid=3083 pid=3268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:42.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336373636636361613531333162396132313434623866616534326634 Feb 12 21:56:42.798000 audit: BPF prog-id=146 op=UNLOAD Feb 12 21:56:42.798000 audit: BPF prog-id=145 op=UNLOAD Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { bpf } for pid=3268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { bpf } for pid=3268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { bpf } for pid=3268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { perfmon } for pid=3268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { perfmon } for pid=3268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { perfmon } for pid=3268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { perfmon } for pid=3268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { perfmon } for pid=3268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { bpf } for pid=3268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit[3268]: AVC avc: denied { bpf } for pid=3268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:42.798000 audit: BPF prog-id=147 op=LOAD Feb 12 21:56:42.798000 audit[3268]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0002188a8 items=0 ppid=3083 pid=3268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:42.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336373636636361613531333162396132313434623866616534326634 Feb 12 21:56:42.841303 env[1564]: time="2024-02-12T21:56:42.841232511Z" level=info msg="StartContainer for \"36766ccaa5131b9a2144b8fae42f42d595ba2908e33dcc54af68a8d76395a632\" returns successfully" Feb 12 21:56:43.142780 kubelet[2584]: I0212 21:56:43.142710 2584 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-699fb544d8-bjg5h" podStartSLOduration=1.5250078980000001 podCreationTimestamp="2024-02-12 21:56:36 +0000 UTC" firstStartedPulling="2024-02-12 21:56:37.033969681 +0000 UTC m=+23.253638663" lastFinishedPulling="2024-02-12 21:56:42.651616695 +0000 UTC m=+28.871285664" observedRunningTime="2024-02-12 21:56:43.142655059 +0000 UTC m=+29.362324045" watchObservedRunningTime="2024-02-12 21:56:43.142654899 +0000 UTC m=+29.362323929" Feb 12 21:56:43.908109 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2859636152.mount: Deactivated successfully. Feb 12 21:56:43.957337 kubelet[2584]: E0212 21:56:43.955479 2584 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9wk5p" podUID=9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3 Feb 12 21:56:44.127716 kubelet[2584]: I0212 21:56:44.126836 2584 prober_manager.go:287] "Failed to trigger a manual run" probe="Readiness" Feb 12 21:56:45.950821 kubelet[2584]: E0212 21:56:45.950793 2584 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9wk5p" podUID=9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3 Feb 12 21:56:47.952817 kubelet[2584]: E0212 21:56:47.952727 2584 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9wk5p" podUID=9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3 Feb 12 21:56:48.446969 kubelet[2584]: I0212 21:56:48.446931 2584 prober_manager.go:287] "Failed to trigger a manual run" probe="Readiness" Feb 12 21:56:48.518709 kernel: kauditd_printk_skb: 91 callbacks suppressed Feb 12 21:56:48.518862 kernel: audit: type=1325 audit(1707775008.515:1121): table=filter:95 family=2 entries=15 op=nft_register_rule pid=3303 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:56:48.515000 audit[3303]: NETFILTER_CFG table=filter:95 family=2 entries=15 op=nft_register_rule pid=3303 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:56:48.515000 audit[3303]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffed4d0a6c0 a2=0 a3=7ffed4d0a6ac items=0 ppid=2818 pid=3303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:48.538182 kernel: audit: type=1300 audit(1707775008.515:1121): arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffed4d0a6c0 a2=0 a3=7ffed4d0a6ac items=0 ppid=2818 pid=3303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:48.538269 kernel: audit: type=1327 audit(1707775008.515:1121): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:56:48.545294 kernel: audit: type=1325 audit(1707775008.517:1122): table=nat:96 family=2 entries=19 op=nft_register_chain pid=3303 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:56:48.515000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:56:48.517000 audit[3303]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=3303 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:56:48.517000 audit[3303]: SYSCALL arch=c000003e syscall=46 success=yes exit=6068 a0=3 a1=7ffed4d0a6c0 a2=0 a3=7ffed4d0a6ac items=0 ppid=2818 pid=3303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:48.559470 kernel: audit: type=1300 audit(1707775008.517:1122): arch=c000003e syscall=46 success=yes exit=6068 a0=3 a1=7ffed4d0a6c0 a2=0 a3=7ffed4d0a6ac items=0 ppid=2818 pid=3303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:48.559600 kernel: audit: type=1327 audit(1707775008.517:1122): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:56:48.517000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:56:48.587591 env[1564]: time="2024-02-12T21:56:48.587544324Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:48.591760 env[1564]: time="2024-02-12T21:56:48.591328998Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8e8d96a874c0e2f137bc6e0ff4b9da4ac2341852e41d99ab81983d329bb87d93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:48.594315 env[1564]: time="2024-02-12T21:56:48.594280041Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:48.597030 env[1564]: time="2024-02-12T21:56:48.596997829Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:d943b4c23e82a39b0186a1a3b2fe8f728e543d503df72d7be521501a82b7e7b4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:48.598974 env[1564]: time="2024-02-12T21:56:48.598936301Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\" returns image reference \"sha256:8e8d96a874c0e2f137bc6e0ff4b9da4ac2341852e41d99ab81983d329bb87d93\"" Feb 12 21:56:48.602561 env[1564]: time="2024-02-12T21:56:48.602523107Z" level=info msg="CreateContainer within sandbox \"ba009f45700f8e620324b6d5c184f32670843347898f821730dcb8d0ae280e51\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Feb 12 21:56:48.626395 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1410472795.mount: Deactivated successfully. Feb 12 21:56:48.640633 env[1564]: time="2024-02-12T21:56:48.640578745Z" level=info msg="CreateContainer within sandbox \"ba009f45700f8e620324b6d5c184f32670843347898f821730dcb8d0ae280e51\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"e071ecbe25d31142dff40abe1ce62f3c7dcb226e2c5f6a33ed80261e80923b36\"" Feb 12 21:56:48.642259 env[1564]: time="2024-02-12T21:56:48.642220553Z" level=info msg="StartContainer for \"e071ecbe25d31142dff40abe1ce62f3c7dcb226e2c5f6a33ed80261e80923b36\"" Feb 12 21:56:48.689290 systemd[1]: Started cri-containerd-e071ecbe25d31142dff40abe1ce62f3c7dcb226e2c5f6a33ed80261e80923b36.scope. Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { perfmon } for pid=3310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.717695 kernel: audit: type=1400 audit(1707775008.709:1123): avc: denied { perfmon } for pid=3310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f80cd02f968 items=0 ppid=3147 pid=3310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:48.727706 kernel: audit: type=1300 audit(1707775008.709:1123): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f80cd02f968 items=0 ppid=3147 pid=3310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:48.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373165636265323564333131343264666634306162653163653632 Feb 12 21:56:48.737681 kernel: audit: type=1327 audit(1707775008.709:1123): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373165636265323564333131343264666634306162653163653632 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { bpf } for pid=3310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.743773 kernel: audit: type=1400 audit(1707775008.709:1124): avc: denied { bpf } for pid=3310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { bpf } for pid=3310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { bpf } for pid=3310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { perfmon } for pid=3310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { perfmon } for pid=3310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { perfmon } for pid=3310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { perfmon } for pid=3310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { perfmon } for pid=3310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { bpf } for pid=3310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { bpf } for pid=3310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit: BPF prog-id=148 op=LOAD Feb 12 21:56:48.709000 audit[3310]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c00032c448 items=0 ppid=3147 pid=3310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:48.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373165636265323564333131343264666634306162653163653632 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { bpf } for pid=3310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { bpf } for pid=3310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { perfmon } for pid=3310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { perfmon } for pid=3310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { perfmon } for pid=3310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { perfmon } for pid=3310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { perfmon } for pid=3310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { bpf } for pid=3310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { bpf } for pid=3310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit: BPF prog-id=149 op=LOAD Feb 12 21:56:48.709000 audit[3310]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c00032c498 items=0 ppid=3147 pid=3310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:48.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373165636265323564333131343264666634306162653163653632 Feb 12 21:56:48.709000 audit: BPF prog-id=149 op=UNLOAD Feb 12 21:56:48.709000 audit: BPF prog-id=148 op=UNLOAD Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { bpf } for pid=3310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { bpf } for pid=3310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { bpf } for pid=3310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { perfmon } for pid=3310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { perfmon } for pid=3310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { perfmon } for pid=3310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { perfmon } for pid=3310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { perfmon } for pid=3310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { bpf } for pid=3310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit[3310]: AVC avc: denied { bpf } for pid=3310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:48.709000 audit: BPF prog-id=150 op=LOAD Feb 12 21:56:48.709000 audit[3310]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c00032c528 items=0 ppid=3147 pid=3310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:48.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373165636265323564333131343264666634306162653163653632 Feb 12 21:56:48.804983 env[1564]: time="2024-02-12T21:56:48.804927794Z" level=info msg="StartContainer for \"e071ecbe25d31142dff40abe1ce62f3c7dcb226e2c5f6a33ed80261e80923b36\" returns successfully" Feb 12 21:56:49.952875 kubelet[2584]: E0212 21:56:49.952780 2584 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9wk5p" podUID=9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3 Feb 12 21:56:50.053293 env[1564]: time="2024-02-12T21:56:50.053221446Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 12 21:56:50.057824 systemd[1]: cri-containerd-e071ecbe25d31142dff40abe1ce62f3c7dcb226e2c5f6a33ed80261e80923b36.scope: Deactivated successfully. Feb 12 21:56:50.060000 audit: BPF prog-id=150 op=UNLOAD Feb 12 21:56:50.084245 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e071ecbe25d31142dff40abe1ce62f3c7dcb226e2c5f6a33ed80261e80923b36-rootfs.mount: Deactivated successfully. Feb 12 21:56:50.099019 env[1564]: time="2024-02-12T21:56:50.098966343Z" level=info msg="shim disconnected" id=e071ecbe25d31142dff40abe1ce62f3c7dcb226e2c5f6a33ed80261e80923b36 Feb 12 21:56:50.099348 env[1564]: time="2024-02-12T21:56:50.099026568Z" level=warning msg="cleaning up after shim disconnected" id=e071ecbe25d31142dff40abe1ce62f3c7dcb226e2c5f6a33ed80261e80923b36 namespace=k8s.io Feb 12 21:56:50.099348 env[1564]: time="2024-02-12T21:56:50.099040489Z" level=info msg="cleaning up dead shim" Feb 12 21:56:50.112907 kubelet[2584]: I0212 21:56:50.112868 2584 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Feb 12 21:56:50.116718 env[1564]: time="2024-02-12T21:56:50.114354294Z" level=warning msg="cleanup warnings time=\"2024-02-12T21:56:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3354 runtime=io.containerd.runc.v2\n" Feb 12 21:56:50.144802 kubelet[2584]: I0212 21:56:50.144766 2584 topology_manager.go:212] "Topology Admit Handler" Feb 12 21:56:50.153092 systemd[1]: Created slice kubepods-burstable-pod35d4ea78_55eb_4cc6_9bb2_31d3a2adc2ce.slice. Feb 12 21:56:50.156242 kubelet[2584]: I0212 21:56:50.156216 2584 topology_manager.go:212] "Topology Admit Handler" Feb 12 21:56:50.171073 systemd[1]: Created slice kubepods-burstable-pod07723a88_a97b_4c77_9292_860429aacedc.slice. Feb 12 21:56:50.175692 kubelet[2584]: I0212 21:56:50.175646 2584 topology_manager.go:212] "Topology Admit Handler" Feb 12 21:56:50.185966 kubelet[2584]: I0212 21:56:50.185426 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/07723a88-a97b-4c77-9292-860429aacedc-config-volume\") pod \"coredns-5d78c9869d-jklb7\" (UID: \"07723a88-a97b-4c77-9292-860429aacedc\") " pod="kube-system/coredns-5d78c9869d-jklb7" Feb 12 21:56:50.185966 kubelet[2584]: I0212 21:56:50.185495 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lmxx6\" (UniqueName: \"kubernetes.io/projected/35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce-kube-api-access-lmxx6\") pod \"coredns-5d78c9869d-zkrsn\" (UID: \"35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce\") " pod="kube-system/coredns-5d78c9869d-zkrsn" Feb 12 21:56:50.185966 kubelet[2584]: I0212 21:56:50.185542 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-k6l6t\" (UniqueName: \"kubernetes.io/projected/07723a88-a97b-4c77-9292-860429aacedc-kube-api-access-k6l6t\") pod \"coredns-5d78c9869d-jklb7\" (UID: \"07723a88-a97b-4c77-9292-860429aacedc\") " pod="kube-system/coredns-5d78c9869d-jklb7" Feb 12 21:56:50.185966 kubelet[2584]: I0212 21:56:50.185583 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce-config-volume\") pod \"coredns-5d78c9869d-zkrsn\" (UID: \"35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce\") " pod="kube-system/coredns-5d78c9869d-zkrsn" Feb 12 21:56:50.185966 kubelet[2584]: I0212 21:56:50.185623 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d6a403b6-f169-4c74-aee6-5cde247279c8-tigera-ca-bundle\") pod \"calico-kube-controllers-f577f79-77dcs\" (UID: \"d6a403b6-f169-4c74-aee6-5cde247279c8\") " pod="calico-system/calico-kube-controllers-f577f79-77dcs" Feb 12 21:56:50.186297 kubelet[2584]: I0212 21:56:50.185661 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-p4pvt\" (UniqueName: \"kubernetes.io/projected/d6a403b6-f169-4c74-aee6-5cde247279c8-kube-api-access-p4pvt\") pod \"calico-kube-controllers-f577f79-77dcs\" (UID: \"d6a403b6-f169-4c74-aee6-5cde247279c8\") " pod="calico-system/calico-kube-controllers-f577f79-77dcs" Feb 12 21:56:50.196068 systemd[1]: Created slice kubepods-besteffort-podd6a403b6_f169_4c74_aee6_5cde247279c8.slice. Feb 12 21:56:50.197246 env[1564]: time="2024-02-12T21:56:50.197213675Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\"" Feb 12 21:56:50.458897 env[1564]: time="2024-02-12T21:56:50.458818671Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-zkrsn,Uid:35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce,Namespace:kube-system,Attempt:0,}" Feb 12 21:56:50.495532 env[1564]: time="2024-02-12T21:56:50.495488575Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-jklb7,Uid:07723a88-a97b-4c77-9292-860429aacedc,Namespace:kube-system,Attempt:0,}" Feb 12 21:56:50.504448 env[1564]: time="2024-02-12T21:56:50.504404484Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-f577f79-77dcs,Uid:d6a403b6-f169-4c74-aee6-5cde247279c8,Namespace:calico-system,Attempt:0,}" Feb 12 21:56:50.666771 env[1564]: time="2024-02-12T21:56:50.666660241Z" level=error msg="Failed to destroy network for sandbox \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:50.667561 env[1564]: time="2024-02-12T21:56:50.667513707Z" level=error msg="encountered an error cleaning up failed sandbox \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:50.667761 env[1564]: time="2024-02-12T21:56:50.667721039Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-zkrsn,Uid:35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:50.671282 kubelet[2584]: E0212 21:56:50.671167 2584 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:50.671450 kubelet[2584]: E0212 21:56:50.671348 2584 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-zkrsn" Feb 12 21:56:50.671450 kubelet[2584]: E0212 21:56:50.671382 2584 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-zkrsn" Feb 12 21:56:50.671554 kubelet[2584]: E0212 21:56:50.671462 2584 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5d78c9869d-zkrsn_kube-system(35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5d78c9869d-zkrsn_kube-system(35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-zkrsn" podUID=35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce Feb 12 21:56:50.693639 env[1564]: time="2024-02-12T21:56:50.693574656Z" level=error msg="Failed to destroy network for sandbox \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:50.694054 env[1564]: time="2024-02-12T21:56:50.694007067Z" level=error msg="encountered an error cleaning up failed sandbox \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:50.694342 env[1564]: time="2024-02-12T21:56:50.694237666Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-jklb7,Uid:07723a88-a97b-4c77-9292-860429aacedc,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:50.694763 kubelet[2584]: E0212 21:56:50.694736 2584 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:50.694862 kubelet[2584]: E0212 21:56:50.694795 2584 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-jklb7" Feb 12 21:56:50.694862 kubelet[2584]: E0212 21:56:50.694825 2584 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-jklb7" Feb 12 21:56:50.695100 kubelet[2584]: E0212 21:56:50.694992 2584 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5d78c9869d-jklb7_kube-system(07723a88-a97b-4c77-9292-860429aacedc)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5d78c9869d-jklb7_kube-system(07723a88-a97b-4c77-9292-860429aacedc)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-jklb7" podUID=07723a88-a97b-4c77-9292-860429aacedc Feb 12 21:56:50.700687 env[1564]: time="2024-02-12T21:56:50.700629612Z" level=error msg="Failed to destroy network for sandbox \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:50.701144 env[1564]: time="2024-02-12T21:56:50.701104546Z" level=error msg="encountered an error cleaning up failed sandbox \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:50.701897 env[1564]: time="2024-02-12T21:56:50.701165459Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-f577f79-77dcs,Uid:d6a403b6-f169-4c74-aee6-5cde247279c8,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:50.702029 kubelet[2584]: E0212 21:56:50.701427 2584 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:50.702029 kubelet[2584]: E0212 21:56:50.701480 2584 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-f577f79-77dcs" Feb 12 21:56:50.702029 kubelet[2584]: E0212 21:56:50.701509 2584 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-f577f79-77dcs" Feb 12 21:56:50.702196 kubelet[2584]: E0212 21:56:50.701576 2584 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-f577f79-77dcs_calico-system(d6a403b6-f169-4c74-aee6-5cde247279c8)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-f577f79-77dcs_calico-system(d6a403b6-f169-4c74-aee6-5cde247279c8)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-f577f79-77dcs" podUID=d6a403b6-f169-4c74-aee6-5cde247279c8 Feb 12 21:56:51.086286 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471-shm.mount: Deactivated successfully. Feb 12 21:56:51.195181 kubelet[2584]: I0212 21:56:51.195150 2584 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Feb 12 21:56:51.198610 kubelet[2584]: I0212 21:56:51.198560 2584 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Feb 12 21:56:51.199526 env[1564]: time="2024-02-12T21:56:51.199490020Z" level=info msg="StopPodSandbox for \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\"" Feb 12 21:56:51.203143 env[1564]: time="2024-02-12T21:56:51.201177100Z" level=info msg="StopPodSandbox for \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\"" Feb 12 21:56:51.204247 kubelet[2584]: I0212 21:56:51.204045 2584 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Feb 12 21:56:51.205333 env[1564]: time="2024-02-12T21:56:51.205298925Z" level=info msg="StopPodSandbox for \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\"" Feb 12 21:56:51.280264 env[1564]: time="2024-02-12T21:56:51.280194980Z" level=error msg="StopPodSandbox for \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\" failed" error="failed to destroy network for sandbox \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:51.280833 kubelet[2584]: E0212 21:56:51.280809 2584 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Feb 12 21:56:51.281038 kubelet[2584]: E0212 21:56:51.280890 2584 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd} Feb 12 21:56:51.281110 kubelet[2584]: E0212 21:56:51.281050 2584 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d6a403b6-f169-4c74-aee6-5cde247279c8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 12 21:56:51.281206 kubelet[2584]: E0212 21:56:51.281134 2584 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d6a403b6-f169-4c74-aee6-5cde247279c8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-f577f79-77dcs" podUID=d6a403b6-f169-4c74-aee6-5cde247279c8 Feb 12 21:56:51.317054 env[1564]: time="2024-02-12T21:56:51.316975864Z" level=error msg="StopPodSandbox for \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\" failed" error="failed to destroy network for sandbox \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:51.328400 kubelet[2584]: E0212 21:56:51.328213 2584 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Feb 12 21:56:51.328400 kubelet[2584]: E0212 21:56:51.328266 2584 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471} Feb 12 21:56:51.328400 kubelet[2584]: E0212 21:56:51.328327 2584 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 12 21:56:51.328400 kubelet[2584]: E0212 21:56:51.328369 2584 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-zkrsn" podUID=35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce Feb 12 21:56:51.331074 env[1564]: time="2024-02-12T21:56:51.331000530Z" level=error msg="StopPodSandbox for \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\" failed" error="failed to destroy network for sandbox \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:51.331462 kubelet[2584]: E0212 21:56:51.331441 2584 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Feb 12 21:56:51.331576 kubelet[2584]: E0212 21:56:51.331502 2584 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597} Feb 12 21:56:51.331631 kubelet[2584]: E0212 21:56:51.331592 2584 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"07723a88-a97b-4c77-9292-860429aacedc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 12 21:56:51.331752 kubelet[2584]: E0212 21:56:51.331648 2584 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"07723a88-a97b-4c77-9292-860429aacedc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-jklb7" podUID=07723a88-a97b-4c77-9292-860429aacedc Feb 12 21:56:51.962293 systemd[1]: Created slice kubepods-besteffort-pod9a1ce0a4_7049_49a0_9440_feb3fe9ff6d3.slice. Feb 12 21:56:51.969577 env[1564]: time="2024-02-12T21:56:51.969495646Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-9wk5p,Uid:9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3,Namespace:calico-system,Attempt:0,}" Feb 12 21:56:52.318617 env[1564]: time="2024-02-12T21:56:52.318444057Z" level=error msg="Failed to destroy network for sandbox \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:52.326514 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256-shm.mount: Deactivated successfully. Feb 12 21:56:52.330925 env[1564]: time="2024-02-12T21:56:52.330860957Z" level=error msg="encountered an error cleaning up failed sandbox \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:52.331088 env[1564]: time="2024-02-12T21:56:52.330989249Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-9wk5p,Uid:9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:52.331400 kubelet[2584]: E0212 21:56:52.331371 2584 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:52.332425 kubelet[2584]: E0212 21:56:52.331430 2584 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-9wk5p" Feb 12 21:56:52.332425 kubelet[2584]: E0212 21:56:52.331492 2584 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-9wk5p" Feb 12 21:56:52.332425 kubelet[2584]: E0212 21:56:52.331566 2584 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-9wk5p_calico-system(9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-9wk5p_calico-system(9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-9wk5p" podUID=9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3 Feb 12 21:56:53.213128 kubelet[2584]: I0212 21:56:53.210904 2584 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Feb 12 21:56:53.215396 env[1564]: time="2024-02-12T21:56:53.213821355Z" level=info msg="StopPodSandbox for \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\"" Feb 12 21:56:53.319789 env[1564]: time="2024-02-12T21:56:53.319689270Z" level=error msg="StopPodSandbox for \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\" failed" error="failed to destroy network for sandbox \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 21:56:53.320353 kubelet[2584]: E0212 21:56:53.320067 2584 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Feb 12 21:56:53.320353 kubelet[2584]: E0212 21:56:53.320151 2584 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256} Feb 12 21:56:53.320353 kubelet[2584]: E0212 21:56:53.320203 2584 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 12 21:56:53.320353 kubelet[2584]: E0212 21:56:53.320241 2584 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-9wk5p" podUID=9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3 Feb 12 21:56:57.991419 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2658509753.mount: Deactivated successfully. Feb 12 21:56:58.179994 env[1564]: time="2024-02-12T21:56:58.179596521Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:58.192563 env[1564]: time="2024-02-12T21:56:58.192510239Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1843802b91be8ff1c1d35ee08461ebe909e7a2199e59396f69886439a372312c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:58.198324 env[1564]: time="2024-02-12T21:56:58.198273543Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:58.207524 env[1564]: time="2024-02-12T21:56:58.207357340Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:a45dffb21a0e9ca8962f36359a2ab776beeecd93843543c2fa1745d7bbb0f754,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:56:58.208160 env[1564]: time="2024-02-12T21:56:58.208022461Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\" returns image reference \"sha256:1843802b91be8ff1c1d35ee08461ebe909e7a2199e59396f69886439a372312c\"" Feb 12 21:56:58.248547 env[1564]: time="2024-02-12T21:56:58.248396095Z" level=info msg="CreateContainer within sandbox \"ba009f45700f8e620324b6d5c184f32670843347898f821730dcb8d0ae280e51\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Feb 12 21:56:58.276970 env[1564]: time="2024-02-12T21:56:58.276919970Z" level=info msg="CreateContainer within sandbox \"ba009f45700f8e620324b6d5c184f32670843347898f821730dcb8d0ae280e51\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"214c80b710732e4712c76f97575c87ee417d23774d7f4741bf9dad97ec6d3338\"" Feb 12 21:56:58.279635 env[1564]: time="2024-02-12T21:56:58.279589020Z" level=info msg="StartContainer for \"214c80b710732e4712c76f97575c87ee417d23774d7f4741bf9dad97ec6d3338\"" Feb 12 21:56:58.307999 systemd[1]: Started cri-containerd-214c80b710732e4712c76f97575c87ee417d23774d7f4741bf9dad97ec6d3338.scope. Feb 12 21:56:58.351052 kernel: kauditd_printk_skb: 40 callbacks suppressed Feb 12 21:56:58.351214 kernel: audit: type=1400 audit(1707775018.338:1130): avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.351264 kernel: audit: type=1300 audit(1707775018.338:1130): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f2f0d970cb8 items=0 ppid=3147 pid=3594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:58.338000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.351981 kernel: audit: type=1327 audit(1707775018.338:1130): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231346338306237313037333265343731326337366639373537356338 Feb 12 21:56:58.338000 audit[3594]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f2f0d970cb8 items=0 ppid=3147 pid=3594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:58.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231346338306237313037333265343731326337366639373537356338 Feb 12 21:56:58.338000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.362163 kernel: audit: type=1400 audit(1707775018.338:1131): avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.338000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.369679 kernel: audit: type=1400 audit(1707775018.338:1131): avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.338000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.374683 kernel: audit: type=1400 audit(1707775018.338:1131): avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.338000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.338000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.384257 kernel: audit: type=1400 audit(1707775018.338:1131): avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.384393 kernel: audit: type=1400 audit(1707775018.338:1131): avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.385130 kernel: audit: type=1400 audit(1707775018.338:1131): avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.338000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.338000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.391844 env[1564]: time="2024-02-12T21:56:58.391769616Z" level=info msg="StartContainer for \"214c80b710732e4712c76f97575c87ee417d23774d7f4741bf9dad97ec6d3338\" returns successfully" Feb 12 21:56:58.395729 kernel: audit: type=1400 audit(1707775018.338:1131): avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.338000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.338000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.338000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.338000 audit: BPF prog-id=151 op=LOAD Feb 12 21:56:58.338000 audit[3594]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0001b6f78 items=0 ppid=3147 pid=3594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:58.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231346338306237313037333265343731326337366639373537356338 Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit: BPF prog-id=152 op=LOAD Feb 12 21:56:58.350000 audit[3594]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0001b6fc8 items=0 ppid=3147 pid=3594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:58.350000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231346338306237313037333265343731326337366639373537356338 Feb 12 21:56:58.350000 audit: BPF prog-id=152 op=UNLOAD Feb 12 21:56:58.350000 audit: BPF prog-id=151 op=UNLOAD Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { perfmon } for pid=3594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit[3594]: AVC avc: denied { bpf } for pid=3594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:56:58.350000 audit: BPF prog-id=153 op=LOAD Feb 12 21:56:58.350000 audit[3594]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0001b7058 items=0 ppid=3147 pid=3594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:58.350000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231346338306237313037333265343731326337366639373537356338 Feb 12 21:56:58.508371 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Feb 12 21:56:58.508534 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Feb 12 21:56:58.869801 systemd[1]: Started sshd@7-172.31.28.103:22-139.178.89.65:46560.service. Feb 12 21:56:58.870000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.28.103:22-139.178.89.65:46560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:56:59.067000 audit[3642]: USER_ACCT pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:56:59.068384 sshd[3642]: Accepted publickey for core from 139.178.89.65 port 46560 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:56:59.068000 audit[3642]: CRED_ACQ pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:56:59.069000 audit[3642]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfcf93560 a2=3 a3=0 items=0 ppid=1 pid=3642 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:56:59.069000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:56:59.072300 sshd[3642]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:56:59.078338 systemd[1]: Started session-8.scope. Feb 12 21:56:59.079292 systemd-logind[1550]: New session 8 of user core. Feb 12 21:56:59.084000 audit[3642]: USER_START pid=3642 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:56:59.085000 audit[3658]: CRED_ACQ pid=3658 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:56:59.309222 systemd[1]: run-containerd-runc-k8s.io-214c80b710732e4712c76f97575c87ee417d23774d7f4741bf9dad97ec6d3338-runc.j2kmYW.mount: Deactivated successfully. Feb 12 21:56:59.610914 sshd[3642]: pam_unix(sshd:session): session closed for user core Feb 12 21:56:59.613000 audit[3642]: USER_END pid=3642 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:56:59.617000 audit[3642]: CRED_DISP pid=3642 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:56:59.622287 systemd[1]: sshd@7-172.31.28.103:22-139.178.89.65:46560.service: Deactivated successfully. Feb 12 21:56:59.621000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.28.103:22-139.178.89.65:46560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:56:59.623566 systemd[1]: session-8.scope: Deactivated successfully. Feb 12 21:56:59.624462 systemd-logind[1550]: Session 8 logged out. Waiting for processes to exit. Feb 12 21:56:59.625535 systemd-logind[1550]: Removed session 8. Feb 12 21:57:00.147000 audit[3729]: AVC avc: denied { write } for pid=3729 comm="tee" name="fd" dev="proc" ino=24303 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 21:57:00.153000 audit[3742]: AVC avc: denied { write } for pid=3742 comm="tee" name="fd" dev="proc" ino=24307 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 21:57:00.147000 audit[3729]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffef641e981 a2=241 a3=1b6 items=1 ppid=3702 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:00.147000 audit: CWD cwd="/etc/service/enabled/felix/log" Feb 12 21:57:00.147000 audit: PATH item=0 name="/dev/fd/63" inode=25405 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:57:00.147000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 21:57:00.170000 audit[3747]: AVC avc: denied { write } for pid=3747 comm="tee" name="fd" dev="proc" ino=24311 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 21:57:00.170000 audit[3747]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe5f585983 a2=241 a3=1b6 items=1 ppid=3709 pid=3747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:00.180000 audit[3735]: AVC avc: denied { write } for pid=3735 comm="tee" name="fd" dev="proc" ino=24315 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 21:57:00.184000 audit[3750]: AVC avc: denied { write } for pid=3750 comm="tee" name="fd" dev="proc" ino=25428 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 21:57:00.184000 audit[3750]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcd28ef981 a2=241 a3=1b6 items=1 ppid=3699 pid=3750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:00.184000 audit: CWD cwd="/etc/service/enabled/confd/log" Feb 12 21:57:00.184000 audit: PATH item=0 name="/dev/fd/63" inode=24304 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:57:00.184000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 21:57:00.153000 audit[3742]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe15cdc972 a2=241 a3=1b6 items=1 ppid=3706 pid=3742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:00.153000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Feb 12 21:57:00.153000 audit: PATH item=0 name="/dev/fd/63" inode=24296 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:57:00.153000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 21:57:00.180000 audit[3735]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcdaf53982 a2=241 a3=1b6 items=1 ppid=3704 pid=3735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:00.193000 audit[3752]: AVC avc: denied { write } for pid=3752 comm="tee" name="fd" dev="proc" ino=25435 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 21:57:00.193000 audit[3752]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd2d8d7981 a2=241 a3=1b6 items=1 ppid=3698 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:00.193000 audit: CWD cwd="/etc/service/enabled/bird6/log" Feb 12 21:57:00.193000 audit: PATH item=0 name="/dev/fd/63" inode=25417 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:57:00.193000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 21:57:00.180000 audit: CWD cwd="/etc/service/enabled/bird/log" Feb 12 21:57:00.180000 audit: PATH item=0 name="/dev/fd/63" inode=25408 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:57:00.180000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 21:57:00.170000 audit: CWD cwd="/etc/service/enabled/cni/log" Feb 12 21:57:00.170000 audit: PATH item=0 name="/dev/fd/63" inode=24300 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:57:00.170000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 21:57:00.230000 audit[3775]: AVC avc: denied { write } for pid=3775 comm="tee" name="fd" dev="proc" ino=25439 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 21:57:00.230000 audit[3775]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff9bcda971 a2=241 a3=1b6 items=1 ppid=3708 pid=3775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:00.230000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Feb 12 21:57:00.230000 audit: PATH item=0 name="/dev/fd/63" inode=24323 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 21:57:00.230000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 21:57:00.329031 systemd[1]: run-containerd-runc-k8s.io-214c80b710732e4712c76f97575c87ee417d23774d7f4741bf9dad97ec6d3338-runc.PuFLTw.mount: Deactivated successfully. Feb 12 21:57:01.317407 (udev-worker)[3627]: Network interface NamePolicy= disabled on kernel command line. Feb 12 21:57:01.318474 (udev-worker)[3628]: Network interface NamePolicy= disabled on kernel command line. Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit: BPF prog-id=154 op=LOAD Feb 12 21:57:01.334000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffcb078b400 a2=70 a3=7fa47d8ba000 items=0 ppid=3703 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:01.334000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 21:57:01.334000 audit: BPF prog-id=154 op=UNLOAD Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit: BPF prog-id=155 op=LOAD Feb 12 21:57:01.334000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffcb078b400 a2=70 a3=6e items=0 ppid=3703 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:01.334000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 21:57:01.334000 audit: BPF prog-id=155 op=UNLOAD Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffcb078b3b0 a2=70 a3=7ffcb078b400 items=0 ppid=3703 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:01.334000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.334000 audit: BPF prog-id=156 op=LOAD Feb 12 21:57:01.334000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffcb078b390 a2=70 a3=7ffcb078b400 items=0 ppid=3703 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:01.334000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 21:57:01.335000 audit: BPF prog-id=156 op=UNLOAD Feb 12 21:57:01.335000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.335000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcb078b470 a2=70 a3=0 items=0 ppid=3703 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:01.335000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 21:57:01.335000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.335000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcb078b460 a2=70 a3=0 items=0 ppid=3703 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:01.335000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 21:57:01.335000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.335000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffcb078b4a0 a2=70 a3=0 items=0 ppid=3703 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:01.335000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 21:57:01.338000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.338000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.338000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.338000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.338000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.338000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.338000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.338000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.338000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.338000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.338000 audit: BPF prog-id=157 op=LOAD Feb 12 21:57:01.338000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffcb078b3c0 a2=70 a3=ffffffff items=0 ppid=3703 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:01.338000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 21:57:01.345000 audit[3862]: AVC avc: denied { bpf } for pid=3862 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.345000 audit[3862]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffeb8696980 a2=70 a3=fff80800 items=0 ppid=3703 pid=3862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:01.345000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 12 21:57:01.351000 audit[3862]: AVC avc: denied { bpf } for pid=3862 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:01.351000 audit[3862]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffeb8696850 a2=70 a3=3 items=0 ppid=3703 pid=3862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:01.351000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 12 21:57:01.361000 audit: BPF prog-id=157 op=UNLOAD Feb 12 21:57:01.462000 audit[3886]: NETFILTER_CFG table=mangle:97 family=2 entries=19 op=nft_register_chain pid=3886 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 21:57:01.462000 audit[3886]: SYSCALL arch=c000003e syscall=46 success=yes exit=6800 a0=3 a1=7fff63c57460 a2=0 a3=7fff63c5744c items=0 ppid=3703 pid=3886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:01.462000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 21:57:01.467000 audit[3884]: NETFILTER_CFG table=raw:98 family=2 entries=19 op=nft_register_chain pid=3884 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 21:57:01.467000 audit[3884]: SYSCALL arch=c000003e syscall=46 success=yes exit=6132 a0=3 a1=7ffcbcbef710 a2=0 a3=55c676a09000 items=0 ppid=3703 pid=3884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:01.467000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 21:57:01.472000 audit[3885]: NETFILTER_CFG table=nat:99 family=2 entries=16 op=nft_register_chain pid=3885 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 21:57:01.472000 audit[3885]: SYSCALL arch=c000003e syscall=46 success=yes exit=5188 a0=3 a1=7ffc80482780 a2=0 a3=564fc7b85000 items=0 ppid=3703 pid=3885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:01.472000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 21:57:01.475000 audit[3887]: NETFILTER_CFG table=filter:100 family=2 entries=39 op=nft_register_chain pid=3887 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 21:57:01.475000 audit[3887]: SYSCALL arch=c000003e syscall=46 success=yes exit=18472 a0=3 a1=7ffd383ef740 a2=0 a3=56123aa5f000 items=0 ppid=3703 pid=3887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:01.475000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 21:57:01.953599 env[1564]: time="2024-02-12T21:57:01.952866588Z" level=info msg="StopPodSandbox for \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\"" Feb 12 21:57:02.040559 kubelet[2584]: I0212 21:57:02.039715 2584 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-lvxxt" podStartSLOduration=4.804480756 podCreationTimestamp="2024-02-12 21:56:36 +0000 UTC" firstStartedPulling="2024-02-12 21:56:36.984647673 +0000 UTC m=+23.204316652" lastFinishedPulling="2024-02-12 21:56:58.209785557 +0000 UTC m=+44.429454523" observedRunningTime="2024-02-12 21:56:59.294202905 +0000 UTC m=+45.513871923" watchObservedRunningTime="2024-02-12 21:57:02.029618627 +0000 UTC m=+48.249287626" Feb 12 21:57:02.144589 systemd-networkd[1383]: vxlan.calico: Link UP Feb 12 21:57:02.144602 systemd-networkd[1383]: vxlan.calico: Gained carrier Feb 12 21:57:02.450969 env[1564]: 2024-02-12 21:57:02.033 [INFO][3906] k8s.go 578: Cleaning up netns ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Feb 12 21:57:02.450969 env[1564]: 2024-02-12 21:57:02.034 [INFO][3906] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" iface="eth0" netns="/var/run/netns/cni-885c7aa6-9ade-ebb7-4251-95d52102fc32" Feb 12 21:57:02.450969 env[1564]: 2024-02-12 21:57:02.034 [INFO][3906] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" iface="eth0" netns="/var/run/netns/cni-885c7aa6-9ade-ebb7-4251-95d52102fc32" Feb 12 21:57:02.450969 env[1564]: 2024-02-12 21:57:02.035 [INFO][3906] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" iface="eth0" netns="/var/run/netns/cni-885c7aa6-9ade-ebb7-4251-95d52102fc32" Feb 12 21:57:02.450969 env[1564]: 2024-02-12 21:57:02.035 [INFO][3906] k8s.go 585: Releasing IP address(es) ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Feb 12 21:57:02.450969 env[1564]: 2024-02-12 21:57:02.035 [INFO][3906] utils.go 188: Calico CNI releasing IP address ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Feb 12 21:57:02.450969 env[1564]: 2024-02-12 21:57:02.378 [INFO][3912] ipam_plugin.go 415: Releasing address using handleID ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" HandleID="k8s-pod-network.5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" Feb 12 21:57:02.450969 env[1564]: 2024-02-12 21:57:02.380 [INFO][3912] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 21:57:02.450969 env[1564]: 2024-02-12 21:57:02.380 [INFO][3912] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 21:57:02.450969 env[1564]: 2024-02-12 21:57:02.418 [WARNING][3912] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" HandleID="k8s-pod-network.5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" Feb 12 21:57:02.450969 env[1564]: 2024-02-12 21:57:02.418 [INFO][3912] ipam_plugin.go 443: Releasing address using workloadID ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" HandleID="k8s-pod-network.5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" Feb 12 21:57:02.450969 env[1564]: 2024-02-12 21:57:02.429 [INFO][3912] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 21:57:02.450969 env[1564]: 2024-02-12 21:57:02.440 [INFO][3906] k8s.go 591: Teardown processing complete. ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Feb 12 21:57:02.465771 systemd[1]: run-netns-cni\x2d885c7aa6\x2d9ade\x2debb7\x2d4251\x2d95d52102fc32.mount: Deactivated successfully. Feb 12 21:57:02.481538 env[1564]: time="2024-02-12T21:57:02.481234295Z" level=info msg="TearDown network for sandbox \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\" successfully" Feb 12 21:57:02.482695 env[1564]: time="2024-02-12T21:57:02.482489304Z" level=info msg="StopPodSandbox for \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\" returns successfully" Feb 12 21:57:02.489263 env[1564]: time="2024-02-12T21:57:02.489204818Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-jklb7,Uid:07723a88-a97b-4c77-9292-860429aacedc,Namespace:kube-system,Attempt:1,}" Feb 12 21:57:02.726853 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 12 21:57:02.727004 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali246bfc47677: link becomes ready Feb 12 21:57:02.730232 systemd-networkd[1383]: cali246bfc47677: Link UP Feb 12 21:57:02.730507 systemd-networkd[1383]: cali246bfc47677: Gained carrier Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.609 [INFO][3924] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0 coredns-5d78c9869d- kube-system 07723a88-a97b-4c77-9292-860429aacedc 705 0 2024-02-12 21:56:27 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5d78c9869d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-28-103 coredns-5d78c9869d-jklb7 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali246bfc47677 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" Namespace="kube-system" Pod="coredns-5d78c9869d-jklb7" WorkloadEndpoint="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-" Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.609 [INFO][3924] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" Namespace="kube-system" Pod="coredns-5d78c9869d-jklb7" WorkloadEndpoint="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.653 [INFO][3936] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" HandleID="k8s-pod-network.f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.666 [INFO][3936] ipam_plugin.go 268: Auto assigning IP ContainerID="f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" HandleID="k8s-pod-network.f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002a1290), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-28-103", "pod":"coredns-5d78c9869d-jklb7", "timestamp":"2024-02-12 21:57:02.653072647 +0000 UTC"}, Hostname:"ip-172-31-28-103", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.666 [INFO][3936] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.666 [INFO][3936] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.666 [INFO][3936] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-28-103' Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.671 [INFO][3936] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" host="ip-172-31-28-103" Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.679 [INFO][3936] ipam.go 372: Looking up existing affinities for host host="ip-172-31-28-103" Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.685 [INFO][3936] ipam.go 489: Trying affinity for 192.168.109.0/26 host="ip-172-31-28-103" Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.688 [INFO][3936] ipam.go 155: Attempting to load block cidr=192.168.109.0/26 host="ip-172-31-28-103" Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.691 [INFO][3936] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.109.0/26 host="ip-172-31-28-103" Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.692 [INFO][3936] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.109.0/26 handle="k8s-pod-network.f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" host="ip-172-31-28-103" Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.703 [INFO][3936] ipam.go 1682: Creating new handle: k8s-pod-network.f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536 Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.709 [INFO][3936] ipam.go 1203: Writing block in order to claim IPs block=192.168.109.0/26 handle="k8s-pod-network.f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" host="ip-172-31-28-103" Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.716 [INFO][3936] ipam.go 1216: Successfully claimed IPs: [192.168.109.1/26] block=192.168.109.0/26 handle="k8s-pod-network.f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" host="ip-172-31-28-103" Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.717 [INFO][3936] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.109.1/26] handle="k8s-pod-network.f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" host="ip-172-31-28-103" Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.717 [INFO][3936] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 21:57:02.753363 env[1564]: 2024-02-12 21:57:02.717 [INFO][3936] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.109.1/26] IPv6=[] ContainerID="f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" HandleID="k8s-pod-network.f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" Feb 12 21:57:02.754364 env[1564]: 2024-02-12 21:57:02.720 [INFO][3924] k8s.go 385: Populated endpoint ContainerID="f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" Namespace="kube-system" Pod="coredns-5d78c9869d-jklb7" WorkloadEndpoint="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"07723a88-a97b-4c77-9292-860429aacedc", ResourceVersion:"705", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 21, 56, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-28-103", ContainerID:"", Pod:"coredns-5d78c9869d-jklb7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.109.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali246bfc47677", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 21:57:02.754364 env[1564]: 2024-02-12 21:57:02.720 [INFO][3924] k8s.go 386: Calico CNI using IPs: [192.168.109.1/32] ContainerID="f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" Namespace="kube-system" Pod="coredns-5d78c9869d-jklb7" WorkloadEndpoint="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" Feb 12 21:57:02.754364 env[1564]: 2024-02-12 21:57:02.720 [INFO][3924] dataplane_linux.go 68: Setting the host side veth name to cali246bfc47677 ContainerID="f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" Namespace="kube-system" Pod="coredns-5d78c9869d-jklb7" WorkloadEndpoint="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" Feb 12 21:57:02.754364 env[1564]: 2024-02-12 21:57:02.732 [INFO][3924] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" Namespace="kube-system" Pod="coredns-5d78c9869d-jklb7" WorkloadEndpoint="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" Feb 12 21:57:02.754364 env[1564]: 2024-02-12 21:57:02.732 [INFO][3924] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" Namespace="kube-system" Pod="coredns-5d78c9869d-jklb7" WorkloadEndpoint="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"07723a88-a97b-4c77-9292-860429aacedc", ResourceVersion:"705", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 21, 56, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-28-103", ContainerID:"f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536", Pod:"coredns-5d78c9869d-jklb7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.109.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali246bfc47677", MAC:"ee:7a:b9:8a:57:1e", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 21:57:02.754364 env[1564]: 2024-02-12 21:57:02.749 [INFO][3924] k8s.go 491: Wrote updated endpoint to datastore ContainerID="f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536" Namespace="kube-system" Pod="coredns-5d78c9869d-jklb7" WorkloadEndpoint="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" Feb 12 21:57:02.779348 env[1564]: time="2024-02-12T21:57:02.778142176Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 21:57:02.779348 env[1564]: time="2024-02-12T21:57:02.778203265Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 21:57:02.779348 env[1564]: time="2024-02-12T21:57:02.778220570Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 21:57:02.779348 env[1564]: time="2024-02-12T21:57:02.778516428Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536 pid=3963 runtime=io.containerd.runc.v2 Feb 12 21:57:02.839100 systemd[1]: Started cri-containerd-f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536.scope. Feb 12 21:57:02.856000 audit[3989]: NETFILTER_CFG table=filter:101 family=2 entries=36 op=nft_register_chain pid=3989 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 21:57:02.856000 audit[3989]: SYSCALL arch=c000003e syscall=46 success=yes exit=19908 a0=3 a1=7ffc8f6907e0 a2=0 a3=7ffc8f6907cc items=0 ppid=3703 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:02.856000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 21:57:02.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit: BPF prog-id=158 op=LOAD Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3963 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:02.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634333261383630656638656164643037616532326162356334636265 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3963 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:02.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634333261383630656638656164643037616532326162356334636265 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit: BPF prog-id=159 op=LOAD Feb 12 21:57:02.865000 audit[3973]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000222f20 items=0 ppid=3963 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:02.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634333261383630656638656164643037616532326162356334636265 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.865000 audit: BPF prog-id=160 op=LOAD Feb 12 21:57:02.865000 audit[3973]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000222f68 items=0 ppid=3963 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:02.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634333261383630656638656164643037616532326162356334636265 Feb 12 21:57:02.866000 audit: BPF prog-id=160 op=UNLOAD Feb 12 21:57:02.866000 audit: BPF prog-id=159 op=UNLOAD Feb 12 21:57:02.866000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.866000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.866000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.866000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.866000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.866000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.866000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.866000 audit[3973]: AVC avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.866000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.866000 audit[3973]: AVC avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:02.866000 audit: BPF prog-id=161 op=LOAD Feb 12 21:57:02.866000 audit[3973]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000223378 items=0 ppid=3963 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:02.866000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634333261383630656638656164643037616532326162356334636265 Feb 12 21:57:02.905620 env[1564]: time="2024-02-12T21:57:02.905548608Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-jklb7,Uid:07723a88-a97b-4c77-9292-860429aacedc,Namespace:kube-system,Attempt:1,} returns sandbox id \"f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536\"" Feb 12 21:57:02.917254 env[1564]: time="2024-02-12T21:57:02.917200551Z" level=info msg="CreateContainer within sandbox \"f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 12 21:57:02.944641 env[1564]: time="2024-02-12T21:57:02.944586924Z" level=info msg="CreateContainer within sandbox \"f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"449b7c743d53626ad0cae38a8e1b461c0ea5af4625e3d95d070fd527d3f1ed6e\"" Feb 12 21:57:02.950079 env[1564]: time="2024-02-12T21:57:02.948893573Z" level=info msg="StartContainer for \"449b7c743d53626ad0cae38a8e1b461c0ea5af4625e3d95d070fd527d3f1ed6e\"" Feb 12 21:57:02.976121 systemd[1]: Started cri-containerd-449b7c743d53626ad0cae38a8e1b461c0ea5af4625e3d95d070fd527d3f1ed6e.scope. Feb 12 21:57:03.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.001000 audit: BPF prog-id=162 op=LOAD Feb 12 21:57:03.002000 audit[4006]: AVC avc: denied { bpf } for pid=4006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.002000 audit[4006]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3963 pid=4006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:03.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434396237633734336435333632366164306361653338613865316234 Feb 12 21:57:03.002000 audit[4006]: AVC avc: denied { perfmon } for pid=4006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.002000 audit[4006]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3963 pid=4006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:03.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434396237633734336435333632366164306361653338613865316234 Feb 12 21:57:03.002000 audit[4006]: AVC avc: denied { bpf } for pid=4006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.002000 audit[4006]: AVC avc: denied { bpf } for pid=4006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.002000 audit[4006]: AVC avc: denied { bpf } for pid=4006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.002000 audit[4006]: AVC avc: denied { perfmon } for pid=4006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.002000 audit[4006]: AVC avc: denied { perfmon } for pid=4006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.002000 audit[4006]: AVC avc: denied { perfmon } for pid=4006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.002000 audit[4006]: AVC avc: denied { perfmon } for pid=4006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.002000 audit[4006]: AVC avc: denied { perfmon } for pid=4006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.002000 audit[4006]: AVC avc: denied { bpf } for pid=4006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.002000 audit[4006]: AVC avc: denied { bpf } for pid=4006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.002000 audit: BPF prog-id=163 op=LOAD Feb 12 21:57:03.002000 audit[4006]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025240 items=0 ppid=3963 pid=4006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:03.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434396237633734336435333632366164306361653338613865316234 Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { bpf } for pid=4006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { bpf } for pid=4006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { perfmon } for pid=4006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { perfmon } for pid=4006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { perfmon } for pid=4006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { perfmon } for pid=4006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { perfmon } for pid=4006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { bpf } for pid=4006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { bpf } for pid=4006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit: BPF prog-id=164 op=LOAD Feb 12 21:57:03.003000 audit[4006]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000025288 items=0 ppid=3963 pid=4006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:03.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434396237633734336435333632366164306361653338613865316234 Feb 12 21:57:03.003000 audit: BPF prog-id=164 op=UNLOAD Feb 12 21:57:03.003000 audit: BPF prog-id=163 op=UNLOAD Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { bpf } for pid=4006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { bpf } for pid=4006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { bpf } for pid=4006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { perfmon } for pid=4006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { perfmon } for pid=4006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { perfmon } for pid=4006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { perfmon } for pid=4006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { perfmon } for pid=4006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { bpf } for pid=4006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit[4006]: AVC avc: denied { bpf } for pid=4006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:03.003000 audit: BPF prog-id=165 op=LOAD Feb 12 21:57:03.003000 audit[4006]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000025698 items=0 ppid=3963 pid=4006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:03.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434396237633734336435333632366164306361653338613865316234 Feb 12 21:57:03.029287 env[1564]: time="2024-02-12T21:57:03.029227279Z" level=info msg="StartContainer for \"449b7c743d53626ad0cae38a8e1b461c0ea5af4625e3d95d070fd527d3f1ed6e\" returns successfully" Feb 12 21:57:03.342744 kernel: kauditd_printk_skb: 279 callbacks suppressed Feb 12 21:57:03.343044 kernel: audit: type=1325 audit(1707775023.339:1207): table=filter:102 family=2 entries=14 op=nft_register_rule pid=4034 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:03.339000 audit[4034]: NETFILTER_CFG table=filter:102 family=2 entries=14 op=nft_register_rule pid=4034 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:03.348074 kernel: audit: type=1300 audit(1707775023.339:1207): arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffe7a6b7c10 a2=0 a3=7ffe7a6b7bfc items=0 ppid=2818 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:03.339000 audit[4034]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffe7a6b7c10 a2=0 a3=7ffe7a6b7bfc items=0 ppid=2818 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:03.339000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:03.362699 kernel: audit: type=1327 audit(1707775023.339:1207): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:03.362000 audit[4034]: NETFILTER_CFG table=nat:103 family=2 entries=14 op=nft_register_rule pid=4034 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:03.362000 audit[4034]: SYSCALL arch=c000003e syscall=46 success=yes exit=3300 a0=3 a1=7ffe7a6b7c10 a2=0 a3=31030 items=0 ppid=2818 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:03.376780 kernel: audit: type=1325 audit(1707775023.362:1208): table=nat:103 family=2 entries=14 op=nft_register_rule pid=4034 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:03.376971 kernel: audit: type=1300 audit(1707775023.362:1208): arch=c000003e syscall=46 success=yes exit=3300 a0=3 a1=7ffe7a6b7c10 a2=0 a3=31030 items=0 ppid=2818 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:03.381090 kernel: audit: type=1327 audit(1707775023.362:1208): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:03.362000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:03.385979 systemd-networkd[1383]: vxlan.calico: Gained IPv6LL Feb 12 21:57:03.470948 systemd[1]: run-containerd-runc-k8s.io-f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536-runc.J3TLVd.mount: Deactivated successfully. Feb 12 21:57:04.295634 kubelet[2584]: I0212 21:57:04.295545 2584 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5d78c9869d-jklb7" podStartSLOduration=37.295450737 podCreationTimestamp="2024-02-12 21:56:27 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 21:57:03.292090587 +0000 UTC m=+49.511759574" watchObservedRunningTime="2024-02-12 21:57:04.295450737 +0000 UTC m=+50.515119721" Feb 12 21:57:04.349000 audit[4039]: NETFILTER_CFG table=filter:104 family=2 entries=11 op=nft_register_rule pid=4039 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:04.362764 kernel: audit: type=1325 audit(1707775024.349:1209): table=filter:104 family=2 entries=11 op=nft_register_rule pid=4039 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:04.362919 kernel: audit: type=1300 audit(1707775024.349:1209): arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7fff817c8600 a2=0 a3=7fff817c85ec items=0 ppid=2818 pid=4039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:04.349000 audit[4039]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7fff817c8600 a2=0 a3=7fff817c85ec items=0 ppid=2818 pid=4039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:04.349000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:04.370742 kernel: audit: type=1327 audit(1707775024.349:1209): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:04.352000 audit[4039]: NETFILTER_CFG table=nat:105 family=2 entries=35 op=nft_register_chain pid=4039 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:04.378301 kernel: audit: type=1325 audit(1707775024.352:1210): table=nat:105 family=2 entries=35 op=nft_register_chain pid=4039 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:04.352000 audit[4039]: SYSCALL arch=c000003e syscall=46 success=yes exit=13788 a0=3 a1=7fff817c8600 a2=0 a3=7fff817c85ec items=0 ppid=2818 pid=4039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:04.352000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:04.601816 systemd-networkd[1383]: cali246bfc47677: Gained IPv6LL Feb 12 21:57:04.638000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.28.103:22-139.178.89.65:46564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:04.638833 systemd[1]: Started sshd@8-172.31.28.103:22-139.178.89.65:46564.service. Feb 12 21:57:04.857000 audit[4044]: USER_ACCT pid=4044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:04.858627 sshd[4044]: Accepted publickey for core from 139.178.89.65 port 46564 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:57:04.859000 audit[4044]: CRED_ACQ pid=4044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:04.859000 audit[4044]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe31cfeee0 a2=3 a3=0 items=0 ppid=1 pid=4044 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:04.859000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:04.862412 sshd[4044]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:57:04.871301 systemd[1]: Started session-9.scope. Feb 12 21:57:04.872410 systemd-logind[1550]: New session 9 of user core. Feb 12 21:57:04.880000 audit[4044]: USER_START pid=4044 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:04.882000 audit[4046]: CRED_ACQ pid=4046 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:05.391520 sshd[4044]: pam_unix(sshd:session): session closed for user core Feb 12 21:57:05.392000 audit[4044]: USER_END pid=4044 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:05.392000 audit[4044]: CRED_DISP pid=4044 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:05.396122 systemd[1]: sshd@8-172.31.28.103:22-139.178.89.65:46564.service: Deactivated successfully. Feb 12 21:57:05.397274 systemd[1]: session-9.scope: Deactivated successfully. Feb 12 21:57:05.395000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.28.103:22-139.178.89.65:46564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:05.399191 systemd-logind[1550]: Session 9 logged out. Waiting for processes to exit. Feb 12 21:57:05.401775 systemd-logind[1550]: Removed session 9. Feb 12 21:57:05.953248 env[1564]: time="2024-02-12T21:57:05.953203383Z" level=info msg="StopPodSandbox for \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\"" Feb 12 21:57:05.953742 env[1564]: time="2024-02-12T21:57:05.953681597Z" level=info msg="StopPodSandbox for \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\"" Feb 12 21:57:05.954026 env[1564]: time="2024-02-12T21:57:05.953998636Z" level=info msg="StopPodSandbox for \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\"" Feb 12 21:57:06.167346 env[1564]: 2024-02-12 21:57:06.065 [INFO][4105] k8s.go 578: Cleaning up netns ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Feb 12 21:57:06.167346 env[1564]: 2024-02-12 21:57:06.065 [INFO][4105] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" iface="eth0" netns="/var/run/netns/cni-533efcf2-85d9-0eb1-597d-3953d6e9d4d0" Feb 12 21:57:06.167346 env[1564]: 2024-02-12 21:57:06.066 [INFO][4105] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" iface="eth0" netns="/var/run/netns/cni-533efcf2-85d9-0eb1-597d-3953d6e9d4d0" Feb 12 21:57:06.167346 env[1564]: 2024-02-12 21:57:06.066 [INFO][4105] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" iface="eth0" netns="/var/run/netns/cni-533efcf2-85d9-0eb1-597d-3953d6e9d4d0" Feb 12 21:57:06.167346 env[1564]: 2024-02-12 21:57:06.066 [INFO][4105] k8s.go 585: Releasing IP address(es) ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Feb 12 21:57:06.167346 env[1564]: 2024-02-12 21:57:06.066 [INFO][4105] utils.go 188: Calico CNI releasing IP address ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Feb 12 21:57:06.167346 env[1564]: 2024-02-12 21:57:06.147 [INFO][4113] ipam_plugin.go 415: Releasing address using handleID ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" HandleID="k8s-pod-network.7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Workload="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" Feb 12 21:57:06.167346 env[1564]: 2024-02-12 21:57:06.148 [INFO][4113] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 21:57:06.167346 env[1564]: 2024-02-12 21:57:06.148 [INFO][4113] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 21:57:06.167346 env[1564]: 2024-02-12 21:57:06.159 [WARNING][4113] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" HandleID="k8s-pod-network.7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Workload="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" Feb 12 21:57:06.167346 env[1564]: 2024-02-12 21:57:06.160 [INFO][4113] ipam_plugin.go 443: Releasing address using workloadID ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" HandleID="k8s-pod-network.7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Workload="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" Feb 12 21:57:06.167346 env[1564]: 2024-02-12 21:57:06.162 [INFO][4113] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 21:57:06.167346 env[1564]: 2024-02-12 21:57:06.165 [INFO][4105] k8s.go 591: Teardown processing complete. ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Feb 12 21:57:06.170695 systemd[1]: run-netns-cni\x2d533efcf2\x2d85d9\x2d0eb1\x2d597d\x2d3953d6e9d4d0.mount: Deactivated successfully. Feb 12 21:57:06.173369 env[1564]: time="2024-02-12T21:57:06.173308387Z" level=info msg="TearDown network for sandbox \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\" successfully" Feb 12 21:57:06.173369 env[1564]: time="2024-02-12T21:57:06.173359615Z" level=info msg="StopPodSandbox for \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\" returns successfully" Feb 12 21:57:06.174250 env[1564]: time="2024-02-12T21:57:06.174205417Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-9wk5p,Uid:9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3,Namespace:calico-system,Attempt:1,}" Feb 12 21:57:06.219750 env[1564]: 2024-02-12 21:57:06.101 [INFO][4090] k8s.go 578: Cleaning up netns ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Feb 12 21:57:06.219750 env[1564]: 2024-02-12 21:57:06.101 [INFO][4090] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" iface="eth0" netns="/var/run/netns/cni-d4ed6215-ad81-42d1-cee8-8904f413d3ab" Feb 12 21:57:06.219750 env[1564]: 2024-02-12 21:57:06.101 [INFO][4090] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" iface="eth0" netns="/var/run/netns/cni-d4ed6215-ad81-42d1-cee8-8904f413d3ab" Feb 12 21:57:06.219750 env[1564]: 2024-02-12 21:57:06.101 [INFO][4090] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" iface="eth0" netns="/var/run/netns/cni-d4ed6215-ad81-42d1-cee8-8904f413d3ab" Feb 12 21:57:06.219750 env[1564]: 2024-02-12 21:57:06.101 [INFO][4090] k8s.go 585: Releasing IP address(es) ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Feb 12 21:57:06.219750 env[1564]: 2024-02-12 21:57:06.101 [INFO][4090] utils.go 188: Calico CNI releasing IP address ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Feb 12 21:57:06.219750 env[1564]: 2024-02-12 21:57:06.182 [INFO][4121] ipam_plugin.go 415: Releasing address using handleID ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" HandleID="k8s-pod-network.91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" Feb 12 21:57:06.219750 env[1564]: 2024-02-12 21:57:06.182 [INFO][4121] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 21:57:06.219750 env[1564]: 2024-02-12 21:57:06.185 [INFO][4121] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 21:57:06.219750 env[1564]: 2024-02-12 21:57:06.210 [WARNING][4121] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" HandleID="k8s-pod-network.91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" Feb 12 21:57:06.219750 env[1564]: 2024-02-12 21:57:06.210 [INFO][4121] ipam_plugin.go 443: Releasing address using workloadID ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" HandleID="k8s-pod-network.91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" Feb 12 21:57:06.219750 env[1564]: 2024-02-12 21:57:06.212 [INFO][4121] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 21:57:06.219750 env[1564]: 2024-02-12 21:57:06.214 [INFO][4090] k8s.go 591: Teardown processing complete. ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Feb 12 21:57:06.220082 systemd[1]: run-netns-cni\x2dd4ed6215\x2dad81\x2d42d1\x2dcee8\x2d8904f413d3ab.mount: Deactivated successfully. Feb 12 21:57:06.221333 env[1564]: time="2024-02-12T21:57:06.221277531Z" level=info msg="TearDown network for sandbox \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\" successfully" Feb 12 21:57:06.221439 env[1564]: time="2024-02-12T21:57:06.221328731Z" level=info msg="StopPodSandbox for \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\" returns successfully" Feb 12 21:57:06.228351 env[1564]: time="2024-02-12T21:57:06.223137515Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-zkrsn,Uid:35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce,Namespace:kube-system,Attempt:1,}" Feb 12 21:57:06.243434 env[1564]: 2024-02-12 21:57:06.118 [INFO][4098] k8s.go 578: Cleaning up netns ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Feb 12 21:57:06.243434 env[1564]: 2024-02-12 21:57:06.118 [INFO][4098] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" iface="eth0" netns="/var/run/netns/cni-9c22f48e-9834-83e0-096e-9461cce85e0b" Feb 12 21:57:06.243434 env[1564]: 2024-02-12 21:57:06.118 [INFO][4098] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" iface="eth0" netns="/var/run/netns/cni-9c22f48e-9834-83e0-096e-9461cce85e0b" Feb 12 21:57:06.243434 env[1564]: 2024-02-12 21:57:06.118 [INFO][4098] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" iface="eth0" netns="/var/run/netns/cni-9c22f48e-9834-83e0-096e-9461cce85e0b" Feb 12 21:57:06.243434 env[1564]: 2024-02-12 21:57:06.118 [INFO][4098] k8s.go 585: Releasing IP address(es) ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Feb 12 21:57:06.243434 env[1564]: 2024-02-12 21:57:06.118 [INFO][4098] utils.go 188: Calico CNI releasing IP address ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Feb 12 21:57:06.243434 env[1564]: 2024-02-12 21:57:06.199 [INFO][4125] ipam_plugin.go 415: Releasing address using handleID ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" HandleID="k8s-pod-network.a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Workload="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" Feb 12 21:57:06.243434 env[1564]: 2024-02-12 21:57:06.200 [INFO][4125] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 21:57:06.243434 env[1564]: 2024-02-12 21:57:06.221 [INFO][4125] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 21:57:06.243434 env[1564]: 2024-02-12 21:57:06.232 [WARNING][4125] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" HandleID="k8s-pod-network.a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Workload="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" Feb 12 21:57:06.243434 env[1564]: 2024-02-12 21:57:06.233 [INFO][4125] ipam_plugin.go 443: Releasing address using workloadID ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" HandleID="k8s-pod-network.a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Workload="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" Feb 12 21:57:06.243434 env[1564]: 2024-02-12 21:57:06.237 [INFO][4125] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 21:57:06.243434 env[1564]: 2024-02-12 21:57:06.239 [INFO][4098] k8s.go 591: Teardown processing complete. ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Feb 12 21:57:06.246494 systemd[1]: run-netns-cni\x2d9c22f48e\x2d9834\x2d83e0\x2d096e\x2d9461cce85e0b.mount: Deactivated successfully. Feb 12 21:57:06.247846 env[1564]: time="2024-02-12T21:57:06.247794136Z" level=info msg="TearDown network for sandbox \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\" successfully" Feb 12 21:57:06.247846 env[1564]: time="2024-02-12T21:57:06.247837998Z" level=info msg="StopPodSandbox for \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\" returns successfully" Feb 12 21:57:06.248856 env[1564]: time="2024-02-12T21:57:06.248819342Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-f577f79-77dcs,Uid:d6a403b6-f169-4c74-aee6-5cde247279c8,Namespace:calico-system,Attempt:1,}" Feb 12 21:57:06.555451 (udev-worker)[4195]: Network interface NamePolicy= disabled on kernel command line. Feb 12 21:57:06.556738 systemd-networkd[1383]: caliaa4069d10b0: Link UP Feb 12 21:57:06.559147 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 12 21:57:06.559239 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliaa4069d10b0: link becomes ready Feb 12 21:57:06.561050 systemd-networkd[1383]: caliaa4069d10b0: Gained carrier Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.314 [INFO][4134] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0 csi-node-driver- calico-system 9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3 743 0 2024-02-12 21:56:36 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:86b88cf7c9 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ip-172-31-28-103 csi-node-driver-9wk5p eth0 default [] [] [kns.calico-system ksa.calico-system.default] caliaa4069d10b0 [] []}} ContainerID="77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" Namespace="calico-system" Pod="csi-node-driver-9wk5p" WorkloadEndpoint="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-" Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.314 [INFO][4134] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" Namespace="calico-system" Pod="csi-node-driver-9wk5p" WorkloadEndpoint="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.435 [INFO][4171] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" HandleID="k8s-pod-network.77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" Workload="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.459 [INFO][4171] ipam_plugin.go 268: Auto assigning IP ContainerID="77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" HandleID="k8s-pod-network.77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" Workload="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002bebb0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-28-103", "pod":"csi-node-driver-9wk5p", "timestamp":"2024-02-12 21:57:06.435239418 +0000 UTC"}, Hostname:"ip-172-31-28-103", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.459 [INFO][4171] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.459 [INFO][4171] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.459 [INFO][4171] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-28-103' Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.461 [INFO][4171] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" host="ip-172-31-28-103" Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.467 [INFO][4171] ipam.go 372: Looking up existing affinities for host host="ip-172-31-28-103" Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.477 [INFO][4171] ipam.go 489: Trying affinity for 192.168.109.0/26 host="ip-172-31-28-103" Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.480 [INFO][4171] ipam.go 155: Attempting to load block cidr=192.168.109.0/26 host="ip-172-31-28-103" Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.511 [INFO][4171] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.109.0/26 host="ip-172-31-28-103" Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.514 [INFO][4171] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.109.0/26 handle="k8s-pod-network.77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" host="ip-172-31-28-103" Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.521 [INFO][4171] ipam.go 1682: Creating new handle: k8s-pod-network.77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65 Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.532 [INFO][4171] ipam.go 1203: Writing block in order to claim IPs block=192.168.109.0/26 handle="k8s-pod-network.77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" host="ip-172-31-28-103" Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.540 [INFO][4171] ipam.go 1216: Successfully claimed IPs: [192.168.109.2/26] block=192.168.109.0/26 handle="k8s-pod-network.77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" host="ip-172-31-28-103" Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.540 [INFO][4171] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.109.2/26] handle="k8s-pod-network.77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" host="ip-172-31-28-103" Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.540 [INFO][4171] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 21:57:06.588773 env[1564]: 2024-02-12 21:57:06.540 [INFO][4171] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.109.2/26] IPv6=[] ContainerID="77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" HandleID="k8s-pod-network.77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" Workload="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" Feb 12 21:57:06.590487 env[1564]: 2024-02-12 21:57:06.544 [INFO][4134] k8s.go 385: Populated endpoint ContainerID="77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" Namespace="calico-system" Pod="csi-node-driver-9wk5p" WorkloadEndpoint="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3", ResourceVersion:"743", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 21, 56, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-28-103", ContainerID:"", Pod:"csi-node-driver-9wk5p", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.109.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"caliaa4069d10b0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 21:57:06.590487 env[1564]: 2024-02-12 21:57:06.544 [INFO][4134] k8s.go 386: Calico CNI using IPs: [192.168.109.2/32] ContainerID="77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" Namespace="calico-system" Pod="csi-node-driver-9wk5p" WorkloadEndpoint="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" Feb 12 21:57:06.590487 env[1564]: 2024-02-12 21:57:06.544 [INFO][4134] dataplane_linux.go 68: Setting the host side veth name to caliaa4069d10b0 ContainerID="77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" Namespace="calico-system" Pod="csi-node-driver-9wk5p" WorkloadEndpoint="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" Feb 12 21:57:06.590487 env[1564]: 2024-02-12 21:57:06.561 [INFO][4134] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" Namespace="calico-system" Pod="csi-node-driver-9wk5p" WorkloadEndpoint="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" Feb 12 21:57:06.590487 env[1564]: 2024-02-12 21:57:06.561 [INFO][4134] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" Namespace="calico-system" Pod="csi-node-driver-9wk5p" WorkloadEndpoint="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3", ResourceVersion:"743", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 21, 56, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-28-103", ContainerID:"77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65", Pod:"csi-node-driver-9wk5p", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.109.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"caliaa4069d10b0", MAC:"da:07:87:63:bc:35", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 21:57:06.590487 env[1564]: 2024-02-12 21:57:06.575 [INFO][4134] k8s.go 491: Wrote updated endpoint to datastore ContainerID="77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65" Namespace="calico-system" Pod="csi-node-driver-9wk5p" WorkloadEndpoint="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" Feb 12 21:57:06.646000 audit[4225]: NETFILTER_CFG table=filter:106 family=2 entries=40 op=nft_register_chain pid=4225 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 21:57:06.646000 audit[4225]: SYSCALL arch=c000003e syscall=46 success=yes exit=21096 a0=3 a1=7ffd66677510 a2=0 a3=7ffd666774fc items=0 ppid=3703 pid=4225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:06.646000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 21:57:06.653886 (udev-worker)[4200]: Network interface NamePolicy= disabled on kernel command line. Feb 12 21:57:06.661602 env[1564]: time="2024-02-12T21:57:06.650014117Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 21:57:06.661602 env[1564]: time="2024-02-12T21:57:06.650074975Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 21:57:06.661602 env[1564]: time="2024-02-12T21:57:06.650091825Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 21:57:06.661602 env[1564]: time="2024-02-12T21:57:06.650265930Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65 pid=4219 runtime=io.containerd.runc.v2 Feb 12 21:57:06.665961 systemd-networkd[1383]: cali15c62d3f11a: Link UP Feb 12 21:57:06.669946 systemd-networkd[1383]: cali15c62d3f11a: Gained carrier Feb 12 21:57:06.670730 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali15c62d3f11a: link becomes ready Feb 12 21:57:06.686971 systemd[1]: Started cri-containerd-77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65.scope. Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.352 [INFO][4147] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0 coredns-5d78c9869d- kube-system 35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce 744 0 2024-02-12 21:56:27 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5d78c9869d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-28-103 coredns-5d78c9869d-zkrsn eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali15c62d3f11a [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" Namespace="kube-system" Pod="coredns-5d78c9869d-zkrsn" WorkloadEndpoint="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-" Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.352 [INFO][4147] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" Namespace="kube-system" Pod="coredns-5d78c9869d-zkrsn" WorkloadEndpoint="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.516 [INFO][4172] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" HandleID="k8s-pod-network.0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.535 [INFO][4172] ipam_plugin.go 268: Auto assigning IP ContainerID="0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" HandleID="k8s-pod-network.0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000051570), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-28-103", "pod":"coredns-5d78c9869d-zkrsn", "timestamp":"2024-02-12 21:57:06.516786423 +0000 UTC"}, Hostname:"ip-172-31-28-103", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.536 [INFO][4172] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.541 [INFO][4172] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.541 [INFO][4172] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-28-103' Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.570 [INFO][4172] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" host="ip-172-31-28-103" Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.599 [INFO][4172] ipam.go 372: Looking up existing affinities for host host="ip-172-31-28-103" Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.613 [INFO][4172] ipam.go 489: Trying affinity for 192.168.109.0/26 host="ip-172-31-28-103" Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.617 [INFO][4172] ipam.go 155: Attempting to load block cidr=192.168.109.0/26 host="ip-172-31-28-103" Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.621 [INFO][4172] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.109.0/26 host="ip-172-31-28-103" Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.622 [INFO][4172] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.109.0/26 handle="k8s-pod-network.0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" host="ip-172-31-28-103" Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.629 [INFO][4172] ipam.go 1682: Creating new handle: k8s-pod-network.0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474 Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.635 [INFO][4172] ipam.go 1203: Writing block in order to claim IPs block=192.168.109.0/26 handle="k8s-pod-network.0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" host="ip-172-31-28-103" Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.645 [INFO][4172] ipam.go 1216: Successfully claimed IPs: [192.168.109.3/26] block=192.168.109.0/26 handle="k8s-pod-network.0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" host="ip-172-31-28-103" Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.645 [INFO][4172] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.109.3/26] handle="k8s-pod-network.0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" host="ip-172-31-28-103" Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.645 [INFO][4172] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 21:57:06.700481 env[1564]: 2024-02-12 21:57:06.645 [INFO][4172] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.109.3/26] IPv6=[] ContainerID="0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" HandleID="k8s-pod-network.0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" Feb 12 21:57:06.701634 env[1564]: 2024-02-12 21:57:06.650 [INFO][4147] k8s.go 385: Populated endpoint ContainerID="0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" Namespace="kube-system" Pod="coredns-5d78c9869d-zkrsn" WorkloadEndpoint="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce", ResourceVersion:"744", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 21, 56, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-28-103", ContainerID:"", Pod:"coredns-5d78c9869d-zkrsn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.109.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali15c62d3f11a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 21:57:06.701634 env[1564]: 2024-02-12 21:57:06.650 [INFO][4147] k8s.go 386: Calico CNI using IPs: [192.168.109.3/32] ContainerID="0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" Namespace="kube-system" Pod="coredns-5d78c9869d-zkrsn" WorkloadEndpoint="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" Feb 12 21:57:06.701634 env[1564]: 2024-02-12 21:57:06.651 [INFO][4147] dataplane_linux.go 68: Setting the host side veth name to cali15c62d3f11a ContainerID="0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" Namespace="kube-system" Pod="coredns-5d78c9869d-zkrsn" WorkloadEndpoint="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" Feb 12 21:57:06.701634 env[1564]: 2024-02-12 21:57:06.671 [INFO][4147] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" Namespace="kube-system" Pod="coredns-5d78c9869d-zkrsn" WorkloadEndpoint="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" Feb 12 21:57:06.701634 env[1564]: 2024-02-12 21:57:06.671 [INFO][4147] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" Namespace="kube-system" Pod="coredns-5d78c9869d-zkrsn" WorkloadEndpoint="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce", ResourceVersion:"744", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 21, 56, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-28-103", ContainerID:"0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474", Pod:"coredns-5d78c9869d-zkrsn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.109.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali15c62d3f11a", MAC:"66:da:4b:cb:e9:c9", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 21:57:06.701634 env[1564]: 2024-02-12 21:57:06.694 [INFO][4147] k8s.go 491: Wrote updated endpoint to datastore ContainerID="0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474" Namespace="kube-system" Pod="coredns-5d78c9869d-zkrsn" WorkloadEndpoint="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" Feb 12 21:57:06.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.734000 audit: BPF prog-id=166 op=LOAD Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4219 pid=4232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:06.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737636336333735376537643435333766373237316631643436386135 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4219 pid=4232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:06.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737636336333735376537643435333766373237316631643436386135 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit: BPF prog-id=167 op=LOAD Feb 12 21:57:06.736000 audit[4232]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00028ade0 items=0 ppid=4219 pid=4232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:06.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737636336333735376537643435333766373237316631643436386135 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit: BPF prog-id=168 op=LOAD Feb 12 21:57:06.736000 audit[4232]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00028ae28 items=0 ppid=4219 pid=4232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:06.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737636336333735376537643435333766373237316631643436386135 Feb 12 21:57:06.736000 audit: BPF prog-id=168 op=UNLOAD Feb 12 21:57:06.736000 audit: BPF prog-id=167 op=UNLOAD Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.736000 audit: BPF prog-id=169 op=LOAD Feb 12 21:57:06.736000 audit[4232]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00028b238 items=0 ppid=4219 pid=4232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:06.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737636336333735376537643435333766373237316631643436386135 Feb 12 21:57:06.742287 env[1564]: time="2024-02-12T21:57:06.738250324Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 21:57:06.742287 env[1564]: time="2024-02-12T21:57:06.738410914Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 21:57:06.742287 env[1564]: time="2024-02-12T21:57:06.738448553Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 21:57:06.742287 env[1564]: time="2024-02-12T21:57:06.740134843Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474 pid=4265 runtime=io.containerd.runc.v2 Feb 12 21:57:06.777088 env[1564]: time="2024-02-12T21:57:06.777028751Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-9wk5p,Uid:9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3,Namespace:calico-system,Attempt:1,} returns sandbox id \"77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65\"" Feb 12 21:57:06.781768 systemd[1]: Started cri-containerd-0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474.scope. Feb 12 21:57:06.787932 env[1564]: time="2024-02-12T21:57:06.787887866Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\"" Feb 12 21:57:06.795000 audit[4283]: NETFILTER_CFG table=filter:107 family=2 entries=34 op=nft_register_chain pid=4283 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 21:57:06.795000 audit[4283]: SYSCALL arch=c000003e syscall=46 success=yes exit=17900 a0=3 a1=7fff0d481130 a2=0 a3=7fff0d48111c items=0 ppid=3703 pid=4283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:06.795000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 21:57:06.825094 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie7ff4d11224: link becomes ready Feb 12 21:57:06.819576 systemd-networkd[1383]: calie7ff4d11224: Link UP Feb 12 21:57:06.822178 systemd-networkd[1383]: calie7ff4d11224: Gained carrier Feb 12 21:57:06.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.831000 audit: BPF prog-id=170 op=LOAD Feb 12 21:57:06.832000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.832000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4265 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:06.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030323562396131666133323830656137613336616161356561356564 Feb 12 21:57:06.832000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.832000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4265 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:06.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030323562396131666133323830656137613336616161356561356564 Feb 12 21:57:06.832000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.832000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.832000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.832000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.832000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.832000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.832000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.832000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.832000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.832000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.832000 audit: BPF prog-id=171 op=LOAD Feb 12 21:57:06.832000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000300ed0 items=0 ppid=4265 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:06.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030323562396131666133323830656137613336616161356561356564 Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit: BPF prog-id=172 op=LOAD Feb 12 21:57:06.833000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000300f18 items=0 ppid=4265 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:06.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030323562396131666133323830656137613336616161356561356564 Feb 12 21:57:06.833000 audit: BPF prog-id=172 op=UNLOAD Feb 12 21:57:06.833000 audit: BPF prog-id=171 op=UNLOAD Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.833000 audit: BPF prog-id=173 op=LOAD Feb 12 21:57:06.833000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000301328 items=0 ppid=4265 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:06.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030323562396131666133323830656137613336616161356561356564 Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.449 [INFO][4156] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0 calico-kube-controllers-f577f79- calico-system d6a403b6-f169-4c74-aee6-5cde247279c8 745 0 2024-02-12 21:56:36 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:f577f79 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-28-103 calico-kube-controllers-f577f79-77dcs eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calie7ff4d11224 [] []}} ContainerID="79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" Namespace="calico-system" Pod="calico-kube-controllers-f577f79-77dcs" WorkloadEndpoint="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-" Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.449 [INFO][4156] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" Namespace="calico-system" Pod="calico-kube-controllers-f577f79-77dcs" WorkloadEndpoint="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.567 [INFO][4183] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" HandleID="k8s-pod-network.79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" Workload="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.607 [INFO][4183] ipam_plugin.go 268: Auto assigning IP ContainerID="79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" HandleID="k8s-pod-network.79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" Workload="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002bea90), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-28-103", "pod":"calico-kube-controllers-f577f79-77dcs", "timestamp":"2024-02-12 21:57:06.565496759 +0000 UTC"}, Hostname:"ip-172-31-28-103", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.607 [INFO][4183] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.645 [INFO][4183] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.645 [INFO][4183] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-28-103' Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.666 [INFO][4183] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" host="ip-172-31-28-103" Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.704 [INFO][4183] ipam.go 372: Looking up existing affinities for host host="ip-172-31-28-103" Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.719 [INFO][4183] ipam.go 489: Trying affinity for 192.168.109.0/26 host="ip-172-31-28-103" Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.742 [INFO][4183] ipam.go 155: Attempting to load block cidr=192.168.109.0/26 host="ip-172-31-28-103" Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.755 [INFO][4183] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.109.0/26 host="ip-172-31-28-103" Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.755 [INFO][4183] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.109.0/26 handle="k8s-pod-network.79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" host="ip-172-31-28-103" Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.759 [INFO][4183] ipam.go 1682: Creating new handle: k8s-pod-network.79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041 Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.764 [INFO][4183] ipam.go 1203: Writing block in order to claim IPs block=192.168.109.0/26 handle="k8s-pod-network.79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" host="ip-172-31-28-103" Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.792 [INFO][4183] ipam.go 1216: Successfully claimed IPs: [192.168.109.4/26] block=192.168.109.0/26 handle="k8s-pod-network.79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" host="ip-172-31-28-103" Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.792 [INFO][4183] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.109.4/26] handle="k8s-pod-network.79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" host="ip-172-31-28-103" Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.792 [INFO][4183] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 21:57:06.856333 env[1564]: 2024-02-12 21:57:06.792 [INFO][4183] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.109.4/26] IPv6=[] ContainerID="79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" HandleID="k8s-pod-network.79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" Workload="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" Feb 12 21:57:06.858028 env[1564]: 2024-02-12 21:57:06.799 [INFO][4156] k8s.go 385: Populated endpoint ContainerID="79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" Namespace="calico-system" Pod="calico-kube-controllers-f577f79-77dcs" WorkloadEndpoint="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0", GenerateName:"calico-kube-controllers-f577f79-", Namespace:"calico-system", SelfLink:"", UID:"d6a403b6-f169-4c74-aee6-5cde247279c8", ResourceVersion:"745", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 21, 56, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"f577f79", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-28-103", ContainerID:"", Pod:"calico-kube-controllers-f577f79-77dcs", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.109.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie7ff4d11224", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 21:57:06.858028 env[1564]: 2024-02-12 21:57:06.799 [INFO][4156] k8s.go 386: Calico CNI using IPs: [192.168.109.4/32] ContainerID="79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" Namespace="calico-system" Pod="calico-kube-controllers-f577f79-77dcs" WorkloadEndpoint="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" Feb 12 21:57:06.858028 env[1564]: 2024-02-12 21:57:06.800 [INFO][4156] dataplane_linux.go 68: Setting the host side veth name to calie7ff4d11224 ContainerID="79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" Namespace="calico-system" Pod="calico-kube-controllers-f577f79-77dcs" WorkloadEndpoint="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" Feb 12 21:57:06.858028 env[1564]: 2024-02-12 21:57:06.823 [INFO][4156] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" Namespace="calico-system" Pod="calico-kube-controllers-f577f79-77dcs" WorkloadEndpoint="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" Feb 12 21:57:06.858028 env[1564]: 2024-02-12 21:57:06.823 [INFO][4156] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" Namespace="calico-system" Pod="calico-kube-controllers-f577f79-77dcs" WorkloadEndpoint="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0", GenerateName:"calico-kube-controllers-f577f79-", Namespace:"calico-system", SelfLink:"", UID:"d6a403b6-f169-4c74-aee6-5cde247279c8", ResourceVersion:"745", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 21, 56, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"f577f79", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-28-103", ContainerID:"79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041", Pod:"calico-kube-controllers-f577f79-77dcs", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.109.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie7ff4d11224", MAC:"86:b0:24:b1:92:3d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 21:57:06.858028 env[1564]: 2024-02-12 21:57:06.853 [INFO][4156] k8s.go 491: Wrote updated endpoint to datastore ContainerID="79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041" Namespace="calico-system" Pod="calico-kube-controllers-f577f79-77dcs" WorkloadEndpoint="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" Feb 12 21:57:06.901543 env[1564]: time="2024-02-12T21:57:06.899821030Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 21:57:06.901543 env[1564]: time="2024-02-12T21:57:06.899919654Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 21:57:06.901543 env[1564]: time="2024-02-12T21:57:06.899948875Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 21:57:06.901543 env[1564]: time="2024-02-12T21:57:06.900112496Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041 pid=4317 runtime=io.containerd.runc.v2 Feb 12 21:57:06.931269 env[1564]: time="2024-02-12T21:57:06.931219416Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-zkrsn,Uid:35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce,Namespace:kube-system,Attempt:1,} returns sandbox id \"0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474\"" Feb 12 21:57:06.941964 env[1564]: time="2024-02-12T21:57:06.941919823Z" level=info msg="CreateContainer within sandbox \"0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 12 21:57:06.943825 systemd[1]: Started cri-containerd-79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041.scope. Feb 12 21:57:06.974416 env[1564]: time="2024-02-12T21:57:06.974358208Z" level=info msg="CreateContainer within sandbox \"0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"e0ef66a6cf9a95df3d605a2a6e6d45eea61106e2fb4c48fe1f07f93afc318369\"" Feb 12 21:57:06.976242 env[1564]: time="2024-02-12T21:57:06.976205264Z" level=info msg="StartContainer for \"e0ef66a6cf9a95df3d605a2a6e6d45eea61106e2fb4c48fe1f07f93afc318369\"" Feb 12 21:57:06.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.994000 audit: BPF prog-id=174 op=LOAD Feb 12 21:57:06.999000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.999000 audit[4329]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4317 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:06.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739613936333636343663626232376339303065356136383930366432 Feb 12 21:57:06.999000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.999000 audit[4329]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4317 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:06.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739613936333636343663626232376339303065356136383930366432 Feb 12 21:57:06.999000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.999000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.999000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.999000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.999000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.999000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.999000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.999000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.999000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.999000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:06.999000 audit: BPF prog-id=175 op=LOAD Feb 12 21:57:06.999000 audit[4329]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000388ec0 items=0 ppid=4317 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:06.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739613936333636343663626232376339303065356136383930366432 Feb 12 21:57:07.000000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.000000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.000000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.000000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.000000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.000000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.000000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.000000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.000000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.000000 audit: BPF prog-id=176 op=LOAD Feb 12 21:57:07.000000 audit[4329]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000388f08 items=0 ppid=4317 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:07.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739613936333636343663626232376339303065356136383930366432 Feb 12 21:57:07.001000 audit: BPF prog-id=176 op=UNLOAD Feb 12 21:57:07.001000 audit: BPF prog-id=175 op=UNLOAD Feb 12 21:57:07.001000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.001000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.001000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.001000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.001000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.001000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.001000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.001000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.001000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.001000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.001000 audit: BPF prog-id=177 op=LOAD Feb 12 21:57:07.001000 audit[4329]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000389318 items=0 ppid=4317 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:07.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739613936333636343663626232376339303065356136383930366432 Feb 12 21:57:07.014483 systemd[1]: Started cri-containerd-e0ef66a6cf9a95df3d605a2a6e6d45eea61106e2fb4c48fe1f07f93afc318369.scope. Feb 12 21:57:07.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.045000 audit: BPF prog-id=178 op=LOAD Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4265 pid=4360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:07.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530656636366136636639613935646633643630356132613665366434 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=4265 pid=4360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:07.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530656636366136636639613935646633643630356132613665366434 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit: BPF prog-id=179 op=LOAD Feb 12 21:57:07.046000 audit[4360]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003883a0 items=0 ppid=4265 pid=4360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:07.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530656636366136636639613935646633643630356132613665366434 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit: BPF prog-id=180 op=LOAD Feb 12 21:57:07.046000 audit[4360]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003883e8 items=0 ppid=4265 pid=4360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:07.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530656636366136636639613935646633643630356132613665366434 Feb 12 21:57:07.046000 audit: BPF prog-id=180 op=UNLOAD Feb 12 21:57:07.046000 audit: BPF prog-id=179 op=UNLOAD Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { perfmon } for pid=4360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit[4360]: AVC avc: denied { bpf } for pid=4360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:07.046000 audit: BPF prog-id=181 op=LOAD Feb 12 21:57:07.046000 audit[4360]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003887f8 items=0 ppid=4265 pid=4360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:07.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530656636366136636639613935646633643630356132613665366434 Feb 12 21:57:07.036000 audit[4366]: NETFILTER_CFG table=filter:108 family=2 entries=42 op=nft_register_chain pid=4366 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 21:57:07.036000 audit[4366]: SYSCALL arch=c000003e syscall=46 success=yes exit=20696 a0=3 a1=7ffce71910d0 a2=0 a3=7ffce71910bc items=0 ppid=3703 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:07.036000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 21:57:07.074725 env[1564]: time="2024-02-12T21:57:07.074659993Z" level=info msg="StartContainer for \"e0ef66a6cf9a95df3d605a2a6e6d45eea61106e2fb4c48fe1f07f93afc318369\" returns successfully" Feb 12 21:57:07.118141 env[1564]: time="2024-02-12T21:57:07.118094800Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-f577f79-77dcs,Uid:d6a403b6-f169-4c74-aee6-5cde247279c8,Namespace:calico-system,Attempt:1,} returns sandbox id \"79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041\"" Feb 12 21:57:07.327804 kubelet[2584]: I0212 21:57:07.327773 2584 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5d78c9869d-zkrsn" podStartSLOduration=40.327723394 podCreationTimestamp="2024-02-12 21:56:27 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 21:57:07.309746181 +0000 UTC m=+53.529415166" watchObservedRunningTime="2024-02-12 21:57:07.327723394 +0000 UTC m=+53.547392378" Feb 12 21:57:07.353000 audit[4397]: NETFILTER_CFG table=filter:109 family=2 entries=8 op=nft_register_rule pid=4397 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:07.353000 audit[4397]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffd2b879c60 a2=0 a3=7ffd2b879c4c items=0 ppid=2818 pid=4397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:07.353000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:07.359000 audit[4397]: NETFILTER_CFG table=nat:110 family=2 entries=44 op=nft_register_rule pid=4397 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:07.359000 audit[4397]: SYSCALL arch=c000003e syscall=46 success=yes exit=13788 a0=3 a1=7ffd2b879c60 a2=0 a3=7ffd2b879c4c items=0 ppid=2818 pid=4397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:07.359000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:07.384000 audit[4399]: NETFILTER_CFG table=filter:111 family=2 entries=8 op=nft_register_rule pid=4399 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:07.384000 audit[4399]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffe716d72a0 a2=0 a3=7ffe716d728c items=0 ppid=2818 pid=4399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:07.384000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:07.411000 audit[4399]: NETFILTER_CFG table=nat:112 family=2 entries=56 op=nft_register_chain pid=4399 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:07.411000 audit[4399]: SYSCALL arch=c000003e syscall=46 success=yes exit=19452 a0=3 a1=7ffe716d72a0 a2=0 a3=7ffe716d728c items=0 ppid=2818 pid=4399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:07.411000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:07.802136 systemd-networkd[1383]: caliaa4069d10b0: Gained IPv6LL Feb 12 21:57:08.112524 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2699789529.mount: Deactivated successfully. Feb 12 21:57:08.634251 systemd-networkd[1383]: calie7ff4d11224: Gained IPv6LL Feb 12 21:57:08.695040 env[1564]: time="2024-02-12T21:57:08.694994152Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:57:08.703026 env[1564]: time="2024-02-12T21:57:08.702739524Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:91c1c91da7602f16686c149419195b486669f3a1828fd320cf332fdc6a25297d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:57:08.708125 env[1564]: time="2024-02-12T21:57:08.708084711Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:57:08.713038 env[1564]: time="2024-02-12T21:57:08.712915571Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:2b9021393c17e87ba8a3c89f5b3719941812f4e4751caa0b71eb2233bff48738,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:57:08.716338 env[1564]: time="2024-02-12T21:57:08.716276876Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\" returns image reference \"sha256:91c1c91da7602f16686c149419195b486669f3a1828fd320cf332fdc6a25297d\"" Feb 12 21:57:08.721739 env[1564]: time="2024-02-12T21:57:08.721699216Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\"" Feb 12 21:57:08.733226 env[1564]: time="2024-02-12T21:57:08.733185617Z" level=info msg="CreateContainer within sandbox \"77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Feb 12 21:57:08.736554 systemd-networkd[1383]: cali15c62d3f11a: Gained IPv6LL Feb 12 21:57:08.784621 kernel: kauditd_printk_skb: 262 callbacks suppressed Feb 12 21:57:08.784801 kernel: audit: type=1400 audit(1707775028.777:1299): avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:57:08.777000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:57:08.777000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e81cc0 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:57:08.792995 kernel: audit: type=1300 audit(1707775028.777:1299): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e81cc0 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:57:08.777000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:57:08.799766 kernel: audit: type=1327 audit(1707775028.777:1299): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:57:08.801742 kernel: audit: type=1400 audit(1707775028.784:1300): avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:57:08.784000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:57:08.801927 env[1564]: time="2024-02-12T21:57:08.800890989Z" level=info msg="CreateContainer within sandbox \"77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"2d5bde511c4188cc03153f2bf694834e458c834bf3d477e3b1cde97c43333a46\"" Feb 12 21:57:08.803202 env[1564]: time="2024-02-12T21:57:08.803062051Z" level=info msg="StartContainer for \"2d5bde511c4188cc03153f2bf694834e458c834bf3d477e3b1cde97c43333a46\"" Feb 12 21:57:08.834538 kernel: audit: type=1300 audit(1707775028.784:1300): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013ff5c0 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:57:08.834864 kernel: audit: type=1327 audit(1707775028.784:1300): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:57:08.784000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013ff5c0 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:57:08.784000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:57:08.870440 systemd[1]: run-containerd-runc-k8s.io-2d5bde511c4188cc03153f2bf694834e458c834bf3d477e3b1cde97c43333a46-runc.byXgP9.mount: Deactivated successfully. Feb 12 21:57:08.883959 systemd[1]: Started cri-containerd-2d5bde511c4188cc03153f2bf694834e458c834bf3d477e3b1cde97c43333a46.scope. Feb 12 21:57:08.918000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.930908 kernel: audit: type=1400 audit(1707775028.918:1301): avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.931060 kernel: audit: type=1300 audit(1707775028.918:1301): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f72147cb380 items=0 ppid=4219 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:08.918000 audit[4408]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f72147cb380 items=0 ppid=4219 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:08.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264356264653531316334313838636330333135336632626636393438 Feb 12 21:57:08.942693 kernel: audit: type=1327 audit(1707775028.918:1301): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264356264653531316334313838636330333135336632626636393438 Feb 12 21:57:08.919000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.953689 kernel: audit: type=1400 audit(1707775028.919:1302): avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.954645 env[1564]: time="2024-02-12T21:57:08.954594770Z" level=info msg="StartContainer for \"2d5bde511c4188cc03153f2bf694834e458c834bf3d477e3b1cde97c43333a46\" returns successfully" Feb 12 21:57:08.919000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.919000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.919000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.919000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.919000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.919000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.919000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.919000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.919000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.919000 audit: BPF prog-id=182 op=LOAD Feb 12 21:57:08.919000 audit[4408]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0003112a8 items=0 ppid=4219 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:08.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264356264653531316334313838636330333135336632626636393438 Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit: BPF prog-id=183 op=LOAD Feb 12 21:57:08.923000 audit[4408]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0003112f8 items=0 ppid=4219 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:08.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264356264653531316334313838636330333135336632626636393438 Feb 12 21:57:08.923000 audit: BPF prog-id=183 op=UNLOAD Feb 12 21:57:08.923000 audit: BPF prog-id=182 op=UNLOAD Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:08.923000 audit: BPF prog-id=184 op=LOAD Feb 12 21:57:08.923000 audit[4408]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000311388 items=0 ppid=4219 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:08.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264356264653531316334313838636330333135336632626636393438 Feb 12 21:57:10.220000 audit[2475]: AVC avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:57:10.220000 audit[2475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c00925a8a0 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:57:10.220000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:57:10.220000 audit[2475]: AVC avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:57:10.220000 audit[2475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c007631be0 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:57:10.220000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:57:10.220000 audit[2475]: AVC avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:57:10.220000 audit[2475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c0042ccfc0 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:57:10.220000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:57:10.224000 audit[2475]: AVC avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:57:10.224000 audit[2475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c00925a900 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:57:10.224000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:57:10.233000 audit[2475]: AVC avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:57:10.233000 audit[2475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c0042cd170 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:57:10.233000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:57:10.233000 audit[2475]: AVC avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:57:10.233000 audit[2475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c0084caa20 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:57:10.233000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:57:10.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.28.103:22-139.178.89.65:39332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:10.418063 systemd[1]: Started sshd@9-172.31.28.103:22-139.178.89.65:39332.service. Feb 12 21:57:10.617340 sshd[4435]: Accepted publickey for core from 139.178.89.65 port 39332 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:57:10.616000 audit[4435]: USER_ACCT pid=4435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:10.620000 audit[4435]: CRED_ACQ pid=4435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:10.620000 audit[4435]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe5fd55880 a2=3 a3=0 items=0 ppid=1 pid=4435 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:10.620000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:10.623919 sshd[4435]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:57:10.643624 systemd[1]: Started session-10.scope. Feb 12 21:57:10.644610 systemd-logind[1550]: New session 10 of user core. Feb 12 21:57:10.657000 audit[4435]: USER_START pid=4435 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:10.659000 audit[4437]: CRED_ACQ pid=4437 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:11.158900 sshd[4435]: pam_unix(sshd:session): session closed for user core Feb 12 21:57:11.159000 audit[4435]: USER_END pid=4435 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:11.160000 audit[4435]: CRED_DISP pid=4435 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:11.166598 systemd[1]: sshd@9-172.31.28.103:22-139.178.89.65:39332.service: Deactivated successfully. Feb 12 21:57:11.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.28.103:22-139.178.89.65:39332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:11.168326 systemd[1]: session-10.scope: Deactivated successfully. Feb 12 21:57:11.169842 systemd-logind[1550]: Session 10 logged out. Waiting for processes to exit. Feb 12 21:57:11.171730 systemd-logind[1550]: Removed session 10. Feb 12 21:57:12.273974 env[1564]: time="2024-02-12T21:57:12.273926090Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:57:12.279383 env[1564]: time="2024-02-12T21:57:12.279340451Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4e87edec0297dadd6f3bb25b2f540fd40e2abed9fff582c97ff4cd751d3f9803,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:57:12.284010 env[1564]: time="2024-02-12T21:57:12.283967500Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:57:12.288122 env[1564]: time="2024-02-12T21:57:12.288079936Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:e264ab1fb2f1ae90dd1d84e226d11d2eb4350e74ac27de4c65f29f5aadba5bb1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:57:12.289465 env[1564]: time="2024-02-12T21:57:12.289418648Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\" returns image reference \"sha256:4e87edec0297dadd6f3bb25b2f540fd40e2abed9fff582c97ff4cd751d3f9803\"" Feb 12 21:57:12.292165 env[1564]: time="2024-02-12T21:57:12.292140884Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\"" Feb 12 21:57:12.322397 env[1564]: time="2024-02-12T21:57:12.322341166Z" level=info msg="CreateContainer within sandbox \"79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Feb 12 21:57:12.344485 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3324655593.mount: Deactivated successfully. Feb 12 21:57:12.356005 env[1564]: time="2024-02-12T21:57:12.355951445Z" level=info msg="CreateContainer within sandbox \"79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"4692065e653935d9b5d13b5087fd00e78615a8e56971a2c483b833f3dd58606b\"" Feb 12 21:57:12.357052 env[1564]: time="2024-02-12T21:57:12.357015865Z" level=info msg="StartContainer for \"4692065e653935d9b5d13b5087fd00e78615a8e56971a2c483b833f3dd58606b\"" Feb 12 21:57:12.441553 systemd[1]: Started cri-containerd-4692065e653935d9b5d13b5087fd00e78615a8e56971a2c483b833f3dd58606b.scope. Feb 12 21:57:12.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.536000 audit: BPF prog-id=185 op=LOAD Feb 12 21:57:12.538000 audit[4466]: AVC avc: denied { bpf } for pid=4466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.538000 audit[4466]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4317 pid=4466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:12.538000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436393230363565363533393335643962356431336235303837666430 Feb 12 21:57:12.539000 audit[4466]: AVC avc: denied { perfmon } for pid=4466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.539000 audit[4466]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4317 pid=4466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:12.539000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436393230363565363533393335643962356431336235303837666430 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { bpf } for pid=4466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { bpf } for pid=4466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { bpf } for pid=4466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { perfmon } for pid=4466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { perfmon } for pid=4466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { perfmon } for pid=4466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { perfmon } for pid=4466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { perfmon } for pid=4466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { bpf } for pid=4466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { bpf } for pid=4466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit: BPF prog-id=186 op=LOAD Feb 12 21:57:12.540000 audit[4466]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00027e6a0 items=0 ppid=4317 pid=4466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:12.540000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436393230363565363533393335643962356431336235303837666430 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { bpf } for pid=4466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { bpf } for pid=4466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { perfmon } for pid=4466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { perfmon } for pid=4466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { perfmon } for pid=4466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { perfmon } for pid=4466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { perfmon } for pid=4466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { bpf } for pid=4466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit[4466]: AVC avc: denied { bpf } for pid=4466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.540000 audit: BPF prog-id=187 op=LOAD Feb 12 21:57:12.540000 audit[4466]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00027e6e8 items=0 ppid=4317 pid=4466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:12.540000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436393230363565363533393335643962356431336235303837666430 Feb 12 21:57:12.543000 audit: BPF prog-id=187 op=UNLOAD Feb 12 21:57:12.543000 audit: BPF prog-id=186 op=UNLOAD Feb 12 21:57:12.544000 audit[4466]: AVC avc: denied { bpf } for pid=4466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.544000 audit[4466]: AVC avc: denied { bpf } for pid=4466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.544000 audit[4466]: AVC avc: denied { bpf } for pid=4466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.544000 audit[4466]: AVC avc: denied { perfmon } for pid=4466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.544000 audit[4466]: AVC avc: denied { perfmon } for pid=4466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.544000 audit[4466]: AVC avc: denied { perfmon } for pid=4466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.544000 audit[4466]: AVC avc: denied { perfmon } for pid=4466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.544000 audit[4466]: AVC avc: denied { perfmon } for pid=4466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.544000 audit[4466]: AVC avc: denied { bpf } for pid=4466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.544000 audit[4466]: AVC avc: denied { bpf } for pid=4466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:12.544000 audit: BPF prog-id=188 op=LOAD Feb 12 21:57:12.544000 audit[4466]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00027eaf8 items=0 ppid=4317 pid=4466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:12.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436393230363565363533393335643962356431336235303837666430 Feb 12 21:57:12.609654 env[1564]: time="2024-02-12T21:57:12.609603998Z" level=info msg="StartContainer for \"4692065e653935d9b5d13b5087fd00e78615a8e56971a2c483b833f3dd58606b\" returns successfully" Feb 12 21:57:13.399130 systemd[1]: run-containerd-runc-k8s.io-4692065e653935d9b5d13b5087fd00e78615a8e56971a2c483b833f3dd58606b-runc.DLU5eZ.mount: Deactivated successfully. Feb 12 21:57:13.636645 kubelet[2584]: I0212 21:57:13.636572 2584 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-f577f79-77dcs" podStartSLOduration=32.465057595 podCreationTimestamp="2024-02-12 21:56:36 +0000 UTC" firstStartedPulling="2024-02-12 21:57:07.119833795 +0000 UTC m=+53.339502776" lastFinishedPulling="2024-02-12 21:57:12.291253314 +0000 UTC m=+58.510922290" observedRunningTime="2024-02-12 21:57:13.367315885 +0000 UTC m=+59.586984869" watchObservedRunningTime="2024-02-12 21:57:13.636477109 +0000 UTC m=+59.856146084" Feb 12 21:57:13.968115 env[1564]: time="2024-02-12T21:57:13.968073551Z" level=info msg="StopPodSandbox for \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\"" Feb 12 21:57:14.160082 env[1564]: 2024-02-12 21:57:14.078 [WARNING][4530] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0", GenerateName:"calico-kube-controllers-f577f79-", Namespace:"calico-system", SelfLink:"", UID:"d6a403b6-f169-4c74-aee6-5cde247279c8", ResourceVersion:"812", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 21, 56, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"f577f79", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-28-103", ContainerID:"79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041", Pod:"calico-kube-controllers-f577f79-77dcs", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.109.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie7ff4d11224", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 21:57:14.160082 env[1564]: 2024-02-12 21:57:14.079 [INFO][4530] k8s.go 578: Cleaning up netns ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Feb 12 21:57:14.160082 env[1564]: 2024-02-12 21:57:14.079 [INFO][4530] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" iface="eth0" netns="" Feb 12 21:57:14.160082 env[1564]: 2024-02-12 21:57:14.079 [INFO][4530] k8s.go 585: Releasing IP address(es) ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Feb 12 21:57:14.160082 env[1564]: 2024-02-12 21:57:14.079 [INFO][4530] utils.go 188: Calico CNI releasing IP address ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Feb 12 21:57:14.160082 env[1564]: 2024-02-12 21:57:14.139 [INFO][4536] ipam_plugin.go 415: Releasing address using handleID ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" HandleID="k8s-pod-network.a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Workload="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" Feb 12 21:57:14.160082 env[1564]: 2024-02-12 21:57:14.139 [INFO][4536] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 21:57:14.160082 env[1564]: 2024-02-12 21:57:14.140 [INFO][4536] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 21:57:14.160082 env[1564]: 2024-02-12 21:57:14.153 [WARNING][4536] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" HandleID="k8s-pod-network.a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Workload="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" Feb 12 21:57:14.160082 env[1564]: 2024-02-12 21:57:14.153 [INFO][4536] ipam_plugin.go 443: Releasing address using workloadID ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" HandleID="k8s-pod-network.a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Workload="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" Feb 12 21:57:14.160082 env[1564]: 2024-02-12 21:57:14.155 [INFO][4536] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 21:57:14.160082 env[1564]: 2024-02-12 21:57:14.157 [INFO][4530] k8s.go 591: Teardown processing complete. ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Feb 12 21:57:14.161067 env[1564]: time="2024-02-12T21:57:14.161025932Z" level=info msg="TearDown network for sandbox \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\" successfully" Feb 12 21:57:14.161154 env[1564]: time="2024-02-12T21:57:14.161135130Z" level=info msg="StopPodSandbox for \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\" returns successfully" Feb 12 21:57:14.164569 env[1564]: time="2024-02-12T21:57:14.164528043Z" level=info msg="RemovePodSandbox for \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\"" Feb 12 21:57:14.164736 env[1564]: time="2024-02-12T21:57:14.164567769Z" level=info msg="Forcibly stopping sandbox \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\"" Feb 12 21:57:14.193986 env[1564]: time="2024-02-12T21:57:14.193940411Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:57:14.198847 env[1564]: time="2024-02-12T21:57:14.198810276Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d36ef67f7b24c4facd86d0bc06b0cd907431a822dee695eb06b86a905bff85d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:57:14.203502 env[1564]: time="2024-02-12T21:57:14.201685323Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:57:14.209264 env[1564]: time="2024-02-12T21:57:14.209213814Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:45a7aba6020a7cf7b866cb8a8d481b30c97e9b3407e1459aaa65a5b4cc06633a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:57:14.209620 env[1564]: time="2024-02-12T21:57:14.209578244Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\" returns image reference \"sha256:d36ef67f7b24c4facd86d0bc06b0cd907431a822dee695eb06b86a905bff85d4\"" Feb 12 21:57:14.222404 env[1564]: time="2024-02-12T21:57:14.222276198Z" level=info msg="CreateContainer within sandbox \"77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Feb 12 21:57:14.268055 env[1564]: time="2024-02-12T21:57:14.268002507Z" level=info msg="CreateContainer within sandbox \"77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"70c704aad29c458628510b3d2b8a6db26eb775ed18f8ae01904f91e342dcf910\"" Feb 12 21:57:14.269892 env[1564]: time="2024-02-12T21:57:14.269735587Z" level=info msg="StartContainer for \"70c704aad29c458628510b3d2b8a6db26eb775ed18f8ae01904f91e342dcf910\"" Feb 12 21:57:14.306085 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2908439245.mount: Deactivated successfully. Feb 12 21:57:14.328895 systemd[1]: Started cri-containerd-70c704aad29c458628510b3d2b8a6db26eb775ed18f8ae01904f91e342dcf910.scope. Feb 12 21:57:14.343741 env[1564]: 2024-02-12 21:57:14.276 [WARNING][4555] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0", GenerateName:"calico-kube-controllers-f577f79-", Namespace:"calico-system", SelfLink:"", UID:"d6a403b6-f169-4c74-aee6-5cde247279c8", ResourceVersion:"812", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 21, 56, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"f577f79", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-28-103", ContainerID:"79a9636646cbb27c900e5a68906d210a8d5d0437eea49d357cfbdcdee52b0041", Pod:"calico-kube-controllers-f577f79-77dcs", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.109.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie7ff4d11224", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 21:57:14.343741 env[1564]: 2024-02-12 21:57:14.276 [INFO][4555] k8s.go 578: Cleaning up netns ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Feb 12 21:57:14.343741 env[1564]: 2024-02-12 21:57:14.276 [INFO][4555] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" iface="eth0" netns="" Feb 12 21:57:14.343741 env[1564]: 2024-02-12 21:57:14.276 [INFO][4555] k8s.go 585: Releasing IP address(es) ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Feb 12 21:57:14.343741 env[1564]: 2024-02-12 21:57:14.276 [INFO][4555] utils.go 188: Calico CNI releasing IP address ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Feb 12 21:57:14.343741 env[1564]: 2024-02-12 21:57:14.315 [INFO][4565] ipam_plugin.go 415: Releasing address using handleID ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" HandleID="k8s-pod-network.a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Workload="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" Feb 12 21:57:14.343741 env[1564]: 2024-02-12 21:57:14.316 [INFO][4565] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 21:57:14.343741 env[1564]: 2024-02-12 21:57:14.316 [INFO][4565] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 21:57:14.343741 env[1564]: 2024-02-12 21:57:14.327 [WARNING][4565] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" HandleID="k8s-pod-network.a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Workload="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" Feb 12 21:57:14.343741 env[1564]: 2024-02-12 21:57:14.327 [INFO][4565] ipam_plugin.go 443: Releasing address using workloadID ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" HandleID="k8s-pod-network.a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Workload="ip--172--31--28--103-k8s-calico--kube--controllers--f577f79--77dcs-eth0" Feb 12 21:57:14.343741 env[1564]: 2024-02-12 21:57:14.334 [INFO][4565] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 21:57:14.343741 env[1564]: 2024-02-12 21:57:14.338 [INFO][4555] k8s.go 591: Teardown processing complete. ContainerID="a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd" Feb 12 21:57:14.344858 env[1564]: time="2024-02-12T21:57:14.344810089Z" level=info msg="TearDown network for sandbox \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\" successfully" Feb 12 21:57:14.367859 env[1564]: time="2024-02-12T21:57:14.367804099Z" level=info msg="RemovePodSandbox \"a13119087a401c9bef325ba8934b7ecc5acc15488dcf64268317e763f21cb8bd\" returns successfully" Feb 12 21:57:14.368845 env[1564]: time="2024-02-12T21:57:14.368809629Z" level=info msg="StopPodSandbox for \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\"" Feb 12 21:57:14.381535 kernel: kauditd_printk_skb: 125 callbacks suppressed Feb 12 21:57:14.381755 kernel: audit: type=1400 audit(1707775034.374:1340): avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.374000 audit[4569]: AVC avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.374000 audit[4569]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f5c880a49f8 items=0 ppid=4219 pid=4569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:14.390754 kernel: audit: type=1300 audit(1707775034.374:1340): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f5c880a49f8 items=0 ppid=4219 pid=4569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:14.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730633730346161643239633435383632383531306233643262386136 Feb 12 21:57:14.399849 kernel: audit: type=1327 audit(1707775034.374:1340): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730633730346161643239633435383632383531306233643262386136 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { bpf } for pid=4569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.405704 kernel: audit: type=1400 audit(1707775034.389:1341): avc: denied { bpf } for pid=4569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { bpf } for pid=4569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { bpf } for pid=4569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.418352 kernel: audit: type=1400 audit(1707775034.389:1341): avc: denied { bpf } for pid=4569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.418497 kernel: audit: type=1400 audit(1707775034.389:1341): avc: denied { bpf } for pid=4569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.427691 kernel: audit: type=1400 audit(1707775034.389:1341): avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.428568 kernel: audit: type=1400 audit(1707775034.389:1341): avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.439373 kernel: audit: type=1400 audit(1707775034.389:1341): avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.446635 kernel: audit: type=1400 audit(1707775034.389:1341): avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { bpf } for pid=4569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { bpf } for pid=4569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit: BPF prog-id=189 op=LOAD Feb 12 21:57:14.389000 audit[4569]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c00022f0e8 items=0 ppid=4219 pid=4569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:14.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730633730346161643239633435383632383531306233643262386136 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { bpf } for pid=4569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { bpf } for pid=4569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { bpf } for pid=4569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { bpf } for pid=4569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit: BPF prog-id=190 op=LOAD Feb 12 21:57:14.389000 audit[4569]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c00022f138 items=0 ppid=4219 pid=4569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:14.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730633730346161643239633435383632383531306233643262386136 Feb 12 21:57:14.389000 audit: BPF prog-id=190 op=UNLOAD Feb 12 21:57:14.389000 audit: BPF prog-id=189 op=UNLOAD Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { bpf } for pid=4569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { bpf } for pid=4569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { bpf } for pid=4569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { perfmon } for pid=4569 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { bpf } for pid=4569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit[4569]: AVC avc: denied { bpf } for pid=4569 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:14.389000 audit: BPF prog-id=191 op=LOAD Feb 12 21:57:14.389000 audit[4569]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c00022f1c8 items=0 ppid=4219 pid=4569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:14.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730633730346161643239633435383632383531306233643262386136 Feb 12 21:57:14.465507 env[1564]: time="2024-02-12T21:57:14.465452982Z" level=info msg="StartContainer for \"70c704aad29c458628510b3d2b8a6db26eb775ed18f8ae01904f91e342dcf910\" returns successfully" Feb 12 21:57:14.585713 env[1564]: 2024-02-12 21:57:14.518 [WARNING][4606] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce", ResourceVersion:"768", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 21, 56, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-28-103", ContainerID:"0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474", Pod:"coredns-5d78c9869d-zkrsn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.109.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali15c62d3f11a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 21:57:14.585713 env[1564]: 2024-02-12 21:57:14.518 [INFO][4606] k8s.go 578: Cleaning up netns ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Feb 12 21:57:14.585713 env[1564]: 2024-02-12 21:57:14.518 [INFO][4606] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" iface="eth0" netns="" Feb 12 21:57:14.585713 env[1564]: 2024-02-12 21:57:14.518 [INFO][4606] k8s.go 585: Releasing IP address(es) ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Feb 12 21:57:14.585713 env[1564]: 2024-02-12 21:57:14.518 [INFO][4606] utils.go 188: Calico CNI releasing IP address ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Feb 12 21:57:14.585713 env[1564]: 2024-02-12 21:57:14.556 [INFO][4627] ipam_plugin.go 415: Releasing address using handleID ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" HandleID="k8s-pod-network.91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" Feb 12 21:57:14.585713 env[1564]: 2024-02-12 21:57:14.556 [INFO][4627] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 21:57:14.585713 env[1564]: 2024-02-12 21:57:14.556 [INFO][4627] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 21:57:14.585713 env[1564]: 2024-02-12 21:57:14.576 [WARNING][4627] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" HandleID="k8s-pod-network.91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" Feb 12 21:57:14.585713 env[1564]: 2024-02-12 21:57:14.576 [INFO][4627] ipam_plugin.go 443: Releasing address using workloadID ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" HandleID="k8s-pod-network.91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" Feb 12 21:57:14.585713 env[1564]: 2024-02-12 21:57:14.579 [INFO][4627] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 21:57:14.585713 env[1564]: 2024-02-12 21:57:14.581 [INFO][4606] k8s.go 591: Teardown processing complete. ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Feb 12 21:57:14.585713 env[1564]: time="2024-02-12T21:57:14.583036618Z" level=info msg="TearDown network for sandbox \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\" successfully" Feb 12 21:57:14.585713 env[1564]: time="2024-02-12T21:57:14.583074875Z" level=info msg="StopPodSandbox for \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\" returns successfully" Feb 12 21:57:14.593555 env[1564]: time="2024-02-12T21:57:14.593518327Z" level=info msg="RemovePodSandbox for \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\"" Feb 12 21:57:14.593683 env[1564]: time="2024-02-12T21:57:14.593562647Z" level=info msg="Forcibly stopping sandbox \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\"" Feb 12 21:57:14.636000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:57:14.636000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002888dc0 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:57:14.636000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:57:14.642000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:57:14.642000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002888ec0 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:57:14.642000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:57:14.647000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:57:14.647000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002888ee0 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:57:14.647000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:57:14.653000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:57:14.653000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002888f20 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:57:14.653000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:57:14.762488 env[1564]: 2024-02-12 21:57:14.691 [WARNING][4647] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"35d4ea78-55eb-4cc6-9bb2-31d3a2adc2ce", ResourceVersion:"768", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 21, 56, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-28-103", ContainerID:"0025b9a1fa3280ea7a36aaa5ea5ed43003b132f85366299e2ae412cb5572f474", Pod:"coredns-5d78c9869d-zkrsn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.109.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali15c62d3f11a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 21:57:14.762488 env[1564]: 2024-02-12 21:57:14.691 [INFO][4647] k8s.go 578: Cleaning up netns ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Feb 12 21:57:14.762488 env[1564]: 2024-02-12 21:57:14.691 [INFO][4647] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" iface="eth0" netns="" Feb 12 21:57:14.762488 env[1564]: 2024-02-12 21:57:14.692 [INFO][4647] k8s.go 585: Releasing IP address(es) ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Feb 12 21:57:14.762488 env[1564]: 2024-02-12 21:57:14.692 [INFO][4647] utils.go 188: Calico CNI releasing IP address ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Feb 12 21:57:14.762488 env[1564]: 2024-02-12 21:57:14.725 [INFO][4654] ipam_plugin.go 415: Releasing address using handleID ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" HandleID="k8s-pod-network.91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" Feb 12 21:57:14.762488 env[1564]: 2024-02-12 21:57:14.725 [INFO][4654] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 21:57:14.762488 env[1564]: 2024-02-12 21:57:14.726 [INFO][4654] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 21:57:14.762488 env[1564]: 2024-02-12 21:57:14.745 [WARNING][4654] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" HandleID="k8s-pod-network.91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" Feb 12 21:57:14.762488 env[1564]: 2024-02-12 21:57:14.745 [INFO][4654] ipam_plugin.go 443: Releasing address using workloadID ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" HandleID="k8s-pod-network.91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--zkrsn-eth0" Feb 12 21:57:14.762488 env[1564]: 2024-02-12 21:57:14.748 [INFO][4654] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 21:57:14.762488 env[1564]: 2024-02-12 21:57:14.752 [INFO][4647] k8s.go 591: Teardown processing complete. ContainerID="91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471" Feb 12 21:57:14.765898 env[1564]: time="2024-02-12T21:57:14.762561481Z" level=info msg="TearDown network for sandbox \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\" successfully" Feb 12 21:57:14.776310 env[1564]: time="2024-02-12T21:57:14.776260759Z" level=info msg="RemovePodSandbox \"91b4436c6eac66ca6a4ac963b8cd5d03f71c372b39851b1bc6b045edf6cbe471\" returns successfully" Feb 12 21:57:14.777189 env[1564]: time="2024-02-12T21:57:14.777156628Z" level=info msg="StopPodSandbox for \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\"" Feb 12 21:57:14.858570 env[1564]: 2024-02-12 21:57:14.816 [WARNING][4672] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"07723a88-a97b-4c77-9292-860429aacedc", ResourceVersion:"725", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 21, 56, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-28-103", ContainerID:"f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536", Pod:"coredns-5d78c9869d-jklb7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.109.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali246bfc47677", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 21:57:14.858570 env[1564]: 2024-02-12 21:57:14.816 [INFO][4672] k8s.go 578: Cleaning up netns ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Feb 12 21:57:14.858570 env[1564]: 2024-02-12 21:57:14.816 [INFO][4672] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" iface="eth0" netns="" Feb 12 21:57:14.858570 env[1564]: 2024-02-12 21:57:14.816 [INFO][4672] k8s.go 585: Releasing IP address(es) ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Feb 12 21:57:14.858570 env[1564]: 2024-02-12 21:57:14.816 [INFO][4672] utils.go 188: Calico CNI releasing IP address ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Feb 12 21:57:14.858570 env[1564]: 2024-02-12 21:57:14.841 [INFO][4678] ipam_plugin.go 415: Releasing address using handleID ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" HandleID="k8s-pod-network.5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" Feb 12 21:57:14.858570 env[1564]: 2024-02-12 21:57:14.841 [INFO][4678] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 21:57:14.858570 env[1564]: 2024-02-12 21:57:14.841 [INFO][4678] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 21:57:14.858570 env[1564]: 2024-02-12 21:57:14.849 [WARNING][4678] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" HandleID="k8s-pod-network.5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" Feb 12 21:57:14.858570 env[1564]: 2024-02-12 21:57:14.849 [INFO][4678] ipam_plugin.go 443: Releasing address using workloadID ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" HandleID="k8s-pod-network.5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" Feb 12 21:57:14.858570 env[1564]: 2024-02-12 21:57:14.854 [INFO][4678] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 21:57:14.858570 env[1564]: 2024-02-12 21:57:14.856 [INFO][4672] k8s.go 591: Teardown processing complete. ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Feb 12 21:57:14.860032 env[1564]: time="2024-02-12T21:57:14.858605547Z" level=info msg="TearDown network for sandbox \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\" successfully" Feb 12 21:57:14.860032 env[1564]: time="2024-02-12T21:57:14.858661963Z" level=info msg="StopPodSandbox for \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\" returns successfully" Feb 12 21:57:14.860032 env[1564]: time="2024-02-12T21:57:14.859448486Z" level=info msg="RemovePodSandbox for \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\"" Feb 12 21:57:14.860032 env[1564]: time="2024-02-12T21:57:14.859488721Z" level=info msg="Forcibly stopping sandbox \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\"" Feb 12 21:57:14.942733 env[1564]: 2024-02-12 21:57:14.904 [WARNING][4697] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"07723a88-a97b-4c77-9292-860429aacedc", ResourceVersion:"725", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 21, 56, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-28-103", ContainerID:"f432a860ef8eadd07ae22ab5c4cbe0c651dc5c6d999f8e1d7f6477bd4e24b536", Pod:"coredns-5d78c9869d-jklb7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.109.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali246bfc47677", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 21:57:14.942733 env[1564]: 2024-02-12 21:57:14.904 [INFO][4697] k8s.go 578: Cleaning up netns ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Feb 12 21:57:14.942733 env[1564]: 2024-02-12 21:57:14.904 [INFO][4697] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" iface="eth0" netns="" Feb 12 21:57:14.942733 env[1564]: 2024-02-12 21:57:14.904 [INFO][4697] k8s.go 585: Releasing IP address(es) ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Feb 12 21:57:14.942733 env[1564]: 2024-02-12 21:57:14.904 [INFO][4697] utils.go 188: Calico CNI releasing IP address ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Feb 12 21:57:14.942733 env[1564]: 2024-02-12 21:57:14.928 [INFO][4703] ipam_plugin.go 415: Releasing address using handleID ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" HandleID="k8s-pod-network.5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" Feb 12 21:57:14.942733 env[1564]: 2024-02-12 21:57:14.928 [INFO][4703] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 21:57:14.942733 env[1564]: 2024-02-12 21:57:14.928 [INFO][4703] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 21:57:14.942733 env[1564]: 2024-02-12 21:57:14.936 [WARNING][4703] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" HandleID="k8s-pod-network.5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" Feb 12 21:57:14.942733 env[1564]: 2024-02-12 21:57:14.936 [INFO][4703] ipam_plugin.go 443: Releasing address using workloadID ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" HandleID="k8s-pod-network.5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Workload="ip--172--31--28--103-k8s-coredns--5d78c9869d--jklb7-eth0" Feb 12 21:57:14.942733 env[1564]: 2024-02-12 21:57:14.939 [INFO][4703] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 21:57:14.942733 env[1564]: 2024-02-12 21:57:14.941 [INFO][4697] k8s.go 591: Teardown processing complete. ContainerID="5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597" Feb 12 21:57:14.943447 env[1564]: time="2024-02-12T21:57:14.942779875Z" level=info msg="TearDown network for sandbox \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\" successfully" Feb 12 21:57:14.948860 env[1564]: time="2024-02-12T21:57:14.948797735Z" level=info msg="RemovePodSandbox \"5043cd86344c46d899e2a3da1e45e228cc8c8c1f2c3807183194b966a8c8c597\" returns successfully" Feb 12 21:57:14.949506 env[1564]: time="2024-02-12T21:57:14.949474695Z" level=info msg="StopPodSandbox for \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\"" Feb 12 21:57:15.041782 env[1564]: 2024-02-12 21:57:14.993 [WARNING][4721] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3", ResourceVersion:"750", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 21, 56, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-28-103", ContainerID:"77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65", Pod:"csi-node-driver-9wk5p", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.109.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"caliaa4069d10b0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 21:57:15.041782 env[1564]: 2024-02-12 21:57:14.997 [INFO][4721] k8s.go 578: Cleaning up netns ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Feb 12 21:57:15.041782 env[1564]: 2024-02-12 21:57:14.998 [INFO][4721] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" iface="eth0" netns="" Feb 12 21:57:15.041782 env[1564]: 2024-02-12 21:57:14.998 [INFO][4721] k8s.go 585: Releasing IP address(es) ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Feb 12 21:57:15.041782 env[1564]: 2024-02-12 21:57:14.999 [INFO][4721] utils.go 188: Calico CNI releasing IP address ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Feb 12 21:57:15.041782 env[1564]: 2024-02-12 21:57:15.024 [INFO][4727] ipam_plugin.go 415: Releasing address using handleID ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" HandleID="k8s-pod-network.7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Workload="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" Feb 12 21:57:15.041782 env[1564]: 2024-02-12 21:57:15.025 [INFO][4727] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 21:57:15.041782 env[1564]: 2024-02-12 21:57:15.028 [INFO][4727] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 21:57:15.041782 env[1564]: 2024-02-12 21:57:15.036 [WARNING][4727] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" HandleID="k8s-pod-network.7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Workload="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" Feb 12 21:57:15.041782 env[1564]: 2024-02-12 21:57:15.036 [INFO][4727] ipam_plugin.go 443: Releasing address using workloadID ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" HandleID="k8s-pod-network.7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Workload="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" Feb 12 21:57:15.041782 env[1564]: 2024-02-12 21:57:15.038 [INFO][4727] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 21:57:15.041782 env[1564]: 2024-02-12 21:57:15.040 [INFO][4721] k8s.go 591: Teardown processing complete. ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Feb 12 21:57:15.042807 env[1564]: time="2024-02-12T21:57:15.042766072Z" level=info msg="TearDown network for sandbox \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\" successfully" Feb 12 21:57:15.042907 env[1564]: time="2024-02-12T21:57:15.042809602Z" level=info msg="StopPodSandbox for \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\" returns successfully" Feb 12 21:57:15.043331 env[1564]: time="2024-02-12T21:57:15.043300277Z" level=info msg="RemovePodSandbox for \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\"" Feb 12 21:57:15.043432 env[1564]: time="2024-02-12T21:57:15.043336678Z" level=info msg="Forcibly stopping sandbox \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\"" Feb 12 21:57:15.130737 env[1564]: 2024-02-12 21:57:15.087 [WARNING][4746] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"9a1ce0a4-7049-49a0-9440-feb3fe9ff6d3", ResourceVersion:"750", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 21, 56, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-28-103", ContainerID:"77cc63757e7d4537f7271f1d468a57112371dcf781426e8f130a18f66bc1fe65", Pod:"csi-node-driver-9wk5p", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.109.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"caliaa4069d10b0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 21:57:15.130737 env[1564]: 2024-02-12 21:57:15.088 [INFO][4746] k8s.go 578: Cleaning up netns ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Feb 12 21:57:15.130737 env[1564]: 2024-02-12 21:57:15.088 [INFO][4746] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" iface="eth0" netns="" Feb 12 21:57:15.130737 env[1564]: 2024-02-12 21:57:15.088 [INFO][4746] k8s.go 585: Releasing IP address(es) ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Feb 12 21:57:15.130737 env[1564]: 2024-02-12 21:57:15.088 [INFO][4746] utils.go 188: Calico CNI releasing IP address ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Feb 12 21:57:15.130737 env[1564]: 2024-02-12 21:57:15.112 [INFO][4752] ipam_plugin.go 415: Releasing address using handleID ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" HandleID="k8s-pod-network.7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Workload="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" Feb 12 21:57:15.130737 env[1564]: 2024-02-12 21:57:15.112 [INFO][4752] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 21:57:15.130737 env[1564]: 2024-02-12 21:57:15.112 [INFO][4752] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 21:57:15.130737 env[1564]: 2024-02-12 21:57:15.120 [WARNING][4752] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" HandleID="k8s-pod-network.7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Workload="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" Feb 12 21:57:15.130737 env[1564]: 2024-02-12 21:57:15.120 [INFO][4752] ipam_plugin.go 443: Releasing address using workloadID ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" HandleID="k8s-pod-network.7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Workload="ip--172--31--28--103-k8s-csi--node--driver--9wk5p-eth0" Feb 12 21:57:15.130737 env[1564]: 2024-02-12 21:57:15.124 [INFO][4752] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 21:57:15.130737 env[1564]: 2024-02-12 21:57:15.126 [INFO][4746] k8s.go 591: Teardown processing complete. ContainerID="7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256" Feb 12 21:57:15.130737 env[1564]: time="2024-02-12T21:57:15.128231836Z" level=info msg="TearDown network for sandbox \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\" successfully" Feb 12 21:57:15.138582 env[1564]: time="2024-02-12T21:57:15.138523045Z" level=info msg="RemovePodSandbox \"7402558b981aa661a9fc230a68dc6d4d5f4a05e1c6ffbfdd18b5ad4a210c7256\" returns successfully" Feb 12 21:57:15.240074 kubelet[2584]: I0212 21:57:15.240019 2584 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Feb 12 21:57:15.242245 kubelet[2584]: I0212 21:57:15.242155 2584 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Feb 12 21:57:16.190796 systemd[1]: Started sshd@10-172.31.28.103:22-139.178.89.65:39340.service. Feb 12 21:57:16.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.28.103:22-139.178.89.65:39340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:16.423000 audit[4759]: USER_ACCT pid=4759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:16.424974 sshd[4759]: Accepted publickey for core from 139.178.89.65 port 39340 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:57:16.425000 audit[4759]: CRED_ACQ pid=4759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:16.425000 audit[4759]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc03551290 a2=3 a3=0 items=0 ppid=1 pid=4759 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:16.425000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:16.432906 sshd[4759]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:57:16.450688 systemd[1]: Started session-11.scope. Feb 12 21:57:16.457308 systemd-logind[1550]: New session 11 of user core. Feb 12 21:57:16.470000 audit[4759]: USER_START pid=4759 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:16.473000 audit[4761]: CRED_ACQ pid=4761 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:16.882398 sshd[4759]: pam_unix(sshd:session): session closed for user core Feb 12 21:57:16.883000 audit[4759]: USER_END pid=4759 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:16.884000 audit[4759]: CRED_DISP pid=4759 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:16.886551 systemd[1]: sshd@10-172.31.28.103:22-139.178.89.65:39340.service: Deactivated successfully. Feb 12 21:57:16.887582 systemd[1]: session-11.scope: Deactivated successfully. Feb 12 21:57:16.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.28.103:22-139.178.89.65:39340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:16.888551 systemd-logind[1550]: Session 11 logged out. Waiting for processes to exit. Feb 12 21:57:16.889858 systemd-logind[1550]: Removed session 11. Feb 12 21:57:16.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.28.103:22-139.178.89.65:39348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:16.920840 systemd[1]: Started sshd@11-172.31.28.103:22-139.178.89.65:39348.service. Feb 12 21:57:17.124000 audit[4772]: USER_ACCT pid=4772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:17.128772 sshd[4772]: Accepted publickey for core from 139.178.89.65 port 39348 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:57:17.129000 audit[4772]: CRED_ACQ pid=4772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:17.129000 audit[4772]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1f77ee90 a2=3 a3=0 items=0 ppid=1 pid=4772 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:17.129000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:17.130411 sshd[4772]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:57:17.145093 systemd-logind[1550]: New session 12 of user core. Feb 12 21:57:17.145605 systemd[1]: Started session-12.scope. Feb 12 21:57:17.153000 audit[4772]: USER_START pid=4772 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:17.155000 audit[4776]: CRED_ACQ pid=4776 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:17.855117 systemd[1]: run-containerd-runc-k8s.io-214c80b710732e4712c76f97575c87ee417d23774d7f4741bf9dad97ec6d3338-runc.pdJe3r.mount: Deactivated successfully. Feb 12 21:57:18.083202 sshd[4772]: pam_unix(sshd:session): session closed for user core Feb 12 21:57:18.090000 audit[4772]: USER_END pid=4772 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:18.090000 audit[4772]: CRED_DISP pid=4772 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:18.109217 systemd[1]: sshd@11-172.31.28.103:22-139.178.89.65:39348.service: Deactivated successfully. Feb 12 21:57:18.109000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.28.103:22-139.178.89.65:39348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:18.111334 systemd[1]: session-12.scope: Deactivated successfully. Feb 12 21:57:18.113458 systemd-logind[1550]: Session 12 logged out. Waiting for processes to exit. Feb 12 21:57:18.116709 systemd[1]: Started sshd@12-172.31.28.103:22-139.178.89.65:36246.service. Feb 12 21:57:18.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.28.103:22-139.178.89.65:36246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:18.129144 systemd-logind[1550]: Removed session 12. Feb 12 21:57:18.224651 kubelet[2584]: I0212 21:57:18.224615 2584 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-9wk5p" podStartSLOduration=34.793924217 podCreationTimestamp="2024-02-12 21:56:36 +0000 UTC" firstStartedPulling="2024-02-12 21:57:06.783970519 +0000 UTC m=+53.003639500" lastFinishedPulling="2024-02-12 21:57:14.214602815 +0000 UTC m=+60.434271797" observedRunningTime="2024-02-12 21:57:15.385566903 +0000 UTC m=+61.605235889" watchObservedRunningTime="2024-02-12 21:57:18.224556514 +0000 UTC m=+64.444225524" Feb 12 21:57:18.312087 sshd[4806]: Accepted publickey for core from 139.178.89.65 port 36246 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:57:18.311000 audit[4806]: USER_ACCT pid=4806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:18.312000 audit[4806]: CRED_ACQ pid=4806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:18.313000 audit[4806]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffedf38c210 a2=3 a3=0 items=0 ppid=1 pid=4806 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:18.313000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:18.316193 sshd[4806]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:57:18.327236 systemd-logind[1550]: New session 13 of user core. Feb 12 21:57:18.328066 systemd[1]: Started session-13.scope. Feb 12 21:57:18.334000 audit[4806]: USER_START pid=4806 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:18.335000 audit[4808]: CRED_ACQ pid=4808 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:18.656138 sshd[4806]: pam_unix(sshd:session): session closed for user core Feb 12 21:57:18.657000 audit[4806]: USER_END pid=4806 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:18.658000 audit[4806]: CRED_DISP pid=4806 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:18.661751 systemd-logind[1550]: Session 13 logged out. Waiting for processes to exit. Feb 12 21:57:18.661947 systemd[1]: sshd@12-172.31.28.103:22-139.178.89.65:36246.service: Deactivated successfully. Feb 12 21:57:18.663369 systemd[1]: session-13.scope: Deactivated successfully. Feb 12 21:57:18.661000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.28.103:22-139.178.89.65:36246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:18.664978 systemd-logind[1550]: Removed session 13. Feb 12 21:57:20.546829 systemd[1]: run-containerd-runc-k8s.io-4692065e653935d9b5d13b5087fd00e78615a8e56971a2c483b833f3dd58606b-runc.EeIPuP.mount: Deactivated successfully. Feb 12 21:57:23.686715 kernel: kauditd_printk_skb: 78 callbacks suppressed Feb 12 21:57:23.686978 kernel: audit: type=1130 audit(1707775043.684:1377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.28.103:22-139.178.89.65:36256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:23.684000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.28.103:22-139.178.89.65:36256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:23.684875 systemd[1]: Started sshd@13-172.31.28.103:22-139.178.89.65:36256.service. Feb 12 21:57:23.861000 audit[4845]: USER_ACCT pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:23.868834 kernel: audit: type=1101 audit(1707775043.861:1378): pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:23.868884 sshd[4845]: Accepted publickey for core from 139.178.89.65 port 36256 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:57:23.868000 audit[4845]: CRED_ACQ pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:23.869923 sshd[4845]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:57:23.880170 kernel: audit: type=1103 audit(1707775043.868:1379): pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:23.880291 kernel: audit: type=1006 audit(1707775043.868:1380): pid=4845 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Feb 12 21:57:23.879501 systemd[1]: Started session-14.scope. Feb 12 21:57:23.868000 audit[4845]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeea0430a0 a2=3 a3=0 items=0 ppid=1 pid=4845 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:23.882095 systemd-logind[1550]: New session 14 of user core. Feb 12 21:57:23.886816 kernel: audit: type=1300 audit(1707775043.868:1380): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeea0430a0 a2=3 a3=0 items=0 ppid=1 pid=4845 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:23.868000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:23.890461 kernel: audit: type=1327 audit(1707775043.868:1380): proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:23.892131 kernel: audit: type=1105 audit(1707775043.890:1381): pid=4845 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:23.890000 audit[4845]: USER_START pid=4845 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:23.893000 audit[4848]: CRED_ACQ pid=4848 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:23.904780 kernel: audit: type=1103 audit(1707775043.893:1382): pid=4848 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:24.104755 sshd[4845]: pam_unix(sshd:session): session closed for user core Feb 12 21:57:24.105000 audit[4845]: USER_END pid=4845 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:24.105000 audit[4845]: CRED_DISP pid=4845 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:24.115373 systemd[1]: sshd@13-172.31.28.103:22-139.178.89.65:36256.service: Deactivated successfully. Feb 12 21:57:24.116376 systemd[1]: session-14.scope: Deactivated successfully. Feb 12 21:57:24.119722 kernel: audit: type=1106 audit(1707775044.105:1383): pid=4845 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:24.119827 kernel: audit: type=1104 audit(1707775044.105:1384): pid=4845 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:24.119088 systemd-logind[1550]: Session 14 logged out. Waiting for processes to exit. Feb 12 21:57:24.114000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.28.103:22-139.178.89.65:36256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:24.120648 systemd-logind[1550]: Removed session 14. Feb 12 21:57:29.132612 systemd[1]: Started sshd@14-172.31.28.103:22-139.178.89.65:51518.service. Feb 12 21:57:29.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.28.103:22-139.178.89.65:51518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:29.135710 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 12 21:57:29.135776 kernel: audit: type=1130 audit(1707775049.132:1386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.28.103:22-139.178.89.65:51518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:29.325000 audit[4862]: USER_ACCT pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:29.327833 sshd[4862]: Accepted publickey for core from 139.178.89.65 port 51518 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:57:29.338777 kernel: audit: type=1101 audit(1707775049.325:1387): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:29.343000 audit[4862]: CRED_ACQ pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:29.345783 sshd[4862]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:57:29.363276 kernel: audit: type=1103 audit(1707775049.343:1388): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:29.363571 kernel: audit: type=1006 audit(1707775049.343:1389): pid=4862 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Feb 12 21:57:29.360830 systemd[1]: Started session-15.scope. Feb 12 21:57:29.363775 kernel: audit: type=1300 audit(1707775049.343:1389): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc617506e0 a2=3 a3=0 items=0 ppid=1 pid=4862 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:29.343000 audit[4862]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc617506e0 a2=3 a3=0 items=0 ppid=1 pid=4862 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:29.365384 systemd-logind[1550]: New session 15 of user core. Feb 12 21:57:29.343000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:29.380729 kernel: audit: type=1327 audit(1707775049.343:1389): proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:29.375000 audit[4862]: USER_START pid=4862 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:29.379000 audit[4864]: CRED_ACQ pid=4864 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:29.396182 kernel: audit: type=1105 audit(1707775049.375:1390): pid=4862 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:29.396295 kernel: audit: type=1103 audit(1707775049.379:1391): pid=4864 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:29.594953 sshd[4862]: pam_unix(sshd:session): session closed for user core Feb 12 21:57:29.595000 audit[4862]: USER_END pid=4862 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:29.598848 systemd-logind[1550]: Session 15 logged out. Waiting for processes to exit. Feb 12 21:57:29.602469 systemd[1]: sshd@14-172.31.28.103:22-139.178.89.65:51518.service: Deactivated successfully. Feb 12 21:57:29.603934 systemd[1]: session-15.scope: Deactivated successfully. Feb 12 21:57:29.606713 kernel: audit: type=1106 audit(1707775049.595:1392): pid=4862 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:29.606900 kernel: audit: type=1104 audit(1707775049.595:1393): pid=4862 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:29.595000 audit[4862]: CRED_DISP pid=4862 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:29.607208 systemd-logind[1550]: Removed session 15. Feb 12 21:57:29.601000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.28.103:22-139.178.89.65:51518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:34.624170 systemd[1]: Started sshd@15-172.31.28.103:22-139.178.89.65:51532.service. Feb 12 21:57:34.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.28.103:22-139.178.89.65:51532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:34.625770 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 12 21:57:34.625838 kernel: audit: type=1130 audit(1707775054.622:1395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.28.103:22-139.178.89.65:51532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:34.803000 audit[4876]: USER_ACCT pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:34.810130 sshd[4876]: Accepted publickey for core from 139.178.89.65 port 51532 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:57:34.811729 kernel: audit: type=1101 audit(1707775054.803:1396): pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:34.812000 audit[4876]: CRED_ACQ pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:34.815770 sshd[4876]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:57:34.828610 kernel: audit: type=1103 audit(1707775054.812:1397): pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:34.828917 kernel: audit: type=1006 audit(1707775054.813:1398): pid=4876 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Feb 12 21:57:34.828970 kernel: audit: type=1300 audit(1707775054.813:1398): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd3d624210 a2=3 a3=0 items=0 ppid=1 pid=4876 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:34.813000 audit[4876]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd3d624210 a2=3 a3=0 items=0 ppid=1 pid=4876 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:34.827543 systemd[1]: Started session-16.scope. Feb 12 21:57:34.831189 systemd-logind[1550]: New session 16 of user core. Feb 12 21:57:34.813000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:34.842250 kernel: audit: type=1327 audit(1707775054.813:1398): proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:34.842000 audit[4876]: USER_START pid=4876 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:34.845000 audit[4878]: CRED_ACQ pid=4878 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:34.858432 kernel: audit: type=1105 audit(1707775054.842:1399): pid=4876 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:34.859077 kernel: audit: type=1103 audit(1707775054.845:1400): pid=4878 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:35.082549 sshd[4876]: pam_unix(sshd:session): session closed for user core Feb 12 21:57:35.083000 audit[4876]: USER_END pid=4876 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:35.088457 systemd[1]: sshd@15-172.31.28.103:22-139.178.89.65:51532.service: Deactivated successfully. Feb 12 21:57:35.089893 systemd[1]: session-16.scope: Deactivated successfully. Feb 12 21:57:35.094754 kernel: audit: type=1106 audit(1707775055.083:1401): pid=4876 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:35.083000 audit[4876]: CRED_DISP pid=4876 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:35.103659 kernel: audit: type=1104 audit(1707775055.083:1402): pid=4876 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:35.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.28.103:22-139.178.89.65:51532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:35.102362 systemd-logind[1550]: Session 16 logged out. Waiting for processes to exit. Feb 12 21:57:35.106167 systemd-logind[1550]: Removed session 16. Feb 12 21:57:40.113011 systemd[1]: Started sshd@16-172.31.28.103:22-139.178.89.65:42612.service. Feb 12 21:57:40.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.28.103:22-139.178.89.65:42612 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:40.115772 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 12 21:57:40.115832 kernel: audit: type=1130 audit(1707775060.111:1404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.28.103:22-139.178.89.65:42612 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:40.304375 sshd[4889]: Accepted publickey for core from 139.178.89.65 port 42612 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:57:40.305881 sshd[4889]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:57:40.302000 audit[4889]: USER_ACCT pid=4889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:40.303000 audit[4889]: CRED_ACQ pid=4889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:40.317753 kernel: audit: type=1101 audit(1707775060.302:1405): pid=4889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:40.317932 kernel: audit: type=1103 audit(1707775060.303:1406): pid=4889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:40.317977 kernel: audit: type=1006 audit(1707775060.303:1407): pid=4889 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Feb 12 21:57:40.317284 systemd[1]: Started session-17.scope. Feb 12 21:57:40.318790 systemd-logind[1550]: New session 17 of user core. Feb 12 21:57:40.303000 audit[4889]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd86bb26d0 a2=3 a3=0 items=0 ppid=1 pid=4889 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:40.329713 kernel: audit: type=1300 audit(1707775060.303:1407): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd86bb26d0 a2=3 a3=0 items=0 ppid=1 pid=4889 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:40.329822 kernel: audit: type=1327 audit(1707775060.303:1407): proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:40.303000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:40.325000 audit[4889]: USER_START pid=4889 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:40.329000 audit[4891]: CRED_ACQ pid=4891 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:40.342683 kernel: audit: type=1105 audit(1707775060.325:1408): pid=4889 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:40.342803 kernel: audit: type=1103 audit(1707775060.329:1409): pid=4891 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:40.595850 sshd[4889]: pam_unix(sshd:session): session closed for user core Feb 12 21:57:40.595000 audit[4889]: USER_END pid=4889 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:40.596000 audit[4889]: CRED_DISP pid=4889 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:40.616757 systemd-logind[1550]: Session 17 logged out. Waiting for processes to exit. Feb 12 21:57:40.620002 kernel: audit: type=1106 audit(1707775060.595:1410): pid=4889 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:40.620101 kernel: audit: type=1104 audit(1707775060.596:1411): pid=4889 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:40.618748 systemd[1]: sshd@16-172.31.28.103:22-139.178.89.65:42612.service: Deactivated successfully. Feb 12 21:57:40.619735 systemd[1]: session-17.scope: Deactivated successfully. Feb 12 21:57:40.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.28.103:22-139.178.89.65:42612 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:40.638961 systemd[1]: Started sshd@17-172.31.28.103:22-139.178.89.65:42622.service. Feb 12 21:57:40.643199 systemd-logind[1550]: Removed session 17. Feb 12 21:57:40.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.28.103:22-139.178.89.65:42622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:40.813000 audit[4901]: USER_ACCT pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:40.815865 sshd[4901]: Accepted publickey for core from 139.178.89.65 port 42622 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:57:40.815000 audit[4901]: CRED_ACQ pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:40.815000 audit[4901]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9f949a40 a2=3 a3=0 items=0 ppid=1 pid=4901 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:40.815000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:40.817793 sshd[4901]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:57:40.824139 systemd[1]: Started session-18.scope. Feb 12 21:57:40.825422 systemd-logind[1550]: New session 18 of user core. Feb 12 21:57:40.829000 audit[4901]: USER_START pid=4901 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:40.831000 audit[4903]: CRED_ACQ pid=4903 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:41.586300 sshd[4901]: pam_unix(sshd:session): session closed for user core Feb 12 21:57:41.587000 audit[4901]: USER_END pid=4901 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:41.587000 audit[4901]: CRED_DISP pid=4901 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:41.589000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.28.103:22-139.178.89.65:42622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:41.590694 systemd[1]: sshd@17-172.31.28.103:22-139.178.89.65:42622.service: Deactivated successfully. Feb 12 21:57:41.593172 systemd-logind[1550]: Session 18 logged out. Waiting for processes to exit. Feb 12 21:57:41.593248 systemd[1]: session-18.scope: Deactivated successfully. Feb 12 21:57:41.594760 systemd-logind[1550]: Removed session 18. Feb 12 21:57:41.629103 systemd[1]: Started sshd@18-172.31.28.103:22-139.178.89.65:42624.service. Feb 12 21:57:41.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.28.103:22-139.178.89.65:42624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:41.816000 audit[4917]: USER_ACCT pid=4917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:41.818589 sshd[4917]: Accepted publickey for core from 139.178.89.65 port 42624 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:57:41.818000 audit[4917]: CRED_ACQ pid=4917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:41.819000 audit[4917]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3ad6e150 a2=3 a3=0 items=0 ppid=1 pid=4917 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:41.819000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:41.821290 sshd[4917]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:57:41.827380 systemd-logind[1550]: New session 19 of user core. Feb 12 21:57:41.828125 systemd[1]: Started session-19.scope. Feb 12 21:57:41.838000 audit[4917]: USER_START pid=4917 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:41.840000 audit[4919]: CRED_ACQ pid=4919 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:43.522000 audit[4930]: NETFILTER_CFG table=filter:113 family=2 entries=8 op=nft_register_rule pid=4930 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:43.522000 audit[4930]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffe80fa3f80 a2=0 a3=7ffe80fa3f6c items=0 ppid=2818 pid=4930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:43.522000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:43.524000 audit[4930]: NETFILTER_CFG table=nat:114 family=2 entries=20 op=nft_register_rule pid=4930 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:43.524000 audit[4930]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffe80fa3f80 a2=0 a3=7ffe80fa3f6c items=0 ppid=2818 pid=4930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:43.524000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:43.540747 sshd[4917]: pam_unix(sshd:session): session closed for user core Feb 12 21:57:43.541000 audit[4917]: USER_END pid=4917 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:43.541000 audit[4917]: CRED_DISP pid=4917 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:43.543000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.28.103:22-139.178.89.65:42624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:43.544686 systemd[1]: sshd@18-172.31.28.103:22-139.178.89.65:42624.service: Deactivated successfully. Feb 12 21:57:43.547211 systemd[1]: session-19.scope: Deactivated successfully. Feb 12 21:57:43.549325 systemd-logind[1550]: Session 19 logged out. Waiting for processes to exit. Feb 12 21:57:43.551607 systemd-logind[1550]: Removed session 19. Feb 12 21:57:43.569541 systemd[1]: Started sshd@19-172.31.28.103:22-139.178.89.65:42636.service. Feb 12 21:57:43.569000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.28.103:22-139.178.89.65:42636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:43.601000 audit[4935]: NETFILTER_CFG table=filter:115 family=2 entries=20 op=nft_register_rule pid=4935 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:43.601000 audit[4935]: SYSCALL arch=c000003e syscall=46 success=yes exit=11292 a0=3 a1=7ffea56312f0 a2=0 a3=7ffea56312dc items=0 ppid=2818 pid=4935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:43.601000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:43.603000 audit[4935]: NETFILTER_CFG table=nat:116 family=2 entries=20 op=nft_register_rule pid=4935 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:43.603000 audit[4935]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffea56312f0 a2=0 a3=31030 items=0 ppid=2818 pid=4935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:43.603000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:43.747000 audit[4934]: USER_ACCT pid=4934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:43.749650 sshd[4934]: Accepted publickey for core from 139.178.89.65 port 42636 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:57:43.749000 audit[4934]: CRED_ACQ pid=4934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:43.749000 audit[4934]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2ba8f260 a2=3 a3=0 items=0 ppid=1 pid=4934 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:43.749000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:43.752503 sshd[4934]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:57:43.764163 systemd-logind[1550]: New session 20 of user core. Feb 12 21:57:43.765622 systemd[1]: Started session-20.scope. Feb 12 21:57:43.776000 audit[4934]: USER_START pid=4934 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:43.788000 audit[4937]: CRED_ACQ pid=4937 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:44.802660 sshd[4934]: pam_unix(sshd:session): session closed for user core Feb 12 21:57:44.802000 audit[4934]: USER_END pid=4934 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:44.802000 audit[4934]: CRED_DISP pid=4934 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:44.809090 systemd-logind[1550]: Session 20 logged out. Waiting for processes to exit. Feb 12 21:57:44.810281 systemd[1]: sshd@19-172.31.28.103:22-139.178.89.65:42636.service: Deactivated successfully. Feb 12 21:57:44.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.28.103:22-139.178.89.65:42636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:44.811368 systemd[1]: session-20.scope: Deactivated successfully. Feb 12 21:57:44.812821 systemd-logind[1550]: Removed session 20. Feb 12 21:57:44.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.28.103:22-139.178.89.65:42638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:44.832212 systemd[1]: Started sshd@20-172.31.28.103:22-139.178.89.65:42638.service. Feb 12 21:57:45.020000 audit[4946]: USER_ACCT pid=4946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:45.022778 sshd[4946]: Accepted publickey for core from 139.178.89.65 port 42638 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:57:45.022000 audit[4946]: CRED_ACQ pid=4946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:45.022000 audit[4946]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd03ba9d0 a2=3 a3=0 items=0 ppid=1 pid=4946 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:45.022000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:45.024797 sshd[4946]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:57:45.031596 systemd[1]: Started session-21.scope. Feb 12 21:57:45.032487 systemd-logind[1550]: New session 21 of user core. Feb 12 21:57:45.037000 audit[4946]: USER_START pid=4946 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:45.040000 audit[4948]: CRED_ACQ pid=4948 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:45.301279 sshd[4946]: pam_unix(sshd:session): session closed for user core Feb 12 21:57:45.300000 audit[4946]: USER_END pid=4946 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:45.314287 kernel: kauditd_printk_skb: 54 callbacks suppressed Feb 12 21:57:45.314522 kernel: audit: type=1106 audit(1707775065.300:1450): pid=4946 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:45.322884 kernel: audit: type=1104 audit(1707775065.303:1451): pid=4946 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:45.303000 audit[4946]: CRED_DISP pid=4946 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:45.316688 systemd-logind[1550]: Session 21 logged out. Waiting for processes to exit. Feb 12 21:57:45.318484 systemd[1]: sshd@20-172.31.28.103:22-139.178.89.65:42638.service: Deactivated successfully. Feb 12 21:57:45.320158 systemd[1]: session-21.scope: Deactivated successfully. Feb 12 21:57:45.323977 systemd-logind[1550]: Removed session 21. Feb 12 21:57:45.313000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.28.103:22-139.178.89.65:42638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:45.332700 kernel: audit: type=1131 audit(1707775065.313:1452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.28.103:22-139.178.89.65:42638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:47.879277 systemd[1]: run-containerd-runc-k8s.io-214c80b710732e4712c76f97575c87ee417d23774d7f4741bf9dad97ec6d3338-runc.x9lQrY.mount: Deactivated successfully. Feb 12 21:57:50.327000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.28.103:22-139.178.89.65:38256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:50.329084 systemd[1]: Started sshd@21-172.31.28.103:22-139.178.89.65:38256.service. Feb 12 21:57:50.335685 kernel: audit: type=1130 audit(1707775070.327:1453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.28.103:22-139.178.89.65:38256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:50.501000 audit[4980]: USER_ACCT pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:50.503168 sshd[4980]: Accepted publickey for core from 139.178.89.65 port 38256 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:57:50.509701 kernel: audit: type=1101 audit(1707775070.501:1454): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:50.510586 sshd[4980]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:57:50.507000 audit[4980]: CRED_ACQ pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:50.518737 kernel: audit: type=1103 audit(1707775070.507:1455): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:50.533881 kernel: audit: type=1006 audit(1707775070.507:1456): pid=4980 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Feb 12 21:57:50.533366 systemd[1]: Started session-22.scope. Feb 12 21:57:50.507000 audit[4980]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd36767f90 a2=3 a3=0 items=0 ppid=1 pid=4980 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:50.536063 systemd-logind[1550]: New session 22 of user core. Feb 12 21:57:50.542238 kernel: audit: type=1300 audit(1707775070.507:1456): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd36767f90 a2=3 a3=0 items=0 ppid=1 pid=4980 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:50.507000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:50.546808 kernel: audit: type=1327 audit(1707775070.507:1456): proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:50.542000 audit[4980]: USER_START pid=4980 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:50.549000 audit[4987]: CRED_ACQ pid=4987 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:50.568990 kernel: audit: type=1105 audit(1707775070.542:1457): pid=4980 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:50.569156 kernel: audit: type=1103 audit(1707775070.549:1458): pid=4987 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:50.573307 systemd[1]: run-containerd-runc-k8s.io-4692065e653935d9b5d13b5087fd00e78615a8e56971a2c483b833f3dd58606b-runc.5Y0cd8.mount: Deactivated successfully. Feb 12 21:57:50.807630 sshd[4980]: pam_unix(sshd:session): session closed for user core Feb 12 21:57:50.807000 audit[4980]: USER_END pid=4980 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:50.811521 systemd-logind[1550]: Session 22 logged out. Waiting for processes to exit. Feb 12 21:57:50.813190 systemd[1]: sshd@21-172.31.28.103:22-139.178.89.65:38256.service: Deactivated successfully. Feb 12 21:57:50.814147 systemd[1]: session-22.scope: Deactivated successfully. Feb 12 21:57:50.815754 kernel: audit: type=1106 audit(1707775070.807:1459): pid=4980 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:50.807000 audit[4980]: CRED_DISP pid=4980 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:50.816227 systemd-logind[1550]: Removed session 22. Feb 12 21:57:50.821694 kernel: audit: type=1104 audit(1707775070.807:1460): pid=4980 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:50.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.28.103:22-139.178.89.65:38256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:51.465503 kubelet[2584]: I0212 21:57:51.465454 2584 topology_manager.go:212] "Topology Admit Handler" Feb 12 21:57:51.484839 systemd[1]: Created slice kubepods-besteffort-pod828855bf_831c_49f5_a7d6_f79855498776.slice. Feb 12 21:57:51.538530 kubelet[2584]: I0212 21:57:51.538482 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/828855bf-831c-49f5-a7d6-f79855498776-calico-apiserver-certs\") pod \"calico-apiserver-78648f7bbb-n569s\" (UID: \"828855bf-831c-49f5-a7d6-f79855498776\") " pod="calico-apiserver/calico-apiserver-78648f7bbb-n569s" Feb 12 21:57:51.538956 kubelet[2584]: I0212 21:57:51.538938 2584 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cdqsj\" (UniqueName: \"kubernetes.io/projected/828855bf-831c-49f5-a7d6-f79855498776-kube-api-access-cdqsj\") pod \"calico-apiserver-78648f7bbb-n569s\" (UID: \"828855bf-831c-49f5-a7d6-f79855498776\") " pod="calico-apiserver/calico-apiserver-78648f7bbb-n569s" Feb 12 21:57:51.551000 audit[5011]: NETFILTER_CFG table=filter:117 family=2 entries=33 op=nft_register_rule pid=5011 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:51.551000 audit[5011]: SYSCALL arch=c000003e syscall=46 success=yes exit=11996 a0=3 a1=7fff25bbcf30 a2=0 a3=7fff25bbcf1c items=0 ppid=2818 pid=5011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:51.551000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:51.553000 audit[5011]: NETFILTER_CFG table=nat:118 family=2 entries=20 op=nft_register_rule pid=5011 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:51.553000 audit[5011]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7fff25bbcf30 a2=0 a3=31030 items=0 ppid=2818 pid=5011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:51.553000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:51.588000 audit[5013]: NETFILTER_CFG table=filter:119 family=2 entries=34 op=nft_register_rule pid=5013 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:51.588000 audit[5013]: SYSCALL arch=c000003e syscall=46 success=yes exit=11996 a0=3 a1=7ffd7bc33e30 a2=0 a3=7ffd7bc33e1c items=0 ppid=2818 pid=5013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:51.588000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:51.591000 audit[5013]: NETFILTER_CFG table=nat:120 family=2 entries=20 op=nft_register_rule pid=5013 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:51.591000 audit[5013]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffd7bc33e30 a2=0 a3=31030 items=0 ppid=2818 pid=5013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:51.591000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:51.641587 kubelet[2584]: E0212 21:57:51.640861 2584 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: secret "calico-apiserver-certs" not found Feb 12 21:57:51.643121 kubelet[2584]: E0212 21:57:51.642958 2584 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/828855bf-831c-49f5-a7d6-f79855498776-calico-apiserver-certs podName:828855bf-831c-49f5-a7d6-f79855498776 nodeName:}" failed. No retries permitted until 2024-02-12 21:57:52.142184974 +0000 UTC m=+98.361853954 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/828855bf-831c-49f5-a7d6-f79855498776-calico-apiserver-certs") pod "calico-apiserver-78648f7bbb-n569s" (UID: "828855bf-831c-49f5-a7d6-f79855498776") : secret "calico-apiserver-certs" not found Feb 12 21:57:52.391038 env[1564]: time="2024-02-12T21:57:52.390993090Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-78648f7bbb-n569s,Uid:828855bf-831c-49f5-a7d6-f79855498776,Namespace:calico-apiserver,Attempt:0,}" Feb 12 21:57:52.606000 audit[5026]: NETFILTER_CFG table=filter:121 family=2 entries=22 op=nft_register_rule pid=5026 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:52.606000 audit[5026]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffff26e7970 a2=0 a3=7ffff26e795c items=0 ppid=2818 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:52.606000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:52.612000 audit[5026]: NETFILTER_CFG table=nat:122 family=2 entries=104 op=nft_register_chain pid=5026 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:52.612000 audit[5026]: SYSCALL arch=c000003e syscall=46 success=yes exit=47436 a0=3 a1=7ffff26e7970 a2=0 a3=7ffff26e795c items=0 ppid=2818 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:52.612000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:52.781394 (udev-worker)[5036]: Network interface NamePolicy= disabled on kernel command line. Feb 12 21:57:52.782820 systemd-networkd[1383]: cali23162aa7bc1: Link UP Feb 12 21:57:52.792913 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 12 21:57:52.793137 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali23162aa7bc1: link becomes ready Feb 12 21:57:52.791203 systemd-networkd[1383]: cali23162aa7bc1: Gained carrier Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.672 [INFO][5016] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--28--103-k8s-calico--apiserver--78648f7bbb--n569s-eth0 calico-apiserver-78648f7bbb- calico-apiserver 828855bf-831c-49f5-a7d6-f79855498776 1050 0 2024-02-12 21:57:51 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:78648f7bbb projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-28-103 calico-apiserver-78648f7bbb-n569s eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali23162aa7bc1 [] []}} ContainerID="43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" Namespace="calico-apiserver" Pod="calico-apiserver-78648f7bbb-n569s" WorkloadEndpoint="ip--172--31--28--103-k8s-calico--apiserver--78648f7bbb--n569s-" Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.672 [INFO][5016] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" Namespace="calico-apiserver" Pod="calico-apiserver-78648f7bbb-n569s" WorkloadEndpoint="ip--172--31--28--103-k8s-calico--apiserver--78648f7bbb--n569s-eth0" Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.726 [INFO][5030] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" HandleID="k8s-pod-network.43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" Workload="ip--172--31--28--103-k8s-calico--apiserver--78648f7bbb--n569s-eth0" Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.739 [INFO][5030] ipam_plugin.go 268: Auto assigning IP ContainerID="43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" HandleID="k8s-pod-network.43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" Workload="ip--172--31--28--103-k8s-calico--apiserver--78648f7bbb--n569s-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c5d60), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-28-103", "pod":"calico-apiserver-78648f7bbb-n569s", "timestamp":"2024-02-12 21:57:52.726814886 +0000 UTC"}, Hostname:"ip-172-31-28-103", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.739 [INFO][5030] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.739 [INFO][5030] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.739 [INFO][5030] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-28-103' Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.741 [INFO][5030] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" host="ip-172-31-28-103" Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.747 [INFO][5030] ipam.go 372: Looking up existing affinities for host host="ip-172-31-28-103" Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.752 [INFO][5030] ipam.go 489: Trying affinity for 192.168.109.0/26 host="ip-172-31-28-103" Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.755 [INFO][5030] ipam.go 155: Attempting to load block cidr=192.168.109.0/26 host="ip-172-31-28-103" Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.758 [INFO][5030] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.109.0/26 host="ip-172-31-28-103" Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.758 [INFO][5030] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.109.0/26 handle="k8s-pod-network.43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" host="ip-172-31-28-103" Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.760 [INFO][5030] ipam.go 1682: Creating new handle: k8s-pod-network.43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0 Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.764 [INFO][5030] ipam.go 1203: Writing block in order to claim IPs block=192.168.109.0/26 handle="k8s-pod-network.43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" host="ip-172-31-28-103" Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.772 [INFO][5030] ipam.go 1216: Successfully claimed IPs: [192.168.109.5/26] block=192.168.109.0/26 handle="k8s-pod-network.43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" host="ip-172-31-28-103" Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.772 [INFO][5030] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.109.5/26] handle="k8s-pod-network.43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" host="ip-172-31-28-103" Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.772 [INFO][5030] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 21:57:52.814477 env[1564]: 2024-02-12 21:57:52.772 [INFO][5030] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.109.5/26] IPv6=[] ContainerID="43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" HandleID="k8s-pod-network.43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" Workload="ip--172--31--28--103-k8s-calico--apiserver--78648f7bbb--n569s-eth0" Feb 12 21:57:52.815965 env[1564]: 2024-02-12 21:57:52.775 [INFO][5016] k8s.go 385: Populated endpoint ContainerID="43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" Namespace="calico-apiserver" Pod="calico-apiserver-78648f7bbb-n569s" WorkloadEndpoint="ip--172--31--28--103-k8s-calico--apiserver--78648f7bbb--n569s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--28--103-k8s-calico--apiserver--78648f7bbb--n569s-eth0", GenerateName:"calico-apiserver-78648f7bbb-", Namespace:"calico-apiserver", SelfLink:"", UID:"828855bf-831c-49f5-a7d6-f79855498776", ResourceVersion:"1050", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 21, 57, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"78648f7bbb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-28-103", ContainerID:"", Pod:"calico-apiserver-78648f7bbb-n569s", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.109.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali23162aa7bc1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 21:57:52.815965 env[1564]: 2024-02-12 21:57:52.775 [INFO][5016] k8s.go 386: Calico CNI using IPs: [192.168.109.5/32] ContainerID="43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" Namespace="calico-apiserver" Pod="calico-apiserver-78648f7bbb-n569s" WorkloadEndpoint="ip--172--31--28--103-k8s-calico--apiserver--78648f7bbb--n569s-eth0" Feb 12 21:57:52.815965 env[1564]: 2024-02-12 21:57:52.775 [INFO][5016] dataplane_linux.go 68: Setting the host side veth name to cali23162aa7bc1 ContainerID="43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" Namespace="calico-apiserver" Pod="calico-apiserver-78648f7bbb-n569s" WorkloadEndpoint="ip--172--31--28--103-k8s-calico--apiserver--78648f7bbb--n569s-eth0" Feb 12 21:57:52.815965 env[1564]: 2024-02-12 21:57:52.790 [INFO][5016] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" Namespace="calico-apiserver" Pod="calico-apiserver-78648f7bbb-n569s" WorkloadEndpoint="ip--172--31--28--103-k8s-calico--apiserver--78648f7bbb--n569s-eth0" Feb 12 21:57:52.815965 env[1564]: 2024-02-12 21:57:52.791 [INFO][5016] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" Namespace="calico-apiserver" Pod="calico-apiserver-78648f7bbb-n569s" WorkloadEndpoint="ip--172--31--28--103-k8s-calico--apiserver--78648f7bbb--n569s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--28--103-k8s-calico--apiserver--78648f7bbb--n569s-eth0", GenerateName:"calico-apiserver-78648f7bbb-", Namespace:"calico-apiserver", SelfLink:"", UID:"828855bf-831c-49f5-a7d6-f79855498776", ResourceVersion:"1050", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 21, 57, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"78648f7bbb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-28-103", ContainerID:"43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0", Pod:"calico-apiserver-78648f7bbb-n569s", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.109.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali23162aa7bc1", MAC:"46:cf:59:90:1d:cb", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 21:57:52.815965 env[1564]: 2024-02-12 21:57:52.809 [INFO][5016] k8s.go 491: Wrote updated endpoint to datastore ContainerID="43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0" Namespace="calico-apiserver" Pod="calico-apiserver-78648f7bbb-n569s" WorkloadEndpoint="ip--172--31--28--103-k8s-calico--apiserver--78648f7bbb--n569s-eth0" Feb 12 21:57:52.859527 env[1564]: time="2024-02-12T21:57:52.859454156Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 21:57:52.859997 env[1564]: time="2024-02-12T21:57:52.859806803Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 21:57:52.860155 env[1564]: time="2024-02-12T21:57:52.860021618Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 21:57:52.860480 env[1564]: time="2024-02-12T21:57:52.860437106Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0 pid=5063 runtime=io.containerd.runc.v2 Feb 12 21:57:52.872000 audit[5074]: NETFILTER_CFG table=filter:123 family=2 entries=65 op=nft_register_chain pid=5074 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 21:57:52.872000 audit[5074]: SYSCALL arch=c000003e syscall=46 success=yes exit=32144 a0=3 a1=7ffe7a14eda0 a2=0 a3=7ffe7a14ed8c items=0 ppid=3703 pid=5074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:52.872000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 21:57:52.905817 systemd[1]: run-containerd-runc-k8s.io-43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0-runc.S9AIdL.mount: Deactivated successfully. Feb 12 21:57:52.916977 systemd[1]: Started cri-containerd-43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0.scope. Feb 12 21:57:52.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.948000 audit: BPF prog-id=192 op=LOAD Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { bpf } for pid=5073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=5063 pid=5073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:52.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433663664396238336236366239373566306262303331373364623666 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { perfmon } for pid=5073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=5063 pid=5073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:52.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433663664396238336236366239373566306262303331373364623666 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { bpf } for pid=5073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { bpf } for pid=5073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { bpf } for pid=5073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { perfmon } for pid=5073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { perfmon } for pid=5073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { perfmon } for pid=5073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { perfmon } for pid=5073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { perfmon } for pid=5073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { bpf } for pid=5073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { bpf } for pid=5073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit: BPF prog-id=193 op=LOAD Feb 12 21:57:52.949000 audit[5073]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001ebe70 items=0 ppid=5063 pid=5073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:52.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433663664396238336236366239373566306262303331373364623666 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { bpf } for pid=5073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { bpf } for pid=5073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { perfmon } for pid=5073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { perfmon } for pid=5073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { perfmon } for pid=5073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { perfmon } for pid=5073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { perfmon } for pid=5073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { bpf } for pid=5073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { bpf } for pid=5073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit: BPF prog-id=194 op=LOAD Feb 12 21:57:52.949000 audit[5073]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001ebeb8 items=0 ppid=5063 pid=5073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:52.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433663664396238336236366239373566306262303331373364623666 Feb 12 21:57:52.949000 audit: BPF prog-id=194 op=UNLOAD Feb 12 21:57:52.949000 audit: BPF prog-id=193 op=UNLOAD Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { bpf } for pid=5073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { bpf } for pid=5073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { bpf } for pid=5073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { perfmon } for pid=5073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { perfmon } for pid=5073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { perfmon } for pid=5073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { perfmon } for pid=5073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { perfmon } for pid=5073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { bpf } for pid=5073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit[5073]: AVC avc: denied { bpf } for pid=5073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:52.949000 audit: BPF prog-id=195 op=LOAD Feb 12 21:57:52.949000 audit[5073]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003e82c8 items=0 ppid=5063 pid=5073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:52.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433663664396238336236366239373566306262303331373364623666 Feb 12 21:57:52.987942 env[1564]: time="2024-02-12T21:57:52.987891832Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-78648f7bbb-n569s,Uid:828855bf-831c-49f5-a7d6-f79855498776,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0\"" Feb 12 21:57:52.989955 env[1564]: time="2024-02-12T21:57:52.989898246Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\"" Feb 12 21:57:53.882933 systemd-networkd[1383]: cali23162aa7bc1: Gained IPv6LL Feb 12 21:57:55.848696 kernel: kauditd_printk_skb: 79 callbacks suppressed Feb 12 21:57:55.848983 kernel: audit: type=1130 audit(1707775075.837:1487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.28.103:22-139.178.89.65:38272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:55.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.28.103:22-139.178.89.65:38272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:55.838787 systemd[1]: Started sshd@22-172.31.28.103:22-139.178.89.65:38272.service. Feb 12 21:57:56.075000 audit[5099]: USER_ACCT pid=5099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:56.083206 sshd[5099]: Accepted publickey for core from 139.178.89.65 port 38272 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:57:56.084179 kernel: audit: type=1101 audit(1707775076.075:1488): pid=5099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:56.081000 audit[5099]: CRED_ACQ pid=5099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:56.084482 sshd[5099]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:57:56.091744 kernel: audit: type=1103 audit(1707775076.081:1489): pid=5099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:56.097841 kernel: audit: type=1006 audit(1707775076.081:1490): pid=5099 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Feb 12 21:57:56.109857 kernel: audit: type=1300 audit(1707775076.081:1490): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4f278590 a2=3 a3=0 items=0 ppid=1 pid=5099 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:56.081000 audit[5099]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4f278590 a2=3 a3=0 items=0 ppid=1 pid=5099 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:56.101786 systemd[1]: Started session-23.scope. Feb 12 21:57:56.106411 systemd-logind[1550]: New session 23 of user core. Feb 12 21:57:56.081000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:56.124000 audit[5099]: USER_START pid=5099 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:56.141662 kernel: audit: type=1327 audit(1707775076.081:1490): proctitle=737368643A20636F7265205B707269765D Feb 12 21:57:56.141819 kernel: audit: type=1105 audit(1707775076.124:1491): pid=5099 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:56.126000 audit[5101]: CRED_ACQ pid=5101 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:56.150729 kernel: audit: type=1103 audit(1707775076.126:1492): pid=5101 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:56.552541 sshd[5099]: pam_unix(sshd:session): session closed for user core Feb 12 21:57:56.561905 kernel: audit: type=1106 audit(1707775076.552:1493): pid=5099 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:56.552000 audit[5099]: USER_END pid=5099 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:56.571985 kernel: audit: type=1104 audit(1707775076.562:1494): pid=5099 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:56.562000 audit[5099]: CRED_DISP pid=5099 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:57:56.574995 systemd-logind[1550]: Session 23 logged out. Waiting for processes to exit. Feb 12 21:57:56.578082 systemd[1]: sshd@22-172.31.28.103:22-139.178.89.65:38272.service: Deactivated successfully. Feb 12 21:57:56.579158 systemd[1]: session-23.scope: Deactivated successfully. Feb 12 21:57:56.581396 systemd-logind[1550]: Removed session 23. Feb 12 21:57:56.576000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.28.103:22-139.178.89.65:38272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:57:56.692000 audit[5111]: NETFILTER_CFG table=filter:124 family=2 entries=10 op=nft_register_rule pid=5111 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:56.692000 audit[5111]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffc23f65b20 a2=0 a3=7ffc23f65b0c items=0 ppid=2818 pid=5111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:56.692000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:56.695000 audit[5111]: NETFILTER_CFG table=nat:125 family=2 entries=44 op=nft_register_rule pid=5111 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:56.695000 audit[5111]: SYSCALL arch=c000003e syscall=46 success=yes exit=14220 a0=3 a1=7ffc23f65b20 a2=0 a3=7ffc23f65b0c items=0 ppid=2818 pid=5111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:56.695000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:57.551551 env[1564]: time="2024-02-12T21:57:57.551497837Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:57:57.555556 env[1564]: time="2024-02-12T21:57:57.555499144Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:848c5b919e8d33dbad8c8c64aa6aec07c29cfe6e4f6312ceafc1641ea929f91a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:57:57.558524 env[1564]: time="2024-02-12T21:57:57.558465266Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:57:57.561485 env[1564]: time="2024-02-12T21:57:57.561433243Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:5ff0bdc8d0b2e9d7819703b18867f60f9153ed01da81e2bbfa22002abec9dc26,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 21:57:57.562958 env[1564]: time="2024-02-12T21:57:57.562315922Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\" returns image reference \"sha256:848c5b919e8d33dbad8c8c64aa6aec07c29cfe6e4f6312ceafc1641ea929f91a\"" Feb 12 21:57:57.567802 env[1564]: time="2024-02-12T21:57:57.567762952Z" level=info msg="CreateContainer within sandbox \"43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Feb 12 21:57:57.591754 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2200375047.mount: Deactivated successfully. Feb 12 21:57:57.604692 env[1564]: time="2024-02-12T21:57:57.604625873Z" level=info msg="CreateContainer within sandbox \"43f6d9b83b66b975f0bb03173db6ff2207e563d995fbf26e582d409c0e226ec0\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"c1fdffc2776424218651059f61b26a5158652030830928426a2897a1de49c508\"" Feb 12 21:57:57.605964 env[1564]: time="2024-02-12T21:57:57.605932418Z" level=info msg="StartContainer for \"c1fdffc2776424218651059f61b26a5158652030830928426a2897a1de49c508\"" Feb 12 21:57:57.645622 systemd[1]: Started cri-containerd-c1fdffc2776424218651059f61b26a5158652030830928426a2897a1de49c508.scope. Feb 12 21:57:57.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.689000 audit: BPF prog-id=196 op=LOAD Feb 12 21:57:57.690000 audit[5120]: AVC avc: denied { bpf } for pid=5120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.690000 audit[5120]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=5063 pid=5120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:57.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331666466666332373736343234323138363531303539663631623236 Feb 12 21:57:57.690000 audit[5120]: AVC avc: denied { perfmon } for pid=5120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.690000 audit[5120]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=5063 pid=5120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:57.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331666466666332373736343234323138363531303539663631623236 Feb 12 21:57:57.691000 audit[5120]: AVC avc: denied { bpf } for pid=5120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.691000 audit[5120]: AVC avc: denied { bpf } for pid=5120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.691000 audit[5120]: AVC avc: denied { bpf } for pid=5120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.691000 audit[5120]: AVC avc: denied { perfmon } for pid=5120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.691000 audit[5120]: AVC avc: denied { perfmon } for pid=5120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.691000 audit[5120]: AVC avc: denied { perfmon } for pid=5120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.691000 audit[5120]: AVC avc: denied { perfmon } for pid=5120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.691000 audit[5120]: AVC avc: denied { perfmon } for pid=5120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.691000 audit[5120]: AVC avc: denied { bpf } for pid=5120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.691000 audit[5120]: AVC avc: denied { bpf } for pid=5120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.691000 audit: BPF prog-id=197 op=LOAD Feb 12 21:57:57.691000 audit[5120]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000a1450 items=0 ppid=5063 pid=5120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:57.691000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331666466666332373736343234323138363531303539663631623236 Feb 12 21:57:57.692000 audit[5120]: AVC avc: denied { bpf } for pid=5120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.692000 audit[5120]: AVC avc: denied { bpf } for pid=5120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.692000 audit[5120]: AVC avc: denied { perfmon } for pid=5120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.692000 audit[5120]: AVC avc: denied { perfmon } for pid=5120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.692000 audit[5120]: AVC avc: denied { perfmon } for pid=5120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.692000 audit[5120]: AVC avc: denied { perfmon } for pid=5120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.692000 audit[5120]: AVC avc: denied { perfmon } for pid=5120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.692000 audit[5120]: AVC avc: denied { bpf } for pid=5120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.692000 audit[5120]: AVC avc: denied { bpf } for pid=5120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.692000 audit: BPF prog-id=198 op=LOAD Feb 12 21:57:57.692000 audit[5120]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000a1498 items=0 ppid=5063 pid=5120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:57.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331666466666332373736343234323138363531303539663631623236 Feb 12 21:57:57.693000 audit: BPF prog-id=198 op=UNLOAD Feb 12 21:57:57.694000 audit: BPF prog-id=197 op=UNLOAD Feb 12 21:57:57.694000 audit[5120]: AVC avc: denied { bpf } for pid=5120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.694000 audit[5120]: AVC avc: denied { bpf } for pid=5120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.694000 audit[5120]: AVC avc: denied { bpf } for pid=5120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.694000 audit[5120]: AVC avc: denied { perfmon } for pid=5120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.694000 audit[5120]: AVC avc: denied { perfmon } for pid=5120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.694000 audit[5120]: AVC avc: denied { perfmon } for pid=5120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.694000 audit[5120]: AVC avc: denied { perfmon } for pid=5120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.694000 audit[5120]: AVC avc: denied { perfmon } for pid=5120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.694000 audit[5120]: AVC avc: denied { bpf } for pid=5120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.694000 audit[5120]: AVC avc: denied { bpf } for pid=5120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:57:57.694000 audit: BPF prog-id=199 op=LOAD Feb 12 21:57:57.694000 audit[5120]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000a18a8 items=0 ppid=5063 pid=5120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:57.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331666466666332373736343234323138363531303539663631623236 Feb 12 21:57:57.759924 env[1564]: time="2024-02-12T21:57:57.759876074Z" level=info msg="StartContainer for \"c1fdffc2776424218651059f61b26a5158652030830928426a2897a1de49c508\" returns successfully" Feb 12 21:57:58.485000 audit[5131]: AVC avc: denied { watch } for pid=5131 comm="apiserver" path="/calico-apiserver-certs/..2024_02_12_21_57_52.653622846/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c382,c605 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c382,c605 tclass=file permissive=0 Feb 12 21:57:58.485000 audit[5131]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a64420 a2=fc6 a3=0 items=0 ppid=5063 pid=5131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c382,c605 key=(null) Feb 12 21:57:58.485000 audit: PROCTITLE proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C Feb 12 21:57:58.549000 audit[5156]: NETFILTER_CFG table=filter:126 family=2 entries=10 op=nft_register_rule pid=5156 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:58.549000 audit[5156]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffc689a5780 a2=0 a3=7ffc689a576c items=0 ppid=2818 pid=5156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:58.549000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:57:58.551000 audit[5156]: NETFILTER_CFG table=nat:127 family=2 entries=44 op=nft_register_rule pid=5156 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:57:58.551000 audit[5156]: SYSCALL arch=c000003e syscall=46 success=yes exit=14220 a0=3 a1=7ffc689a5780 a2=0 a3=7ffc689a576c items=0 ppid=2818 pid=5156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:57:58.551000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:58:01.582000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.28.103:22-139.178.89.65:54390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:58:01.588201 kernel: kauditd_printk_skb: 73 callbacks suppressed Feb 12 21:58:01.588300 kernel: audit: type=1130 audit(1707775081.582:1519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.28.103:22-139.178.89.65:54390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:58:01.584414 systemd[1]: Started sshd@23-172.31.28.103:22-139.178.89.65:54390.service. Feb 12 21:58:01.837408 kernel: audit: type=1101 audit(1707775081.824:1520): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:01.847113 kernel: audit: type=1103 audit(1707775081.835:1521): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:01.847197 kernel: audit: type=1006 audit(1707775081.835:1522): pid=5160 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Feb 12 21:58:01.824000 audit[5160]: USER_ACCT pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:01.835000 audit[5160]: CRED_ACQ pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:01.847479 sshd[5160]: Accepted publickey for core from 139.178.89.65 port 54390 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:58:01.851457 sshd[5160]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:58:01.835000 audit[5160]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd47530bb0 a2=3 a3=0 items=0 ppid=1 pid=5160 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:01.852780 kernel: audit: type=1300 audit(1707775081.835:1522): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd47530bb0 a2=3 a3=0 items=0 ppid=1 pid=5160 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:01.835000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:58:01.866772 kernel: audit: type=1327 audit(1707775081.835:1522): proctitle=737368643A20636F7265205B707269765D Feb 12 21:58:01.890905 systemd-logind[1550]: New session 24 of user core. Feb 12 21:58:01.892872 systemd[1]: Started session-24.scope. Feb 12 21:58:01.914000 audit[5160]: USER_START pid=5160 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:01.948016 kernel: audit: type=1105 audit(1707775081.914:1523): pid=5160 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:01.948140 kernel: audit: type=1103 audit(1707775081.940:1524): pid=5162 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:01.940000 audit[5162]: CRED_ACQ pid=5162 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:02.353403 sshd[5160]: pam_unix(sshd:session): session closed for user core Feb 12 21:58:02.360000 audit[5160]: USER_END pid=5160 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:02.369005 systemd-logind[1550]: Session 24 logged out. Waiting for processes to exit. Feb 12 21:58:02.360000 audit[5160]: CRED_DISP pid=5160 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:02.373051 systemd[1]: sshd@23-172.31.28.103:22-139.178.89.65:54390.service: Deactivated successfully. Feb 12 21:58:02.374400 systemd[1]: session-24.scope: Deactivated successfully. Feb 12 21:58:02.377955 kernel: audit: type=1106 audit(1707775082.360:1525): pid=5160 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:02.378214 kernel: audit: type=1104 audit(1707775082.360:1526): pid=5160 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:02.370000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.28.103:22-139.178.89.65:54390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:58:02.378818 systemd-logind[1550]: Removed session 24. Feb 12 21:58:07.377686 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 12 21:58:07.377857 kernel: audit: type=1130 audit(1707775087.374:1528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.28.103:22-139.178.89.65:54398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:58:07.374000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.28.103:22-139.178.89.65:54398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:58:07.375850 systemd[1]: Started sshd@24-172.31.28.103:22-139.178.89.65:54398.service. Feb 12 21:58:07.560817 sshd[5174]: Accepted publickey for core from 139.178.89.65 port 54398 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:58:07.562594 sshd[5174]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:58:07.559000 audit[5174]: USER_ACCT pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:07.560000 audit[5174]: CRED_ACQ pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:07.585505 kernel: audit: type=1101 audit(1707775087.559:1529): pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:07.585619 kernel: audit: type=1103 audit(1707775087.560:1530): pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:07.585651 kernel: audit: type=1006 audit(1707775087.560:1531): pid=5174 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Feb 12 21:58:07.585056 systemd[1]: Started session-25.scope. Feb 12 21:58:07.588391 systemd-logind[1550]: New session 25 of user core. Feb 12 21:58:07.560000 audit[5174]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeedde53f0 a2=3 a3=0 items=0 ppid=1 pid=5174 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:07.560000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:58:07.604439 kernel: audit: type=1300 audit(1707775087.560:1531): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeedde53f0 a2=3 a3=0 items=0 ppid=1 pid=5174 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:07.607322 kernel: audit: type=1327 audit(1707775087.560:1531): proctitle=737368643A20636F7265205B707269765D Feb 12 21:58:07.611000 audit[5174]: USER_START pid=5174 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:07.619000 audit[5176]: CRED_ACQ pid=5176 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:07.630703 kernel: audit: type=1105 audit(1707775087.611:1532): pid=5174 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:07.630867 kernel: audit: type=1103 audit(1707775087.619:1533): pid=5176 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:07.865848 sshd[5174]: pam_unix(sshd:session): session closed for user core Feb 12 21:58:07.866000 audit[5174]: USER_END pid=5174 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:07.870251 systemd[1]: sshd@24-172.31.28.103:22-139.178.89.65:54398.service: Deactivated successfully. Feb 12 21:58:07.876702 kernel: audit: type=1106 audit(1707775087.866:1534): pid=5174 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:07.872865 systemd[1]: session-25.scope: Deactivated successfully. Feb 12 21:58:07.878061 systemd-logind[1550]: Session 25 logged out. Waiting for processes to exit. Feb 12 21:58:07.866000 audit[5174]: CRED_DISP pid=5174 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:07.883701 kernel: audit: type=1104 audit(1707775087.866:1535): pid=5174 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:07.868000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.28.103:22-139.178.89.65:54398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:58:07.883995 systemd-logind[1550]: Removed session 25. Feb 12 21:58:08.791000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:58:08.791000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001d6a6c0 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:58:08.791000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:58:08.792000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:58:08.792000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002888560 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:58:08.792000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:58:10.233000 audit[2475]: AVC avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:58:10.233000 audit[2475]: AVC avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:58:10.233000 audit[2475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c009ed7980 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:58:10.233000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:58:10.233000 audit[2475]: AVC avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:58:10.233000 audit[2475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c0096d2ed0 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:58:10.233000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:58:10.235000 audit[2475]: AVC avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:58:10.235000 audit[2475]: AVC avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:58:10.235000 audit[2475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c008a49f50 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:58:10.235000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:58:10.235000 audit[2475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c0099f8f00 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:58:10.235000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:58:10.233000 audit[2475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c008a49ef0 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:58:10.233000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:58:10.239000 audit[2475]: AVC avc: denied { watch } for pid=2475 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:58:10.239000 audit[2475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c0096d35f0 a2=fc6 a3=0 items=0 ppid=2341 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c465 key=(null) Feb 12 21:58:10.239000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 12 21:58:12.894960 systemd[1]: Started sshd@25-172.31.28.103:22-139.178.89.65:56636.service. Feb 12 21:58:12.894000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.28.103:22-139.178.89.65:56636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:58:12.897618 kernel: kauditd_printk_skb: 25 callbacks suppressed Feb 12 21:58:12.897731 kernel: audit: type=1130 audit(1707775092.894:1545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.28.103:22-139.178.89.65:56636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:58:13.081000 audit[5189]: USER_ACCT pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:13.090137 sshd[5189]: Accepted publickey for core from 139.178.89.65 port 56636 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:58:13.090164 sshd[5189]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:58:13.090911 kernel: audit: type=1101 audit(1707775093.081:1546): pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:13.081000 audit[5189]: CRED_ACQ pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:13.097391 systemd[1]: Started session-26.scope. Feb 12 21:58:13.097940 kernel: audit: type=1103 audit(1707775093.081:1547): pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:13.100482 systemd-logind[1550]: New session 26 of user core. Feb 12 21:58:13.102861 kernel: audit: type=1006 audit(1707775093.081:1548): pid=5189 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Feb 12 21:58:13.081000 audit[5189]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea1650350 a2=3 a3=0 items=0 ppid=1 pid=5189 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:13.109722 kernel: audit: type=1300 audit(1707775093.081:1548): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea1650350 a2=3 a3=0 items=0 ppid=1 pid=5189 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:13.113096 kernel: audit: type=1327 audit(1707775093.081:1548): proctitle=737368643A20636F7265205B707269765D Feb 12 21:58:13.081000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:58:13.112000 audit[5189]: USER_START pid=5189 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:13.115000 audit[5191]: CRED_ACQ pid=5191 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:13.130566 kernel: audit: type=1105 audit(1707775093.112:1549): pid=5189 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:13.131286 kernel: audit: type=1103 audit(1707775093.115:1550): pid=5191 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:13.419288 sshd[5189]: pam_unix(sshd:session): session closed for user core Feb 12 21:58:13.425000 audit[5189]: USER_END pid=5189 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:13.430308 systemd[1]: sshd@25-172.31.28.103:22-139.178.89.65:56636.service: Deactivated successfully. Feb 12 21:58:13.433180 systemd[1]: session-26.scope: Deactivated successfully. Feb 12 21:58:13.436792 systemd-logind[1550]: Session 26 logged out. Waiting for processes to exit. Feb 12 21:58:13.426000 audit[5189]: CRED_DISP pid=5189 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:13.438616 systemd-logind[1550]: Removed session 26. Feb 12 21:58:13.446188 kernel: audit: type=1106 audit(1707775093.425:1551): pid=5189 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:13.446327 kernel: audit: type=1104 audit(1707775093.426:1552): pid=5189 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:13.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.28.103:22-139.178.89.65:56636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:58:14.638000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:58:14.638000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002889f00 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:58:14.638000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:58:14.643000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:58:14.643000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023e85c0 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:58:14.643000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:58:14.648000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:58:14.648000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023e85e0 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:58:14.648000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:58:14.653000 audit[2400]: AVC avc: denied { watch } for pid=2400 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:58:14.653000 audit[2400]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0026a4120 a2=fc6 a3=0 items=0 ppid=2274 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:58:14.653000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:58:17.843860 systemd[1]: run-containerd-runc-k8s.io-214c80b710732e4712c76f97575c87ee417d23774d7f4741bf9dad97ec6d3338-runc.zimFa2.mount: Deactivated successfully. Feb 12 21:58:18.445038 systemd[1]: Started sshd@26-172.31.28.103:22-139.178.89.65:43332.service. Feb 12 21:58:18.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.28.103:22-139.178.89.65:43332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:58:18.448217 kernel: kauditd_printk_skb: 13 callbacks suppressed Feb 12 21:58:18.448356 kernel: audit: type=1130 audit(1707775098.443:1558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.28.103:22-139.178.89.65:43332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:58:18.641000 audit[5227]: USER_ACCT pid=5227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:18.644906 sshd[5227]: Accepted publickey for core from 139.178.89.65 port 43332 ssh2: RSA SHA256:BLc8w5wGiofCozMWb4UlfDNGWSz58WJcVew2e99GstU Feb 12 21:58:18.649696 kernel: audit: type=1101 audit(1707775098.641:1559): pid=5227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:18.648000 audit[5227]: CRED_ACQ pid=5227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:18.655754 kernel: audit: type=1103 audit(1707775098.648:1560): pid=5227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:18.657763 sshd[5227]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 21:58:18.654000 audit[5227]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb34f6900 a2=3 a3=0 items=0 ppid=1 pid=5227 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:18.666594 kernel: audit: type=1006 audit(1707775098.654:1561): pid=5227 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Feb 12 21:58:18.667008 kernel: audit: type=1300 audit(1707775098.654:1561): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb34f6900 a2=3 a3=0 items=0 ppid=1 pid=5227 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:18.667065 kernel: audit: type=1327 audit(1707775098.654:1561): proctitle=737368643A20636F7265205B707269765D Feb 12 21:58:18.654000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 21:58:18.673538 systemd[1]: Started session-27.scope. Feb 12 21:58:18.674773 systemd-logind[1550]: New session 27 of user core. Feb 12 21:58:18.681000 audit[5227]: USER_START pid=5227 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:18.691716 kernel: audit: type=1105 audit(1707775098.681:1562): pid=5227 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:18.696121 kernel: audit: type=1103 audit(1707775098.690:1563): pid=5229 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:18.690000 audit[5229]: CRED_ACQ pid=5229 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:19.029212 sshd[5227]: pam_unix(sshd:session): session closed for user core Feb 12 21:58:19.029000 audit[5227]: USER_END pid=5227 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:19.033303 systemd-logind[1550]: Session 27 logged out. Waiting for processes to exit. Feb 12 21:58:19.035058 systemd[1]: sshd@26-172.31.28.103:22-139.178.89.65:43332.service: Deactivated successfully. Feb 12 21:58:19.036052 systemd[1]: session-27.scope: Deactivated successfully. Feb 12 21:58:19.037727 kernel: audit: type=1106 audit(1707775099.029:1564): pid=5227 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:19.029000 audit[5227]: CRED_DISP pid=5227 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:19.038602 systemd-logind[1550]: Removed session 27. Feb 12 21:58:19.033000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.28.103:22-139.178.89.65:43332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 21:58:19.044704 kernel: audit: type=1104 audit(1707775099.029:1565): pid=5227 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Feb 12 21:58:22.464440 kubelet[2584]: I0212 21:58:22.464403 2584 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-78648f7bbb-n569s" podStartSLOduration=26.889772122 podCreationTimestamp="2024-02-12 21:57:51 +0000 UTC" firstStartedPulling="2024-02-12 21:57:52.989563411 +0000 UTC m=+99.209232373" lastFinishedPulling="2024-02-12 21:57:57.563519923 +0000 UTC m=+103.783188895" observedRunningTime="2024-02-12 21:57:58.514123444 +0000 UTC m=+104.733792453" watchObservedRunningTime="2024-02-12 21:58:22.463728644 +0000 UTC m=+128.683397631" Feb 12 21:58:22.500000 audit[5305]: NETFILTER_CFG table=filter:128 family=2 entries=9 op=nft_register_rule pid=5305 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:58:22.500000 audit[5305]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffcf3434080 a2=0 a3=7ffcf343406c items=0 ppid=2818 pid=5305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:22.500000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:58:22.503000 audit[5305]: NETFILTER_CFG table=nat:129 family=2 entries=51 op=nft_register_chain pid=5305 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 21:58:22.503000 audit[5305]: SYSCALL arch=c000003e syscall=46 success=yes exit=17716 a0=3 a1=7ffcf3434080 a2=0 a3=7ffcf343406c items=0 ppid=2818 pid=5305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:22.503000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 21:58:44.158901 systemd[1]: cri-containerd-6a28a32cf02f32e4955382e93d27778fcef0d4ec739bba368672433ef0d55ecc.scope: Deactivated successfully. Feb 12 21:58:44.159484 systemd[1]: cri-containerd-6a28a32cf02f32e4955382e93d27778fcef0d4ec739bba368672433ef0d55ecc.scope: Consumed 6.436s CPU time. Feb 12 21:58:44.157000 audit: BPF prog-id=129 op=UNLOAD Feb 12 21:58:44.162604 kernel: kauditd_printk_skb: 7 callbacks suppressed Feb 12 21:58:44.162762 kernel: audit: type=1334 audit(1707775124.157:1569): prog-id=129 op=UNLOAD Feb 12 21:58:44.161000 audit: BPF prog-id=132 op=UNLOAD Feb 12 21:58:44.166284 kernel: audit: type=1334 audit(1707775124.161:1570): prog-id=132 op=UNLOAD Feb 12 21:58:44.210602 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6a28a32cf02f32e4955382e93d27778fcef0d4ec739bba368672433ef0d55ecc-rootfs.mount: Deactivated successfully. Feb 12 21:58:44.214433 env[1564]: time="2024-02-12T21:58:44.214381929Z" level=info msg="shim disconnected" id=6a28a32cf02f32e4955382e93d27778fcef0d4ec739bba368672433ef0d55ecc Feb 12 21:58:44.214433 env[1564]: time="2024-02-12T21:58:44.214433461Z" level=warning msg="cleaning up after shim disconnected" id=6a28a32cf02f32e4955382e93d27778fcef0d4ec739bba368672433ef0d55ecc namespace=k8s.io Feb 12 21:58:44.215399 env[1564]: time="2024-02-12T21:58:44.214448183Z" level=info msg="cleaning up dead shim" Feb 12 21:58:44.232170 env[1564]: time="2024-02-12T21:58:44.232122223Z" level=warning msg="cleanup warnings time=\"2024-02-12T21:58:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5334 runtime=io.containerd.runc.v2\n" Feb 12 21:58:44.638987 kubelet[2584]: I0212 21:58:44.638962 2584 scope.go:115] "RemoveContainer" containerID="6a28a32cf02f32e4955382e93d27778fcef0d4ec739bba368672433ef0d55ecc" Feb 12 21:58:44.644294 env[1564]: time="2024-02-12T21:58:44.644246825Z" level=info msg="CreateContainer within sandbox \"800e0c5c69750c650d37b3eb5037c9b1e1f8b56b0b595d7df6db794ab452b819\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Feb 12 21:58:44.671491 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2425201698.mount: Deactivated successfully. Feb 12 21:58:44.679283 env[1564]: time="2024-02-12T21:58:44.679233451Z" level=info msg="CreateContainer within sandbox \"800e0c5c69750c650d37b3eb5037c9b1e1f8b56b0b595d7df6db794ab452b819\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"c0e415275fbb60dde52fab14d5b955d721adfc88dac2d8cfa9eb89182db51057\"" Feb 12 21:58:44.680223 env[1564]: time="2024-02-12T21:58:44.680176542Z" level=info msg="StartContainer for \"c0e415275fbb60dde52fab14d5b955d721adfc88dac2d8cfa9eb89182db51057\"" Feb 12 21:58:44.710291 systemd[1]: Started cri-containerd-c0e415275fbb60dde52fab14d5b955d721adfc88dac2d8cfa9eb89182db51057.scope. Feb 12 21:58:44.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.733845 kernel: audit: type=1400 audit(1707775124.726:1571): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.743733 kernel: audit: type=1400 audit(1707775124.726:1572): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.743859 kernel: audit: type=1400 audit(1707775124.726:1573): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.748873 kernel: audit: type=1400 audit(1707775124.726:1574): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.754035 kernel: audit: type=1400 audit(1707775124.726:1575): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.760695 kernel: audit: type=1400 audit(1707775124.726:1576): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.769395 kernel: audit: type=1400 audit(1707775124.726:1577): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.778693 kernel: audit: type=1400 audit(1707775124.726:1578): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.726000 audit: BPF prog-id=200 op=LOAD Feb 12 21:58:44.727000 audit[5355]: AVC avc: denied { bpf } for pid=5355 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.727000 audit[5355]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2961 pid=5355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:44.727000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330653431353237356662623630646465353266616231346435623935 Feb 12 21:58:44.727000 audit[5355]: AVC avc: denied { perfmon } for pid=5355 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.727000 audit[5355]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2961 pid=5355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:44.727000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330653431353237356662623630646465353266616231346435623935 Feb 12 21:58:44.727000 audit[5355]: AVC avc: denied { bpf } for pid=5355 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.727000 audit[5355]: AVC avc: denied { bpf } for pid=5355 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.727000 audit[5355]: AVC avc: denied { bpf } for pid=5355 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.727000 audit[5355]: AVC avc: denied { perfmon } for pid=5355 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.727000 audit[5355]: AVC avc: denied { perfmon } for pid=5355 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.727000 audit[5355]: AVC avc: denied { perfmon } for pid=5355 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.727000 audit[5355]: AVC avc: denied { perfmon } for pid=5355 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.727000 audit[5355]: AVC avc: denied { perfmon } for pid=5355 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.727000 audit[5355]: AVC avc: denied { bpf } for pid=5355 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.727000 audit[5355]: AVC avc: denied { bpf } for pid=5355 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.727000 audit: BPF prog-id=201 op=LOAD Feb 12 21:58:44.727000 audit[5355]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000389170 items=0 ppid=2961 pid=5355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:44.727000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330653431353237356662623630646465353266616231346435623935 Feb 12 21:58:44.732000 audit[5355]: AVC avc: denied { bpf } for pid=5355 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.732000 audit[5355]: AVC avc: denied { bpf } for pid=5355 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.732000 audit[5355]: AVC avc: denied { perfmon } for pid=5355 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.732000 audit[5355]: AVC avc: denied { perfmon } for pid=5355 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.732000 audit[5355]: AVC avc: denied { perfmon } for pid=5355 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.732000 audit[5355]: AVC avc: denied { perfmon } for pid=5355 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.732000 audit[5355]: AVC avc: denied { perfmon } for pid=5355 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.732000 audit[5355]: AVC avc: denied { bpf } for pid=5355 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.732000 audit[5355]: AVC avc: denied { bpf } for pid=5355 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.732000 audit: BPF prog-id=202 op=LOAD Feb 12 21:58:44.732000 audit[5355]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003891b8 items=0 ppid=2961 pid=5355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:44.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330653431353237356662623630646465353266616231346435623935 Feb 12 21:58:44.737000 audit: BPF prog-id=202 op=UNLOAD Feb 12 21:58:44.737000 audit: BPF prog-id=201 op=UNLOAD Feb 12 21:58:44.737000 audit[5355]: AVC avc: denied { bpf } for pid=5355 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.737000 audit[5355]: AVC avc: denied { bpf } for pid=5355 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.737000 audit[5355]: AVC avc: denied { bpf } for pid=5355 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.737000 audit[5355]: AVC avc: denied { perfmon } for pid=5355 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.737000 audit[5355]: AVC avc: denied { perfmon } for pid=5355 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.737000 audit[5355]: AVC avc: denied { perfmon } for pid=5355 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.737000 audit[5355]: AVC avc: denied { perfmon } for pid=5355 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.737000 audit[5355]: AVC avc: denied { perfmon } for pid=5355 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.737000 audit[5355]: AVC avc: denied { bpf } for pid=5355 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.737000 audit[5355]: AVC avc: denied { bpf } for pid=5355 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:44.737000 audit: BPF prog-id=203 op=LOAD Feb 12 21:58:44.737000 audit[5355]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003895c8 items=0 ppid=2961 pid=5355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:44.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330653431353237356662623630646465353266616231346435623935 Feb 12 21:58:44.796279 env[1564]: time="2024-02-12T21:58:44.796217316Z" level=info msg="StartContainer for \"c0e415275fbb60dde52fab14d5b955d721adfc88dac2d8cfa9eb89182db51057\" returns successfully" Feb 12 21:58:44.864966 systemd[1]: cri-containerd-4f3ebf1bb5dc591b1931441593cd8f90edce75a6f305452d1362aed5bf651925.scope: Deactivated successfully. Feb 12 21:58:44.865292 systemd[1]: cri-containerd-4f3ebf1bb5dc591b1931441593cd8f90edce75a6f305452d1362aed5bf651925.scope: Consumed 3.342s CPU time. Feb 12 21:58:44.867000 audit: BPF prog-id=88 op=UNLOAD Feb 12 21:58:44.867000 audit: BPF prog-id=106 op=UNLOAD Feb 12 21:58:44.900686 env[1564]: time="2024-02-12T21:58:44.900575295Z" level=info msg="shim disconnected" id=4f3ebf1bb5dc591b1931441593cd8f90edce75a6f305452d1362aed5bf651925 Feb 12 21:58:44.901002 env[1564]: time="2024-02-12T21:58:44.900977115Z" level=warning msg="cleaning up after shim disconnected" id=4f3ebf1bb5dc591b1931441593cd8f90edce75a6f305452d1362aed5bf651925 namespace=k8s.io Feb 12 21:58:44.901152 env[1564]: time="2024-02-12T21:58:44.901133741Z" level=info msg="cleaning up dead shim" Feb 12 21:58:44.914697 env[1564]: time="2024-02-12T21:58:44.914623278Z" level=warning msg="cleanup warnings time=\"2024-02-12T21:58:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5394 runtime=io.containerd.runc.v2\n" Feb 12 21:58:45.208313 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4f3ebf1bb5dc591b1931441593cd8f90edce75a6f305452d1362aed5bf651925-rootfs.mount: Deactivated successfully. Feb 12 21:58:45.643482 kubelet[2584]: I0212 21:58:45.643452 2584 scope.go:115] "RemoveContainer" containerID="4f3ebf1bb5dc591b1931441593cd8f90edce75a6f305452d1362aed5bf651925" Feb 12 21:58:45.658081 env[1564]: time="2024-02-12T21:58:45.657628290Z" level=info msg="CreateContainer within sandbox \"d93e6b5956e712b7437dd729c6c3b8af31ff78ece51b809482e64363ee42590d\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Feb 12 21:58:45.684269 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4239357828.mount: Deactivated successfully. Feb 12 21:58:45.695249 env[1564]: time="2024-02-12T21:58:45.695200701Z" level=info msg="CreateContainer within sandbox \"d93e6b5956e712b7437dd729c6c3b8af31ff78ece51b809482e64363ee42590d\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"8bde957f7401acf32dfdfffec8e70ff0b431268cce36dc2f443ef165d5cdcc31\"" Feb 12 21:58:45.696020 env[1564]: time="2024-02-12T21:58:45.695994457Z" level=info msg="StartContainer for \"8bde957f7401acf32dfdfffec8e70ff0b431268cce36dc2f443ef165d5cdcc31\"" Feb 12 21:58:45.716853 systemd[1]: Started cri-containerd-8bde957f7401acf32dfdfffec8e70ff0b431268cce36dc2f443ef165d5cdcc31.scope. Feb 12 21:58:45.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.738000 audit: BPF prog-id=204 op=LOAD Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { bpf } for pid=5416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000149c48 a2=10 a3=1c items=0 ppid=2274 pid=5416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:45.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862646539353766373430316163663332646664666666656338653730 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { perfmon } for pid=5416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001496b0 a2=3c a3=8 items=0 ppid=2274 pid=5416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:45.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862646539353766373430316163663332646664666666656338653730 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { bpf } for pid=5416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { bpf } for pid=5416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { bpf } for pid=5416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { perfmon } for pid=5416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { perfmon } for pid=5416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { perfmon } for pid=5416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { perfmon } for pid=5416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { perfmon } for pid=5416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { bpf } for pid=5416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { bpf } for pid=5416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit: BPF prog-id=205 op=LOAD Feb 12 21:58:45.739000 audit[5416]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001499d8 a2=78 a3=c00028b180 items=0 ppid=2274 pid=5416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:45.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862646539353766373430316163663332646664666666656338653730 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { bpf } for pid=5416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { bpf } for pid=5416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { perfmon } for pid=5416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { perfmon } for pid=5416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { perfmon } for pid=5416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { perfmon } for pid=5416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { perfmon } for pid=5416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { bpf } for pid=5416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { bpf } for pid=5416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit: BPF prog-id=206 op=LOAD Feb 12 21:58:45.739000 audit[5416]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000149770 a2=78 a3=c00028b1c8 items=0 ppid=2274 pid=5416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:45.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862646539353766373430316163663332646664666666656338653730 Feb 12 21:58:45.739000 audit: BPF prog-id=206 op=UNLOAD Feb 12 21:58:45.739000 audit: BPF prog-id=205 op=UNLOAD Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { bpf } for pid=5416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { bpf } for pid=5416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { bpf } for pid=5416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { perfmon } for pid=5416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { perfmon } for pid=5416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { perfmon } for pid=5416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { perfmon } for pid=5416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { perfmon } for pid=5416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { bpf } for pid=5416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit[5416]: AVC avc: denied { bpf } for pid=5416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:45.739000 audit: BPF prog-id=207 op=LOAD Feb 12 21:58:45.739000 audit[5416]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000149c30 a2=78 a3=c00028b5d8 items=0 ppid=2274 pid=5416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:45.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862646539353766373430316163663332646664666666656338653730 Feb 12 21:58:45.788350 env[1564]: time="2024-02-12T21:58:45.788293969Z" level=info msg="StartContainer for \"8bde957f7401acf32dfdfffec8e70ff0b431268cce36dc2f443ef165d5cdcc31\" returns successfully" Feb 12 21:58:47.304000 audit[5428]: AVC avc: denied { watch } for pid=5428 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:58:47.304000 audit[5428]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0006fa540 a2=fc6 a3=0 items=0 ppid=2274 pid=5428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:58:47.304000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:58:47.304000 audit[5428]: AVC avc: denied { watch } for pid=5428 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 21:58:47.304000 audit[5428]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0009627e0 a2=fc6 a3=0 items=0 ppid=2274 pid=5428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c896 key=(null) Feb 12 21:58:47.304000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 21:58:47.842602 systemd[1]: run-containerd-runc-k8s.io-214c80b710732e4712c76f97575c87ee417d23774d7f4741bf9dad97ec6d3338-runc.LpT0FV.mount: Deactivated successfully. Feb 12 21:58:47.910351 kubelet[2584]: E0212 21:58:47.910304 2584 controller.go:193] "Failed to update lease" err="Put \"https://172.31.28.103:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-28-103?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Feb 12 21:58:49.787402 systemd[1]: cri-containerd-090d17da541d4876f88f2921507245bdae6d8955b6860d2d25ca82eeef8c0997.scope: Deactivated successfully. Feb 12 21:58:49.787745 systemd[1]: cri-containerd-090d17da541d4876f88f2921507245bdae6d8955b6860d2d25ca82eeef8c0997.scope: Consumed 1.730s CPU time. Feb 12 21:58:49.797085 kernel: kauditd_printk_skb: 114 callbacks suppressed Feb 12 21:58:49.797332 kernel: audit: type=1334 audit(1707775129.791:1611): prog-id=92 op=UNLOAD Feb 12 21:58:49.797377 kernel: audit: type=1334 audit(1707775129.791:1612): prog-id=97 op=UNLOAD Feb 12 21:58:49.791000 audit: BPF prog-id=92 op=UNLOAD Feb 12 21:58:49.791000 audit: BPF prog-id=97 op=UNLOAD Feb 12 21:58:49.821266 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-090d17da541d4876f88f2921507245bdae6d8955b6860d2d25ca82eeef8c0997-rootfs.mount: Deactivated successfully. Feb 12 21:58:49.824161 env[1564]: time="2024-02-12T21:58:49.824008788Z" level=info msg="shim disconnected" id=090d17da541d4876f88f2921507245bdae6d8955b6860d2d25ca82eeef8c0997 Feb 12 21:58:49.824161 env[1564]: time="2024-02-12T21:58:49.824149140Z" level=warning msg="cleaning up after shim disconnected" id=090d17da541d4876f88f2921507245bdae6d8955b6860d2d25ca82eeef8c0997 namespace=k8s.io Feb 12 21:58:49.824899 env[1564]: time="2024-02-12T21:58:49.824169066Z" level=info msg="cleaning up dead shim" Feb 12 21:58:49.836806 env[1564]: time="2024-02-12T21:58:49.836749055Z" level=warning msg="cleanup warnings time=\"2024-02-12T21:58:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5482 runtime=io.containerd.runc.v2\n" Feb 12 21:58:50.533034 systemd[1]: run-containerd-runc-k8s.io-4692065e653935d9b5d13b5087fd00e78615a8e56971a2c483b833f3dd58606b-runc.9xUou6.mount: Deactivated successfully. Feb 12 21:58:50.676105 kubelet[2584]: I0212 21:58:50.676079 2584 scope.go:115] "RemoveContainer" containerID="090d17da541d4876f88f2921507245bdae6d8955b6860d2d25ca82eeef8c0997" Feb 12 21:58:50.679204 env[1564]: time="2024-02-12T21:58:50.679158847Z" level=info msg="CreateContainer within sandbox \"2bda8eb26d602534cd932a54a1abab7a1a3310d419690c99a6da7b058fafd003\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Feb 12 21:58:50.708736 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1806348927.mount: Deactivated successfully. Feb 12 21:58:50.718115 env[1564]: time="2024-02-12T21:58:50.718050705Z" level=info msg="CreateContainer within sandbox \"2bda8eb26d602534cd932a54a1abab7a1a3310d419690c99a6da7b058fafd003\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"1430e9de628a19617081348238d5265f4e4dc63a34fb4334085edb226acd4d3d\"" Feb 12 21:58:50.719246 env[1564]: time="2024-02-12T21:58:50.719208486Z" level=info msg="StartContainer for \"1430e9de628a19617081348238d5265f4e4dc63a34fb4334085edb226acd4d3d\"" Feb 12 21:58:50.746227 systemd[1]: Started cri-containerd-1430e9de628a19617081348238d5265f4e4dc63a34fb4334085edb226acd4d3d.scope. Feb 12 21:58:50.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797857 kernel: audit: type=1400 audit(1707775130.791:1613): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.804024 kernel: audit: type=1400 audit(1707775130.791:1614): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.804155 kernel: audit: type=1400 audit(1707775130.791:1615): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.814441 kernel: audit: type=1400 audit(1707775130.791:1616): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.814602 kernel: audit: type=1400 audit(1707775130.791:1617): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.842181 kernel: audit: type=1400 audit(1707775130.791:1618): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.842325 kernel: audit: type=1400 audit(1707775130.791:1619): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.847014 kernel: audit: type=1400 audit(1707775130.791:1620): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.796000 audit: BPF prog-id=208 op=LOAD Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { bpf } for pid=5523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2310 pid=5523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:50.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134333065396465363238613139363137303831333438323338643532 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { perfmon } for pid=5523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2310 pid=5523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:50.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134333065396465363238613139363137303831333438323338643532 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { bpf } for pid=5523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { bpf } for pid=5523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { bpf } for pid=5523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { perfmon } for pid=5523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { perfmon } for pid=5523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { perfmon } for pid=5523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { perfmon } for pid=5523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { perfmon } for pid=5523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { bpf } for pid=5523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { bpf } for pid=5523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit: BPF prog-id=209 op=LOAD Feb 12 21:58:50.797000 audit[5523]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0002a2370 items=0 ppid=2310 pid=5523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:50.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134333065396465363238613139363137303831333438323338643532 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { bpf } for pid=5523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { bpf } for pid=5523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { perfmon } for pid=5523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { perfmon } for pid=5523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { perfmon } for pid=5523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { perfmon } for pid=5523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { perfmon } for pid=5523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { bpf } for pid=5523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { bpf } for pid=5523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit: BPF prog-id=210 op=LOAD Feb 12 21:58:50.797000 audit[5523]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0002a23b8 items=0 ppid=2310 pid=5523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:50.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134333065396465363238613139363137303831333438323338643532 Feb 12 21:58:50.797000 audit: BPF prog-id=210 op=UNLOAD Feb 12 21:58:50.797000 audit: BPF prog-id=209 op=UNLOAD Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { bpf } for pid=5523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { bpf } for pid=5523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { bpf } for pid=5523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { perfmon } for pid=5523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { perfmon } for pid=5523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { perfmon } for pid=5523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { perfmon } for pid=5523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { perfmon } for pid=5523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { bpf } for pid=5523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit[5523]: AVC avc: denied { bpf } for pid=5523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 21:58:50.797000 audit: BPF prog-id=211 op=LOAD Feb 12 21:58:50.797000 audit[5523]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0002a27c8 items=0 ppid=2310 pid=5523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 21:58:50.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134333065396465363238613139363137303831333438323338643532 Feb 12 21:58:50.869130 env[1564]: time="2024-02-12T21:58:50.869082813Z" level=info msg="StartContainer for \"1430e9de628a19617081348238d5265f4e4dc63a34fb4334085edb226acd4d3d\" returns successfully" Feb 12 21:58:52.432242 systemd[1]: run-containerd-runc-k8s.io-c1fdffc2776424218651059f61b26a5158652030830928426a2897a1de49c508-runc.k5rraB.mount: Deactivated successfully. Feb 12 21:58:57.910791 kubelet[2584]: E0212 21:58:57.910759 2584 controller.go:193] "Failed to update lease" err="Put \"https://172.31.28.103:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-28-103?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Feb 12 21:58:58.487000 audit[5131]: AVC avc: denied { watch } for pid=5131 comm="apiserver" path="/calico-apiserver-certs/..2024_02_12_21_57_52.653622846/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c382,c605 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c382,c605 tclass=file permissive=0 Feb 12 21:58:58.489525 kernel: kauditd_printk_skb: 49 callbacks suppressed Feb 12 21:58:58.490223 kernel: audit: type=1400 audit(1707775138.487:1631): avc: denied { watch } for pid=5131 comm="apiserver" path="/calico-apiserver-certs/..2024_02_12_21_57_52.653622846/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c382,c605 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c382,c605 tclass=file permissive=0 Feb 12 21:58:58.487000 audit[5131]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0007cd000 a2=fc6 a3=0 items=0 ppid=5063 pid=5131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c382,c605 key=(null) Feb 12 21:58:58.502728 kernel: audit: type=1300 audit(1707775138.487:1631): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0007cd000 a2=fc6 a3=0 items=0 ppid=5063 pid=5131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c382,c605 key=(null) Feb 12 21:58:58.502847 kernel: audit: type=1327 audit(1707775138.487:1631): proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C Feb 12 21:58:58.487000 audit: PROCTITLE proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C