Feb 8 23:20:51.974195 kernel: Linux version 5.15.148-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Thu Feb 8 21:14:17 -00 2024 Feb 8 23:20:51.974217 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=ae7db544026ede4699ee2036449b75950d3fb7929b25a6731d0ad396f1aa37c9 Feb 8 23:20:51.974230 kernel: BIOS-provided physical RAM map: Feb 8 23:20:51.974237 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Feb 8 23:20:51.974244 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Feb 8 23:20:51.974251 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Feb 8 23:20:51.974260 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007ffdcfff] usable Feb 8 23:20:51.974267 kernel: BIOS-e820: [mem 0x000000007ffdd000-0x000000007fffffff] reserved Feb 8 23:20:51.974276 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Feb 8 23:20:51.974283 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Feb 8 23:20:51.974290 kernel: NX (Execute Disable) protection: active Feb 8 23:20:51.974296 kernel: SMBIOS 2.8 present. Feb 8 23:20:51.974303 kernel: DMI: OpenStack Foundation OpenStack Nova, BIOS 1.15.0-1 04/01/2014 Feb 8 23:20:51.974311 kernel: Hypervisor detected: KVM Feb 8 23:20:51.974319 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Feb 8 23:20:51.974329 kernel: kvm-clock: cpu 0, msr 62faa001, primary cpu clock Feb 8 23:20:51.974336 kernel: kvm-clock: using sched offset of 5925776570 cycles Feb 8 23:20:51.974349 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Feb 8 23:20:51.974363 kernel: tsc: Detected 1996.249 MHz processor Feb 8 23:20:51.974377 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Feb 8 23:20:51.974390 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Feb 8 23:20:51.974405 kernel: last_pfn = 0x7ffdd max_arch_pfn = 0x400000000 Feb 8 23:20:51.974417 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Feb 8 23:20:51.974435 kernel: ACPI: Early table checksum verification disabled Feb 8 23:20:51.974443 kernel: ACPI: RSDP 0x00000000000F5930 000014 (v00 BOCHS ) Feb 8 23:20:51.974451 kernel: ACPI: RSDT 0x000000007FFE1848 000030 (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 8 23:20:51.974459 kernel: ACPI: FACP 0x000000007FFE172C 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 8 23:20:51.974467 kernel: ACPI: DSDT 0x000000007FFE0040 0016EC (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 8 23:20:51.974475 kernel: ACPI: FACS 0x000000007FFE0000 000040 Feb 8 23:20:51.974482 kernel: ACPI: APIC 0x000000007FFE17A0 000080 (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 8 23:20:51.974490 kernel: ACPI: WAET 0x000000007FFE1820 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 8 23:20:51.974498 kernel: ACPI: Reserving FACP table memory at [mem 0x7ffe172c-0x7ffe179f] Feb 8 23:20:51.974508 kernel: ACPI: Reserving DSDT table memory at [mem 0x7ffe0040-0x7ffe172b] Feb 8 23:20:51.974516 kernel: ACPI: Reserving FACS table memory at [mem 0x7ffe0000-0x7ffe003f] Feb 8 23:20:51.974524 kernel: ACPI: Reserving APIC table memory at [mem 0x7ffe17a0-0x7ffe181f] Feb 8 23:20:51.974531 kernel: ACPI: Reserving WAET table memory at [mem 0x7ffe1820-0x7ffe1847] Feb 8 23:20:51.974539 kernel: No NUMA configuration found Feb 8 23:20:51.974547 kernel: Faking a node at [mem 0x0000000000000000-0x000000007ffdcfff] Feb 8 23:20:51.974554 kernel: NODE_DATA(0) allocated [mem 0x7ffd7000-0x7ffdcfff] Feb 8 23:20:51.974562 kernel: Zone ranges: Feb 8 23:20:51.974575 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Feb 8 23:20:51.974584 kernel: DMA32 [mem 0x0000000001000000-0x000000007ffdcfff] Feb 8 23:20:51.974591 kernel: Normal empty Feb 8 23:20:51.974600 kernel: Movable zone start for each node Feb 8 23:20:51.974607 kernel: Early memory node ranges Feb 8 23:20:51.974615 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Feb 8 23:20:51.974625 kernel: node 0: [mem 0x0000000000100000-0x000000007ffdcfff] Feb 8 23:20:51.974633 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007ffdcfff] Feb 8 23:20:51.974641 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Feb 8 23:20:51.974649 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Feb 8 23:20:51.974657 kernel: On node 0, zone DMA32: 35 pages in unavailable ranges Feb 8 23:20:51.974665 kernel: ACPI: PM-Timer IO Port: 0x608 Feb 8 23:20:51.974673 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Feb 8 23:20:51.974681 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Feb 8 23:20:51.974689 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Feb 8 23:20:51.974699 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Feb 8 23:20:51.974707 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Feb 8 23:20:51.974715 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Feb 8 23:20:51.974723 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Feb 8 23:20:51.974730 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Feb 8 23:20:51.974738 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Feb 8 23:20:51.974763 kernel: [mem 0x80000000-0xfeffbfff] available for PCI devices Feb 8 23:20:51.974772 kernel: Booting paravirtualized kernel on KVM Feb 8 23:20:51.974780 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Feb 8 23:20:51.974788 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Feb 8 23:20:51.974799 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Feb 8 23:20:51.974817 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Feb 8 23:20:51.974825 kernel: pcpu-alloc: [0] 0 1 Feb 8 23:20:51.974832 kernel: kvm-guest: stealtime: cpu 0, msr 7dc1c0c0 Feb 8 23:20:51.974840 kernel: kvm-guest: PV spinlocks disabled, no host support Feb 8 23:20:51.974848 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515805 Feb 8 23:20:51.974856 kernel: Policy zone: DMA32 Feb 8 23:20:51.974866 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=ae7db544026ede4699ee2036449b75950d3fb7929b25a6731d0ad396f1aa37c9 Feb 8 23:20:51.974876 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Feb 8 23:20:51.974885 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Feb 8 23:20:51.974893 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Feb 8 23:20:51.974901 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Feb 8 23:20:51.974909 kernel: Memory: 1975340K/2096620K available (12294K kernel code, 2275K rwdata, 13700K rodata, 45496K init, 4048K bss, 121020K reserved, 0K cma-reserved) Feb 8 23:20:51.974917 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Feb 8 23:20:51.974925 kernel: ftrace: allocating 34475 entries in 135 pages Feb 8 23:20:51.974933 kernel: ftrace: allocated 135 pages with 4 groups Feb 8 23:20:51.974943 kernel: rcu: Hierarchical RCU implementation. Feb 8 23:20:51.974952 kernel: rcu: RCU event tracing is enabled. Feb 8 23:20:51.974960 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Feb 8 23:20:51.974968 kernel: Rude variant of Tasks RCU enabled. Feb 8 23:20:51.974976 kernel: Tracing variant of Tasks RCU enabled. Feb 8 23:20:51.974984 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Feb 8 23:20:51.974993 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Feb 8 23:20:51.975001 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Feb 8 23:20:51.975009 kernel: Console: colour VGA+ 80x25 Feb 8 23:20:51.975016 kernel: printk: console [tty0] enabled Feb 8 23:20:51.975026 kernel: printk: console [ttyS0] enabled Feb 8 23:20:51.975034 kernel: ACPI: Core revision 20210730 Feb 8 23:20:51.975042 kernel: APIC: Switch to symmetric I/O mode setup Feb 8 23:20:51.975051 kernel: x2apic enabled Feb 8 23:20:51.975059 kernel: Switched APIC routing to physical x2apic. Feb 8 23:20:51.975067 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Feb 8 23:20:51.975075 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Feb 8 23:20:51.975083 kernel: Calibrating delay loop (skipped) preset value.. 3992.49 BogoMIPS (lpj=1996249) Feb 8 23:20:51.975091 kernel: Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Feb 8 23:20:51.975101 kernel: Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 Feb 8 23:20:51.975109 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Feb 8 23:20:51.975117 kernel: Spectre V2 : Mitigation: Retpolines Feb 8 23:20:51.975126 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Feb 8 23:20:51.975134 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Feb 8 23:20:51.975142 kernel: Speculative Store Bypass: Vulnerable Feb 8 23:20:51.975150 kernel: x86/fpu: x87 FPU will use FXSAVE Feb 8 23:20:51.975158 kernel: Freeing SMP alternatives memory: 32K Feb 8 23:20:51.975166 kernel: pid_max: default: 32768 minimum: 301 Feb 8 23:20:51.975175 kernel: LSM: Security Framework initializing Feb 8 23:20:51.975183 kernel: SELinux: Initializing. Feb 8 23:20:51.975191 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Feb 8 23:20:51.975200 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Feb 8 23:20:51.975208 kernel: smpboot: CPU0: AMD Intel Core i7 9xx (Nehalem Class Core i7) (family: 0x6, model: 0x1a, stepping: 0x3) Feb 8 23:20:51.975216 kernel: Performance Events: AMD PMU driver. Feb 8 23:20:51.975224 kernel: ... version: 0 Feb 8 23:20:51.975232 kernel: ... bit width: 48 Feb 8 23:20:51.975240 kernel: ... generic registers: 4 Feb 8 23:20:51.975257 kernel: ... value mask: 0000ffffffffffff Feb 8 23:20:51.975266 kernel: ... max period: 00007fffffffffff Feb 8 23:20:51.975274 kernel: ... fixed-purpose events: 0 Feb 8 23:20:51.975284 kernel: ... event mask: 000000000000000f Feb 8 23:20:51.975292 kernel: signal: max sigframe size: 1440 Feb 8 23:20:51.975301 kernel: rcu: Hierarchical SRCU implementation. Feb 8 23:20:51.975309 kernel: smp: Bringing up secondary CPUs ... Feb 8 23:20:51.975318 kernel: x86: Booting SMP configuration: Feb 8 23:20:51.975327 kernel: .... node #0, CPUs: #1 Feb 8 23:20:51.975336 kernel: kvm-clock: cpu 1, msr 62faa041, secondary cpu clock Feb 8 23:20:51.975344 kernel: kvm-guest: stealtime: cpu 1, msr 7dd1c0c0 Feb 8 23:20:51.975353 kernel: smp: Brought up 1 node, 2 CPUs Feb 8 23:20:51.975361 kernel: smpboot: Max logical packages: 2 Feb 8 23:20:51.975369 kernel: smpboot: Total of 2 processors activated (7984.99 BogoMIPS) Feb 8 23:20:51.975378 kernel: devtmpfs: initialized Feb 8 23:20:51.975386 kernel: x86/mm: Memory block size: 128MB Feb 8 23:20:51.975395 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Feb 8 23:20:51.975405 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Feb 8 23:20:51.975413 kernel: pinctrl core: initialized pinctrl subsystem Feb 8 23:20:51.975422 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Feb 8 23:20:51.975430 kernel: audit: initializing netlink subsys (disabled) Feb 8 23:20:51.975439 kernel: audit: type=2000 audit(1707434450.687:1): state=initialized audit_enabled=0 res=1 Feb 8 23:20:51.975447 kernel: thermal_sys: Registered thermal governor 'step_wise' Feb 8 23:20:51.975455 kernel: thermal_sys: Registered thermal governor 'user_space' Feb 8 23:20:51.975464 kernel: cpuidle: using governor menu Feb 8 23:20:51.975472 kernel: ACPI: bus type PCI registered Feb 8 23:20:51.975482 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Feb 8 23:20:51.975491 kernel: dca service started, version 1.12.1 Feb 8 23:20:51.975499 kernel: PCI: Using configuration type 1 for base access Feb 8 23:20:51.975508 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Feb 8 23:20:51.975516 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Feb 8 23:20:51.975525 kernel: ACPI: Added _OSI(Module Device) Feb 8 23:20:51.975533 kernel: ACPI: Added _OSI(Processor Device) Feb 8 23:20:51.975541 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Feb 8 23:20:51.975550 kernel: ACPI: Added _OSI(Processor Aggregator Device) Feb 8 23:20:51.975560 kernel: ACPI: Added _OSI(Linux-Dell-Video) Feb 8 23:20:51.975568 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Feb 8 23:20:51.975576 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Feb 8 23:20:51.975585 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Feb 8 23:20:51.975593 kernel: ACPI: Interpreter enabled Feb 8 23:20:51.975602 kernel: ACPI: PM: (supports S0 S3 S5) Feb 8 23:20:51.975610 kernel: ACPI: Using IOAPIC for interrupt routing Feb 8 23:20:51.975618 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Feb 8 23:20:51.975627 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Feb 8 23:20:51.975637 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Feb 8 23:20:51.975804 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Feb 8 23:20:51.975906 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Feb 8 23:20:51.975920 kernel: acpiphp: Slot [3] registered Feb 8 23:20:51.975929 kernel: acpiphp: Slot [4] registered Feb 8 23:20:51.975937 kernel: acpiphp: Slot [5] registered Feb 8 23:20:51.975946 kernel: acpiphp: Slot [6] registered Feb 8 23:20:51.975957 kernel: acpiphp: Slot [7] registered Feb 8 23:20:51.975966 kernel: acpiphp: Slot [8] registered Feb 8 23:20:51.975974 kernel: acpiphp: Slot [9] registered Feb 8 23:20:51.975982 kernel: acpiphp: Slot [10] registered Feb 8 23:20:51.975991 kernel: acpiphp: Slot [11] registered Feb 8 23:20:51.975999 kernel: acpiphp: Slot [12] registered Feb 8 23:20:51.976007 kernel: acpiphp: Slot [13] registered Feb 8 23:20:51.976016 kernel: acpiphp: Slot [14] registered Feb 8 23:20:51.976024 kernel: acpiphp: Slot [15] registered Feb 8 23:20:51.976032 kernel: acpiphp: Slot [16] registered Feb 8 23:20:51.976043 kernel: acpiphp: Slot [17] registered Feb 8 23:20:51.976051 kernel: acpiphp: Slot [18] registered Feb 8 23:20:51.976059 kernel: acpiphp: Slot [19] registered Feb 8 23:20:51.976067 kernel: acpiphp: Slot [20] registered Feb 8 23:20:51.976076 kernel: acpiphp: Slot [21] registered Feb 8 23:20:51.976084 kernel: acpiphp: Slot [22] registered Feb 8 23:20:51.976092 kernel: acpiphp: Slot [23] registered Feb 8 23:20:51.976101 kernel: acpiphp: Slot [24] registered Feb 8 23:20:51.976109 kernel: acpiphp: Slot [25] registered Feb 8 23:20:51.976119 kernel: acpiphp: Slot [26] registered Feb 8 23:20:51.976128 kernel: acpiphp: Slot [27] registered Feb 8 23:20:51.976136 kernel: acpiphp: Slot [28] registered Feb 8 23:20:51.976144 kernel: acpiphp: Slot [29] registered Feb 8 23:20:51.976153 kernel: acpiphp: Slot [30] registered Feb 8 23:20:51.976161 kernel: acpiphp: Slot [31] registered Feb 8 23:20:51.976169 kernel: PCI host bridge to bus 0000:00 Feb 8 23:20:51.976264 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Feb 8 23:20:51.976344 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Feb 8 23:20:51.976426 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Feb 8 23:20:51.976502 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Feb 8 23:20:51.976577 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Feb 8 23:20:51.976651 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Feb 8 23:20:51.976786 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Feb 8 23:20:51.976884 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Feb 8 23:20:51.976980 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Feb 8 23:20:51.977066 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc120-0xc12f] Feb 8 23:20:51.977151 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Feb 8 23:20:51.977237 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Feb 8 23:20:51.977322 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Feb 8 23:20:51.977409 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Feb 8 23:20:51.977503 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Feb 8 23:20:51.977593 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Feb 8 23:20:51.977678 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Feb 8 23:20:51.977802 kernel: pci 0000:00:02.0: [1af4:1050] type 00 class 0x030000 Feb 8 23:20:51.977893 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfe000000-0xfe7fffff pref] Feb 8 23:20:51.977981 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfe800000-0xfe803fff 64bit pref] Feb 8 23:20:51.978070 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfeb90000-0xfeb90fff] Feb 8 23:20:51.978162 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfeb80000-0xfeb8ffff pref] Feb 8 23:20:51.978249 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Feb 8 23:20:51.978366 kernel: pci 0000:00:03.0: [1af4:1000] type 00 class 0x020000 Feb 8 23:20:51.978455 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc0bf] Feb 8 23:20:51.978541 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfeb91000-0xfeb91fff] Feb 8 23:20:51.978629 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe804000-0xfe807fff 64bit pref] Feb 8 23:20:51.978715 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfeb00000-0xfeb7ffff pref] Feb 8 23:20:51.978865 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Feb 8 23:20:51.978964 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Feb 8 23:20:51.979055 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfeb92000-0xfeb92fff] Feb 8 23:20:51.979141 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe808000-0xfe80bfff 64bit pref] Feb 8 23:20:51.979233 kernel: pci 0000:00:05.0: [1af4:1002] type 00 class 0x00ff00 Feb 8 23:20:51.979320 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0c0-0xc0ff] Feb 8 23:20:51.979406 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe80c000-0xfe80ffff 64bit pref] Feb 8 23:20:51.979502 kernel: pci 0000:00:06.0: [1af4:1005] type 00 class 0x00ff00 Feb 8 23:20:51.979590 kernel: pci 0000:00:06.0: reg 0x10: [io 0xc100-0xc11f] Feb 8 23:20:51.979677 kernel: pci 0000:00:06.0: reg 0x20: [mem 0xfe810000-0xfe813fff 64bit pref] Feb 8 23:20:51.979690 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Feb 8 23:20:51.979699 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Feb 8 23:20:51.979707 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Feb 8 23:20:51.979716 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Feb 8 23:20:51.979725 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Feb 8 23:20:51.979736 kernel: iommu: Default domain type: Translated Feb 8 23:20:51.988801 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Feb 8 23:20:51.988993 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Feb 8 23:20:51.989089 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Feb 8 23:20:51.989179 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Feb 8 23:20:51.989192 kernel: vgaarb: loaded Feb 8 23:20:51.989202 kernel: pps_core: LinuxPPS API ver. 1 registered Feb 8 23:20:51.989211 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Feb 8 23:20:51.989220 kernel: PTP clock support registered Feb 8 23:20:51.989243 kernel: PCI: Using ACPI for IRQ routing Feb 8 23:20:51.989252 kernel: PCI: pci_cache_line_size set to 64 bytes Feb 8 23:20:51.989261 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Feb 8 23:20:51.989269 kernel: e820: reserve RAM buffer [mem 0x7ffdd000-0x7fffffff] Feb 8 23:20:51.989278 kernel: clocksource: Switched to clocksource kvm-clock Feb 8 23:20:51.989286 kernel: VFS: Disk quotas dquot_6.6.0 Feb 8 23:20:51.989295 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Feb 8 23:20:51.989304 kernel: pnp: PnP ACPI init Feb 8 23:20:51.989412 kernel: pnp 00:03: [dma 2] Feb 8 23:20:51.989431 kernel: pnp: PnP ACPI: found 5 devices Feb 8 23:20:51.989440 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Feb 8 23:20:51.989448 kernel: NET: Registered PF_INET protocol family Feb 8 23:20:51.989457 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Feb 8 23:20:51.989466 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Feb 8 23:20:51.989474 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Feb 8 23:20:51.989483 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Feb 8 23:20:51.989492 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Feb 8 23:20:51.989503 kernel: TCP: Hash tables configured (established 16384 bind 16384) Feb 8 23:20:51.989512 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Feb 8 23:20:51.989521 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Feb 8 23:20:51.989529 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Feb 8 23:20:51.989538 kernel: NET: Registered PF_XDP protocol family Feb 8 23:20:51.989625 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Feb 8 23:20:51.989706 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Feb 8 23:20:51.989823 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Feb 8 23:20:51.989902 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Feb 8 23:20:51.989989 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Feb 8 23:20:51.990078 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Feb 8 23:20:51.990167 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Feb 8 23:20:51.990253 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Feb 8 23:20:51.990265 kernel: PCI: CLS 0 bytes, default 64 Feb 8 23:20:51.990274 kernel: Initialise system trusted keyrings Feb 8 23:20:51.990283 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Feb 8 23:20:51.990292 kernel: Key type asymmetric registered Feb 8 23:20:51.990303 kernel: Asymmetric key parser 'x509' registered Feb 8 23:20:51.990312 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Feb 8 23:20:51.990320 kernel: io scheduler mq-deadline registered Feb 8 23:20:51.990329 kernel: io scheduler kyber registered Feb 8 23:20:51.990337 kernel: io scheduler bfq registered Feb 8 23:20:51.990346 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Feb 8 23:20:51.990355 kernel: ACPI: \_SB_.LNKB: Enabled at IRQ 10 Feb 8 23:20:51.990364 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Feb 8 23:20:51.990373 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Feb 8 23:20:51.990383 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Feb 8 23:20:51.990392 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Feb 8 23:20:51.990400 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Feb 8 23:20:51.990409 kernel: random: crng init done Feb 8 23:20:51.990417 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Feb 8 23:20:51.990426 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Feb 8 23:20:51.990434 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Feb 8 23:20:51.990528 kernel: rtc_cmos 00:04: RTC can wake from S4 Feb 8 23:20:51.990546 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Feb 8 23:20:51.990631 kernel: rtc_cmos 00:04: registered as rtc0 Feb 8 23:20:51.990718 kernel: rtc_cmos 00:04: setting system clock to 2024-02-08T23:20:51 UTC (1707434451) Feb 8 23:20:51.990847 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram Feb 8 23:20:51.990862 kernel: NET: Registered PF_INET6 protocol family Feb 8 23:20:51.990871 kernel: Segment Routing with IPv6 Feb 8 23:20:51.990879 kernel: In-situ OAM (IOAM) with IPv6 Feb 8 23:20:51.990888 kernel: NET: Registered PF_PACKET protocol family Feb 8 23:20:51.990910 kernel: Key type dns_resolver registered Feb 8 23:20:51.990952 kernel: IPI shorthand broadcast: enabled Feb 8 23:20:51.990961 kernel: sched_clock: Marking stable (695609400, 127318924)->(846863612, -23935288) Feb 8 23:20:51.990970 kernel: registered taskstats version 1 Feb 8 23:20:51.990978 kernel: Loading compiled-in X.509 certificates Feb 8 23:20:51.990988 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.148-flatcar: e9d857ae0e8100c174221878afd1046acbb054a6' Feb 8 23:20:51.990996 kernel: Key type .fscrypt registered Feb 8 23:20:51.991011 kernel: Key type fscrypt-provisioning registered Feb 8 23:20:51.991020 kernel: ima: No TPM chip found, activating TPM-bypass! Feb 8 23:20:51.991031 kernel: ima: Allocated hash algorithm: sha1 Feb 8 23:20:51.991039 kernel: ima: No architecture policies found Feb 8 23:20:51.991048 kernel: Freeing unused kernel image (initmem) memory: 45496K Feb 8 23:20:51.991056 kernel: Write protecting the kernel read-only data: 28672k Feb 8 23:20:51.991065 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Feb 8 23:20:51.991074 kernel: Freeing unused kernel image (rodata/data gap) memory: 636K Feb 8 23:20:51.991082 kernel: Run /init as init process Feb 8 23:20:51.991091 kernel: with arguments: Feb 8 23:20:51.991099 kernel: /init Feb 8 23:20:51.991108 kernel: with environment: Feb 8 23:20:51.991118 kernel: HOME=/ Feb 8 23:20:51.991127 kernel: TERM=linux Feb 8 23:20:51.991135 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Feb 8 23:20:51.991147 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 8 23:20:51.991159 systemd[1]: Detected virtualization kvm. Feb 8 23:20:51.991169 systemd[1]: Detected architecture x86-64. Feb 8 23:20:51.991178 systemd[1]: Running in initrd. Feb 8 23:20:51.991189 systemd[1]: No hostname configured, using default hostname. Feb 8 23:20:51.991198 systemd[1]: Hostname set to . Feb 8 23:20:51.991208 systemd[1]: Initializing machine ID from VM UUID. Feb 8 23:20:51.991217 systemd[1]: Queued start job for default target initrd.target. Feb 8 23:20:51.991226 systemd[1]: Started systemd-ask-password-console.path. Feb 8 23:20:51.991235 systemd[1]: Reached target cryptsetup.target. Feb 8 23:20:51.991244 systemd[1]: Reached target paths.target. Feb 8 23:20:51.991254 systemd[1]: Reached target slices.target. Feb 8 23:20:51.991265 systemd[1]: Reached target swap.target. Feb 8 23:20:51.991274 systemd[1]: Reached target timers.target. Feb 8 23:20:51.991284 systemd[1]: Listening on iscsid.socket. Feb 8 23:20:51.991293 systemd[1]: Listening on iscsiuio.socket. Feb 8 23:20:51.991302 systemd[1]: Listening on systemd-journald-audit.socket. Feb 8 23:20:51.991311 systemd[1]: Listening on systemd-journald-dev-log.socket. Feb 8 23:20:51.991320 systemd[1]: Listening on systemd-journald.socket. Feb 8 23:20:51.991329 systemd[1]: Listening on systemd-networkd.socket. Feb 8 23:20:51.991341 systemd[1]: Listening on systemd-udevd-control.socket. Feb 8 23:20:51.991350 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 8 23:20:51.991359 systemd[1]: Reached target sockets.target. Feb 8 23:20:51.991368 systemd[1]: Starting kmod-static-nodes.service... Feb 8 23:20:51.991393 systemd[1]: Finished network-cleanup.service. Feb 8 23:20:51.991405 systemd[1]: Starting systemd-fsck-usr.service... Feb 8 23:20:51.991415 systemd[1]: Starting systemd-journald.service... Feb 8 23:20:51.991425 systemd[1]: Starting systemd-modules-load.service... Feb 8 23:20:51.991434 systemd[1]: Starting systemd-resolved.service... Feb 8 23:20:51.991444 systemd[1]: Starting systemd-vconsole-setup.service... Feb 8 23:20:51.991453 systemd[1]: Finished kmod-static-nodes.service. Feb 8 23:20:51.991462 systemd[1]: Finished systemd-fsck-usr.service. Feb 8 23:20:51.991476 systemd-journald[185]: Journal started Feb 8 23:20:51.991531 systemd-journald[185]: Runtime Journal (/run/log/journal/02b806320fdb46c484101aa3ffa26567) is 4.9M, max 39.5M, 34.5M free. Feb 8 23:20:51.986378 systemd-modules-load[186]: Inserted module 'overlay' Feb 8 23:20:52.032369 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Feb 8 23:20:52.032395 kernel: Bridge firewalling registered Feb 8 23:20:52.002149 systemd-resolved[187]: Positive Trust Anchors: Feb 8 23:20:52.037831 systemd[1]: Started systemd-journald.service. Feb 8 23:20:52.037850 kernel: audit: type=1130 audit(1707434452.032:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.002158 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 8 23:20:52.042983 kernel: audit: type=1130 audit(1707434452.038:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.002197 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 8 23:20:52.049145 kernel: audit: type=1130 audit(1707434452.042:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.005074 systemd-resolved[187]: Defaulting to hostname 'linux'. Feb 8 23:20:52.053736 kernel: audit: type=1130 audit(1707434452.048:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.025144 systemd-modules-load[186]: Inserted module 'br_netfilter' Feb 8 23:20:52.039001 systemd[1]: Started systemd-resolved.service. Feb 8 23:20:52.043759 systemd[1]: Finished systemd-vconsole-setup.service. Feb 8 23:20:52.069817 kernel: SCSI subsystem initialized Feb 8 23:20:52.069837 kernel: audit: type=1130 audit(1707434452.064:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.049842 systemd[1]: Reached target nss-lookup.target. Feb 8 23:20:52.055200 systemd[1]: Starting dracut-cmdline-ask.service... Feb 8 23:20:52.056385 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 8 23:20:52.064643 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 8 23:20:52.083299 kernel: audit: type=1130 audit(1707434452.077:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.077000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.078010 systemd[1]: Finished dracut-cmdline-ask.service. Feb 8 23:20:52.079477 systemd[1]: Starting dracut-cmdline.service... Feb 8 23:20:52.088776 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Feb 8 23:20:52.092439 kernel: device-mapper: uevent: version 1.0.3 Feb 8 23:20:52.092466 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Feb 8 23:20:52.092819 dracut-cmdline[202]: dracut-dracut-053 Feb 8 23:20:52.096024 dracut-cmdline[202]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=ae7db544026ede4699ee2036449b75950d3fb7929b25a6731d0ad396f1aa37c9 Feb 8 23:20:52.097613 systemd-modules-load[186]: Inserted module 'dm_multipath' Feb 8 23:20:52.099117 systemd[1]: Finished systemd-modules-load.service. Feb 8 23:20:52.109651 kernel: audit: type=1130 audit(1707434452.099:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.099000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.101254 systemd[1]: Starting systemd-sysctl.service... Feb 8 23:20:52.111815 systemd[1]: Finished systemd-sysctl.service. Feb 8 23:20:52.116626 kernel: audit: type=1130 audit(1707434452.111:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.167813 kernel: Loading iSCSI transport class v2.0-870. Feb 8 23:20:52.179793 kernel: iscsi: registered transport (tcp) Feb 8 23:20:52.204087 kernel: iscsi: registered transport (qla4xxx) Feb 8 23:20:52.204146 kernel: QLogic iSCSI HBA Driver Feb 8 23:20:52.251000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.250716 systemd[1]: Finished dracut-cmdline.service. Feb 8 23:20:52.256310 kernel: audit: type=1130 audit(1707434452.251:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.254177 systemd[1]: Starting dracut-pre-udev.service... Feb 8 23:20:52.337894 kernel: raid6: sse2x4 gen() 12060 MB/s Feb 8 23:20:52.354867 kernel: raid6: sse2x4 xor() 6912 MB/s Feb 8 23:20:52.371845 kernel: raid6: sse2x2 gen() 14477 MB/s Feb 8 23:20:52.388844 kernel: raid6: sse2x2 xor() 8839 MB/s Feb 8 23:20:52.405843 kernel: raid6: sse2x1 gen() 11282 MB/s Feb 8 23:20:52.423572 kernel: raid6: sse2x1 xor() 6945 MB/s Feb 8 23:20:52.423642 kernel: raid6: using algorithm sse2x2 gen() 14477 MB/s Feb 8 23:20:52.423670 kernel: raid6: .... xor() 8839 MB/s, rmw enabled Feb 8 23:20:52.424447 kernel: raid6: using ssse3x2 recovery algorithm Feb 8 23:20:52.440612 kernel: xor: measuring software checksum speed Feb 8 23:20:52.440670 kernel: prefetch64-sse : 17115 MB/sec Feb 8 23:20:52.443136 kernel: generic_sse : 16751 MB/sec Feb 8 23:20:52.443184 kernel: xor: using function: prefetch64-sse (17115 MB/sec) Feb 8 23:20:52.556801 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Feb 8 23:20:52.572121 systemd[1]: Finished dracut-pre-udev.service. Feb 8 23:20:52.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.573000 audit: BPF prog-id=7 op=LOAD Feb 8 23:20:52.573000 audit: BPF prog-id=8 op=LOAD Feb 8 23:20:52.575475 systemd[1]: Starting systemd-udevd.service... Feb 8 23:20:52.597709 systemd-udevd[384]: Using default interface naming scheme 'v252'. Feb 8 23:20:52.602448 systemd[1]: Started systemd-udevd.service. Feb 8 23:20:52.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.610083 systemd[1]: Starting dracut-pre-trigger.service... Feb 8 23:20:52.636613 dracut-pre-trigger[400]: rd.md=0: removing MD RAID activation Feb 8 23:20:52.692566 systemd[1]: Finished dracut-pre-trigger.service. Feb 8 23:20:52.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.695023 systemd[1]: Starting systemd-udev-trigger.service... Feb 8 23:20:52.755523 systemd[1]: Finished systemd-udev-trigger.service. Feb 8 23:20:52.757000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:52.846328 kernel: virtio_blk virtio2: [vda] 41943040 512-byte logical blocks (21.5 GB/20.0 GiB) Feb 8 23:20:52.854000 kernel: libata version 3.00 loaded. Feb 8 23:20:52.859781 kernel: ata_piix 0000:00:01.1: version 2.13 Feb 8 23:20:52.860774 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Feb 8 23:20:52.860805 kernel: GPT:17805311 != 41943039 Feb 8 23:20:52.860817 kernel: GPT:Alternate GPT header not at the end of the disk. Feb 8 23:20:52.860829 kernel: GPT:17805311 != 41943039 Feb 8 23:20:52.860839 kernel: GPT: Use GNU Parted to correct GPT errors. Feb 8 23:20:52.860850 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 8 23:20:52.864783 kernel: scsi host0: ata_piix Feb 8 23:20:52.873781 kernel: scsi host1: ata_piix Feb 8 23:20:52.874277 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc120 irq 14 Feb 8 23:20:52.874291 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc128 irq 15 Feb 8 23:20:52.892774 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (443) Feb 8 23:20:52.894646 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Feb 8 23:20:52.936554 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Feb 8 23:20:52.937835 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Feb 8 23:20:52.942998 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Feb 8 23:20:52.947046 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 8 23:20:52.948301 systemd[1]: Starting disk-uuid.service... Feb 8 23:20:52.966247 disk-uuid[460]: Primary Header is updated. Feb 8 23:20:52.966247 disk-uuid[460]: Secondary Entries is updated. Feb 8 23:20:52.966247 disk-uuid[460]: Secondary Header is updated. Feb 8 23:20:52.973784 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 8 23:20:52.981617 kernel: GPT:disk_guids don't match. Feb 8 23:20:52.981640 kernel: GPT: Use GNU Parted to correct GPT errors. Feb 8 23:20:52.981651 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 8 23:20:53.993792 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 8 23:20:53.995407 disk-uuid[461]: The operation has completed successfully. Feb 8 23:20:54.057636 systemd[1]: disk-uuid.service: Deactivated successfully. Feb 8 23:20:54.057914 systemd[1]: Finished disk-uuid.service. Feb 8 23:20:54.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:54.058000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:54.079098 systemd[1]: Starting verity-setup.service... Feb 8 23:20:54.114784 kernel: device-mapper: verity: sha256 using implementation "sha256-ssse3" Feb 8 23:20:54.212520 systemd[1]: Found device dev-mapper-usr.device. Feb 8 23:20:54.216720 systemd[1]: Mounting sysusr-usr.mount... Feb 8 23:20:54.223291 systemd[1]: Finished verity-setup.service. Feb 8 23:20:54.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:54.354878 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Feb 8 23:20:54.355213 systemd[1]: Mounted sysusr-usr.mount. Feb 8 23:20:54.355892 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Feb 8 23:20:54.356646 systemd[1]: Starting ignition-setup.service... Feb 8 23:20:54.362738 systemd[1]: Starting parse-ip-for-networkd.service... Feb 8 23:20:54.373863 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Feb 8 23:20:54.373897 kernel: BTRFS info (device vda6): using free space tree Feb 8 23:20:54.373908 kernel: BTRFS info (device vda6): has skinny extents Feb 8 23:20:54.400142 systemd[1]: mnt-oem.mount: Deactivated successfully. Feb 8 23:20:54.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:54.414627 systemd[1]: Finished ignition-setup.service. Feb 8 23:20:54.416134 systemd[1]: Starting ignition-fetch-offline.service... Feb 8 23:20:54.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:54.494406 systemd[1]: Finished parse-ip-for-networkd.service. Feb 8 23:20:54.495000 audit: BPF prog-id=9 op=LOAD Feb 8 23:20:54.496264 systemd[1]: Starting systemd-networkd.service... Feb 8 23:20:54.523436 systemd-networkd[631]: lo: Link UP Feb 8 23:20:54.523447 systemd-networkd[631]: lo: Gained carrier Feb 8 23:20:54.524200 systemd-networkd[631]: Enumeration completed Feb 8 23:20:54.524581 systemd-networkd[631]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 8 23:20:54.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:54.526023 systemd-networkd[631]: eth0: Link UP Feb 8 23:20:54.526027 systemd-networkd[631]: eth0: Gained carrier Feb 8 23:20:54.526118 systemd[1]: Started systemd-networkd.service. Feb 8 23:20:54.526951 systemd[1]: Reached target network.target. Feb 8 23:20:54.530968 systemd[1]: Starting iscsiuio.service... Feb 8 23:20:54.537063 systemd[1]: Started iscsiuio.service. Feb 8 23:20:54.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:54.538918 systemd[1]: Starting iscsid.service... Feb 8 23:20:54.539877 systemd-networkd[631]: eth0: DHCPv4 address 172.24.4.155/24, gateway 172.24.4.1 acquired from 172.24.4.1 Feb 8 23:20:54.541711 iscsid[640]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Feb 8 23:20:54.541711 iscsid[640]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Feb 8 23:20:54.541711 iscsid[640]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Feb 8 23:20:54.541711 iscsid[640]: If using hardware iscsi like qla4xxx this message can be ignored. Feb 8 23:20:54.544000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:54.548106 iscsid[640]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Feb 8 23:20:54.548106 iscsid[640]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Feb 8 23:20:54.544508 systemd[1]: Started iscsid.service. Feb 8 23:20:54.545901 systemd[1]: Starting dracut-initqueue.service... Feb 8 23:20:54.557577 systemd[1]: Finished dracut-initqueue.service. Feb 8 23:20:54.557000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:54.558155 systemd[1]: Reached target remote-fs-pre.target. Feb 8 23:20:54.559098 systemd[1]: Reached target remote-cryptsetup.target. Feb 8 23:20:54.560149 systemd[1]: Reached target remote-fs.target. Feb 8 23:20:54.561880 systemd[1]: Starting dracut-pre-mount.service... Feb 8 23:20:54.571801 systemd[1]: Finished dracut-pre-mount.service. Feb 8 23:20:54.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:54.698138 ignition[563]: Ignition 2.14.0 Feb 8 23:20:54.699093 ignition[563]: Stage: fetch-offline Feb 8 23:20:54.702455 ignition[563]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 8 23:20:54.702613 ignition[563]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Feb 8 23:20:54.705780 ignition[563]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Feb 8 23:20:54.706110 ignition[563]: parsed url from cmdline: "" Feb 8 23:20:54.706120 ignition[563]: no config URL provided Feb 8 23:20:54.706134 ignition[563]: reading system config file "/usr/lib/ignition/user.ign" Feb 8 23:20:54.709439 systemd[1]: Finished ignition-fetch-offline.service. Feb 8 23:20:54.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:54.706154 ignition[563]: no config at "/usr/lib/ignition/user.ign" Feb 8 23:20:54.706174 ignition[563]: failed to fetch config: resource requires networking Feb 8 23:20:54.713683 systemd[1]: Starting ignition-fetch.service... Feb 8 23:20:54.706611 ignition[563]: Ignition finished successfully Feb 8 23:20:54.731122 ignition[655]: Ignition 2.14.0 Feb 8 23:20:54.731152 ignition[655]: Stage: fetch Feb 8 23:20:54.731380 ignition[655]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 8 23:20:54.731421 ignition[655]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Feb 8 23:20:54.733622 ignition[655]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Feb 8 23:20:54.733886 ignition[655]: parsed url from cmdline: "" Feb 8 23:20:54.733896 ignition[655]: no config URL provided Feb 8 23:20:54.733910 ignition[655]: reading system config file "/usr/lib/ignition/user.ign" Feb 8 23:20:54.733929 ignition[655]: no config at "/usr/lib/ignition/user.ign" Feb 8 23:20:54.745332 ignition[655]: config drive ("/dev/disk/by-label/config-2") not found. Waiting... Feb 8 23:20:54.745387 ignition[655]: config drive ("/dev/disk/by-label/CONFIG-2") not found. Waiting... Feb 8 23:20:54.745831 ignition[655]: GET http://169.254.169.254/openstack/latest/user_data: attempt #1 Feb 8 23:20:54.958684 ignition[655]: GET result: OK Feb 8 23:20:54.958981 ignition[655]: parsing config with SHA512: e2da55d6657f92fc2b0c85e0c8ed626c6f7a2bbe624e51c08c0ab820164eb643334b91ccf8514cfabc8ff99b07ca53eed48f82884b72b2fc047ed940ec478b8e Feb 8 23:20:55.072710 unknown[655]: fetched base config from "system" Feb 8 23:20:55.074267 unknown[655]: fetched base config from "system" Feb 8 23:20:55.075648 unknown[655]: fetched user config from "openstack" Feb 8 23:20:55.078534 ignition[655]: fetch: fetch complete Feb 8 23:20:55.079860 ignition[655]: fetch: fetch passed Feb 8 23:20:55.081147 ignition[655]: Ignition finished successfully Feb 8 23:20:55.084611 systemd[1]: Finished ignition-fetch.service. Feb 8 23:20:55.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:55.087613 systemd[1]: Starting ignition-kargs.service... Feb 8 23:20:55.098374 ignition[661]: Ignition 2.14.0 Feb 8 23:20:55.099135 ignition[661]: Stage: kargs Feb 8 23:20:55.099696 ignition[661]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 8 23:20:55.104006 ignition[661]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Feb 8 23:20:55.104926 ignition[661]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Feb 8 23:20:55.106980 ignition[661]: kargs: kargs passed Feb 8 23:20:55.107488 ignition[661]: Ignition finished successfully Feb 8 23:20:55.109395 systemd[1]: Finished ignition-kargs.service. Feb 8 23:20:55.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:55.110686 systemd[1]: Starting ignition-disks.service... Feb 8 23:20:55.126693 ignition[667]: Ignition 2.14.0 Feb 8 23:20:55.126720 ignition[667]: Stage: disks Feb 8 23:20:55.127019 ignition[667]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 8 23:20:55.127059 ignition[667]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Feb 8 23:20:55.129276 ignition[667]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Feb 8 23:20:55.133420 ignition[667]: disks: disks passed Feb 8 23:20:55.133563 ignition[667]: Ignition finished successfully Feb 8 23:20:55.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:55.134397 systemd[1]: Finished ignition-disks.service. Feb 8 23:20:55.135641 systemd[1]: Reached target initrd-root-device.target. Feb 8 23:20:55.137139 systemd[1]: Reached target local-fs-pre.target. Feb 8 23:20:55.138659 systemd[1]: Reached target local-fs.target. Feb 8 23:20:55.140265 systemd[1]: Reached target sysinit.target. Feb 8 23:20:55.141809 systemd[1]: Reached target basic.target. Feb 8 23:20:55.144092 systemd[1]: Starting systemd-fsck-root.service... Feb 8 23:20:55.169359 systemd-fsck[675]: ROOT: clean, 602/1628000 files, 124051/1617920 blocks Feb 8 23:20:55.179841 systemd[1]: Finished systemd-fsck-root.service. Feb 8 23:20:55.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:55.181145 systemd[1]: Mounting sysroot.mount... Feb 8 23:20:55.197853 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Feb 8 23:20:55.197866 systemd[1]: Mounted sysroot.mount. Feb 8 23:20:55.198372 systemd[1]: Reached target initrd-root-fs.target. Feb 8 23:20:55.201382 systemd[1]: Mounting sysroot-usr.mount... Feb 8 23:20:55.202189 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Feb 8 23:20:55.202914 systemd[1]: Starting flatcar-openstack-hostname.service... Feb 8 23:20:55.203431 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Feb 8 23:20:55.203463 systemd[1]: Reached target ignition-diskful.target. Feb 8 23:20:55.208833 systemd[1]: Mounted sysroot-usr.mount. Feb 8 23:20:55.223363 initrd-setup-root[686]: cut: /sysroot/etc/passwd: No such file or directory Feb 8 23:20:55.211666 systemd[1]: Starting initrd-setup-root.service... Feb 8 23:20:55.232311 initrd-setup-root[694]: cut: /sysroot/etc/group: No such file or directory Feb 8 23:20:55.245666 initrd-setup-root[702]: cut: /sysroot/etc/shadow: No such file or directory Feb 8 23:20:55.251588 systemd[1]: Mounting sysroot-usr-share-oem.mount... Feb 8 23:20:55.259684 initrd-setup-root[711]: cut: /sysroot/etc/gshadow: No such file or directory Feb 8 23:20:55.262798 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/vda6 scanned by mount (708) Feb 8 23:20:55.268323 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Feb 8 23:20:55.268351 kernel: BTRFS info (device vda6): using free space tree Feb 8 23:20:55.268362 kernel: BTRFS info (device vda6): has skinny extents Feb 8 23:20:55.286277 systemd[1]: Mounted sysroot-usr-share-oem.mount. Feb 8 23:20:55.331520 systemd[1]: Finished initrd-setup-root.service. Feb 8 23:20:55.332838 systemd[1]: Starting ignition-mount.service... Feb 8 23:20:55.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:55.334368 systemd[1]: Starting sysroot-boot.service... Feb 8 23:20:55.341796 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Feb 8 23:20:55.341905 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Feb 8 23:20:55.356161 ignition[749]: INFO : Ignition 2.14.0 Feb 8 23:20:55.356161 ignition[749]: INFO : Stage: mount Feb 8 23:20:55.357318 ignition[749]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 8 23:20:55.357318 ignition[749]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Feb 8 23:20:55.359042 ignition[749]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Feb 8 23:20:55.363257 ignition[749]: INFO : mount: mount passed Feb 8 23:20:55.363781 ignition[749]: INFO : Ignition finished successfully Feb 8 23:20:55.364015 systemd[1]: Finished ignition-mount.service. Feb 8 23:20:55.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:55.381573 systemd[1]: Finished sysroot-boot.service. Feb 8 23:20:55.381000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:55.400831 coreos-metadata[681]: Feb 08 23:20:55.400 INFO Fetching http://169.254.169.254/latest/meta-data/hostname: Attempt #1 Feb 8 23:20:55.415868 coreos-metadata[681]: Feb 08 23:20:55.415 INFO Fetch successful Feb 8 23:20:55.416489 coreos-metadata[681]: Feb 08 23:20:55.416 INFO wrote hostname ci-3510-3-2-2-def1b47031.novalocal to /sysroot/etc/hostname Feb 8 23:20:55.419277 systemd[1]: flatcar-openstack-hostname.service: Deactivated successfully. Feb 8 23:20:55.419400 systemd[1]: Finished flatcar-openstack-hostname.service. Feb 8 23:20:55.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:55.419000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:20:55.421427 systemd[1]: Starting ignition-files.service... Feb 8 23:20:55.428437 systemd[1]: Mounting sysroot-usr-share-oem.mount... Feb 8 23:20:55.440176 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/vda6 scanned by mount (760) Feb 8 23:20:55.440208 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Feb 8 23:20:55.440220 kernel: BTRFS info (device vda6): using free space tree Feb 8 23:20:55.441172 kernel: BTRFS info (device vda6): has skinny extents Feb 8 23:20:55.449516 systemd[1]: Mounted sysroot-usr-share-oem.mount. Feb 8 23:20:55.458856 ignition[779]: INFO : Ignition 2.14.0 Feb 8 23:20:55.458856 ignition[779]: INFO : Stage: files Feb 8 23:20:55.460005 ignition[779]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 8 23:20:55.460005 ignition[779]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Feb 8 23:20:55.461880 ignition[779]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Feb 8 23:20:55.462628 ignition[779]: DEBUG : files: compiled without relabeling support, skipping Feb 8 23:20:55.464968 ignition[779]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Feb 8 23:20:55.464968 ignition[779]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Feb 8 23:20:55.470236 ignition[779]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Feb 8 23:20:55.471099 ignition[779]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Feb 8 23:20:55.472093 unknown[779]: wrote ssh authorized keys file for user: core Feb 8 23:20:55.472856 ignition[779]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Feb 8 23:20:55.473619 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Feb 8 23:20:55.473619 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Feb 8 23:20:55.751249 systemd-networkd[631]: eth0: Gained IPv6LL Feb 8 23:20:55.890523 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Feb 8 23:20:56.738731 ignition[779]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Feb 8 23:20:56.740392 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Feb 8 23:20:56.741396 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Feb 8 23:20:56.742398 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Feb 8 23:20:57.079716 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Feb 8 23:20:57.558019 ignition[779]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Feb 8 23:20:57.558019 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Feb 8 23:20:57.558019 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Feb 8 23:20:57.566144 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Feb 8 23:20:58.236175 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Feb 8 23:20:58.588794 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Feb 8 23:20:58.591499 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubeadm" Feb 8 23:20:58.591499 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://dl.k8s.io/release/v1.27.2/bin/linux/amd64/kubeadm: attempt #1 Feb 8 23:20:59.208308 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Feb 8 23:21:23.155184 ignition[779]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: f40216b7d14046931c58072d10c7122934eac5a23c08821371f8b08ac1779443ad11d3458a4c5dcde7cf80fc600a9fefb14b1942aa46a52330248d497ca88836 Feb 8 23:21:23.160039 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubeadm" Feb 8 23:21:23.160039 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubelet" Feb 8 23:21:23.160039 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://dl.k8s.io/release/v1.27.2/bin/linux/amd64/kubelet: attempt #1 Feb 8 23:21:23.810615 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Feb 8 23:22:14.465521 ignition[779]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: a283da2224d456958b2cb99b4f6faf4457c4ed89e9e95f37d970c637f6a7f64ff4dd4d2bfce538759b2d2090933bece599a285ef8fd132eb383fece9a3941560 Feb 8 23:22:14.469598 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubelet" Feb 8 23:22:14.469598 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubectl" Feb 8 23:22:14.469598 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(8): GET https://dl.k8s.io/release/v1.27.2/bin/linux/amd64/kubectl: attempt #1 Feb 8 23:22:14.665176 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(8): GET result: OK Feb 8 23:22:19.217578 ignition[779]: DEBUG : files: createFilesystemsFiles: createFiles: op(8): file matches expected sum of: 857e67001e74840518413593d90c6e64ad3f00d55fa44ad9a8e2ed6135392c908caff7ec19af18cbe10784b8f83afe687a0bc3bacbc9eee984cdeb9c0749cb83 Feb 8 23:22:19.219802 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubectl" Feb 8 23:22:19.219802 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/docker/daemon.json" Feb 8 23:22:19.219802 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/docker/daemon.json" Feb 8 23:22:19.219802 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Feb 8 23:22:19.219802 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Feb 8 23:22:19.219802 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Feb 8 23:22:19.219802 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Feb 8 23:22:19.219802 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 8 23:22:19.219802 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 8 23:22:19.219802 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 8 23:22:19.219802 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 8 23:22:19.219802 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/flatcar/update.conf" Feb 8 23:22:19.219802 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/flatcar/update.conf" Feb 8 23:22:19.219802 ignition[779]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Feb 8 23:22:19.234715 ignition[779]: INFO : files: op(f): op(10): [started] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata-sshkeys@.service.d/20-clct-provider-override.conf" Feb 8 23:22:19.234715 ignition[779]: INFO : files: op(f): op(10): [finished] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata-sshkeys@.service.d/20-clct-provider-override.conf" Feb 8 23:22:19.234715 ignition[779]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Feb 8 23:22:19.234715 ignition[779]: INFO : files: op(11): [started] processing unit "coreos-metadata.service" Feb 8 23:22:19.234715 ignition[779]: INFO : files: op(11): op(12): [started] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata.service.d/20-clct-provider-override.conf" Feb 8 23:22:19.234715 ignition[779]: INFO : files: op(11): op(12): [finished] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata.service.d/20-clct-provider-override.conf" Feb 8 23:22:19.234715 ignition[779]: INFO : files: op(11): [finished] processing unit "coreos-metadata.service" Feb 8 23:22:19.234715 ignition[779]: INFO : files: op(13): [started] processing unit "prepare-cni-plugins.service" Feb 8 23:22:19.234715 ignition[779]: INFO : files: op(13): op(14): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 8 23:22:19.234715 ignition[779]: INFO : files: op(13): op(14): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 8 23:22:19.234715 ignition[779]: INFO : files: op(13): [finished] processing unit "prepare-cni-plugins.service" Feb 8 23:22:19.234715 ignition[779]: INFO : files: op(15): [started] processing unit "prepare-critools.service" Feb 8 23:22:19.234715 ignition[779]: INFO : files: op(15): op(16): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 8 23:22:19.234715 ignition[779]: INFO : files: op(15): op(16): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 8 23:22:19.234715 ignition[779]: INFO : files: op(15): [finished] processing unit "prepare-critools.service" Feb 8 23:22:19.234715 ignition[779]: INFO : files: op(17): [started] processing unit "prepare-helm.service" Feb 8 23:22:19.290891 kernel: kauditd_printk_skb: 27 callbacks suppressed Feb 8 23:22:19.290919 kernel: audit: type=1130 audit(1707434539.237:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.290933 kernel: audit: type=1130 audit(1707434539.260:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.290945 kernel: audit: type=1131 audit(1707434539.260:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.290957 kernel: audit: type=1130 audit(1707434539.274:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.237000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.291103 ignition[779]: INFO : files: op(17): op(18): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 8 23:22:19.291103 ignition[779]: INFO : files: op(17): op(18): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 8 23:22:19.291103 ignition[779]: INFO : files: op(17): [finished] processing unit "prepare-helm.service" Feb 8 23:22:19.291103 ignition[779]: INFO : files: op(19): [started] setting preset to enabled for "prepare-cni-plugins.service" Feb 8 23:22:19.291103 ignition[779]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-cni-plugins.service" Feb 8 23:22:19.291103 ignition[779]: INFO : files: op(1a): [started] setting preset to enabled for "prepare-critools.service" Feb 8 23:22:19.291103 ignition[779]: INFO : files: op(1a): [finished] setting preset to enabled for "prepare-critools.service" Feb 8 23:22:19.291103 ignition[779]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-helm.service" Feb 8 23:22:19.291103 ignition[779]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-helm.service" Feb 8 23:22:19.291103 ignition[779]: INFO : files: op(1c): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Feb 8 23:22:19.291103 ignition[779]: INFO : files: op(1c): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Feb 8 23:22:19.291103 ignition[779]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Feb 8 23:22:19.291103 ignition[779]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Feb 8 23:22:19.291103 ignition[779]: INFO : files: files passed Feb 8 23:22:19.291103 ignition[779]: INFO : Ignition finished successfully Feb 8 23:22:19.235862 systemd[1]: Finished ignition-files.service. Feb 8 23:22:19.240962 systemd[1]: Starting initrd-setup-root-after-ignition.service... Feb 8 23:22:19.304868 initrd-setup-root-after-ignition[804]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Feb 8 23:22:19.249631 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Feb 8 23:22:19.251664 systemd[1]: Starting ignition-quench.service... Feb 8 23:22:19.258924 systemd[1]: ignition-quench.service: Deactivated successfully. Feb 8 23:22:19.259112 systemd[1]: Finished ignition-quench.service. Feb 8 23:22:19.266049 systemd[1]: Finished initrd-setup-root-after-ignition.service. Feb 8 23:22:19.275738 systemd[1]: Reached target ignition-complete.target. Feb 8 23:22:19.283844 systemd[1]: Starting initrd-parse-etc.service... Feb 8 23:22:19.318904 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Feb 8 23:22:19.319027 systemd[1]: Finished initrd-parse-etc.service. Feb 8 23:22:19.338087 kernel: audit: type=1130 audit(1707434539.320:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.338121 kernel: audit: type=1131 audit(1707434539.320:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.321030 systemd[1]: Reached target initrd-fs.target. Feb 8 23:22:19.338560 systemd[1]: Reached target initrd.target. Feb 8 23:22:19.339570 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Feb 8 23:22:19.340521 systemd[1]: Starting dracut-pre-pivot.service... Feb 8 23:22:19.353266 systemd[1]: Finished dracut-pre-pivot.service. Feb 8 23:22:19.365841 kernel: audit: type=1130 audit(1707434539.353:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.354716 systemd[1]: Starting initrd-cleanup.service... Feb 8 23:22:19.367021 systemd[1]: Stopped target nss-lookup.target. Feb 8 23:22:19.367950 systemd[1]: Stopped target remote-cryptsetup.target. Feb 8 23:22:19.368856 systemd[1]: Stopped target timers.target. Feb 8 23:22:19.369700 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Feb 8 23:22:19.374887 kernel: audit: type=1131 audit(1707434539.369:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.369000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.369846 systemd[1]: Stopped dracut-pre-pivot.service. Feb 8 23:22:19.370868 systemd[1]: Stopped target initrd.target. Feb 8 23:22:19.375453 systemd[1]: Stopped target basic.target. Feb 8 23:22:19.376401 systemd[1]: Stopped target ignition-complete.target. Feb 8 23:22:19.377355 systemd[1]: Stopped target ignition-diskful.target. Feb 8 23:22:19.378264 systemd[1]: Stopped target initrd-root-device.target. Feb 8 23:22:19.379248 systemd[1]: Stopped target remote-fs.target. Feb 8 23:22:19.380190 systemd[1]: Stopped target remote-fs-pre.target. Feb 8 23:22:19.381173 systemd[1]: Stopped target sysinit.target. Feb 8 23:22:19.382102 systemd[1]: Stopped target local-fs.target. Feb 8 23:22:19.383121 systemd[1]: Stopped target local-fs-pre.target. Feb 8 23:22:19.384036 systemd[1]: Stopped target swap.target. Feb 8 23:22:19.389912 kernel: audit: type=1131 audit(1707434539.385:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.384888 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Feb 8 23:22:19.385052 systemd[1]: Stopped dracut-pre-mount.service. Feb 8 23:22:19.395223 kernel: audit: type=1131 audit(1707434539.390:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.390000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.385978 systemd[1]: Stopped target cryptsetup.target. Feb 8 23:22:19.395000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.390418 systemd[1]: dracut-initqueue.service: Deactivated successfully. Feb 8 23:22:19.395000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.390564 systemd[1]: Stopped dracut-initqueue.service. Feb 8 23:22:19.391571 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Feb 8 23:22:19.391725 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Feb 8 23:22:19.402914 iscsid[640]: iscsid shutting down. Feb 8 23:22:19.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.395898 systemd[1]: ignition-files.service: Deactivated successfully. Feb 8 23:22:19.413973 ignition[817]: INFO : Ignition 2.14.0 Feb 8 23:22:19.413973 ignition[817]: INFO : Stage: umount Feb 8 23:22:19.413973 ignition[817]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 8 23:22:19.413973 ignition[817]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Feb 8 23:22:19.413973 ignition[817]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Feb 8 23:22:19.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.418000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.420000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.420000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.396040 systemd[1]: Stopped ignition-files.service. Feb 8 23:22:19.426990 ignition[817]: INFO : umount: umount passed Feb 8 23:22:19.426990 ignition[817]: INFO : Ignition finished successfully Feb 8 23:22:19.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.397591 systemd[1]: Stopping ignition-mount.service... Feb 8 23:22:19.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.398398 systemd[1]: Stopping iscsid.service... Feb 8 23:22:19.407088 systemd[1]: Stopping sysroot-boot.service... Feb 8 23:22:19.407617 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Feb 8 23:22:19.407824 systemd[1]: Stopped systemd-udev-trigger.service. Feb 8 23:22:19.433000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.435000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.408635 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Feb 8 23:22:19.408830 systemd[1]: Stopped dracut-pre-trigger.service. Feb 8 23:22:19.418922 systemd[1]: iscsid.service: Deactivated successfully. Feb 8 23:22:19.419184 systemd[1]: Stopped iscsid.service. Feb 8 23:22:19.420846 systemd[1]: initrd-cleanup.service: Deactivated successfully. Feb 8 23:22:19.420930 systemd[1]: Finished initrd-cleanup.service. Feb 8 23:22:19.425222 systemd[1]: Stopping iscsiuio.service... Feb 8 23:22:19.426395 systemd[1]: iscsiuio.service: Deactivated successfully. Feb 8 23:22:19.426483 systemd[1]: Stopped iscsiuio.service. Feb 8 23:22:19.428828 systemd[1]: ignition-mount.service: Deactivated successfully. Feb 8 23:22:19.428910 systemd[1]: Stopped ignition-mount.service. Feb 8 23:22:19.431355 systemd[1]: sysroot-boot.mount: Deactivated successfully. Feb 8 23:22:19.445000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.431707 systemd[1]: ignition-disks.service: Deactivated successfully. Feb 8 23:22:19.432953 systemd[1]: Stopped ignition-disks.service. Feb 8 23:22:19.434428 systemd[1]: ignition-kargs.service: Deactivated successfully. Feb 8 23:22:19.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.434471 systemd[1]: Stopped ignition-kargs.service. Feb 8 23:22:19.449000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.435017 systemd[1]: ignition-fetch.service: Deactivated successfully. Feb 8 23:22:19.435059 systemd[1]: Stopped ignition-fetch.service. Feb 8 23:22:19.435551 systemd[1]: Stopped target network.target. Feb 8 23:22:19.436035 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Feb 8 23:22:19.436078 systemd[1]: Stopped ignition-fetch-offline.service. Feb 8 23:22:19.453000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.436599 systemd[1]: Stopped target paths.target. Feb 8 23:22:19.437098 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Feb 8 23:22:19.455000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.440781 systemd[1]: Stopped systemd-ask-password-console.path. Feb 8 23:22:19.441652 systemd[1]: Stopped target slices.target. Feb 8 23:22:19.442562 systemd[1]: Stopped target sockets.target. Feb 8 23:22:19.443551 systemd[1]: iscsid.socket: Deactivated successfully. Feb 8 23:22:19.460000 audit: BPF prog-id=6 op=UNLOAD Feb 8 23:22:19.443585 systemd[1]: Closed iscsid.socket. Feb 8 23:22:19.444424 systemd[1]: iscsiuio.socket: Deactivated successfully. Feb 8 23:22:19.444455 systemd[1]: Closed iscsiuio.socket. Feb 8 23:22:19.445300 systemd[1]: ignition-setup.service: Deactivated successfully. Feb 8 23:22:19.462000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.445335 systemd[1]: Stopped ignition-setup.service. Feb 8 23:22:19.463000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.446540 systemd[1]: Stopping systemd-networkd.service... Feb 8 23:22:19.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.447470 systemd[1]: Stopping systemd-resolved.service... Feb 8 23:22:19.448535 systemd[1]: sysroot-boot.service: Deactivated successfully. Feb 8 23:22:19.448621 systemd[1]: Stopped sysroot-boot.service. Feb 8 23:22:19.449593 systemd[1]: initrd-setup-root.service: Deactivated successfully. Feb 8 23:22:19.449649 systemd[1]: Stopped initrd-setup-root.service. Feb 8 23:22:19.450791 systemd-networkd[631]: eth0: DHCPv6 lease lost Feb 8 23:22:19.468000 audit: BPF prog-id=9 op=UNLOAD Feb 8 23:22:19.452697 systemd[1]: systemd-networkd.service: Deactivated successfully. Feb 8 23:22:19.469000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.452860 systemd[1]: Stopped systemd-networkd.service. Feb 8 23:22:19.455835 systemd[1]: systemd-resolved.service: Deactivated successfully. Feb 8 23:22:19.455952 systemd[1]: Stopped systemd-resolved.service. Feb 8 23:22:19.458384 systemd[1]: systemd-networkd.socket: Deactivated successfully. Feb 8 23:22:19.474000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.458440 systemd[1]: Closed systemd-networkd.socket. Feb 8 23:22:19.479000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.460020 systemd[1]: Stopping network-cleanup.service... Feb 8 23:22:19.480000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.460647 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Feb 8 23:22:19.460716 systemd[1]: Stopped parse-ip-for-networkd.service. Feb 8 23:22:19.463385 systemd[1]: systemd-sysctl.service: Deactivated successfully. Feb 8 23:22:19.489000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.463445 systemd[1]: Stopped systemd-sysctl.service. Feb 8 23:22:19.490000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.464656 systemd[1]: systemd-modules-load.service: Deactivated successfully. Feb 8 23:22:19.491000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.464701 systemd[1]: Stopped systemd-modules-load.service. Feb 8 23:22:19.465812 systemd[1]: Stopping systemd-udevd.service... Feb 8 23:22:19.468676 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Feb 8 23:22:19.494000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.469342 systemd[1]: systemd-udevd.service: Deactivated successfully. Feb 8 23:22:19.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:19.469492 systemd[1]: Stopped systemd-udevd.service. Feb 8 23:22:19.472207 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Feb 8 23:22:19.472261 systemd[1]: Closed systemd-udevd-control.socket. Feb 8 23:22:19.473448 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Feb 8 23:22:19.473481 systemd[1]: Closed systemd-udevd-kernel.socket. Feb 8 23:22:19.473997 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Feb 8 23:22:19.474048 systemd[1]: Stopped dracut-pre-udev.service. Feb 8 23:22:19.475308 systemd[1]: dracut-cmdline.service: Deactivated successfully. Feb 8 23:22:19.475355 systemd[1]: Stopped dracut-cmdline.service. Feb 8 23:22:19.480501 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Feb 8 23:22:19.480550 systemd[1]: Stopped dracut-cmdline-ask.service. Feb 8 23:22:19.482258 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Feb 8 23:22:19.489231 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Feb 8 23:22:19.489285 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Feb 8 23:22:19.490835 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Feb 8 23:22:19.490878 systemd[1]: Stopped kmod-static-nodes.service. Feb 8 23:22:19.491656 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Feb 8 23:22:19.491697 systemd[1]: Stopped systemd-vconsole-setup.service. Feb 8 23:22:19.493823 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Feb 8 23:22:19.494397 systemd[1]: network-cleanup.service: Deactivated successfully. Feb 8 23:22:19.494493 systemd[1]: Stopped network-cleanup.service. Feb 8 23:22:19.495601 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Feb 8 23:22:19.495690 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Feb 8 23:22:19.496839 systemd[1]: Reached target initrd-switch-root.target. Feb 8 23:22:19.498482 systemd[1]: Starting initrd-switch-root.service... Feb 8 23:22:19.516200 systemd[1]: Switching root. Feb 8 23:22:19.535839 systemd-journald[185]: Journal stopped Feb 8 23:22:23.795083 systemd-journald[185]: Received SIGTERM from PID 1 (systemd). Feb 8 23:22:23.795141 kernel: SELinux: Class mctp_socket not defined in policy. Feb 8 23:22:23.795163 kernel: SELinux: Class anon_inode not defined in policy. Feb 8 23:22:23.795175 kernel: SELinux: the above unknown classes and permissions will be allowed Feb 8 23:22:23.795187 kernel: SELinux: policy capability network_peer_controls=1 Feb 8 23:22:23.795198 kernel: SELinux: policy capability open_perms=1 Feb 8 23:22:23.795212 kernel: SELinux: policy capability extended_socket_class=1 Feb 8 23:22:23.795223 kernel: SELinux: policy capability always_check_network=0 Feb 8 23:22:23.795234 kernel: SELinux: policy capability cgroup_seclabel=1 Feb 8 23:22:23.795245 kernel: SELinux: policy capability nnp_nosuid_transition=1 Feb 8 23:22:23.795259 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Feb 8 23:22:23.795270 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Feb 8 23:22:23.795282 systemd[1]: Successfully loaded SELinux policy in 101.219ms. Feb 8 23:22:23.795304 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 20.829ms. Feb 8 23:22:23.795320 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 8 23:22:23.795332 systemd[1]: Detected virtualization kvm. Feb 8 23:22:23.795345 systemd[1]: Detected architecture x86-64. Feb 8 23:22:23.795356 systemd[1]: Detected first boot. Feb 8 23:22:23.795368 systemd[1]: Hostname set to . Feb 8 23:22:23.795380 systemd[1]: Initializing machine ID from VM UUID. Feb 8 23:22:23.795392 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Feb 8 23:22:23.795404 systemd[1]: Populated /etc with preset unit settings. Feb 8 23:22:23.795421 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 8 23:22:23.795434 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 8 23:22:23.795448 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 8 23:22:23.795465 systemd[1]: initrd-switch-root.service: Deactivated successfully. Feb 8 23:22:23.795477 systemd[1]: Stopped initrd-switch-root.service. Feb 8 23:22:23.795488 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Feb 8 23:22:23.795502 systemd[1]: Created slice system-addon\x2dconfig.slice. Feb 8 23:22:23.795514 systemd[1]: Created slice system-addon\x2drun.slice. Feb 8 23:22:23.795529 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Feb 8 23:22:23.795541 systemd[1]: Created slice system-getty.slice. Feb 8 23:22:23.795554 systemd[1]: Created slice system-modprobe.slice. Feb 8 23:22:23.795565 systemd[1]: Created slice system-serial\x2dgetty.slice. Feb 8 23:22:23.795578 systemd[1]: Created slice system-system\x2dcloudinit.slice. Feb 8 23:22:23.795589 systemd[1]: Created slice system-systemd\x2dfsck.slice. Feb 8 23:22:23.795601 systemd[1]: Created slice user.slice. Feb 8 23:22:23.795615 systemd[1]: Started systemd-ask-password-console.path. Feb 8 23:22:23.795626 systemd[1]: Started systemd-ask-password-wall.path. Feb 8 23:22:23.795638 systemd[1]: Set up automount boot.automount. Feb 8 23:22:23.795650 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Feb 8 23:22:23.795662 systemd[1]: Stopped target initrd-switch-root.target. Feb 8 23:22:23.795674 systemd[1]: Stopped target initrd-fs.target. Feb 8 23:22:23.795688 systemd[1]: Stopped target initrd-root-fs.target. Feb 8 23:22:23.795701 systemd[1]: Reached target integritysetup.target. Feb 8 23:22:23.795712 systemd[1]: Reached target remote-cryptsetup.target. Feb 8 23:22:23.795724 systemd[1]: Reached target remote-fs.target. Feb 8 23:22:23.795736 systemd[1]: Reached target slices.target. Feb 8 23:22:23.795763 systemd[1]: Reached target swap.target. Feb 8 23:22:23.795776 systemd[1]: Reached target torcx.target. Feb 8 23:22:23.795787 systemd[1]: Reached target veritysetup.target. Feb 8 23:22:23.795799 systemd[1]: Listening on systemd-coredump.socket. Feb 8 23:22:23.795811 systemd[1]: Listening on systemd-initctl.socket. Feb 8 23:22:23.795825 systemd[1]: Listening on systemd-networkd.socket. Feb 8 23:22:23.795837 systemd[1]: Listening on systemd-udevd-control.socket. Feb 8 23:22:23.795849 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 8 23:22:23.795861 systemd[1]: Listening on systemd-userdbd.socket. Feb 8 23:22:23.795873 systemd[1]: Mounting dev-hugepages.mount... Feb 8 23:22:23.795884 systemd[1]: Mounting dev-mqueue.mount... Feb 8 23:22:23.795897 systemd[1]: Mounting media.mount... Feb 8 23:22:23.795909 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Feb 8 23:22:23.795921 systemd[1]: Mounting sys-kernel-debug.mount... Feb 8 23:22:23.795935 systemd[1]: Mounting sys-kernel-tracing.mount... Feb 8 23:22:23.795948 systemd[1]: Mounting tmp.mount... Feb 8 23:22:23.795961 systemd[1]: Starting flatcar-tmpfiles.service... Feb 8 23:22:23.795973 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Feb 8 23:22:23.795985 systemd[1]: Starting kmod-static-nodes.service... Feb 8 23:22:23.795997 systemd[1]: Starting modprobe@configfs.service... Feb 8 23:22:23.796008 systemd[1]: Starting modprobe@dm_mod.service... Feb 8 23:22:23.796020 systemd[1]: Starting modprobe@drm.service... Feb 8 23:22:23.796032 systemd[1]: Starting modprobe@efi_pstore.service... Feb 8 23:22:23.796046 systemd[1]: Starting modprobe@fuse.service... Feb 8 23:22:23.796058 systemd[1]: Starting modprobe@loop.service... Feb 8 23:22:23.796070 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Feb 8 23:22:23.796082 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Feb 8 23:22:23.799995 systemd[1]: Stopped systemd-fsck-root.service. Feb 8 23:22:23.800035 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Feb 8 23:22:23.800068 systemd[1]: Stopped systemd-fsck-usr.service. Feb 8 23:22:23.800091 systemd[1]: Stopped systemd-journald.service. Feb 8 23:22:23.800112 systemd[1]: Starting systemd-journald.service... Feb 8 23:22:23.800141 systemd[1]: Starting systemd-modules-load.service... Feb 8 23:22:23.800164 systemd[1]: Starting systemd-network-generator.service... Feb 8 23:22:23.800186 systemd[1]: Starting systemd-remount-fs.service... Feb 8 23:22:23.800208 systemd[1]: Starting systemd-udev-trigger.service... Feb 8 23:22:23.800230 systemd[1]: verity-setup.service: Deactivated successfully. Feb 8 23:22:23.800249 systemd[1]: Stopped verity-setup.service. Feb 8 23:22:23.800270 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Feb 8 23:22:23.800292 systemd[1]: Mounted dev-hugepages.mount. Feb 8 23:22:23.800313 systemd[1]: Mounted dev-mqueue.mount. Feb 8 23:22:23.800339 systemd[1]: Mounted media.mount. Feb 8 23:22:23.800359 systemd[1]: Mounted sys-kernel-debug.mount. Feb 8 23:22:23.800380 systemd[1]: Mounted sys-kernel-tracing.mount. Feb 8 23:22:23.800402 systemd[1]: Mounted tmp.mount. Feb 8 23:22:23.800424 systemd[1]: Finished kmod-static-nodes.service. Feb 8 23:22:23.800443 systemd[1]: modprobe@configfs.service: Deactivated successfully. Feb 8 23:22:23.800463 systemd[1]: Finished modprobe@configfs.service. Feb 8 23:22:23.800483 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Feb 8 23:22:23.800504 systemd[1]: Finished modprobe@dm_mod.service. Feb 8 23:22:23.800531 systemd[1]: modprobe@drm.service: Deactivated successfully. Feb 8 23:22:23.800553 systemd[1]: Finished modprobe@drm.service. Feb 8 23:22:23.800575 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Feb 8 23:22:23.800600 systemd-journald[916]: Journal started Feb 8 23:22:23.800676 systemd-journald[916]: Runtime Journal (/run/log/journal/02b806320fdb46c484101aa3ffa26567) is 4.9M, max 39.5M, 34.5M free. Feb 8 23:22:19.893000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Feb 8 23:22:20.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 8 23:22:20.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 8 23:22:20.033000 audit: BPF prog-id=10 op=LOAD Feb 8 23:22:20.033000 audit: BPF prog-id=10 op=UNLOAD Feb 8 23:22:20.033000 audit: BPF prog-id=11 op=LOAD Feb 8 23:22:20.033000 audit: BPF prog-id=11 op=UNLOAD Feb 8 23:22:20.220000 audit[850]: AVC avc: denied { associate } for pid=850 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Feb 8 23:22:20.220000 audit[850]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001178d2 a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=833 pid=850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:20.220000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 8 23:22:20.223000 audit[850]: AVC avc: denied { associate } for pid=850 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Feb 8 23:22:20.223000 audit[850]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001179a9 a2=1ed a3=0 items=2 ppid=833 pid=850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:20.223000 audit: CWD cwd="/" Feb 8 23:22:20.223000 audit: PATH item=0 name=(null) inode=2 dev=00:1a mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:20.223000 audit: PATH item=1 name=(null) inode=3 dev=00:1a mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:20.223000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 8 23:22:23.585000 audit: BPF prog-id=12 op=LOAD Feb 8 23:22:23.585000 audit: BPF prog-id=3 op=UNLOAD Feb 8 23:22:23.585000 audit: BPF prog-id=13 op=LOAD Feb 8 23:22:23.585000 audit: BPF prog-id=14 op=LOAD Feb 8 23:22:23.585000 audit: BPF prog-id=4 op=UNLOAD Feb 8 23:22:23.585000 audit: BPF prog-id=5 op=UNLOAD Feb 8 23:22:23.586000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.591000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.591000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.593000 audit: BPF prog-id=12 op=UNLOAD Feb 8 23:22:23.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.713000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.714000 audit: BPF prog-id=15 op=LOAD Feb 8 23:22:23.714000 audit: BPF prog-id=16 op=LOAD Feb 8 23:22:23.714000 audit: BPF prog-id=17 op=LOAD Feb 8 23:22:23.714000 audit: BPF prog-id=13 op=UNLOAD Feb 8 23:22:23.714000 audit: BPF prog-id=14 op=UNLOAD Feb 8 23:22:23.739000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.789000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.793000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Feb 8 23:22:23.793000 audit[916]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffecfdd8060 a2=4000 a3=7ffecfdd80fc items=0 ppid=1 pid=916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:23.793000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Feb 8 23:22:23.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.793000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.797000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:20.216298 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:20Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 8 23:22:23.584153 systemd[1]: Queued start job for default target multi-user.target. Feb 8 23:22:23.806424 systemd[1]: Finished modprobe@efi_pstore.service. Feb 8 23:22:23.806453 systemd[1]: Started systemd-journald.service. Feb 8 23:22:23.804000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.804000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:20.218218 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:20Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 8 23:22:23.584165 systemd[1]: Unnecessary job was removed for dev-vda6.device. Feb 8 23:22:20.218245 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:20Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 8 23:22:23.587488 systemd[1]: systemd-journald.service: Deactivated successfully. Feb 8 23:22:20.218332 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:20Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Feb 8 23:22:20.218347 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:20Z" level=debug msg="skipped missing lower profile" missing profile=oem Feb 8 23:22:20.218386 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:20Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Feb 8 23:22:20.218403 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:20Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Feb 8 23:22:23.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:20.218689 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:20Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Feb 8 23:22:20.218775 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:20Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 8 23:22:20.218795 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:20Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 8 23:22:20.219766 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:20Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Feb 8 23:22:20.219812 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:20Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Feb 8 23:22:20.219836 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:20Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.2: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.2 Feb 8 23:22:20.219856 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:20Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Feb 8 23:22:20.219880 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:20Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.2: no such file or directory" path=/var/lib/torcx/store/3510.3.2 Feb 8 23:22:20.219898 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:20Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Feb 8 23:22:23.137225 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:23Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 8 23:22:23.808774 kernel: fuse: init (API version 7.34) Feb 8 23:22:23.137514 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:23Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 8 23:22:23.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.137641 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:23Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 8 23:22:23.810240 systemd[1]: Finished systemd-modules-load.service. Feb 8 23:22:23.137884 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:23Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 8 23:22:23.137946 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:23Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Feb 8 23:22:23.138010 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-02-08T23:22:23Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Feb 8 23:22:23.811520 systemd[1]: Finished systemd-network-generator.service. Feb 8 23:22:23.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.812353 systemd[1]: Finished systemd-remount-fs.service. Feb 8 23:22:23.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.814466 systemd[1]: Reached target network-pre.target. Feb 8 23:22:23.816979 systemd[1]: Mounting sys-kernel-config.mount... Feb 8 23:22:23.820422 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Feb 8 23:22:23.822588 systemd[1]: Starting systemd-hwdb-update.service... Feb 8 23:22:23.824624 systemd[1]: Starting systemd-journal-flush.service... Feb 8 23:22:23.825183 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Feb 8 23:22:23.827616 systemd[1]: Starting systemd-random-seed.service... Feb 8 23:22:23.830332 systemd[1]: Starting systemd-sysctl.service... Feb 8 23:22:23.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.833000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.832882 systemd[1]: modprobe@fuse.service: Deactivated successfully. Feb 8 23:22:23.833052 systemd[1]: Finished modprobe@fuse.service. Feb 8 23:22:23.833965 systemd[1]: Mounted sys-kernel-config.mount. Feb 8 23:22:23.838115 systemd[1]: Mounting sys-fs-fuse-connections.mount... Feb 8 23:22:23.842601 systemd[1]: Mounted sys-fs-fuse-connections.mount. Feb 8 23:22:23.849444 systemd-journald[916]: Time spent on flushing to /var/log/journal/02b806320fdb46c484101aa3ffa26567 is 45.547ms for 1124 entries. Feb 8 23:22:23.849444 systemd-journald[916]: System Journal (/var/log/journal/02b806320fdb46c484101aa3ffa26567) is 8.0M, max 584.8M, 576.8M free. Feb 8 23:22:23.946286 systemd-journald[916]: Received client request to flush runtime journal. Feb 8 23:22:23.946369 kernel: loop: module loaded Feb 8 23:22:23.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.861000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.922000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.947000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.858734 systemd[1]: modprobe@loop.service: Deactivated successfully. Feb 8 23:22:23.861689 systemd[1]: Finished modprobe@loop.service. Feb 8 23:22:23.948964 udevadm[962]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Feb 8 23:22:23.862683 systemd[1]: Finished systemd-random-seed.service. Feb 8 23:22:23.863602 systemd[1]: Reached target first-boot-complete.target. Feb 8 23:22:23.864141 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Feb 8 23:22:23.881979 systemd[1]: Finished systemd-sysctl.service. Feb 8 23:22:23.912549 systemd[1]: Finished flatcar-tmpfiles.service. Feb 8 23:22:23.914475 systemd[1]: Starting systemd-sysusers.service... Feb 8 23:22:23.922453 systemd[1]: Finished systemd-udev-trigger.service. Feb 8 23:22:23.924152 systemd[1]: Starting systemd-udev-settle.service... Feb 8 23:22:23.947695 systemd[1]: Finished systemd-journal-flush.service. Feb 8 23:22:23.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:23.978995 systemd[1]: Finished systemd-sysusers.service. Feb 8 23:22:23.980548 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 8 23:22:24.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:24.021578 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 8 23:22:25.042630 systemd[1]: Finished systemd-hwdb-update.service. Feb 8 23:22:25.056049 kernel: kauditd_printk_skb: 96 callbacks suppressed Feb 8 23:22:25.056186 kernel: audit: type=1130 audit(1707434545.043:135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:25.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:25.059400 kernel: audit: type=1334 audit(1707434545.045:136): prog-id=18 op=LOAD Feb 8 23:22:25.045000 audit: BPF prog-id=18 op=LOAD Feb 8 23:22:25.057198 systemd[1]: Starting systemd-udevd.service... Feb 8 23:22:25.055000 audit: BPF prog-id=19 op=LOAD Feb 8 23:22:25.055000 audit: BPF prog-id=7 op=UNLOAD Feb 8 23:22:25.055000 audit: BPF prog-id=8 op=UNLOAD Feb 8 23:22:25.066290 kernel: audit: type=1334 audit(1707434545.055:137): prog-id=19 op=LOAD Feb 8 23:22:25.066396 kernel: audit: type=1334 audit(1707434545.055:138): prog-id=7 op=UNLOAD Feb 8 23:22:25.066455 kernel: audit: type=1334 audit(1707434545.055:139): prog-id=8 op=UNLOAD Feb 8 23:22:25.105687 systemd-udevd[965]: Using default interface naming scheme 'v252'. Feb 8 23:22:25.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:25.804896 kernel: audit: type=1130 audit(1707434545.794:140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:25.794380 systemd[1]: Started systemd-udevd.service. Feb 8 23:22:25.804000 audit: BPF prog-id=20 op=LOAD Feb 8 23:22:25.809018 systemd[1]: Starting systemd-networkd.service... Feb 8 23:22:25.812246 kernel: audit: type=1334 audit(1707434545.804:141): prog-id=20 op=LOAD Feb 8 23:22:25.834259 kernel: audit: type=1334 audit(1707434545.827:142): prog-id=21 op=LOAD Feb 8 23:22:25.834442 kernel: audit: type=1334 audit(1707434545.830:143): prog-id=22 op=LOAD Feb 8 23:22:25.827000 audit: BPF prog-id=21 op=LOAD Feb 8 23:22:25.830000 audit: BPF prog-id=22 op=LOAD Feb 8 23:22:25.835000 audit: BPF prog-id=23 op=LOAD Feb 8 23:22:25.841814 kernel: audit: type=1334 audit(1707434545.835:144): prog-id=23 op=LOAD Feb 8 23:22:25.839939 systemd[1]: Starting systemd-userdbd.service... Feb 8 23:22:25.905187 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Feb 8 23:22:25.936155 systemd[1]: Started systemd-userdbd.service. Feb 8 23:22:25.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:25.951761 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 Feb 8 23:22:25.940000 audit[976]: AVC avc: denied { confidentiality } for pid=976 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Feb 8 23:22:25.966158 kernel: ACPI: button: Power Button [PWRF] Feb 8 23:22:25.940000 audit[976]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=564ea0e56030 a1=32194 a2=7f01dc10cbc5 a3=5 items=108 ppid=965 pid=976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:25.940000 audit: CWD cwd="/" Feb 8 23:22:25.940000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=1 name=(null) inode=12854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=2 name=(null) inode=12854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=3 name=(null) inode=12855 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=4 name=(null) inode=12854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=5 name=(null) inode=12856 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=6 name=(null) inode=12854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=7 name=(null) inode=12857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=8 name=(null) inode=12857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=9 name=(null) inode=12858 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=10 name=(null) inode=12857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=11 name=(null) inode=12859 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=12 name=(null) inode=12857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=13 name=(null) inode=12860 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=14 name=(null) inode=12857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=15 name=(null) inode=12861 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=16 name=(null) inode=12857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=17 name=(null) inode=12862 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=18 name=(null) inode=12854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=19 name=(null) inode=12863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=20 name=(null) inode=12863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=21 name=(null) inode=12864 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=22 name=(null) inode=12863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=23 name=(null) inode=12865 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=24 name=(null) inode=12863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=25 name=(null) inode=12866 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=26 name=(null) inode=12863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=27 name=(null) inode=12867 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=28 name=(null) inode=12863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=29 name=(null) inode=12868 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=30 name=(null) inode=12854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=31 name=(null) inode=12869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=32 name=(null) inode=12869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=33 name=(null) inode=12870 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=34 name=(null) inode=12869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=35 name=(null) inode=12871 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=36 name=(null) inode=12869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=37 name=(null) inode=12872 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=38 name=(null) inode=12869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=39 name=(null) inode=12879 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=40 name=(null) inode=12869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=41 name=(null) inode=12880 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=42 name=(null) inode=12854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=43 name=(null) inode=12881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=44 name=(null) inode=12881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=45 name=(null) inode=12882 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=46 name=(null) inode=12881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=47 name=(null) inode=12883 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=48 name=(null) inode=12881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=49 name=(null) inode=12884 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=50 name=(null) inode=12881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=51 name=(null) inode=12885 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=52 name=(null) inode=12881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=53 name=(null) inode=12886 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=55 name=(null) inode=12887 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=56 name=(null) inode=12887 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=57 name=(null) inode=12888 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=58 name=(null) inode=12887 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=59 name=(null) inode=12889 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=60 name=(null) inode=12887 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=61 name=(null) inode=12890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=62 name=(null) inode=12890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=63 name=(null) inode=12891 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=64 name=(null) inode=12890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=65 name=(null) inode=12892 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=66 name=(null) inode=12890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=67 name=(null) inode=12893 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=68 name=(null) inode=12890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=69 name=(null) inode=12894 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=70 name=(null) inode=12890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=71 name=(null) inode=12895 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=72 name=(null) inode=12887 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=73 name=(null) inode=12896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=74 name=(null) inode=12896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=75 name=(null) inode=12897 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=76 name=(null) inode=12896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=77 name=(null) inode=12898 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=78 name=(null) inode=12896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=79 name=(null) inode=12901 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=80 name=(null) inode=12896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=81 name=(null) inode=12902 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=82 name=(null) inode=12896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=83 name=(null) inode=12903 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=84 name=(null) inode=12887 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=85 name=(null) inode=12904 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=86 name=(null) inode=12904 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=87 name=(null) inode=12905 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=88 name=(null) inode=12904 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=89 name=(null) inode=12906 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=90 name=(null) inode=12904 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=91 name=(null) inode=12907 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=92 name=(null) inode=12904 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=93 name=(null) inode=12908 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=94 name=(null) inode=12904 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=95 name=(null) inode=12909 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=96 name=(null) inode=12887 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=97 name=(null) inode=12910 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=98 name=(null) inode=12910 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=99 name=(null) inode=12911 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=100 name=(null) inode=12910 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=101 name=(null) inode=12912 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=102 name=(null) inode=12910 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=103 name=(null) inode=12913 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=104 name=(null) inode=12910 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=105 name=(null) inode=12914 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=106 name=(null) inode=12910 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PATH item=107 name=(null) inode=12915 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:22:25.940000 audit: PROCTITLE proctitle="(udev-worker)" Feb 8 23:22:26.029159 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Feb 8 23:22:26.028329 systemd-networkd[972]: lo: Link UP Feb 8 23:22:26.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:26.028341 systemd-networkd[972]: lo: Gained carrier Feb 8 23:22:26.028824 systemd-networkd[972]: Enumeration completed Feb 8 23:22:26.028949 systemd[1]: Started systemd-networkd.service. Feb 8 23:22:26.029121 systemd-networkd[972]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 8 23:22:26.032081 systemd-networkd[972]: eth0: Link UP Feb 8 23:22:26.032088 systemd-networkd[972]: eth0: Gained carrier Feb 8 23:22:26.041775 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input4 Feb 8 23:22:26.045273 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 8 23:22:26.047205 systemd-networkd[972]: eth0: DHCPv4 address 172.24.4.155/24, gateway 172.24.4.1 acquired from 172.24.4.1 Feb 8 23:22:26.047881 kernel: mousedev: PS/2 mouse device common for all mice Feb 8 23:22:26.098217 systemd[1]: Finished systemd-udev-settle.service. Feb 8 23:22:26.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:26.100046 systemd[1]: Starting lvm2-activation-early.service... Feb 8 23:22:26.127299 lvm[994]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 8 23:22:26.159297 systemd[1]: Finished lvm2-activation-early.service. Feb 8 23:22:26.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:26.160882 systemd[1]: Reached target cryptsetup.target. Feb 8 23:22:26.164777 systemd[1]: Starting lvm2-activation.service... Feb 8 23:22:26.168874 lvm[995]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 8 23:22:26.193719 systemd[1]: Finished lvm2-activation.service. Feb 8 23:22:26.194388 systemd[1]: Reached target local-fs-pre.target. Feb 8 23:22:26.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:26.194887 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Feb 8 23:22:26.194914 systemd[1]: Reached target local-fs.target. Feb 8 23:22:26.195361 systemd[1]: Reached target machines.target. Feb 8 23:22:26.196992 systemd[1]: Starting ldconfig.service... Feb 8 23:22:26.198387 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Feb 8 23:22:26.198436 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 8 23:22:26.199597 systemd[1]: Starting systemd-boot-update.service... Feb 8 23:22:26.201991 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Feb 8 23:22:26.203608 systemd[1]: Starting systemd-machine-id-commit.service... Feb 8 23:22:26.204874 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Feb 8 23:22:26.204919 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Feb 8 23:22:26.206119 systemd[1]: Starting systemd-tmpfiles-setup.service... Feb 8 23:22:26.222054 systemd[1]: boot.automount: Got automount request for /boot, triggered by 997 (bootctl) Feb 8 23:22:26.223280 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Feb 8 23:22:26.234779 systemd-tmpfiles[1000]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Feb 8 23:22:26.236362 systemd-tmpfiles[1000]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Feb 8 23:22:26.239998 systemd-tmpfiles[1000]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Feb 8 23:22:26.247613 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Feb 8 23:22:26.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:26.300620 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Feb 8 23:22:26.303195 systemd[1]: Finished systemd-machine-id-commit.service. Feb 8 23:22:26.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:26.485564 systemd-fsck[1005]: fsck.fat 4.2 (2021-01-31) Feb 8 23:22:26.485564 systemd-fsck[1005]: /dev/vda1: 789 files, 115332/258078 clusters Feb 8 23:22:26.488210 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Feb 8 23:22:26.488000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:26.492665 systemd[1]: Mounting boot.mount... Feb 8 23:22:26.520530 systemd[1]: Mounted boot.mount. Feb 8 23:22:26.654105 systemd[1]: Finished systemd-boot-update.service. Feb 8 23:22:26.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:26.901505 systemd[1]: Finished systemd-tmpfiles-setup.service. Feb 8 23:22:26.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:26.905484 systemd[1]: Starting audit-rules.service... Feb 8 23:22:26.908683 systemd[1]: Starting clean-ca-certificates.service... Feb 8 23:22:26.915000 audit: BPF prog-id=24 op=LOAD Feb 8 23:22:26.912542 systemd[1]: Starting systemd-journal-catalog-update.service... Feb 8 23:22:26.918112 systemd[1]: Starting systemd-resolved.service... Feb 8 23:22:26.921000 audit: BPF prog-id=25 op=LOAD Feb 8 23:22:26.924612 systemd[1]: Starting systemd-timesyncd.service... Feb 8 23:22:26.933315 systemd[1]: Starting systemd-update-utmp.service... Feb 8 23:22:26.952000 audit[1013]: SYSTEM_BOOT pid=1013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Feb 8 23:22:26.956087 systemd[1]: Finished systemd-update-utmp.service. Feb 8 23:22:26.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:26.984531 systemd[1]: Finished clean-ca-certificates.service. Feb 8 23:22:26.984000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:26.985143 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Feb 8 23:22:27.029932 systemd[1]: Finished systemd-journal-catalog-update.service. Feb 8 23:22:27.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:27.043000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Feb 8 23:22:27.043000 audit[1028]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe8b4289e0 a2=420 a3=0 items=0 ppid=1008 pid=1028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:27.043000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Feb 8 23:22:27.045370 augenrules[1028]: No rules Feb 8 23:22:27.045597 systemd[1]: Finished audit-rules.service. Feb 8 23:22:27.048636 systemd-resolved[1011]: Positive Trust Anchors: Feb 8 23:22:27.048651 systemd-resolved[1011]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 8 23:22:27.048689 systemd-resolved[1011]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 8 23:22:27.057760 systemd[1]: Started systemd-timesyncd.service. Feb 8 23:22:27.058410 systemd[1]: Reached target time-set.target. Feb 8 23:22:27.071660 systemd-resolved[1011]: Using system hostname 'ci-3510-3-2-2-def1b47031.novalocal'. Feb 8 23:22:27.073572 systemd[1]: Started systemd-resolved.service. Feb 8 23:22:27.074168 systemd[1]: Reached target network.target. Feb 8 23:22:27.074649 systemd[1]: Reached target nss-lookup.target. Feb 8 23:22:27.085251 systemd-timesyncd[1012]: Contacted time server 51.178.79.86:123 (0.flatcar.pool.ntp.org). Feb 8 23:22:27.085543 systemd-timesyncd[1012]: Initial clock synchronization to Thu 2024-02-08 23:22:26.886377 UTC. Feb 8 23:22:27.514040 ldconfig[996]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Feb 8 23:22:27.535002 systemd[1]: Finished ldconfig.service. Feb 8 23:22:27.538742 systemd[1]: Starting systemd-update-done.service... Feb 8 23:22:27.552188 systemd[1]: Finished systemd-update-done.service. Feb 8 23:22:27.553559 systemd[1]: Reached target sysinit.target. Feb 8 23:22:27.554919 systemd[1]: Started motdgen.path. Feb 8 23:22:27.556173 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Feb 8 23:22:27.557714 systemd[1]: Started logrotate.timer. Feb 8 23:22:27.558978 systemd[1]: Started mdadm.timer. Feb 8 23:22:27.560006 systemd[1]: Started systemd-tmpfiles-clean.timer. Feb 8 23:22:27.561109 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Feb 8 23:22:27.561183 systemd[1]: Reached target paths.target. Feb 8 23:22:27.562262 systemd[1]: Reached target timers.target. Feb 8 23:22:27.564636 systemd[1]: Listening on dbus.socket. Feb 8 23:22:27.568021 systemd[1]: Starting docker.socket... Feb 8 23:22:27.574858 systemd[1]: Listening on sshd.socket. Feb 8 23:22:27.576183 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 8 23:22:27.577143 systemd[1]: Listening on docker.socket. Feb 8 23:22:27.587522 systemd[1]: Reached target sockets.target. Feb 8 23:22:27.588597 systemd[1]: Reached target basic.target. Feb 8 23:22:27.589794 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 8 23:22:27.589860 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 8 23:22:27.592129 systemd[1]: Starting containerd.service... Feb 8 23:22:27.595086 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Feb 8 23:22:27.598408 systemd[1]: Starting dbus.service... Feb 8 23:22:27.604719 systemd[1]: Starting enable-oem-cloudinit.service... Feb 8 23:22:27.608231 systemd[1]: Starting extend-filesystems.service... Feb 8 23:22:27.609673 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Feb 8 23:22:27.612281 systemd[1]: Starting motdgen.service... Feb 8 23:22:27.622935 systemd[1]: Starting prepare-cni-plugins.service... Feb 8 23:22:27.625990 systemd[1]: Starting prepare-critools.service... Feb 8 23:22:27.629005 systemd[1]: Starting prepare-helm.service... Feb 8 23:22:27.633294 systemd[1]: Starting ssh-key-proc-cmdline.service... Feb 8 23:22:27.634936 systemd[1]: Starting sshd-keygen.service... Feb 8 23:22:27.640861 systemd[1]: Starting systemd-logind.service... Feb 8 23:22:27.641348 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 8 23:22:27.641400 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Feb 8 23:22:27.641866 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Feb 8 23:22:27.642400 systemd[1]: Starting update-engine.service... Feb 8 23:22:27.643799 systemd[1]: Starting update-ssh-keys-after-ignition.service... Feb 8 23:22:27.655014 systemd-networkd[972]: eth0: Gained IPv6LL Feb 8 23:22:27.668244 jq[1053]: true Feb 8 23:22:27.671588 tar[1056]: crictl Feb 8 23:22:27.677503 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Feb 8 23:22:27.677652 systemd[1]: Finished ssh-key-proc-cmdline.service. Feb 8 23:22:27.679117 tar[1055]: ./ Feb 8 23:22:27.679117 tar[1055]: ./loopback Feb 8 23:22:27.680620 jq[1042]: false Feb 8 23:22:27.680866 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Feb 8 23:22:27.681005 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Feb 8 23:22:27.681613 tar[1057]: linux-amd64/helm Feb 8 23:22:27.697079 jq[1064]: true Feb 8 23:22:27.724530 dbus-daemon[1039]: [system] SELinux support is enabled Feb 8 23:22:27.724976 systemd[1]: Started dbus.service. Feb 8 23:22:27.727431 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Feb 8 23:22:27.727459 systemd[1]: Reached target system-config.target. Feb 8 23:22:27.727959 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Feb 8 23:22:27.727981 systemd[1]: Reached target user-config.target. Feb 8 23:22:27.743000 extend-filesystems[1043]: Found vda Feb 8 23:22:27.743000 extend-filesystems[1043]: Found vda1 Feb 8 23:22:27.743000 extend-filesystems[1043]: Found vda2 Feb 8 23:22:27.743000 extend-filesystems[1043]: Found vda3 Feb 8 23:22:27.743000 extend-filesystems[1043]: Found usr Feb 8 23:22:27.743000 extend-filesystems[1043]: Found vda4 Feb 8 23:22:27.743000 extend-filesystems[1043]: Found vda6 Feb 8 23:22:27.743000 extend-filesystems[1043]: Found vda7 Feb 8 23:22:27.743000 extend-filesystems[1043]: Found vda9 Feb 8 23:22:27.752261 extend-filesystems[1043]: Checking size of /dev/vda9 Feb 8 23:22:27.757933 systemd[1]: motdgen.service: Deactivated successfully. Feb 8 23:22:27.758098 systemd[1]: Finished motdgen.service. Feb 8 23:22:27.771541 extend-filesystems[1043]: Resized partition /dev/vda9 Feb 8 23:22:27.779038 extend-filesystems[1097]: resize2fs 1.46.5 (30-Dec-2021) Feb 8 23:22:27.808988 update_engine[1052]: I0208 23:22:27.804502 1052 main.cc:92] Flatcar Update Engine starting Feb 8 23:22:27.812730 env[1058]: time="2024-02-08T23:22:27.812042781Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Feb 8 23:22:27.822803 kernel: EXT4-fs (vda9): resizing filesystem from 1617920 to 4635643 blocks Feb 8 23:22:27.823999 systemd[1]: Started update-engine.service. Feb 8 23:22:27.829579 update_engine[1052]: I0208 23:22:27.828064 1052 update_check_scheduler.cc:74] Next update check in 7m57s Feb 8 23:22:27.826776 systemd[1]: Started locksmithd.service. Feb 8 23:22:27.891598 tar[1055]: ./bandwidth Feb 8 23:22:27.908355 systemd-logind[1051]: Watching system buttons on /dev/input/event1 (Power Button) Feb 8 23:22:27.908715 systemd-logind[1051]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Feb 8 23:22:27.912277 bash[1094]: Updated "/home/core/.ssh/authorized_keys" Feb 8 23:22:27.912780 systemd-logind[1051]: New seat seat0. Feb 8 23:22:27.913141 systemd[1]: Finished update-ssh-keys-after-ignition.service. Feb 8 23:22:27.917549 kernel: EXT4-fs (vda9): resized filesystem to 4635643 Feb 8 23:22:28.034511 coreos-metadata[1038]: Feb 08 23:22:27.922 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys: Attempt #1 Feb 8 23:22:28.034888 env[1058]: time="2024-02-08T23:22:27.924140450Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Feb 8 23:22:28.034888 env[1058]: time="2024-02-08T23:22:28.034488768Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Feb 8 23:22:27.920951 systemd[1]: Started systemd-logind.service. Feb 8 23:22:28.038922 extend-filesystems[1097]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Feb 8 23:22:28.038922 extend-filesystems[1097]: old_desc_blocks = 1, new_desc_blocks = 3 Feb 8 23:22:28.038922 extend-filesystems[1097]: The filesystem on /dev/vda9 is now 4635643 (4k) blocks long. Feb 8 23:22:28.044633 extend-filesystems[1043]: Resized filesystem in /dev/vda9 Feb 8 23:22:28.045230 env[1058]: time="2024-02-08T23:22:28.043963591Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.148-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Feb 8 23:22:28.045230 env[1058]: time="2024-02-08T23:22:28.044031521Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Feb 8 23:22:28.045230 env[1058]: time="2024-02-08T23:22:28.044559902Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 8 23:22:28.045230 env[1058]: time="2024-02-08T23:22:28.044607354Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Feb 8 23:22:28.045230 env[1058]: time="2024-02-08T23:22:28.044654484Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Feb 8 23:22:28.045230 env[1058]: time="2024-02-08T23:22:28.044684301Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Feb 8 23:22:28.045230 env[1058]: time="2024-02-08T23:22:28.045088421Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Feb 8 23:22:28.040951 systemd[1]: extend-filesystems.service: Deactivated successfully. Feb 8 23:22:28.041363 systemd[1]: Finished extend-filesystems.service. Feb 8 23:22:28.051684 env[1058]: time="2024-02-08T23:22:28.051629249Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Feb 8 23:22:28.052086 env[1058]: time="2024-02-08T23:22:28.052030094Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 8 23:22:28.052131 env[1058]: time="2024-02-08T23:22:28.052093461Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Feb 8 23:22:28.052272 env[1058]: time="2024-02-08T23:22:28.052228910Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Feb 8 23:22:28.052317 env[1058]: time="2024-02-08T23:22:28.052273500Z" level=info msg="metadata content store policy set" policy=shared Feb 8 23:22:28.065474 env[1058]: time="2024-02-08T23:22:28.065415553Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Feb 8 23:22:28.065591 env[1058]: time="2024-02-08T23:22:28.065491455Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Feb 8 23:22:28.065591 env[1058]: time="2024-02-08T23:22:28.065526401Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Feb 8 23:22:28.065964 env[1058]: time="2024-02-08T23:22:28.065638110Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Feb 8 23:22:28.066058 env[1058]: time="2024-02-08T23:22:28.066010926Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Feb 8 23:22:28.066126 env[1058]: time="2024-02-08T23:22:28.066080233Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Feb 8 23:22:28.066183 env[1058]: time="2024-02-08T23:22:28.066143170Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Feb 8 23:22:28.066241 env[1058]: time="2024-02-08T23:22:28.066205052Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Feb 8 23:22:28.066285 env[1058]: time="2024-02-08T23:22:28.066260290Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Feb 8 23:22:28.066337 env[1058]: time="2024-02-08T23:22:28.066302242Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Feb 8 23:22:28.066377 env[1058]: time="2024-02-08T23:22:28.066352312Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Feb 8 23:22:28.066432 env[1058]: time="2024-02-08T23:22:28.066394440Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Feb 8 23:22:28.066715 env[1058]: time="2024-02-08T23:22:28.066671639Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Feb 8 23:22:28.066992 env[1058]: time="2024-02-08T23:22:28.066945663Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Feb 8 23:22:28.068140 env[1058]: time="2024-02-08T23:22:28.068081962Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Feb 8 23:22:28.068248 env[1058]: time="2024-02-08T23:22:28.068208061Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Feb 8 23:22:28.068308 env[1058]: time="2024-02-08T23:22:28.068263622Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Feb 8 23:22:28.068549 env[1058]: time="2024-02-08T23:22:28.068396052Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Feb 8 23:22:28.068597 env[1058]: time="2024-02-08T23:22:28.068570815Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Feb 8 23:22:28.068642 env[1058]: time="2024-02-08T23:22:28.068611858Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Feb 8 23:22:28.068676 env[1058]: time="2024-02-08T23:22:28.068645124Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Feb 8 23:22:28.068706 env[1058]: time="2024-02-08T23:22:28.068678918Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Feb 8 23:22:28.068737 env[1058]: time="2024-02-08T23:22:28.068713796Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Feb 8 23:22:28.068798 env[1058]: time="2024-02-08T23:22:28.068777691Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Feb 8 23:22:28.068853 env[1058]: time="2024-02-08T23:22:28.068814386Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Feb 8 23:22:28.068900 env[1058]: time="2024-02-08T23:22:28.068865590Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Feb 8 23:22:28.069276 env[1058]: time="2024-02-08T23:22:28.069223234Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Feb 8 23:22:28.069330 env[1058]: time="2024-02-08T23:22:28.069283093Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Feb 8 23:22:28.069330 env[1058]: time="2024-02-08T23:22:28.069316780Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Feb 8 23:22:28.069397 env[1058]: time="2024-02-08T23:22:28.069353260Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Feb 8 23:22:28.069431 env[1058]: time="2024-02-08T23:22:28.069393141Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Feb 8 23:22:28.069470 env[1058]: time="2024-02-08T23:22:28.069422987Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Feb 8 23:22:28.069501 env[1058]: time="2024-02-08T23:22:28.069462253Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Feb 8 23:22:28.069573 env[1058]: time="2024-02-08T23:22:28.069540137Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Feb 8 23:22:28.070236 env[1058]: time="2024-02-08T23:22:28.070098630Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Feb 8 23:22:28.074214 env[1058]: time="2024-02-08T23:22:28.070265068Z" level=info msg="Connect containerd service" Feb 8 23:22:28.074214 env[1058]: time="2024-02-08T23:22:28.070334365Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Feb 8 23:22:28.075763 env[1058]: time="2024-02-08T23:22:28.075688756Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 8 23:22:28.076599 env[1058]: time="2024-02-08T23:22:28.076560165Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Feb 8 23:22:28.076714 env[1058]: time="2024-02-08T23:22:28.076680735Z" level=info msg=serving... address=/run/containerd/containerd.sock Feb 8 23:22:28.079419 env[1058]: time="2024-02-08T23:22:28.079040010Z" level=info msg="Start subscribing containerd event" Feb 8 23:22:28.079419 env[1058]: time="2024-02-08T23:22:28.079114163Z" level=info msg="Start recovering state" Feb 8 23:22:28.079419 env[1058]: time="2024-02-08T23:22:28.079184007Z" level=info msg="Start event monitor" Feb 8 23:22:28.079419 env[1058]: time="2024-02-08T23:22:28.079196767Z" level=info msg="Start snapshots syncer" Feb 8 23:22:28.079419 env[1058]: time="2024-02-08T23:22:28.079207240Z" level=info msg="Start cni network conf syncer for default" Feb 8 23:22:28.079419 env[1058]: time="2024-02-08T23:22:28.079217176Z" level=info msg="Start streaming server" Feb 8 23:22:28.099400 env[1058]: time="2024-02-08T23:22:28.099364603Z" level=info msg="containerd successfully booted in 0.293703s" Feb 8 23:22:28.099419 systemd[1]: Started containerd.service. Feb 8 23:22:28.121378 tar[1055]: ./ptp Feb 8 23:22:28.162702 tar[1055]: ./vlan Feb 8 23:22:28.203982 tar[1055]: ./host-device Feb 8 23:22:28.243502 tar[1055]: ./tuning Feb 8 23:22:28.278505 tar[1055]: ./vrf Feb 8 23:22:28.314784 tar[1055]: ./sbr Feb 8 23:22:28.342429 coreos-metadata[1038]: Feb 08 23:22:28.342 INFO Fetch successful Feb 8 23:22:28.342429 coreos-metadata[1038]: Feb 08 23:22:28.342 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key: Attempt #1 Feb 8 23:22:28.349495 tar[1055]: ./tap Feb 8 23:22:28.360219 coreos-metadata[1038]: Feb 08 23:22:28.359 INFO Fetch successful Feb 8 23:22:28.364864 unknown[1038]: wrote ssh authorized keys file for user: core Feb 8 23:22:28.389007 update-ssh-keys[1109]: Updated "/home/core/.ssh/authorized_keys" Feb 8 23:22:28.389372 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Feb 8 23:22:28.415714 tar[1055]: ./dhcp Feb 8 23:22:28.611024 tar[1055]: ./static Feb 8 23:22:28.667254 tar[1055]: ./firewall Feb 8 23:22:28.751539 tar[1055]: ./macvlan Feb 8 23:22:28.824622 tar[1055]: ./dummy Feb 8 23:22:28.910320 tar[1055]: ./bridge Feb 8 23:22:28.961183 tar[1057]: linux-amd64/LICENSE Feb 8 23:22:28.961183 tar[1057]: linux-amd64/README.md Feb 8 23:22:28.967782 systemd[1]: Finished prepare-helm.service. Feb 8 23:22:28.980455 tar[1055]: ./ipvlan Feb 8 23:22:29.020321 tar[1055]: ./portmap Feb 8 23:22:29.057542 tar[1055]: ./host-local Feb 8 23:22:29.085062 systemd[1]: Finished prepare-critools.service. Feb 8 23:22:29.117503 systemd[1]: Finished prepare-cni-plugins.service. Feb 8 23:22:29.144619 locksmithd[1100]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Feb 8 23:22:30.025808 sshd_keygen[1068]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Feb 8 23:22:30.052583 systemd[1]: Finished sshd-keygen.service. Feb 8 23:22:30.056760 systemd[1]: Starting issuegen.service... Feb 8 23:22:30.063456 systemd[1]: issuegen.service: Deactivated successfully. Feb 8 23:22:30.063836 systemd[1]: Finished issuegen.service. Feb 8 23:22:30.067592 systemd[1]: Starting systemd-user-sessions.service... Feb 8 23:22:30.073351 systemd[1]: Finished systemd-user-sessions.service. Feb 8 23:22:30.077409 systemd[1]: Started getty@tty1.service. Feb 8 23:22:30.081234 systemd[1]: Started serial-getty@ttyS0.service. Feb 8 23:22:30.082953 systemd[1]: Reached target getty.target. Feb 8 23:22:30.084226 systemd[1]: Reached target multi-user.target. Feb 8 23:22:30.090963 systemd[1]: Starting systemd-update-utmp-runlevel.service... Feb 8 23:22:30.105690 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Feb 8 23:22:30.106066 systemd[1]: Finished systemd-update-utmp-runlevel.service. Feb 8 23:22:30.107504 systemd[1]: Startup finished in 944ms (kernel) + 1min 28.001s (initrd) + 10.347s (userspace) = 1min 39.293s. Feb 8 23:22:36.827068 systemd[1]: Created slice system-sshd.slice. Feb 8 23:22:36.830263 systemd[1]: Started sshd@0-172.24.4.155:22-172.24.4.1:34342.service. Feb 8 23:22:38.386902 sshd[1130]: Accepted publickey for core from 172.24.4.1 port 34342 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:22:38.391120 sshd[1130]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:22:38.419681 systemd[1]: Created slice user-500.slice. Feb 8 23:22:38.422999 systemd[1]: Starting user-runtime-dir@500.service... Feb 8 23:22:38.431906 systemd-logind[1051]: New session 1 of user core. Feb 8 23:22:38.445684 systemd[1]: Finished user-runtime-dir@500.service. Feb 8 23:22:38.449738 systemd[1]: Starting user@500.service... Feb 8 23:22:38.457982 (systemd)[1133]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:22:38.594800 systemd[1133]: Queued start job for default target default.target. Feb 8 23:22:38.596037 systemd[1133]: Reached target paths.target. Feb 8 23:22:38.596198 systemd[1133]: Reached target sockets.target. Feb 8 23:22:38.596313 systemd[1133]: Reached target timers.target. Feb 8 23:22:38.596418 systemd[1133]: Reached target basic.target. Feb 8 23:22:38.596643 systemd[1]: Started user@500.service. Feb 8 23:22:38.597665 systemd[1]: Started session-1.scope. Feb 8 23:22:38.598820 systemd[1133]: Reached target default.target. Feb 8 23:22:38.598985 systemd[1133]: Startup finished in 128ms. Feb 8 23:22:39.064052 systemd[1]: Started sshd@1-172.24.4.155:22-172.24.4.1:34344.service. Feb 8 23:22:40.257992 sshd[1142]: Accepted publickey for core from 172.24.4.1 port 34344 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:22:40.261250 sshd[1142]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:22:40.270865 systemd-logind[1051]: New session 2 of user core. Feb 8 23:22:40.272631 systemd[1]: Started session-2.scope. Feb 8 23:22:40.814925 sshd[1142]: pam_unix(sshd:session): session closed for user core Feb 8 23:22:40.823381 systemd[1]: sshd@1-172.24.4.155:22-172.24.4.1:34344.service: Deactivated successfully. Feb 8 23:22:40.825059 systemd[1]: session-2.scope: Deactivated successfully. Feb 8 23:22:40.826558 systemd-logind[1051]: Session 2 logged out. Waiting for processes to exit. Feb 8 23:22:40.829314 systemd[1]: Started sshd@2-172.24.4.155:22-172.24.4.1:34358.service. Feb 8 23:22:40.832877 systemd-logind[1051]: Removed session 2. Feb 8 23:22:42.030492 sshd[1148]: Accepted publickey for core from 172.24.4.1 port 34358 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:22:42.033275 sshd[1148]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:22:42.045066 systemd-logind[1051]: New session 3 of user core. Feb 8 23:22:42.046925 systemd[1]: Started session-3.scope. Feb 8 23:22:42.566897 sshd[1148]: pam_unix(sshd:session): session closed for user core Feb 8 23:22:42.573890 systemd[1]: Started sshd@3-172.24.4.155:22-172.24.4.1:34364.service. Feb 8 23:22:42.578385 systemd[1]: sshd@2-172.24.4.155:22-172.24.4.1:34358.service: Deactivated successfully. Feb 8 23:22:42.579896 systemd[1]: session-3.scope: Deactivated successfully. Feb 8 23:22:42.583024 systemd-logind[1051]: Session 3 logged out. Waiting for processes to exit. Feb 8 23:22:42.585556 systemd-logind[1051]: Removed session 3. Feb 8 23:22:44.033060 sshd[1153]: Accepted publickey for core from 172.24.4.1 port 34364 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:22:44.036270 sshd[1153]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:22:44.045628 systemd-logind[1051]: New session 4 of user core. Feb 8 23:22:44.046471 systemd[1]: Started session-4.scope. Feb 8 23:22:44.823303 sshd[1153]: pam_unix(sshd:session): session closed for user core Feb 8 23:22:44.834233 systemd[1]: Started sshd@4-172.24.4.155:22-172.24.4.1:38966.service. Feb 8 23:22:44.836004 systemd[1]: sshd@3-172.24.4.155:22-172.24.4.1:34364.service: Deactivated successfully. Feb 8 23:22:44.838448 systemd[1]: session-4.scope: Deactivated successfully. Feb 8 23:22:44.845113 systemd-logind[1051]: Session 4 logged out. Waiting for processes to exit. Feb 8 23:22:44.848893 systemd-logind[1051]: Removed session 4. Feb 8 23:22:46.188816 sshd[1159]: Accepted publickey for core from 172.24.4.1 port 38966 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:22:46.191398 sshd[1159]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:22:46.201219 systemd-logind[1051]: New session 5 of user core. Feb 8 23:22:46.201969 systemd[1]: Started session-5.scope. Feb 8 23:22:46.559121 sudo[1163]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Feb 8 23:22:46.560040 sudo[1163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 8 23:22:46.571201 dbus-daemon[1039]: \xd0\u001dȯWU: received setenforce notice (enforcing=-1262733248) Feb 8 23:22:46.575244 sudo[1163]: pam_unix(sudo:session): session closed for user root Feb 8 23:22:46.803385 sshd[1159]: pam_unix(sshd:session): session closed for user core Feb 8 23:22:46.815180 systemd[1]: Started sshd@5-172.24.4.155:22-172.24.4.1:38972.service. Feb 8 23:22:46.817827 systemd[1]: sshd@4-172.24.4.155:22-172.24.4.1:38966.service: Deactivated successfully. Feb 8 23:22:46.819917 systemd[1]: session-5.scope: Deactivated successfully. Feb 8 23:22:46.823123 systemd-logind[1051]: Session 5 logged out. Waiting for processes to exit. Feb 8 23:22:46.826915 systemd-logind[1051]: Removed session 5. Feb 8 23:22:47.994596 sshd[1166]: Accepted publickey for core from 172.24.4.1 port 38972 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:22:47.999531 sshd[1166]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:22:48.011319 systemd-logind[1051]: New session 6 of user core. Feb 8 23:22:48.012031 systemd[1]: Started session-6.scope. Feb 8 23:22:48.472503 sudo[1171]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Feb 8 23:22:48.473047 sudo[1171]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 8 23:22:48.479421 sudo[1171]: pam_unix(sudo:session): session closed for user root Feb 8 23:22:48.489292 sudo[1170]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Feb 8 23:22:48.489793 sudo[1170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 8 23:22:48.510737 systemd[1]: Stopping audit-rules.service... Feb 8 23:22:48.512000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 8 23:22:48.515305 kernel: kauditd_printk_skb: 131 callbacks suppressed Feb 8 23:22:48.515521 kernel: audit: type=1305 audit(1707434568.512:163): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 8 23:22:48.512000 audit[1174]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcd83a3150 a2=420 a3=0 items=0 ppid=1 pid=1174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:48.520442 auditctl[1174]: No rules Feb 8 23:22:48.520892 kernel: audit: type=1300 audit(1707434568.512:163): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcd83a3150 a2=420 a3=0 items=0 ppid=1 pid=1174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:48.512000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Feb 8 23:22:48.534171 systemd[1]: audit-rules.service: Deactivated successfully. Feb 8 23:22:48.538804 kernel: audit: type=1327 audit(1707434568.512:163): proctitle=2F7362696E2F617564697463746C002D44 Feb 8 23:22:48.534567 systemd[1]: Stopped audit-rules.service. Feb 8 23:22:48.533000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:48.550081 kernel: audit: type=1131 audit(1707434568.533:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:48.547300 systemd[1]: Starting audit-rules.service... Feb 8 23:22:48.585521 augenrules[1191]: No rules Feb 8 23:22:48.587431 systemd[1]: Finished audit-rules.service. Feb 8 23:22:48.586000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:48.592427 sudo[1170]: pam_unix(sudo:session): session closed for user root Feb 8 23:22:48.599842 kernel: audit: type=1130 audit(1707434568.586:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:48.599979 kernel: audit: type=1106 audit(1707434568.587:166): pid=1170 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:22:48.587000 audit[1170]: USER_END pid=1170 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:22:48.587000 audit[1170]: CRED_DISP pid=1170 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:22:48.623849 kernel: audit: type=1104 audit(1707434568.587:167): pid=1170 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:22:48.792213 sshd[1166]: pam_unix(sshd:session): session closed for user core Feb 8 23:22:48.799073 systemd[1]: sshd@5-172.24.4.155:22-172.24.4.1:38972.service: Deactivated successfully. Feb 8 23:22:48.795000 audit[1166]: USER_END pid=1166 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:22:48.801013 systemd[1]: session-6.scope: Deactivated successfully. Feb 8 23:22:48.809192 systemd[1]: Started sshd@6-172.24.4.155:22-172.24.4.1:38974.service. Feb 8 23:22:48.813655 systemd-logind[1051]: Session 6 logged out. Waiting for processes to exit. Feb 8 23:22:48.814111 kernel: audit: type=1106 audit(1707434568.795:168): pid=1166 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:22:48.795000 audit[1166]: CRED_DISP pid=1166 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:22:48.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.24.4.155:22-172.24.4.1:38972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:48.834604 kernel: audit: type=1104 audit(1707434568.795:169): pid=1166 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:22:48.834913 kernel: audit: type=1131 audit(1707434568.798:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.24.4.155:22-172.24.4.1:38972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:48.834907 systemd-logind[1051]: Removed session 6. Feb 8 23:22:48.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.155:22-172.24.4.1:38974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:50.035000 audit[1197]: USER_ACCT pid=1197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:22:50.036560 sshd[1197]: Accepted publickey for core from 172.24.4.1 port 38974 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:22:50.037000 audit[1197]: CRED_ACQ pid=1197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:22:50.037000 audit[1197]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcee3d40c0 a2=3 a3=0 items=0 ppid=1 pid=1197 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:50.037000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:22:50.039615 sshd[1197]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:22:50.048862 systemd-logind[1051]: New session 7 of user core. Feb 8 23:22:50.050297 systemd[1]: Started session-7.scope. Feb 8 23:22:50.062000 audit[1197]: USER_START pid=1197 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:22:50.065000 audit[1199]: CRED_ACQ pid=1199 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:22:50.576000 audit[1200]: USER_ACCT pid=1200 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:22:50.578580 sudo[1200]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Feb 8 23:22:50.577000 audit[1200]: CRED_REFR pid=1200 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:22:50.579848 sudo[1200]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 8 23:22:50.582000 audit[1200]: USER_START pid=1200 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:22:51.345937 systemd[1]: Starting systemd-networkd-wait-online.service... Feb 8 23:22:51.374436 systemd[1]: Finished systemd-networkd-wait-online.service. Feb 8 23:22:51.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:51.375244 systemd[1]: Reached target network-online.target. Feb 8 23:22:51.378198 systemd[1]: Starting docker.service... Feb 8 23:22:51.465328 env[1216]: time="2024-02-08T23:22:51.465232834Z" level=info msg="Starting up" Feb 8 23:22:51.467922 env[1216]: time="2024-02-08T23:22:51.467880411Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 8 23:22:51.468099 env[1216]: time="2024-02-08T23:22:51.468064575Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 8 23:22:51.468262 env[1216]: time="2024-02-08T23:22:51.468224560Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 8 23:22:51.468384 env[1216]: time="2024-02-08T23:22:51.468356026Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 8 23:22:51.471433 env[1216]: time="2024-02-08T23:22:51.471389193Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 8 23:22:51.471639 env[1216]: time="2024-02-08T23:22:51.471606399Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 8 23:22:51.471820 env[1216]: time="2024-02-08T23:22:51.471783839Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 8 23:22:51.472011 env[1216]: time="2024-02-08T23:22:51.471981121Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 8 23:22:51.872817 env[1216]: time="2024-02-08T23:22:51.871867597Z" level=info msg="Loading containers: start." Feb 8 23:22:52.115000 audit[1248]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1248 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:52.115000 audit[1248]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffcc8bd4430 a2=0 a3=7ffcc8bd441c items=0 ppid=1216 pid=1248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:52.115000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Feb 8 23:22:52.120000 audit[1250]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1250 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:52.120000 audit[1250]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff4f984480 a2=0 a3=7fff4f98446c items=0 ppid=1216 pid=1250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:52.120000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Feb 8 23:22:52.124000 audit[1252]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1252 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:52.124000 audit[1252]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fffb5648c10 a2=0 a3=7fffb5648bfc items=0 ppid=1216 pid=1252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:52.124000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 8 23:22:52.131000 audit[1254]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1254 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:52.131000 audit[1254]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd0c194080 a2=0 a3=7ffd0c19406c items=0 ppid=1216 pid=1254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:52.131000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 8 23:22:52.165000 audit[1256]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1256 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:52.165000 audit[1256]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd952c2d90 a2=0 a3=7ffd952c2d7c items=0 ppid=1216 pid=1256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:52.165000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Feb 8 23:22:52.190000 audit[1261]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1261 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:52.190000 audit[1261]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffef9c7b520 a2=0 a3=7ffef9c7b50c items=0 ppid=1216 pid=1261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:52.190000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Feb 8 23:22:52.544000 audit[1263]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1263 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:52.544000 audit[1263]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe52bb4620 a2=0 a3=7ffe52bb460c items=0 ppid=1216 pid=1263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:52.544000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Feb 8 23:22:52.550000 audit[1265]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1265 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:52.550000 audit[1265]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffe64ed2a90 a2=0 a3=7ffe64ed2a7c items=0 ppid=1216 pid=1265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:52.550000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Feb 8 23:22:52.556000 audit[1267]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1267 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:52.556000 audit[1267]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff6260f020 a2=0 a3=7fff6260f00c items=0 ppid=1216 pid=1267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:52.556000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 8 23:22:52.883000 audit[1271]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1271 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:52.883000 audit[1271]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffce12aac40 a2=0 a3=7ffce12aac2c items=0 ppid=1216 pid=1271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:52.883000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 8 23:22:52.887000 audit[1272]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1272 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:52.887000 audit[1272]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff8fa62fa0 a2=0 a3=7fff8fa62f8c items=0 ppid=1216 pid=1272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:52.887000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 8 23:22:52.911805 kernel: Initializing XFRM netlink socket Feb 8 23:22:53.001568 env[1216]: time="2024-02-08T23:22:53.001516883Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Feb 8 23:22:53.046000 audit[1281]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1281 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:53.046000 audit[1281]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffc76c9ee60 a2=0 a3=7ffc76c9ee4c items=0 ppid=1216 pid=1281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:53.046000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Feb 8 23:22:53.060000 audit[1284]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1284 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:53.060000 audit[1284]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffeab2b0610 a2=0 a3=7ffeab2b05fc items=0 ppid=1216 pid=1284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:53.060000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Feb 8 23:22:53.065000 audit[1287]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1287 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:53.065000 audit[1287]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd30719310 a2=0 a3=7ffd307192fc items=0 ppid=1216 pid=1287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:53.065000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Feb 8 23:22:53.067000 audit[1289]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:53.067000 audit[1289]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc8d0827b0 a2=0 a3=7ffc8d08279c items=0 ppid=1216 pid=1289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:53.067000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Feb 8 23:22:53.069000 audit[1291]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1291 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:53.069000 audit[1291]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffcf03f4f40 a2=0 a3=7ffcf03f4f2c items=0 ppid=1216 pid=1291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:53.069000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Feb 8 23:22:53.072000 audit[1293]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1293 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:53.072000 audit[1293]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffe3f15f8c0 a2=0 a3=7ffe3f15f8ac items=0 ppid=1216 pid=1293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:53.072000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Feb 8 23:22:53.074000 audit[1295]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1295 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:53.074000 audit[1295]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffdc41f0530 a2=0 a3=7ffdc41f051c items=0 ppid=1216 pid=1295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:53.074000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Feb 8 23:22:53.090000 audit[1298]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:53.090000 audit[1298]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fff5c789710 a2=0 a3=7fff5c7896fc items=0 ppid=1216 pid=1298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:53.090000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Feb 8 23:22:53.094000 audit[1300]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1300 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:53.094000 audit[1300]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fff8e911f80 a2=0 a3=7fff8e911f6c items=0 ppid=1216 pid=1300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:53.094000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 8 23:22:53.097000 audit[1302]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1302 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:53.097000 audit[1302]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffe7b3a90f0 a2=0 a3=7ffe7b3a90dc items=0 ppid=1216 pid=1302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:53.097000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 8 23:22:53.100000 audit[1304]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1304 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:53.100000 audit[1304]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffffbaef2c0 a2=0 a3=7ffffbaef2ac items=0 ppid=1216 pid=1304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:53.100000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Feb 8 23:22:53.101520 systemd-networkd[972]: docker0: Link UP Feb 8 23:22:53.122000 audit[1308]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1308 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:53.122000 audit[1308]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc7c3cd6f0 a2=0 a3=7ffc7c3cd6dc items=0 ppid=1216 pid=1308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:53.122000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 8 23:22:53.125000 audit[1309]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1309 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:22:53.125000 audit[1309]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe76c07df0 a2=0 a3=7ffe76c07ddc items=0 ppid=1216 pid=1309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:22:53.125000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 8 23:22:53.127198 env[1216]: time="2024-02-08T23:22:53.127125027Z" level=info msg="Loading containers: done." Feb 8 23:22:53.150237 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3644491236-merged.mount: Deactivated successfully. Feb 8 23:22:53.187319 env[1216]: time="2024-02-08T23:22:53.187210296Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Feb 8 23:22:53.187726 env[1216]: time="2024-02-08T23:22:53.187680313Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Feb 8 23:22:53.188115 env[1216]: time="2024-02-08T23:22:53.188049871Z" level=info msg="Daemon has completed initialization" Feb 8 23:22:53.259031 systemd[1]: Started docker.service. Feb 8 23:22:53.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:53.280009 env[1216]: time="2024-02-08T23:22:53.279874538Z" level=info msg="API listen on /run/docker.sock" Feb 8 23:22:53.331614 systemd[1]: Reloading. Feb 8 23:22:53.462934 /usr/lib/systemd/system-generators/torcx-generator[1355]: time="2024-02-08T23:22:53Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 8 23:22:53.462966 /usr/lib/systemd/system-generators/torcx-generator[1355]: time="2024-02-08T23:22:53Z" level=info msg="torcx already run" Feb 8 23:22:53.540997 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 8 23:22:53.541017 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 8 23:22:53.567992 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 8 23:22:53.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.635294 kernel: kauditd_printk_skb: 85 callbacks suppressed Feb 8 23:22:53.635346 kernel: audit: type=1400 audit(1707434573.633:206): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.641486 kernel: audit: type=1400 audit(1707434573.637:207): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.645975 kernel: audit: type=1400 audit(1707434573.637:208): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.654351 kernel: audit: type=1400 audit(1707434573.637:209): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.654642 kernel: audit: type=1400 audit(1707434573.637:210): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.663633 kernel: audit: type=1400 audit(1707434573.637:211): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.663702 kernel: audit: type=1400 audit(1707434573.637:212): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.672482 kernel: audit: type=1400 audit(1707434573.637:213): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.672682 kernel: audit: type=1400 audit(1707434573.641:214): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.641000 audit: BPF prog-id=31 op=LOAD Feb 8 23:22:53.674952 kernel: audit: type=1334 audit(1707434573.641:215): prog-id=31 op=LOAD Feb 8 23:22:53.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.644000 audit: BPF prog-id=32 op=LOAD Feb 8 23:22:53.645000 audit: BPF prog-id=18 op=UNLOAD Feb 8 23:22:53.645000 audit: BPF prog-id=19 op=UNLOAD Feb 8 23:22:53.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.653000 audit: BPF prog-id=33 op=LOAD Feb 8 23:22:53.653000 audit: BPF prog-id=29 op=UNLOAD Feb 8 23:22:53.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.667000 audit: BPF prog-id=34 op=LOAD Feb 8 23:22:53.667000 audit: BPF prog-id=26 op=UNLOAD Feb 8 23:22:53.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.671000 audit: BPF prog-id=35 op=LOAD Feb 8 23:22:53.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.673000 audit: BPF prog-id=36 op=LOAD Feb 8 23:22:53.674000 audit: BPF prog-id=27 op=UNLOAD Feb 8 23:22:53.674000 audit: BPF prog-id=28 op=UNLOAD Feb 8 23:22:53.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.676000 audit: BPF prog-id=37 op=LOAD Feb 8 23:22:53.676000 audit: BPF prog-id=15 op=UNLOAD Feb 8 23:22:53.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.677000 audit: BPF prog-id=38 op=LOAD Feb 8 23:22:53.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.677000 audit: BPF prog-id=39 op=LOAD Feb 8 23:22:53.678000 audit: BPF prog-id=16 op=UNLOAD Feb 8 23:22:53.678000 audit: BPF prog-id=17 op=UNLOAD Feb 8 23:22:53.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.682000 audit: BPF prog-id=40 op=LOAD Feb 8 23:22:53.682000 audit: BPF prog-id=20 op=UNLOAD Feb 8 23:22:53.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.685000 audit: BPF prog-id=41 op=LOAD Feb 8 23:22:53.685000 audit: BPF prog-id=21 op=UNLOAD Feb 8 23:22:53.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.686000 audit: BPF prog-id=42 op=LOAD Feb 8 23:22:53.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.687000 audit: BPF prog-id=43 op=LOAD Feb 8 23:22:53.687000 audit: BPF prog-id=22 op=UNLOAD Feb 8 23:22:53.687000 audit: BPF prog-id=23 op=UNLOAD Feb 8 23:22:53.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.692000 audit: BPF prog-id=44 op=LOAD Feb 8 23:22:53.692000 audit: BPF prog-id=24 op=UNLOAD Feb 8 23:22:53.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:22:53.695000 audit: BPF prog-id=45 op=LOAD Feb 8 23:22:53.695000 audit: BPF prog-id=25 op=UNLOAD Feb 8 23:22:53.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:22:53.725874 systemd[1]: Started kubelet.service. Feb 8 23:22:53.822189 kubelet[1401]: E0208 23:22:53.822091 1401 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Feb 8 23:22:53.824468 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 8 23:22:53.824633 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 8 23:22:53.824000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 8 23:22:54.801918 env[1058]: time="2024-02-08T23:22:54.801837097Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.10\"" Feb 8 23:22:55.727008 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3128535826.mount: Deactivated successfully. Feb 8 23:22:59.036803 env[1058]: time="2024-02-08T23:22:59.036661402Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:22:59.043077 env[1058]: time="2024-02-08T23:22:59.042963621Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7968fc5c824ed95404f421a90882835f250220c0fd799b4fceef340dd5585ed5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:22:59.050090 env[1058]: time="2024-02-08T23:22:59.049983011Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:22:59.055704 env[1058]: time="2024-02-08T23:22:59.055641096Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:cfcebda74d6e665b68931d3589ee69fde81cd503ff3169888e4502af65579d98,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:22:59.059123 env[1058]: time="2024-02-08T23:22:59.059011125Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.10\" returns image reference \"sha256:7968fc5c824ed95404f421a90882835f250220c0fd799b4fceef340dd5585ed5\"" Feb 8 23:22:59.092857 env[1058]: time="2024-02-08T23:22:59.092793639Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.10\"" Feb 8 23:23:03.928037 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Feb 8 23:23:03.943892 kernel: kauditd_printk_skb: 164 callbacks suppressed Feb 8 23:23:03.944020 kernel: audit: type=1130 audit(1707434583.926:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:03.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:03.928567 systemd[1]: Stopped kubelet.service. Feb 8 23:23:03.932062 systemd[1]: Started kubelet.service. Feb 8 23:23:03.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:03.954938 kernel: audit: type=1131 audit(1707434583.926:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:03.930000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:03.965820 kernel: audit: type=1130 audit(1707434583.930:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:04.054251 kubelet[1425]: E0208 23:23:04.054176 1425 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Feb 8 23:23:04.061824 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 8 23:23:04.062011 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 8 23:23:04.060000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 8 23:23:04.071946 kernel: audit: type=1131 audit(1707434584.060:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 8 23:23:04.088269 env[1058]: time="2024-02-08T23:23:04.088157074Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:04.136275 env[1058]: time="2024-02-08T23:23:04.136164191Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c8134be729ba23c6e0c3e5dd52c393fc8d3cfc688bcec33540f64bb0137b67e0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:04.157892 env[1058]: time="2024-02-08T23:23:04.157806403Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:04.176642 env[1058]: time="2024-02-08T23:23:04.176494770Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:fa168ebca1f6dbfe86ef0a690e007531c1f53569274fc7dc2774fe228b6ce8c2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:04.182335 env[1058]: time="2024-02-08T23:23:04.180531276Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.10\" returns image reference \"sha256:c8134be729ba23c6e0c3e5dd52c393fc8d3cfc688bcec33540f64bb0137b67e0\"" Feb 8 23:23:04.208718 env[1058]: time="2024-02-08T23:23:04.208624426Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.10\"" Feb 8 23:23:07.084522 env[1058]: time="2024-02-08T23:23:07.077448082Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:07.084522 env[1058]: time="2024-02-08T23:23:07.085116643Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5eed9876e7181341b7015e3486dfd234f8e0d0d7d3d19b1bb971d720cd320975,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:07.094104 env[1058]: time="2024-02-08T23:23:07.091950218Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:07.100131 env[1058]: time="2024-02-08T23:23:07.098590270Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:09294de61e63987f181077cbc2f5c82463878af9cd8ecc6110c54150c9ae3143,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:07.101818 env[1058]: time="2024-02-08T23:23:07.100933017Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.10\" returns image reference \"sha256:5eed9876e7181341b7015e3486dfd234f8e0d0d7d3d19b1bb971d720cd320975\"" Feb 8 23:23:07.132850 env[1058]: time="2024-02-08T23:23:07.132737204Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.10\"" Feb 8 23:23:08.646420 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4224367077.mount: Deactivated successfully. Feb 8 23:23:10.061289 env[1058]: time="2024-02-08T23:23:10.061065430Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:10.065058 env[1058]: time="2024-02-08T23:23:10.064990084Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:db7b01e105753475c198490cf875df1314fd1a599f67ea1b184586cb399e1cae,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:10.068021 env[1058]: time="2024-02-08T23:23:10.067978824Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:10.070670 env[1058]: time="2024-02-08T23:23:10.070643964Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d084b53c772f62ec38fddb2348a82d4234016daf6cd43fedbf0b3281f3790f88,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:10.072007 env[1058]: time="2024-02-08T23:23:10.071928075Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.10\" returns image reference \"sha256:db7b01e105753475c198490cf875df1314fd1a599f67ea1b184586cb399e1cae\"" Feb 8 23:23:10.098266 env[1058]: time="2024-02-08T23:23:10.098193592Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Feb 8 23:23:10.757623 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2839708674.mount: Deactivated successfully. Feb 8 23:23:10.770489 env[1058]: time="2024-02-08T23:23:10.770404451Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:10.773483 env[1058]: time="2024-02-08T23:23:10.773403299Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:10.776817 env[1058]: time="2024-02-08T23:23:10.776702591Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:10.780149 env[1058]: time="2024-02-08T23:23:10.780077794Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:10.781969 env[1058]: time="2024-02-08T23:23:10.781889924Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Feb 8 23:23:10.806585 env[1058]: time="2024-02-08T23:23:10.806521928Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Feb 8 23:23:11.980625 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4091881870.mount: Deactivated successfully. Feb 8 23:23:12.822033 update_engine[1052]: I0208 23:23:12.821976 1052 update_attempter.cc:509] Updating boot flags... Feb 8 23:23:14.175796 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Feb 8 23:23:14.176350 systemd[1]: Stopped kubelet.service. Feb 8 23:23:14.184161 kernel: audit: type=1130 audit(1707434594.174:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:14.184276 kernel: audit: type=1131 audit(1707434594.174:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:14.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:14.174000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:14.179653 systemd[1]: Started kubelet.service. Feb 8 23:23:14.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:14.190777 kernel: audit: type=1130 audit(1707434594.174:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:14.309013 kubelet[1469]: E0208 23:23:14.308918 1469 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Feb 8 23:23:14.411675 kernel: audit: type=1131 audit(1707434594.309:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 8 23:23:14.309000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 8 23:23:14.310809 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 8 23:23:14.310962 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 8 23:23:18.548504 env[1058]: time="2024-02-08T23:23:18.548377134Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:18.554564 env[1058]: time="2024-02-08T23:23:18.554441032Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:18.559422 env[1058]: time="2024-02-08T23:23:18.559312802Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:18.563024 env[1058]: time="2024-02-08T23:23:18.562976636Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:18.563841 env[1058]: time="2024-02-08T23:23:18.563791033Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681\"" Feb 8 23:23:18.580122 env[1058]: time="2024-02-08T23:23:18.580045020Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Feb 8 23:23:19.221539 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount337958.mount: Deactivated successfully. Feb 8 23:23:21.252069 env[1058]: time="2024-02-08T23:23:21.251879467Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:21.295691 env[1058]: time="2024-02-08T23:23:21.295574884Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:21.316998 env[1058]: time="2024-02-08T23:23:21.316914100Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:21.322203 env[1058]: time="2024-02-08T23:23:21.322114476Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:21.324450 env[1058]: time="2024-02-08T23:23:21.324345822Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Feb 8 23:23:24.425200 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Feb 8 23:23:24.425451 systemd[1]: Stopped kubelet.service. Feb 8 23:23:24.437004 kernel: audit: type=1130 audit(1707434604.423:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:24.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:24.431922 systemd[1]: Started kubelet.service. Feb 8 23:23:24.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:24.446917 kernel: audit: type=1131 audit(1707434604.423:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:24.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:24.455796 kernel: audit: type=1130 audit(1707434604.426:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:24.538271 kubelet[1545]: E0208 23:23:24.538228 1545 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Feb 8 23:23:24.540345 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 8 23:23:24.540547 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 8 23:23:24.544846 kernel: audit: type=1131 audit(1707434604.539:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 8 23:23:24.539000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 8 23:23:25.147938 systemd[1]: Stopped kubelet.service. Feb 8 23:23:25.146000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:25.157827 kernel: audit: type=1130 audit(1707434605.146:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:25.146000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:25.168791 kernel: audit: type=1131 audit(1707434605.146:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:25.171019 systemd[1]: Reloading. Feb 8 23:23:25.283057 /usr/lib/systemd/system-generators/torcx-generator[1574]: time="2024-02-08T23:23:25Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 8 23:23:25.283091 /usr/lib/systemd/system-generators/torcx-generator[1574]: time="2024-02-08T23:23:25Z" level=info msg="torcx already run" Feb 8 23:23:25.355015 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 8 23:23:25.355037 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 8 23:23:25.380547 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 8 23:23:25.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.454800 kernel: audit: type=1400 audit(1707434605.443:394): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.469806 kernel: audit: type=1400 audit(1707434605.443:395): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.469922 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Feb 8 23:23:25.471967 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Feb 8 23:23:25.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.452000 audit: BPF prog-id=46 op=LOAD Feb 8 23:23:25.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.452000 audit: BPF prog-id=47 op=LOAD Feb 8 23:23:25.452000 audit: BPF prog-id=31 op=UNLOAD Feb 8 23:23:25.452000 audit: BPF prog-id=32 op=UNLOAD Feb 8 23:23:25.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.456000 audit: BPF prog-id=48 op=LOAD Feb 8 23:23:25.456000 audit: BPF prog-id=33 op=UNLOAD Feb 8 23:23:25.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.459000 audit: BPF prog-id=49 op=LOAD Feb 8 23:23:25.459000 audit: BPF prog-id=34 op=UNLOAD Feb 8 23:23:25.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.467000 audit: BPF prog-id=50 op=LOAD Feb 8 23:23:25.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.467000 audit: BPF prog-id=51 op=LOAD Feb 8 23:23:25.467000 audit: BPF prog-id=35 op=UNLOAD Feb 8 23:23:25.467000 audit: BPF prog-id=36 op=UNLOAD Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit: BPF prog-id=52 op=LOAD Feb 8 23:23:25.470000 audit: BPF prog-id=37 op=UNLOAD Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit: BPF prog-id=53 op=LOAD Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.470000 audit: BPF prog-id=54 op=LOAD Feb 8 23:23:25.470000 audit: BPF prog-id=38 op=UNLOAD Feb 8 23:23:25.471000 audit: BPF prog-id=39 op=UNLOAD Feb 8 23:23:25.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.472000 audit: BPF prog-id=55 op=LOAD Feb 8 23:23:25.472000 audit: BPF prog-id=40 op=UNLOAD Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit: BPF prog-id=56 op=LOAD Feb 8 23:23:25.473000 audit: BPF prog-id=41 op=UNLOAD Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit: BPF prog-id=57 op=LOAD Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.473000 audit: BPF prog-id=58 op=LOAD Feb 8 23:23:25.473000 audit: BPF prog-id=42 op=UNLOAD Feb 8 23:23:25.473000 audit: BPF prog-id=43 op=UNLOAD Feb 8 23:23:25.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:25.496053 systemd[1]: Started kubelet.service. Feb 8 23:23:25.562179 kubelet[1621]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 8 23:23:25.562179 kubelet[1621]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Feb 8 23:23:25.562179 kubelet[1621]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 8 23:23:25.562179 kubelet[1621]: I0208 23:23:25.562164 1621 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 8 23:23:25.802398 kubelet[1621]: I0208 23:23:25.802192 1621 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Feb 8 23:23:25.805459 kubelet[1621]: I0208 23:23:25.804984 1621 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 8 23:23:25.805459 kubelet[1621]: I0208 23:23:25.805349 1621 server.go:837] "Client rotation is on, will bootstrap in background" Feb 8 23:23:25.812281 kubelet[1621]: E0208 23:23:25.812219 1621 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.24.4.155:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.24.4.155:6443: connect: connection refused Feb 8 23:23:25.812727 kubelet[1621]: I0208 23:23:25.812654 1621 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 8 23:23:25.813089 kubelet[1621]: I0208 23:23:25.812778 1621 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 8 23:23:25.814050 kubelet[1621]: I0208 23:23:25.814004 1621 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 8 23:23:25.814498 kubelet[1621]: I0208 23:23:25.814424 1621 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Feb 8 23:23:25.814906 kubelet[1621]: I0208 23:23:25.814871 1621 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Feb 8 23:23:25.815083 kubelet[1621]: I0208 23:23:25.815059 1621 container_manager_linux.go:302] "Creating device plugin manager" Feb 8 23:23:25.815518 kubelet[1621]: I0208 23:23:25.815486 1621 state_mem.go:36] "Initialized new in-memory state store" Feb 8 23:23:25.821339 kubelet[1621]: I0208 23:23:25.821268 1621 kubelet.go:405] "Attempting to sync node with API server" Feb 8 23:23:25.821339 kubelet[1621]: I0208 23:23:25.821300 1621 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 8 23:23:25.821339 kubelet[1621]: I0208 23:23:25.821320 1621 kubelet.go:309] "Adding apiserver pod source" Feb 8 23:23:25.821339 kubelet[1621]: I0208 23:23:25.821338 1621 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 8 23:23:25.822319 kubelet[1621]: W0208 23:23:25.822210 1621 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.24.4.155:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-2-2-def1b47031.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.155:6443: connect: connection refused Feb 8 23:23:25.822569 kubelet[1621]: E0208 23:23:25.822540 1621 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.155:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-2-2-def1b47031.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.155:6443: connect: connection refused Feb 8 23:23:25.823000 kubelet[1621]: I0208 23:23:25.822969 1621 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 8 23:23:25.823785 kubelet[1621]: W0208 23:23:25.823718 1621 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Feb 8 23:23:25.827651 kubelet[1621]: I0208 23:23:25.827604 1621 server.go:1168] "Started kubelet" Feb 8 23:23:25.832085 kubelet[1621]: E0208 23:23:25.832043 1621 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 8 23:23:25.832085 kubelet[1621]: E0208 23:23:25.832081 1621 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 8 23:23:25.832376 kubelet[1621]: W0208 23:23:25.832195 1621 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.24.4.155:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.155:6443: connect: connection refused Feb 8 23:23:25.832376 kubelet[1621]: E0208 23:23:25.832247 1621 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.155:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.155:6443: connect: connection refused Feb 8 23:23:25.833213 kubelet[1621]: I0208 23:23:25.832793 1621 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Feb 8 23:23:25.834120 kubelet[1621]: I0208 23:23:25.834087 1621 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Feb 8 23:23:25.835058 kubelet[1621]: I0208 23:23:25.835019 1621 server.go:461] "Adding debug handlers to kubelet server" Feb 8 23:23:25.833000 audit[1621]: AVC avc: denied { mac_admin } for pid=1621 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.833000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 8 23:23:25.833000 audit[1621]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00080b830 a1=c000dc0420 a2=c00080b800 a3=25 items=0 ppid=1 pid=1621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:25.833000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 8 23:23:25.836557 kubelet[1621]: I0208 23:23:25.836524 1621 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 8 23:23:25.834000 audit[1621]: AVC avc: denied { mac_admin } for pid=1621 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:25.834000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 8 23:23:25.834000 audit[1621]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d8c420 a1=c000dc0438 a2=c00080b8c0 a3=25 items=0 ppid=1 pid=1621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:25.834000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 8 23:23:25.839289 kubelet[1621]: E0208 23:23:25.839108 1621 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510-3-2-2-def1b47031.novalocal.17b206ba458f1f74", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510-3-2-2-def1b47031.novalocal", UID:"ci-3510-3-2-2-def1b47031.novalocal", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510-3-2-2-def1b47031.novalocal"}, FirstTimestamp:time.Date(2024, time.February, 8, 23, 23, 25, 827530612, time.Local), LastTimestamp:time.Date(2024, time.February, 8, 23, 23, 25, 827530612, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.24.4.155:6443/api/v1/namespaces/default/events": dial tcp 172.24.4.155:6443: connect: connection refused'(may retry after sleeping) Feb 8 23:23:25.839506 kubelet[1621]: I0208 23:23:25.839294 1621 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 8 23:23:25.839506 kubelet[1621]: I0208 23:23:25.839430 1621 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 8 23:23:25.842161 kubelet[1621]: I0208 23:23:25.842107 1621 volume_manager.go:284] "Starting Kubelet Volume Manager" Feb 8 23:23:25.842568 kubelet[1621]: I0208 23:23:25.842523 1621 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Feb 8 23:23:25.849365 kubelet[1621]: E0208 23:23:25.849299 1621 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.155:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-2-2-def1b47031.novalocal?timeout=10s\": dial tcp 172.24.4.155:6443: connect: connection refused" interval="200ms" Feb 8 23:23:25.849967 kubelet[1621]: W0208 23:23:25.849871 1621 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.24.4.155:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.155:6443: connect: connection refused Feb 8 23:23:25.850165 kubelet[1621]: E0208 23:23:25.850139 1621 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.24.4.155:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.155:6443: connect: connection refused Feb 8 23:23:25.850000 audit[1632]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:25.850000 audit[1632]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffd328f3a0 a2=0 a3=7fffd328f38c items=0 ppid=1621 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:25.850000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 8 23:23:25.851000 audit[1633]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:25.851000 audit[1633]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd572b0bd0 a2=0 a3=7ffd572b0bbc items=0 ppid=1621 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:25.851000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 8 23:23:25.877000 audit[1635]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1635 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:25.877000 audit[1635]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff5a7dc2e0 a2=0 a3=7fff5a7dc2cc items=0 ppid=1621 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:25.877000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 8 23:23:25.882000 audit[1637]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1637 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:25.882000 audit[1637]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe76538e10 a2=0 a3=7ffe76538dfc items=0 ppid=1621 pid=1637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:25.882000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 8 23:23:25.894723 kubelet[1621]: I0208 23:23:25.894692 1621 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 8 23:23:25.894981 kubelet[1621]: I0208 23:23:25.894963 1621 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 8 23:23:25.895160 kubelet[1621]: I0208 23:23:25.895142 1621 state_mem.go:36] "Initialized new in-memory state store" Feb 8 23:23:25.945797 kubelet[1621]: I0208 23:23:25.945682 1621 policy_none.go:49] "None policy: Start" Feb 8 23:23:25.951357 kubelet[1621]: I0208 23:23:25.951300 1621 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:25.952826 kubelet[1621]: E0208 23:23:25.952798 1621 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.155:6443/api/v1/nodes\": dial tcp 172.24.4.155:6443: connect: connection refused" node="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:25.953691 kubelet[1621]: I0208 23:23:25.953662 1621 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 8 23:23:25.953977 kubelet[1621]: I0208 23:23:25.953950 1621 state_mem.go:35] "Initializing new in-memory state store" Feb 8 23:23:25.969962 systemd[1]: Created slice kubepods.slice. Feb 8 23:23:25.972000 audit[1644]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1644 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:25.972000 audit[1644]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffd2e4006b0 a2=0 a3=7ffd2e40069c items=0 ppid=1621 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:25.972000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Feb 8 23:23:25.976575 kubelet[1621]: I0208 23:23:25.976520 1621 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Feb 8 23:23:25.977000 audit[1645]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1645 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:25.977000 audit[1645]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffbf44dfa0 a2=0 a3=7fffbf44df8c items=0 ppid=1621 pid=1645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:25.977000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 8 23:23:25.981228 systemd[1]: Created slice kubepods-burstable.slice. Feb 8 23:23:25.982712 kubelet[1621]: I0208 23:23:25.982646 1621 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Feb 8 23:23:25.983042 kubelet[1621]: I0208 23:23:25.982986 1621 status_manager.go:207] "Starting to sync pod status with apiserver" Feb 8 23:23:25.984854 kubelet[1621]: I0208 23:23:25.984742 1621 kubelet.go:2257] "Starting kubelet main sync loop" Feb 8 23:23:25.984964 kubelet[1621]: E0208 23:23:25.984945 1621 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Feb 8 23:23:25.987230 kubelet[1621]: W0208 23:23:25.987148 1621 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.24.4.155:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.155:6443: connect: connection refused Feb 8 23:23:25.987563 kubelet[1621]: E0208 23:23:25.987536 1621 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.155:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.155:6443: connect: connection refused Feb 8 23:23:25.986000 audit[1646]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1646 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:25.986000 audit[1646]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe83e1f980 a2=0 a3=7ffe83e1f96c items=0 ppid=1621 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:25.986000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 8 23:23:25.990000 audit[1647]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1647 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:25.990000 audit[1647]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe85df09a0 a2=0 a3=7ffe85df098c items=0 ppid=1621 pid=1647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:25.990000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 8 23:23:25.992894 systemd[1]: Created slice kubepods-besteffort.slice. Feb 8 23:23:25.999000 audit[1649]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1649 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:25.999000 audit[1649]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffee056a870 a2=0 a3=7ffee056a85c items=0 ppid=1621 pid=1649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:25.999000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 8 23:23:26.001000 audit[1648]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1648 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:26.001000 audit[1621]: AVC avc: denied { mac_admin } for pid=1621 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:26.001000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 8 23:23:26.001000 audit[1621]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000fb35c0 a1=c000ff6858 a2=c000fb3590 a3=25 items=0 ppid=1 pid=1621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:26.001000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 8 23:23:26.004282 kubelet[1621]: I0208 23:23:26.003702 1621 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 8 23:23:26.004282 kubelet[1621]: I0208 23:23:26.003891 1621 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 8 23:23:26.004282 kubelet[1621]: I0208 23:23:26.004250 1621 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 8 23:23:26.001000 audit[1648]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffdafbe4950 a2=0 a3=7ffdafbe493c items=0 ppid=1621 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:26.001000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 8 23:23:26.008917 kubelet[1621]: E0208 23:23:26.008858 1621 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510-3-2-2-def1b47031.novalocal\" not found" Feb 8 23:23:26.010000 audit[1650]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=1650 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:26.010000 audit[1650]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff9007f240 a2=0 a3=7fff9007f22c items=0 ppid=1621 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:26.010000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 8 23:23:26.013000 audit[1651]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1651 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:26.013000 audit[1651]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffffdb33520 a2=0 a3=7ffffdb3350c items=0 ppid=1621 pid=1651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:26.013000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 8 23:23:26.050781 kubelet[1621]: E0208 23:23:26.050652 1621 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.155:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-2-2-def1b47031.novalocal?timeout=10s\": dial tcp 172.24.4.155:6443: connect: connection refused" interval="400ms" Feb 8 23:23:26.086279 kubelet[1621]: I0208 23:23:26.086026 1621 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:23:26.095524 kubelet[1621]: I0208 23:23:26.095462 1621 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:23:26.100718 kubelet[1621]: I0208 23:23:26.100595 1621 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:23:26.111266 systemd[1]: Created slice kubepods-burstable-pod9d6188fe482e49fc45f0f9b16546075e.slice. Feb 8 23:23:26.128997 systemd[1]: Created slice kubepods-burstable-pod90db8c46da78d05d3a707d456dc0347a.slice. Feb 8 23:23:26.140173 systemd[1]: Created slice kubepods-burstable-podb84eea70f599d146736772f1b8aef3ae.slice. Feb 8 23:23:26.144556 kubelet[1621]: I0208 23:23:26.144509 1621 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/90db8c46da78d05d3a707d456dc0347a-kubeconfig\") pod \"kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal\" (UID: \"90db8c46da78d05d3a707d456dc0347a\") " pod="kube-system/kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:26.145062 kubelet[1621]: I0208 23:23:26.145026 1621 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/90db8c46da78d05d3a707d456dc0347a-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal\" (UID: \"90db8c46da78d05d3a707d456dc0347a\") " pod="kube-system/kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:26.145733 kubelet[1621]: I0208 23:23:26.145704 1621 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9d6188fe482e49fc45f0f9b16546075e-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510-3-2-2-def1b47031.novalocal\" (UID: \"9d6188fe482e49fc45f0f9b16546075e\") " pod="kube-system/kube-apiserver-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:26.146253 kubelet[1621]: I0208 23:23:26.146132 1621 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/90db8c46da78d05d3a707d456dc0347a-k8s-certs\") pod \"kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal\" (UID: \"90db8c46da78d05d3a707d456dc0347a\") " pod="kube-system/kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:26.146385 kubelet[1621]: I0208 23:23:26.146310 1621 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/90db8c46da78d05d3a707d456dc0347a-ca-certs\") pod \"kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal\" (UID: \"90db8c46da78d05d3a707d456dc0347a\") " pod="kube-system/kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:26.146468 kubelet[1621]: I0208 23:23:26.146427 1621 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/90db8c46da78d05d3a707d456dc0347a-flexvolume-dir\") pod \"kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal\" (UID: \"90db8c46da78d05d3a707d456dc0347a\") " pod="kube-system/kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:26.146626 kubelet[1621]: I0208 23:23:26.146579 1621 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b84eea70f599d146736772f1b8aef3ae-kubeconfig\") pod \"kube-scheduler-ci-3510-3-2-2-def1b47031.novalocal\" (UID: \"b84eea70f599d146736772f1b8aef3ae\") " pod="kube-system/kube-scheduler-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:26.146957 kubelet[1621]: I0208 23:23:26.146923 1621 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9d6188fe482e49fc45f0f9b16546075e-ca-certs\") pod \"kube-apiserver-ci-3510-3-2-2-def1b47031.novalocal\" (UID: \"9d6188fe482e49fc45f0f9b16546075e\") " pod="kube-system/kube-apiserver-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:26.147264 kubelet[1621]: I0208 23:23:26.147223 1621 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9d6188fe482e49fc45f0f9b16546075e-k8s-certs\") pod \"kube-apiserver-ci-3510-3-2-2-def1b47031.novalocal\" (UID: \"9d6188fe482e49fc45f0f9b16546075e\") " pod="kube-system/kube-apiserver-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:26.156720 kubelet[1621]: I0208 23:23:26.156684 1621 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:26.157525 kubelet[1621]: E0208 23:23:26.157492 1621 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.155:6443/api/v1/nodes\": dial tcp 172.24.4.155:6443: connect: connection refused" node="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:26.426400 env[1058]: time="2024-02-08T23:23:26.426256828Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510-3-2-2-def1b47031.novalocal,Uid:9d6188fe482e49fc45f0f9b16546075e,Namespace:kube-system,Attempt:0,}" Feb 8 23:23:26.437648 env[1058]: time="2024-02-08T23:23:26.437499530Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal,Uid:90db8c46da78d05d3a707d456dc0347a,Namespace:kube-system,Attempt:0,}" Feb 8 23:23:26.449418 env[1058]: time="2024-02-08T23:23:26.449104761Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510-3-2-2-def1b47031.novalocal,Uid:b84eea70f599d146736772f1b8aef3ae,Namespace:kube-system,Attempt:0,}" Feb 8 23:23:26.451951 kubelet[1621]: E0208 23:23:26.451886 1621 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.155:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-2-2-def1b47031.novalocal?timeout=10s\": dial tcp 172.24.4.155:6443: connect: connection refused" interval="800ms" Feb 8 23:23:26.562673 kubelet[1621]: I0208 23:23:26.562005 1621 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:26.562673 kubelet[1621]: E0208 23:23:26.562630 1621 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.155:6443/api/v1/nodes\": dial tcp 172.24.4.155:6443: connect: connection refused" node="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:27.121821 kubelet[1621]: W0208 23:23:27.121664 1621 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.24.4.155:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.155:6443: connect: connection refused Feb 8 23:23:27.122172 kubelet[1621]: E0208 23:23:27.122129 1621 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.24.4.155:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.155:6443: connect: connection refused Feb 8 23:23:27.168612 kubelet[1621]: W0208 23:23:27.168552 1621 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.24.4.155:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.155:6443: connect: connection refused Feb 8 23:23:27.168612 kubelet[1621]: E0208 23:23:27.168623 1621 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.155:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.155:6443: connect: connection refused Feb 8 23:23:27.241708 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2499898255.mount: Deactivated successfully. Feb 8 23:23:27.253407 kubelet[1621]: E0208 23:23:27.253374 1621 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.155:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-2-2-def1b47031.novalocal?timeout=10s\": dial tcp 172.24.4.155:6443: connect: connection refused" interval="1.6s" Feb 8 23:23:27.261141 env[1058]: time="2024-02-08T23:23:27.261073104Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:27.264270 env[1058]: time="2024-02-08T23:23:27.264215839Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:27.266457 env[1058]: time="2024-02-08T23:23:27.266393264Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:27.269664 env[1058]: time="2024-02-08T23:23:27.269597826Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:27.279786 env[1058]: time="2024-02-08T23:23:27.279647840Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:27.282569 env[1058]: time="2024-02-08T23:23:27.282503176Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:27.286247 env[1058]: time="2024-02-08T23:23:27.286194952Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:27.289533 env[1058]: time="2024-02-08T23:23:27.289483340Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:27.298289 env[1058]: time="2024-02-08T23:23:27.298224079Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:27.301448 env[1058]: time="2024-02-08T23:23:27.301394175Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:27.305468 env[1058]: time="2024-02-08T23:23:27.305395001Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:27.307283 env[1058]: time="2024-02-08T23:23:27.307214514Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:27.336844 kubelet[1621]: W0208 23:23:27.336597 1621 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.24.4.155:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-2-2-def1b47031.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.155:6443: connect: connection refused Feb 8 23:23:27.336844 kubelet[1621]: E0208 23:23:27.336785 1621 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.155:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-2-2-def1b47031.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.155:6443: connect: connection refused Feb 8 23:23:27.369959 env[1058]: time="2024-02-08T23:23:27.368913751Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:23:27.369959 env[1058]: time="2024-02-08T23:23:27.368955860Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:23:27.369959 env[1058]: time="2024-02-08T23:23:27.368970548Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:23:27.369959 env[1058]: time="2024-02-08T23:23:27.369099069Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/811fe43963cf9cb6c5e03e394e63a8c0683b86ee91837fa53d02793686b58c5f pid=1673 runtime=io.containerd.runc.v2 Feb 8 23:23:27.372109 kubelet[1621]: I0208 23:23:27.371483 1621 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:27.372109 kubelet[1621]: E0208 23:23:27.372011 1621 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.155:6443/api/v1/nodes\": dial tcp 172.24.4.155:6443: connect: connection refused" node="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:27.378481 env[1058]: time="2024-02-08T23:23:27.378377916Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:23:27.378481 env[1058]: time="2024-02-08T23:23:27.378428531Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:23:27.378481 env[1058]: time="2024-02-08T23:23:27.378442026Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:23:27.378903 env[1058]: time="2024-02-08T23:23:27.378858738Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b1c4f3e710d63de1efc4c397cf291604f03e134258ff33233b71372ab7ecd126 pid=1669 runtime=io.containerd.runc.v2 Feb 8 23:23:27.381141 env[1058]: time="2024-02-08T23:23:27.381035081Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:23:27.381141 env[1058]: time="2024-02-08T23:23:27.381087659Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:23:27.381141 env[1058]: time="2024-02-08T23:23:27.381101255Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:23:27.382286 env[1058]: time="2024-02-08T23:23:27.382080441Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b2e6201c66fc72fea0d921d5f6f51cc2a4f710587c1dbf30b542b7e649c301b0 pid=1684 runtime=io.containerd.runc.v2 Feb 8 23:23:27.387419 systemd[1]: Started cri-containerd-811fe43963cf9cb6c5e03e394e63a8c0683b86ee91837fa53d02793686b58c5f.scope. Feb 8 23:23:27.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.412000 audit: BPF prog-id=61 op=LOAD Feb 8 23:23:27.412000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.412000 audit[1683]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1673 pid=1683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831316665343339363363663963623663356530336533393465363361 Feb 8 23:23:27.412000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.412000 audit[1683]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1673 pid=1683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831316665343339363363663963623663356530336533393465363361 Feb 8 23:23:27.412000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.412000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.412000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.412000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.412000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.412000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.412000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.412000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.412000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.412000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.412000 audit: BPF prog-id=62 op=LOAD Feb 8 23:23:27.412000 audit[1683]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c8150 items=0 ppid=1673 pid=1683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831316665343339363363663963623663356530336533393465363361 Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit: BPF prog-id=63 op=LOAD Feb 8 23:23:27.413000 audit[1683]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c8198 items=0 ppid=1673 pid=1683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831316665343339363363663963623663356530336533393465363361 Feb 8 23:23:27.413000 audit: BPF prog-id=63 op=UNLOAD Feb 8 23:23:27.413000 audit: BPF prog-id=62 op=UNLOAD Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { perfmon } for pid=1683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit[1683]: AVC avc: denied { bpf } for pid=1683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.413000 audit: BPF prog-id=64 op=LOAD Feb 8 23:23:27.413000 audit[1683]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c85a8 items=0 ppid=1673 pid=1683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831316665343339363363663963623663356530336533393465363361 Feb 8 23:23:27.421583 kubelet[1621]: E0208 23:23:27.421429 1621 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510-3-2-2-def1b47031.novalocal.17b206ba458f1f74", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510-3-2-2-def1b47031.novalocal", UID:"ci-3510-3-2-2-def1b47031.novalocal", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510-3-2-2-def1b47031.novalocal"}, FirstTimestamp:time.Date(2024, time.February, 8, 23, 23, 25, 827530612, time.Local), LastTimestamp:time.Date(2024, time.February, 8, 23, 23, 25, 827530612, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.24.4.155:6443/api/v1/namespaces/default/events": dial tcp 172.24.4.155:6443: connect: connection refused'(may retry after sleeping) Feb 8 23:23:27.431270 kubelet[1621]: W0208 23:23:27.431171 1621 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.24.4.155:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.155:6443: connect: connection refused Feb 8 23:23:27.431270 kubelet[1621]: E0208 23:23:27.431247 1621 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.155:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.155:6443: connect: connection refused Feb 8 23:23:27.431893 systemd[1]: Started cri-containerd-b2e6201c66fc72fea0d921d5f6f51cc2a4f710587c1dbf30b542b7e649c301b0.scope. Feb 8 23:23:27.442391 systemd[1]: Started cri-containerd-b1c4f3e710d63de1efc4c397cf291604f03e134258ff33233b71372ab7ecd126.scope. Feb 8 23:23:27.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.469000 audit: BPF prog-id=65 op=LOAD Feb 8 23:23:27.471000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.471000 audit[1715]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1684 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232653632303163363666633732666561306439323164356636663531 Feb 8 23:23:27.471000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.471000 audit[1715]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1684 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232653632303163363666633732666561306439323164356636663531 Feb 8 23:23:27.471000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.471000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.471000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.471000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.471000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.471000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.471000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.471000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.471000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.471000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.471000 audit: BPF prog-id=66 op=LOAD Feb 8 23:23:27.471000 audit[1715]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000196950 items=0 ppid=1684 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232653632303163363666633732666561306439323164356636663531 Feb 8 23:23:27.472000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.472000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.472000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.472000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.472000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.472000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.472000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.472000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.472000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.472000 audit: BPF prog-id=67 op=LOAD Feb 8 23:23:27.472000 audit[1715]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000196998 items=0 ppid=1684 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.472000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232653632303163363666633732666561306439323164356636663531 Feb 8 23:23:27.473000 audit: BPF prog-id=67 op=UNLOAD Feb 8 23:23:27.473000 audit: BPF prog-id=66 op=UNLOAD Feb 8 23:23:27.473000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.473000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.473000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.473000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.473000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.473000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.473000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.473000 audit[1715]: AVC avc: denied { perfmon } for pid=1715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.473000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.473000 audit[1715]: AVC avc: denied { bpf } for pid=1715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.473000 audit: BPF prog-id=68 op=LOAD Feb 8 23:23:27.473000 audit[1715]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000196da8 items=0 ppid=1684 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232653632303163363666633732666561306439323164356636663531 Feb 8 23:23:27.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.476000 audit: BPF prog-id=69 op=LOAD Feb 8 23:23:27.478000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.478000 audit[1713]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1669 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231633466336537313064363364653165666334633339376366323931 Feb 8 23:23:27.478000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.478000 audit[1713]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1669 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231633466336537313064363364653165666334633339376366323931 Feb 8 23:23:27.478000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.478000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.478000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.478000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.478000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.478000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.478000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.478000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.478000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.478000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.478000 audit: BPF prog-id=70 op=LOAD Feb 8 23:23:27.478000 audit[1713]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002183d0 items=0 ppid=1669 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231633466336537313064363364653165666334633339376366323931 Feb 8 23:23:27.479000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.479000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.479000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.479000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.479000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.479000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.479000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.479000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.479000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.479000 audit: BPF prog-id=71 op=LOAD Feb 8 23:23:27.479000 audit[1713]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000218418 items=0 ppid=1669 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231633466336537313064363364653165666334633339376366323931 Feb 8 23:23:27.481000 audit: BPF prog-id=71 op=UNLOAD Feb 8 23:23:27.481000 audit: BPF prog-id=70 op=UNLOAD Feb 8 23:23:27.481000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.481000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.481000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.481000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.481000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.481000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.481000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.481000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.481000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.481000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.481000 audit: BPF prog-id=72 op=LOAD Feb 8 23:23:27.481000 audit[1713]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000218828 items=0 ppid=1669 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.481000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231633466336537313064363364653165666334633339376366323931 Feb 8 23:23:27.491342 env[1058]: time="2024-02-08T23:23:27.491277424Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510-3-2-2-def1b47031.novalocal,Uid:b84eea70f599d146736772f1b8aef3ae,Namespace:kube-system,Attempt:0,} returns sandbox id \"811fe43963cf9cb6c5e03e394e63a8c0683b86ee91837fa53d02793686b58c5f\"" Feb 8 23:23:27.497109 env[1058]: time="2024-02-08T23:23:27.497061836Z" level=info msg="CreateContainer within sandbox \"811fe43963cf9cb6c5e03e394e63a8c0683b86ee91837fa53d02793686b58c5f\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Feb 8 23:23:27.523868 env[1058]: time="2024-02-08T23:23:27.523729684Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal,Uid:90db8c46da78d05d3a707d456dc0347a,Namespace:kube-system,Attempt:0,} returns sandbox id \"b2e6201c66fc72fea0d921d5f6f51cc2a4f710587c1dbf30b542b7e649c301b0\"" Feb 8 23:23:27.529541 env[1058]: time="2024-02-08T23:23:27.529474320Z" level=info msg="CreateContainer within sandbox \"b2e6201c66fc72fea0d921d5f6f51cc2a4f710587c1dbf30b542b7e649c301b0\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Feb 8 23:23:27.541944 env[1058]: time="2024-02-08T23:23:27.541888389Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510-3-2-2-def1b47031.novalocal,Uid:9d6188fe482e49fc45f0f9b16546075e,Namespace:kube-system,Attempt:0,} returns sandbox id \"b1c4f3e710d63de1efc4c397cf291604f03e134258ff33233b71372ab7ecd126\"" Feb 8 23:23:27.548737 env[1058]: time="2024-02-08T23:23:27.548682495Z" level=info msg="CreateContainer within sandbox \"b1c4f3e710d63de1efc4c397cf291604f03e134258ff33233b71372ab7ecd126\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Feb 8 23:23:27.572504 env[1058]: time="2024-02-08T23:23:27.572457717Z" level=info msg="CreateContainer within sandbox \"b2e6201c66fc72fea0d921d5f6f51cc2a4f710587c1dbf30b542b7e649c301b0\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"0af2943aadd59e42f7bf97bb50cf73a1d235e0cebc79cee350aac60fafc35073\"" Feb 8 23:23:27.576410 env[1058]: time="2024-02-08T23:23:27.576383391Z" level=info msg="CreateContainer within sandbox \"811fe43963cf9cb6c5e03e394e63a8c0683b86ee91837fa53d02793686b58c5f\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"e6893f7afc8795ea67c17c8606f789ef6bfd1e68657aaa657c182b3169dcf9f8\"" Feb 8 23:23:27.576689 env[1058]: time="2024-02-08T23:23:27.576664969Z" level=info msg="StartContainer for \"0af2943aadd59e42f7bf97bb50cf73a1d235e0cebc79cee350aac60fafc35073\"" Feb 8 23:23:27.585579 env[1058]: time="2024-02-08T23:23:27.585552172Z" level=info msg="StartContainer for \"e6893f7afc8795ea67c17c8606f789ef6bfd1e68657aaa657c182b3169dcf9f8\"" Feb 8 23:23:27.587842 env[1058]: time="2024-02-08T23:23:27.587783167Z" level=info msg="CreateContainer within sandbox \"b1c4f3e710d63de1efc4c397cf291604f03e134258ff33233b71372ab7ecd126\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"257766f3a1ddfc7b3b9499aedfbf3c5eaa41d5dfd350ca894f96189e5b5ce16c\"" Feb 8 23:23:27.588945 env[1058]: time="2024-02-08T23:23:27.588911243Z" level=info msg="StartContainer for \"257766f3a1ddfc7b3b9499aedfbf3c5eaa41d5dfd350ca894f96189e5b5ce16c\"" Feb 8 23:23:27.605006 systemd[1]: Started cri-containerd-0af2943aadd59e42f7bf97bb50cf73a1d235e0cebc79cee350aac60fafc35073.scope. Feb 8 23:23:27.623378 systemd[1]: Started cri-containerd-e6893f7afc8795ea67c17c8606f789ef6bfd1e68657aaa657c182b3169dcf9f8.scope. Feb 8 23:23:27.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.634000 audit: BPF prog-id=73 op=LOAD Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1684 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061663239343361616464353965343266376266393762623530636637 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1684 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061663239343361616464353965343266376266393762623530636637 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit: BPF prog-id=74 op=LOAD Feb 8 23:23:27.635000 audit[1783]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002e1d90 items=0 ppid=1684 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061663239343361616464353965343266376266393762623530636637 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit: BPF prog-id=75 op=LOAD Feb 8 23:23:27.635000 audit[1783]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002e1dd8 items=0 ppid=1684 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061663239343361616464353965343266376266393762623530636637 Feb 8 23:23:27.635000 audit: BPF prog-id=75 op=UNLOAD Feb 8 23:23:27.635000 audit: BPF prog-id=74 op=UNLOAD Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.635000 audit: BPF prog-id=76 op=LOAD Feb 8 23:23:27.635000 audit[1783]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003481e8 items=0 ppid=1684 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061663239343361616464353965343266376266393762623530636637 Feb 8 23:23:27.642811 systemd[1]: Started cri-containerd-257766f3a1ddfc7b3b9499aedfbf3c5eaa41d5dfd350ca894f96189e5b5ce16c.scope. Feb 8 23:23:27.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.657000 audit: BPF prog-id=77 op=LOAD Feb 8 23:23:27.659000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.659000 audit[1802]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1673 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536383933663761666338373935656136376331376338363036663738 Feb 8 23:23:27.659000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.659000 audit[1802]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1673 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536383933663761666338373935656136376331376338363036663738 Feb 8 23:23:27.659000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.659000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.659000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.659000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.659000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.659000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.659000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.659000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.659000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.659000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.659000 audit: BPF prog-id=78 op=LOAD Feb 8 23:23:27.659000 audit[1802]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0000248c0 items=0 ppid=1673 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536383933663761666338373935656136376331376338363036663738 Feb 8 23:23:27.660000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.660000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.660000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.660000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.660000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.660000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.660000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.660000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.660000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.660000 audit: BPF prog-id=79 op=LOAD Feb 8 23:23:27.660000 audit[1802]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024908 items=0 ppid=1673 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536383933663761666338373935656136376331376338363036663738 Feb 8 23:23:27.661000 audit: BPF prog-id=79 op=UNLOAD Feb 8 23:23:27.661000 audit: BPF prog-id=78 op=UNLOAD Feb 8 23:23:27.661000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.661000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.661000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.661000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.661000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.661000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.661000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.661000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.661000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.661000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.661000 audit: BPF prog-id=80 op=LOAD Feb 8 23:23:27.661000 audit[1802]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000024d18 items=0 ppid=1673 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536383933663761666338373935656136376331376338363036663738 Feb 8 23:23:27.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit: BPF prog-id=81 op=LOAD Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1669 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235373736366633613164646663376233623934393961656466626633 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1669 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235373736366633613164646663376233623934393961656466626633 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit: BPF prog-id=82 op=LOAD Feb 8 23:23:27.670000 audit[1805]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001ef370 items=0 ppid=1669 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235373736366633613164646663376233623934393961656466626633 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.670000 audit: BPF prog-id=83 op=LOAD Feb 8 23:23:27.670000 audit[1805]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001ef3b8 items=0 ppid=1669 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235373736366633613164646663376233623934393961656466626633 Feb 8 23:23:27.671000 audit: BPF prog-id=83 op=UNLOAD Feb 8 23:23:27.671000 audit: BPF prog-id=82 op=UNLOAD Feb 8 23:23:27.671000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.671000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.671000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.671000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.671000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.671000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.671000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.671000 audit[1805]: AVC avc: denied { perfmon } for pid=1805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.671000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.671000 audit[1805]: AVC avc: denied { bpf } for pid=1805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:27.671000 audit: BPF prog-id=84 op=LOAD Feb 8 23:23:27.671000 audit[1805]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001ef7c8 items=0 ppid=1669 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:27.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235373736366633613164646663376233623934393961656466626633 Feb 8 23:23:27.719472 env[1058]: time="2024-02-08T23:23:27.719366305Z" level=info msg="StartContainer for \"0af2943aadd59e42f7bf97bb50cf73a1d235e0cebc79cee350aac60fafc35073\" returns successfully" Feb 8 23:23:27.724988 env[1058]: time="2024-02-08T23:23:27.724943288Z" level=info msg="StartContainer for \"257766f3a1ddfc7b3b9499aedfbf3c5eaa41d5dfd350ca894f96189e5b5ce16c\" returns successfully" Feb 8 23:23:27.769821 env[1058]: time="2024-02-08T23:23:27.769724186Z" level=info msg="StartContainer for \"e6893f7afc8795ea67c17c8606f789ef6bfd1e68657aaa657c182b3169dcf9f8\" returns successfully" Feb 8 23:23:27.949335 kubelet[1621]: E0208 23:23:27.949301 1621 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.24.4.155:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.24.4.155:6443: connect: connection refused Feb 8 23:23:28.854420 kubelet[1621]: E0208 23:23:28.854371 1621 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.155:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-2-2-def1b47031.novalocal?timeout=10s\": dial tcp 172.24.4.155:6443: connect: connection refused" interval="3.2s" Feb 8 23:23:28.974670 kubelet[1621]: I0208 23:23:28.974621 1621 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:28.975504 kubelet[1621]: E0208 23:23:28.974937 1621 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.155:6443/api/v1/nodes\": dial tcp 172.24.4.155:6443: connect: connection refused" node="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:29.185000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524816 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:29.185000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000801200 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:23:29.185000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:23:29.186000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:29.186000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00015d480 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:23:29.186000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:23:31.139775 kernel: kauditd_printk_skb: 617 callbacks suppressed Feb 8 23:23:31.139934 kernel: audit: type=1400 audit(1707434611.135:666): avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524816 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:31.135000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524816 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:31.135000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00a2c1dd0 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:23:31.135000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:23:31.161837 kernel: audit: type=1300 audit(1707434611.135:666): arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00a2c1dd0 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:23:31.161946 kernel: audit: type=1327 audit(1707434611.135:666): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:23:31.161977 kernel: audit: type=1400 audit(1707434611.135:667): avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:31.135000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:31.135000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00a8648e0 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:23:31.181913 kernel: audit: type=1300 audit(1707434611.135:667): arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00a8648e0 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:23:31.182055 kernel: audit: type=1327 audit(1707434611.135:667): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:23:31.135000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:23:31.135000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=524812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:31.190723 kernel: audit: type=1400 audit(1707434611.135:668): avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=524812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:31.190830 kernel: audit: type=1300 audit(1707434611.135:668): arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00a2c1ef0 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:23:31.135000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00a2c1ef0 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:23:31.135000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:23:31.200544 kernel: audit: type=1327 audit(1707434611.135:668): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:23:31.200648 kernel: audit: type=1400 audit(1707434611.171:669): avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=524818 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:31.171000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=524818 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:31.171000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c000be92f0 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:23:31.171000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:23:31.310000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:31.310000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=44 a1=c004de2320 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:23:31.310000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:23:31.310000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524816 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:31.310000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=44 a1=c000af5800 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:23:31.310000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:23:31.734323 kubelet[1621]: E0208 23:23:31.734246 1621 csi_plugin.go:295] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "ci-3510-3-2-2-def1b47031.novalocal" not found Feb 8 23:23:31.837367 kubelet[1621]: I0208 23:23:31.837295 1621 apiserver.go:52] "Watching apiserver" Feb 8 23:23:31.943197 kubelet[1621]: I0208 23:23:31.943114 1621 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Feb 8 23:23:31.989955 kubelet[1621]: I0208 23:23:31.989490 1621 reconciler.go:41] "Reconciler: start to sync state" Feb 8 23:23:32.066740 kubelet[1621]: E0208 23:23:32.066639 1621 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510-3-2-2-def1b47031.novalocal\" not found" node="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:32.122557 kubelet[1621]: E0208 23:23:32.122474 1621 csi_plugin.go:295] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "ci-3510-3-2-2-def1b47031.novalocal" not found Feb 8 23:23:32.179454 kubelet[1621]: I0208 23:23:32.179351 1621 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:32.199722 kubelet[1621]: I0208 23:23:32.199609 1621 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:34.247942 systemd[1]: Reloading. Feb 8 23:23:34.376793 /usr/lib/systemd/system-generators/torcx-generator[1903]: time="2024-02-08T23:23:34Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 8 23:23:34.377188 /usr/lib/systemd/system-generators/torcx-generator[1903]: time="2024-02-08T23:23:34Z" level=info msg="torcx already run" Feb 8 23:23:34.478353 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 8 23:23:34.478377 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 8 23:23:34.505015 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 8 23:23:34.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.597000 audit: BPF prog-id=85 op=LOAD Feb 8 23:23:34.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.597000 audit: BPF prog-id=86 op=LOAD Feb 8 23:23:34.597000 audit: BPF prog-id=46 op=UNLOAD Feb 8 23:23:34.597000 audit: BPF prog-id=47 op=UNLOAD Feb 8 23:23:34.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.599000 audit: BPF prog-id=87 op=LOAD Feb 8 23:23:34.599000 audit: BPF prog-id=73 op=UNLOAD Feb 8 23:23:34.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.601000 audit: BPF prog-id=88 op=LOAD Feb 8 23:23:34.601000 audit: BPF prog-id=77 op=UNLOAD Feb 8 23:23:34.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.603000 audit: BPF prog-id=89 op=LOAD Feb 8 23:23:34.603000 audit: BPF prog-id=48 op=UNLOAD Feb 8 23:23:34.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit: BPF prog-id=90 op=LOAD Feb 8 23:23:34.606000 audit: BPF prog-id=49 op=UNLOAD Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit: BPF prog-id=91 op=LOAD Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.606000 audit: BPF prog-id=92 op=LOAD Feb 8 23:23:34.606000 audit: BPF prog-id=50 op=UNLOAD Feb 8 23:23:34.606000 audit: BPF prog-id=51 op=UNLOAD Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit: BPF prog-id=93 op=LOAD Feb 8 23:23:34.607000 audit: BPF prog-id=52 op=UNLOAD Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit: BPF prog-id=94 op=LOAD Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.608000 audit: BPF prog-id=95 op=LOAD Feb 8 23:23:34.608000 audit: BPF prog-id=53 op=UNLOAD Feb 8 23:23:34.608000 audit: BPF prog-id=54 op=UNLOAD Feb 8 23:23:34.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.609000 audit: BPF prog-id=96 op=LOAD Feb 8 23:23:34.609000 audit: BPF prog-id=55 op=UNLOAD Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit: BPF prog-id=97 op=LOAD Feb 8 23:23:34.610000 audit: BPF prog-id=56 op=UNLOAD Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit: BPF prog-id=98 op=LOAD Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.611000 audit: BPF prog-id=99 op=LOAD Feb 8 23:23:34.611000 audit: BPF prog-id=57 op=UNLOAD Feb 8 23:23:34.611000 audit: BPF prog-id=58 op=UNLOAD Feb 8 23:23:34.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.611000 audit: BPF prog-id=100 op=LOAD Feb 8 23:23:34.611000 audit: BPF prog-id=61 op=UNLOAD Feb 8 23:23:34.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.612000 audit: BPF prog-id=101 op=LOAD Feb 8 23:23:34.612000 audit: BPF prog-id=81 op=UNLOAD Feb 8 23:23:34.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.615000 audit: BPF prog-id=102 op=LOAD Feb 8 23:23:34.615000 audit: BPF prog-id=59 op=UNLOAD Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.616000 audit: BPF prog-id=103 op=LOAD Feb 8 23:23:34.616000 audit: BPF prog-id=69 op=UNLOAD Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.617000 audit: BPF prog-id=104 op=LOAD Feb 8 23:23:34.617000 audit: BPF prog-id=65 op=UNLOAD Feb 8 23:23:34.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.618000 audit: BPF prog-id=105 op=LOAD Feb 8 23:23:34.618000 audit: BPF prog-id=60 op=UNLOAD Feb 8 23:23:34.638870 kubelet[1621]: I0208 23:23:34.636125 1621 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 8 23:23:34.636503 systemd[1]: Stopping kubelet.service... Feb 8 23:23:34.654277 systemd[1]: kubelet.service: Deactivated successfully. Feb 8 23:23:34.654565 systemd[1]: Stopped kubelet.service. Feb 8 23:23:34.653000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:34.656859 systemd[1]: Started kubelet.service. Feb 8 23:23:34.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:34.778052 kubelet[1950]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 8 23:23:34.778052 kubelet[1950]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Feb 8 23:23:34.778052 kubelet[1950]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 8 23:23:34.778052 kubelet[1950]: I0208 23:23:34.776266 1950 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 8 23:23:34.785267 kubelet[1950]: I0208 23:23:34.785233 1950 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Feb 8 23:23:34.785409 kubelet[1950]: I0208 23:23:34.785396 1950 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 8 23:23:34.785788 kubelet[1950]: I0208 23:23:34.785771 1950 server.go:837] "Client rotation is on, will bootstrap in background" Feb 8 23:23:34.788698 kubelet[1950]: I0208 23:23:34.788677 1950 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Feb 8 23:23:34.790557 kubelet[1950]: I0208 23:23:34.790521 1950 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 8 23:23:34.796422 kubelet[1950]: I0208 23:23:34.796388 1950 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 8 23:23:34.796992 kubelet[1950]: I0208 23:23:34.796978 1950 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 8 23:23:34.797342 kubelet[1950]: I0208 23:23:34.797325 1950 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Feb 8 23:23:34.797516 kubelet[1950]: I0208 23:23:34.797503 1950 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Feb 8 23:23:34.797607 kubelet[1950]: I0208 23:23:34.797596 1950 container_manager_linux.go:302] "Creating device plugin manager" Feb 8 23:23:34.797715 kubelet[1950]: I0208 23:23:34.797704 1950 state_mem.go:36] "Initialized new in-memory state store" Feb 8 23:23:34.809510 kubelet[1950]: I0208 23:23:34.809488 1950 kubelet.go:405] "Attempting to sync node with API server" Feb 8 23:23:34.809697 kubelet[1950]: I0208 23:23:34.809685 1950 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 8 23:23:34.809836 kubelet[1950]: I0208 23:23:34.809819 1950 kubelet.go:309] "Adding apiserver pod source" Feb 8 23:23:34.809920 kubelet[1950]: I0208 23:23:34.809909 1950 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 8 23:23:34.815675 kubelet[1950]: I0208 23:23:34.815638 1950 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 8 23:23:34.818407 kubelet[1950]: I0208 23:23:34.818378 1950 server.go:1168] "Started kubelet" Feb 8 23:23:34.820000 audit[1950]: AVC avc: denied { mac_admin } for pid=1950 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.820000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 8 23:23:34.820000 audit[1950]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0007f6090 a1=c0005ab980 a2=c0007f6060 a3=25 items=0 ppid=1 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:34.820000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 8 23:23:34.820000 audit[1950]: AVC avc: denied { mac_admin } for pid=1950 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.820000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 8 23:23:34.820000 audit[1950]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000646aa0 a1=c0005ab998 a2=c0007f6120 a3=25 items=0 ppid=1 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:34.820000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 8 23:23:34.821962 kubelet[1950]: I0208 23:23:34.820964 1950 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 8 23:23:34.821962 kubelet[1950]: I0208 23:23:34.821021 1950 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 8 23:23:34.821962 kubelet[1950]: I0208 23:23:34.821062 1950 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 8 23:23:34.826060 kubelet[1950]: I0208 23:23:34.823634 1950 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Feb 8 23:23:34.827144 kubelet[1950]: I0208 23:23:34.827128 1950 server.go:461] "Adding debug handlers to kubelet server" Feb 8 23:23:34.828063 kubelet[1950]: I0208 23:23:34.823942 1950 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Feb 8 23:23:34.828257 kubelet[1950]: E0208 23:23:34.825654 1950 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 8 23:23:34.828344 kubelet[1950]: E0208 23:23:34.828333 1950 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 8 23:23:34.844026 kubelet[1950]: I0208 23:23:34.843984 1950 volume_manager.go:284] "Starting Kubelet Volume Manager" Feb 8 23:23:34.846310 kubelet[1950]: I0208 23:23:34.845149 1950 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Feb 8 23:23:34.860002 kubelet[1950]: I0208 23:23:34.859948 1950 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Feb 8 23:23:34.869802 kubelet[1950]: I0208 23:23:34.866128 1950 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Feb 8 23:23:34.869802 kubelet[1950]: I0208 23:23:34.866160 1950 status_manager.go:207] "Starting to sync pod status with apiserver" Feb 8 23:23:34.869802 kubelet[1950]: I0208 23:23:34.866178 1950 kubelet.go:2257] "Starting kubelet main sync loop" Feb 8 23:23:34.869802 kubelet[1950]: E0208 23:23:34.866219 1950 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Feb 8 23:23:34.948100 kubelet[1950]: I0208 23:23:34.948072 1950 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:34.966404 kubelet[1950]: E0208 23:23:34.966379 1950 kubelet.go:2281] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Feb 8 23:23:34.974474 kubelet[1950]: I0208 23:23:34.974447 1950 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:34.974705 kubelet[1950]: I0208 23:23:34.974694 1950 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:34.974989 kubelet[1950]: I0208 23:23:34.974976 1950 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 8 23:23:34.975082 kubelet[1950]: I0208 23:23:34.975072 1950 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 8 23:23:34.975150 kubelet[1950]: I0208 23:23:34.975141 1950 state_mem.go:36] "Initialized new in-memory state store" Feb 8 23:23:34.975365 kubelet[1950]: I0208 23:23:34.975353 1950 state_mem.go:88] "Updated default CPUSet" cpuSet="" Feb 8 23:23:34.975438 kubelet[1950]: I0208 23:23:34.975429 1950 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Feb 8 23:23:34.975500 kubelet[1950]: I0208 23:23:34.975491 1950 policy_none.go:49] "None policy: Start" Feb 8 23:23:34.976905 kubelet[1950]: I0208 23:23:34.976890 1950 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 8 23:23:34.977018 kubelet[1950]: I0208 23:23:34.977008 1950 state_mem.go:35] "Initializing new in-memory state store" Feb 8 23:23:34.977219 kubelet[1950]: I0208 23:23:34.977207 1950 state_mem.go:75] "Updated machine memory state" Feb 8 23:23:34.988782 kubelet[1950]: I0208 23:23:34.984397 1950 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 8 23:23:34.989106 kubelet[1950]: I0208 23:23:34.989094 1950 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 8 23:23:34.989375 kubelet[1950]: I0208 23:23:34.989362 1950 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 8 23:23:34.988000 audit[1950]: AVC avc: denied { mac_admin } for pid=1950 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:34.988000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 8 23:23:34.988000 audit[1950]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000afe5d0 a1=c000e13a40 a2=c000afe5a0 a3=25 items=0 ppid=1 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:34.988000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 8 23:23:35.167891 kubelet[1950]: I0208 23:23:35.167774 1950 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:23:35.168299 kubelet[1950]: I0208 23:23:35.168285 1950 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:23:35.171440 kubelet[1950]: I0208 23:23:35.171424 1950 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:23:35.196271 kubelet[1950]: W0208 23:23:35.196243 1950 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Feb 8 23:23:35.202542 kubelet[1950]: W0208 23:23:35.202525 1950 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Feb 8 23:23:35.203396 kubelet[1950]: W0208 23:23:35.203385 1950 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Feb 8 23:23:35.247506 kubelet[1950]: I0208 23:23:35.247453 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9d6188fe482e49fc45f0f9b16546075e-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510-3-2-2-def1b47031.novalocal\" (UID: \"9d6188fe482e49fc45f0f9b16546075e\") " pod="kube-system/kube-apiserver-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:35.247698 kubelet[1950]: I0208 23:23:35.247548 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/90db8c46da78d05d3a707d456dc0347a-ca-certs\") pod \"kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal\" (UID: \"90db8c46da78d05d3a707d456dc0347a\") " pod="kube-system/kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:35.247698 kubelet[1950]: I0208 23:23:35.247617 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/90db8c46da78d05d3a707d456dc0347a-kubeconfig\") pod \"kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal\" (UID: \"90db8c46da78d05d3a707d456dc0347a\") " pod="kube-system/kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:35.247836 kubelet[1950]: I0208 23:23:35.247803 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/90db8c46da78d05d3a707d456dc0347a-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal\" (UID: \"90db8c46da78d05d3a707d456dc0347a\") " pod="kube-system/kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:35.247916 kubelet[1950]: I0208 23:23:35.247888 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b84eea70f599d146736772f1b8aef3ae-kubeconfig\") pod \"kube-scheduler-ci-3510-3-2-2-def1b47031.novalocal\" (UID: \"b84eea70f599d146736772f1b8aef3ae\") " pod="kube-system/kube-scheduler-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:35.247976 kubelet[1950]: I0208 23:23:35.247959 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9d6188fe482e49fc45f0f9b16546075e-ca-certs\") pod \"kube-apiserver-ci-3510-3-2-2-def1b47031.novalocal\" (UID: \"9d6188fe482e49fc45f0f9b16546075e\") " pod="kube-system/kube-apiserver-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:35.248050 kubelet[1950]: I0208 23:23:35.248024 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/90db8c46da78d05d3a707d456dc0347a-flexvolume-dir\") pod \"kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal\" (UID: \"90db8c46da78d05d3a707d456dc0347a\") " pod="kube-system/kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:35.248136 kubelet[1950]: I0208 23:23:35.248110 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/90db8c46da78d05d3a707d456dc0347a-k8s-certs\") pod \"kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal\" (UID: \"90db8c46da78d05d3a707d456dc0347a\") " pod="kube-system/kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:35.248221 kubelet[1950]: I0208 23:23:35.248182 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9d6188fe482e49fc45f0f9b16546075e-k8s-certs\") pod \"kube-apiserver-ci-3510-3-2-2-def1b47031.novalocal\" (UID: \"9d6188fe482e49fc45f0f9b16546075e\") " pod="kube-system/kube-apiserver-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:35.818989 kubelet[1950]: I0208 23:23:35.818851 1950 apiserver.go:52] "Watching apiserver" Feb 8 23:23:35.945513 kubelet[1950]: I0208 23:23:35.945461 1950 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Feb 8 23:23:35.952345 kubelet[1950]: I0208 23:23:35.952307 1950 reconciler.go:41] "Reconciler: start to sync state" Feb 8 23:23:35.987444 kubelet[1950]: W0208 23:23:35.987375 1950 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Feb 8 23:23:35.987817 kubelet[1950]: E0208 23:23:35.987544 1950 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510-3-2-2-def1b47031.novalocal\" already exists" pod="kube-system/kube-apiserver-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:35.987984 kubelet[1950]: W0208 23:23:35.987947 1950 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Feb 8 23:23:35.988296 kubelet[1950]: E0208 23:23:35.988265 1950 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal\" already exists" pod="kube-system/kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:23:36.052775 kubelet[1950]: I0208 23:23:36.052725 1950 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510-3-2-2-def1b47031.novalocal" podStartSLOduration=1.051671156 podCreationTimestamp="2024-02-08 23:23:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-08 23:23:36.048858219 +0000 UTC m=+1.379568719" watchObservedRunningTime="2024-02-08 23:23:36.051671156 +0000 UTC m=+1.382381636" Feb 8 23:23:36.074039 kubelet[1950]: I0208 23:23:36.073849 1950 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510-3-2-2-def1b47031.novalocal" podStartSLOduration=1.073676595 podCreationTimestamp="2024-02-08 23:23:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-08 23:23:36.073174052 +0000 UTC m=+1.403884542" watchObservedRunningTime="2024-02-08 23:23:36.073676595 +0000 UTC m=+1.404387125" Feb 8 23:23:36.127064 kubelet[1950]: I0208 23:23:36.126996 1950 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510-3-2-2-def1b47031.novalocal" podStartSLOduration=1.126948245 podCreationTimestamp="2024-02-08 23:23:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-08 23:23:36.100658559 +0000 UTC m=+1.431369079" watchObservedRunningTime="2024-02-08 23:23:36.126948245 +0000 UTC m=+1.457658735" Feb 8 23:23:40.076733 sudo[1200]: pam_unix(sudo:session): session closed for user root Feb 8 23:23:40.076000 audit[1200]: USER_END pid=1200 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:23:40.078069 kernel: kauditd_printk_skb: 266 callbacks suppressed Feb 8 23:23:40.078272 kernel: audit: type=1106 audit(1707434620.076:921): pid=1200 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:23:40.078000 audit[1200]: CRED_DISP pid=1200 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:23:40.086827 kernel: audit: type=1104 audit(1707434620.078:922): pid=1200 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:23:40.257274 sshd[1197]: pam_unix(sshd:session): session closed for user core Feb 8 23:23:40.260000 audit[1197]: USER_END pid=1197 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:23:40.276828 kernel: audit: type=1106 audit(1707434620.260:923): pid=1197 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:23:40.260000 audit[1197]: CRED_DISP pid=1197 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:23:40.280294 systemd[1]: sshd@6-172.24.4.155:22-172.24.4.1:38974.service: Deactivated successfully. Feb 8 23:23:40.283216 systemd[1]: session-7.scope: Deactivated successfully. Feb 8 23:23:40.284271 systemd[1]: session-7.scope: Consumed 6.150s CPU time. Feb 8 23:23:40.290862 kernel: audit: type=1104 audit(1707434620.260:924): pid=1197 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:23:40.280000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.155:22-172.24.4.1:38974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:40.303822 kernel: audit: type=1131 audit(1707434620.280:925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.155:22-172.24.4.1:38974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:23:40.304515 systemd-logind[1051]: Session 7 logged out. Waiting for processes to exit. Feb 8 23:23:40.307194 systemd-logind[1051]: Removed session 7. Feb 8 23:23:44.132000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=524843 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Feb 8 23:23:44.132000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000de3040 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:23:44.170111 kernel: audit: type=1400 audit(1707434624.132:926): avc: denied { watch } for pid=1808 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=524843 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Feb 8 23:23:44.170303 kernel: audit: type=1300 audit(1707434624.132:926): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000de3040 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:23:44.132000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:23:44.182488 kernel: audit: type=1327 audit(1707434624.132:926): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:23:45.789000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:45.789000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a04300 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:23:45.814628 kernel: audit: type=1400 audit(1707434625.789:927): avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:45.814930 kernel: audit: type=1300 audit(1707434625.789:927): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a04300 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:23:45.815053 kernel: audit: type=1327 audit(1707434625.789:927): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:23:45.789000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:23:45.795000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:45.841573 kernel: audit: type=1400 audit(1707434625.795:928): avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:45.795000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d965e0 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:23:45.795000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:23:45.861520 kernel: audit: type=1300 audit(1707434625.795:928): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d965e0 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:23:45.861705 kernel: audit: type=1327 audit(1707434625.795:928): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:23:45.795000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:45.795000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d96620 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:23:45.873161 kernel: audit: type=1400 audit(1707434625.795:929): avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:45.873310 kernel: audit: type=1300 audit(1707434625.795:929): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d96620 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:23:45.873514 kernel: audit: type=1327 audit(1707434625.795:929): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:23:45.795000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:23:45.795000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:45.883798 kernel: audit: type=1400 audit(1707434625.795:930): avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:23:45.795000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d96660 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:23:45.795000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:23:48.153309 kubelet[1950]: I0208 23:23:48.153281 1950 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Feb 8 23:23:48.154299 env[1058]: time="2024-02-08T23:23:48.154246907Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Feb 8 23:23:48.155023 kubelet[1950]: I0208 23:23:48.154980 1950 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Feb 8 23:23:48.666611 kubelet[1950]: I0208 23:23:48.666540 1950 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:23:48.684291 systemd[1]: Created slice kubepods-besteffort-pod92775132_2566_49c2_bae3_d05f4eaa4e3e.slice. Feb 8 23:23:48.764161 kubelet[1950]: I0208 23:23:48.764126 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/92775132-2566-49c2-bae3-d05f4eaa4e3e-xtables-lock\") pod \"kube-proxy-k8tnz\" (UID: \"92775132-2566-49c2-bae3-d05f4eaa4e3e\") " pod="kube-system/kube-proxy-k8tnz" Feb 8 23:23:48.764428 kubelet[1950]: I0208 23:23:48.764416 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/92775132-2566-49c2-bae3-d05f4eaa4e3e-lib-modules\") pod \"kube-proxy-k8tnz\" (UID: \"92775132-2566-49c2-bae3-d05f4eaa4e3e\") " pod="kube-system/kube-proxy-k8tnz" Feb 8 23:23:48.764554 kubelet[1950]: I0208 23:23:48.764540 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xpgbf\" (UniqueName: \"kubernetes.io/projected/92775132-2566-49c2-bae3-d05f4eaa4e3e-kube-api-access-xpgbf\") pod \"kube-proxy-k8tnz\" (UID: \"92775132-2566-49c2-bae3-d05f4eaa4e3e\") " pod="kube-system/kube-proxy-k8tnz" Feb 8 23:23:48.764678 kubelet[1950]: I0208 23:23:48.764667 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/92775132-2566-49c2-bae3-d05f4eaa4e3e-kube-proxy\") pod \"kube-proxy-k8tnz\" (UID: \"92775132-2566-49c2-bae3-d05f4eaa4e3e\") " pod="kube-system/kube-proxy-k8tnz" Feb 8 23:23:48.936511 kubelet[1950]: I0208 23:23:48.936474 1950 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:23:48.943834 systemd[1]: Created slice kubepods-besteffort-podbe382761_3e7c_4eb9_afd2_51626465b0e9.slice. Feb 8 23:23:48.966275 kubelet[1950]: I0208 23:23:48.966239 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-92wwl\" (UniqueName: \"kubernetes.io/projected/be382761-3e7c-4eb9-afd2-51626465b0e9-kube-api-access-92wwl\") pod \"tigera-operator-7ff8dc855-5988h\" (UID: \"be382761-3e7c-4eb9-afd2-51626465b0e9\") " pod="tigera-operator/tigera-operator-7ff8dc855-5988h" Feb 8 23:23:48.966640 kubelet[1950]: I0208 23:23:48.966623 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/be382761-3e7c-4eb9-afd2-51626465b0e9-var-lib-calico\") pod \"tigera-operator-7ff8dc855-5988h\" (UID: \"be382761-3e7c-4eb9-afd2-51626465b0e9\") " pod="tigera-operator/tigera-operator-7ff8dc855-5988h" Feb 8 23:23:49.004783 env[1058]: time="2024-02-08T23:23:49.004204387Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-k8tnz,Uid:92775132-2566-49c2-bae3-d05f4eaa4e3e,Namespace:kube-system,Attempt:0,}" Feb 8 23:23:49.051422 env[1058]: time="2024-02-08T23:23:49.051235216Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:23:49.051944 env[1058]: time="2024-02-08T23:23:49.051853736Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:23:49.052222 env[1058]: time="2024-02-08T23:23:49.052137648Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:23:49.052883 env[1058]: time="2024-02-08T23:23:49.052783339Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/103fd64f99aaa0fcdc199abd8be1762d020ba6751e786a8692005997a771db64 pid=2036 runtime=io.containerd.runc.v2 Feb 8 23:23:49.088226 systemd[1]: run-containerd-runc-k8s.io-103fd64f99aaa0fcdc199abd8be1762d020ba6751e786a8692005997a771db64-runc.WOHLu8.mount: Deactivated successfully. Feb 8 23:23:49.101573 systemd[1]: Started cri-containerd-103fd64f99aaa0fcdc199abd8be1762d020ba6751e786a8692005997a771db64.scope. Feb 8 23:23:49.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.113000 audit: BPF prog-id=106 op=LOAD Feb 8 23:23:49.114000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.114000 audit[2046]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2036 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:49.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130336664363466393961616130666364633139396162643862653137 Feb 8 23:23:49.114000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.114000 audit[2046]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2036 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:49.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130336664363466393961616130666364633139396162643862653137 Feb 8 23:23:49.114000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.114000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.114000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.114000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.114000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.114000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.114000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.114000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.114000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.114000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.114000 audit: BPF prog-id=107 op=LOAD Feb 8 23:23:49.114000 audit[2046]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024ac0 items=0 ppid=2036 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:49.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130336664363466393961616130666364633139396162643862653137 Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit: BPF prog-id=108 op=LOAD Feb 8 23:23:49.115000 audit[2046]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024b08 items=0 ppid=2036 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:49.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130336664363466393961616130666364633139396162643862653137 Feb 8 23:23:49.115000 audit: BPF prog-id=108 op=UNLOAD Feb 8 23:23:49.115000 audit: BPF prog-id=107 op=UNLOAD Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.115000 audit: BPF prog-id=109 op=LOAD Feb 8 23:23:49.115000 audit[2046]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000024f18 items=0 ppid=2036 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:49.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130336664363466393961616130666364633139396162643862653137 Feb 8 23:23:49.133381 env[1058]: time="2024-02-08T23:23:49.133318215Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-k8tnz,Uid:92775132-2566-49c2-bae3-d05f4eaa4e3e,Namespace:kube-system,Attempt:0,} returns sandbox id \"103fd64f99aaa0fcdc199abd8be1762d020ba6751e786a8692005997a771db64\"" Feb 8 23:23:49.141319 env[1058]: time="2024-02-08T23:23:49.141274969Z" level=info msg="CreateContainer within sandbox \"103fd64f99aaa0fcdc199abd8be1762d020ba6751e786a8692005997a771db64\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Feb 8 23:23:49.167172 env[1058]: time="2024-02-08T23:23:49.167119007Z" level=info msg="CreateContainer within sandbox \"103fd64f99aaa0fcdc199abd8be1762d020ba6751e786a8692005997a771db64\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"2ae7d57b17a81d1e27cf2169631d08cf1241a37ecbde9450f99dfb445ae0d766\"" Feb 8 23:23:49.170714 env[1058]: time="2024-02-08T23:23:49.170658937Z" level=info msg="StartContainer for \"2ae7d57b17a81d1e27cf2169631d08cf1241a37ecbde9450f99dfb445ae0d766\"" Feb 8 23:23:49.190514 systemd[1]: Started cri-containerd-2ae7d57b17a81d1e27cf2169631d08cf1241a37ecbde9450f99dfb445ae0d766.scope. Feb 8 23:23:49.211000 audit[2079]: AVC avc: denied { perfmon } for pid=2079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.211000 audit[2079]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2036 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:49.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261653764353762313761383164316532376366323136393633316430 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { bpf } for pid=2079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { bpf } for pid=2079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { bpf } for pid=2079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { perfmon } for pid=2079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { perfmon } for pid=2079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { perfmon } for pid=2079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { perfmon } for pid=2079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { perfmon } for pid=2079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { bpf } for pid=2079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { bpf } for pid=2079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit: BPF prog-id=110 op=LOAD Feb 8 23:23:49.212000 audit[2079]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000d5bc0 items=0 ppid=2036 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:49.212000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261653764353762313761383164316532376366323136393633316430 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { bpf } for pid=2079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { bpf } for pid=2079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { perfmon } for pid=2079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { perfmon } for pid=2079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { perfmon } for pid=2079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { perfmon } for pid=2079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { perfmon } for pid=2079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { bpf } for pid=2079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { bpf } for pid=2079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit: BPF prog-id=111 op=LOAD Feb 8 23:23:49.212000 audit[2079]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000d5c08 items=0 ppid=2036 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:49.212000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261653764353762313761383164316532376366323136393633316430 Feb 8 23:23:49.212000 audit: BPF prog-id=111 op=UNLOAD Feb 8 23:23:49.212000 audit: BPF prog-id=110 op=UNLOAD Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { bpf } for pid=2079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { bpf } for pid=2079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { bpf } for pid=2079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { perfmon } for pid=2079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { perfmon } for pid=2079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { perfmon } for pid=2079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { perfmon } for pid=2079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { perfmon } for pid=2079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { bpf } for pid=2079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit[2079]: AVC avc: denied { bpf } for pid=2079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.212000 audit: BPF prog-id=112 op=LOAD Feb 8 23:23:49.212000 audit[2079]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000d5c98 items=0 ppid=2036 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:49.212000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261653764353762313761383164316532376366323136393633316430 Feb 8 23:23:49.240563 env[1058]: time="2024-02-08T23:23:49.240513418Z" level=info msg="StartContainer for \"2ae7d57b17a81d1e27cf2169631d08cf1241a37ecbde9450f99dfb445ae0d766\" returns successfully" Feb 8 23:23:49.249059 env[1058]: time="2024-02-08T23:23:49.248982584Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7ff8dc855-5988h,Uid:be382761-3e7c-4eb9-afd2-51626465b0e9,Namespace:tigera-operator,Attempt:0,}" Feb 8 23:23:49.288174 env[1058]: time="2024-02-08T23:23:49.288084911Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:23:49.288369 env[1058]: time="2024-02-08T23:23:49.288209756Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:23:49.288369 env[1058]: time="2024-02-08T23:23:49.288243449Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:23:49.288502 env[1058]: time="2024-02-08T23:23:49.288465225Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/15af817da2aac657739bf9cbfd01ad9396a751419d79704d2a205d45dae9fe45 pid=2109 runtime=io.containerd.runc.v2 Feb 8 23:23:49.303735 systemd[1]: Started cri-containerd-15af817da2aac657739bf9cbfd01ad9396a751419d79704d2a205d45dae9fe45.scope. Feb 8 23:23:49.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.321000 audit: BPF prog-id=113 op=LOAD Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2109 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:49.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135616638313764613261616336353737333962663963626664303161 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2109 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:49.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135616638313764613261616336353737333962663963626664303161 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit: BPF prog-id=114 op=LOAD Feb 8 23:23:49.322000 audit[2118]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0003a8720 items=0 ppid=2109 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:49.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135616638313764613261616336353737333962663963626664303161 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit: BPF prog-id=115 op=LOAD Feb 8 23:23:49.322000 audit[2118]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0003a8768 items=0 ppid=2109 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:49.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135616638313764613261616336353737333962663963626664303161 Feb 8 23:23:49.322000 audit: BPF prog-id=115 op=UNLOAD Feb 8 23:23:49.322000 audit: BPF prog-id=114 op=UNLOAD Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:49.322000 audit: BPF prog-id=116 op=LOAD Feb 8 23:23:49.322000 audit[2118]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003a8b78 items=0 ppid=2109 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:49.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135616638313764613261616336353737333962663963626664303161 Feb 8 23:23:49.361162 env[1058]: time="2024-02-08T23:23:49.361099600Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7ff8dc855-5988h,Uid:be382761-3e7c-4eb9-afd2-51626465b0e9,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"15af817da2aac657739bf9cbfd01ad9396a751419d79704d2a205d45dae9fe45\"" Feb 8 23:23:49.371105 env[1058]: time="2024-02-08T23:23:49.371064242Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\"" Feb 8 23:23:50.172000 audit[2169]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.172000 audit[2169]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc787b1e20 a2=0 a3=7ffc787b1e0c items=0 ppid=2089 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.172000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 8 23:23:50.180000 audit[2170]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2170 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.180000 audit[2170]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff810cabc0 a2=0 a3=7fff810cabac items=0 ppid=2089 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.180000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 8 23:23:50.183000 audit[2172]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.183000 audit[2172]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff6e76f780 a2=0 a3=7fff6e76f76c items=0 ppid=2089 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.183000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 8 23:23:50.193000 audit[2174]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2174 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.193000 audit[2174]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffca305270 a2=0 a3=7fffca30525c items=0 ppid=2089 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.194000 audit[2173]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.194000 audit[2173]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd3eb2db30 a2=0 a3=7ffd3eb2db1c items=0 ppid=2089 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.194000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 8 23:23:50.193000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 8 23:23:50.212000 audit[2175]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2175 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.212000 audit[2175]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffed1061e60 a2=0 a3=7ffed1061e4c items=0 ppid=2089 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.212000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 8 23:23:50.317000 audit[2176]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.317000 audit[2176]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc64d742c0 a2=0 a3=7ffc64d742ac items=0 ppid=2089 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.317000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 8 23:23:50.340000 audit[2178]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.340000 audit[2178]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc07e83ba0 a2=0 a3=7ffc07e83b8c items=0 ppid=2089 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.340000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Feb 8 23:23:50.356000 audit[2181]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.356000 audit[2181]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd42e22b60 a2=0 a3=7ffd42e22b4c items=0 ppid=2089 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.356000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Feb 8 23:23:50.359000 audit[2182]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.359000 audit[2182]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd3ea67e10 a2=0 a3=7ffd3ea67dfc items=0 ppid=2089 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.359000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 8 23:23:50.369000 audit[2184]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.369000 audit[2184]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffa7b34910 a2=0 a3=7fffa7b348fc items=0 ppid=2089 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.369000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 8 23:23:50.374000 audit[2185]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.374000 audit[2185]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc44bf00f0 a2=0 a3=7ffc44bf00dc items=0 ppid=2089 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.374000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 8 23:23:50.383000 audit[2187]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.383000 audit[2187]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff72dcacb0 a2=0 a3=7fff72dcac9c items=0 ppid=2089 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.383000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 8 23:23:50.394000 audit[2190]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.394000 audit[2190]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd9db0aff0 a2=0 a3=7ffd9db0afdc items=0 ppid=2089 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.394000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Feb 8 23:23:50.397000 audit[2191]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.397000 audit[2191]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc3fc33640 a2=0 a3=7ffc3fc3362c items=0 ppid=2089 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.397000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 8 23:23:50.404000 audit[2193]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.404000 audit[2193]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd13c04690 a2=0 a3=7ffd13c0467c items=0 ppid=2089 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.404000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 8 23:23:50.407000 audit[2194]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.407000 audit[2194]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff7031a510 a2=0 a3=7fff7031a4fc items=0 ppid=2089 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.407000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 8 23:23:50.413000 audit[2196]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2196 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.413000 audit[2196]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd97dad0b0 a2=0 a3=7ffd97dad09c items=0 ppid=2089 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.413000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 8 23:23:50.419000 audit[2199]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2199 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.419000 audit[2199]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd2f78d970 a2=0 a3=7ffd2f78d95c items=0 ppid=2089 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.419000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 8 23:23:50.425000 audit[2202]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.425000 audit[2202]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe5b757260 a2=0 a3=7ffe5b75724c items=0 ppid=2089 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.425000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 8 23:23:50.427000 audit[2203]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2203 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.427000 audit[2203]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd875588e0 a2=0 a3=7ffd875588cc items=0 ppid=2089 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.427000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 8 23:23:50.442000 audit[2205]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2205 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.442000 audit[2205]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffd529105c0 a2=0 a3=7ffd529105ac items=0 ppid=2089 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.442000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 8 23:23:50.450000 audit[2208]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2208 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.450000 audit[2208]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffec08742b0 a2=0 a3=7ffec087429c items=0 ppid=2089 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.450000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 8 23:23:50.463000 audit[2213]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.463000 audit[2213]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe1827eca0 a2=0 a3=7ffe1827ec8c items=0 ppid=2089 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.463000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 8 23:23:50.469000 audit[2215]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2215 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:23:50.469000 audit[2215]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffff82aa440 a2=0 a3=7ffff82aa42c items=0 ppid=2089 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.469000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 8 23:23:50.498000 audit[2217]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2217 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:23:50.498000 audit[2217]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7fff961daa60 a2=0 a3=7fff961daa4c items=0 ppid=2089 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.498000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:23:50.511000 audit[2217]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:23:50.511000 audit[2217]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7fff961daa60 a2=0 a3=7fff961daa4c items=0 ppid=2089 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.511000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:23:50.514000 audit[2222]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.514000 audit[2222]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffef4e317f0 a2=0 a3=7ffef4e317dc items=0 ppid=2089 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.514000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 8 23:23:50.520000 audit[2224]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.520000 audit[2224]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc457c5c30 a2=0 a3=7ffc457c5c1c items=0 ppid=2089 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.520000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Feb 8 23:23:50.528000 audit[2227]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.528000 audit[2227]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffece95fd00 a2=0 a3=7ffece95fcec items=0 ppid=2089 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.528000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Feb 8 23:23:50.530000 audit[2228]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.530000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc51672710 a2=0 a3=7ffc516726fc items=0 ppid=2089 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.530000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 8 23:23:50.536000 audit[2230]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.536000 audit[2230]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcf8666210 a2=0 a3=7ffcf86661fc items=0 ppid=2089 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.536000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 8 23:23:50.538000 audit[2231]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.538000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff1f774000 a2=0 a3=7fff1f773fec items=0 ppid=2089 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.538000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 8 23:23:50.544000 audit[2233]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.544000 audit[2233]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd05b68f70 a2=0 a3=7ffd05b68f5c items=0 ppid=2089 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.544000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Feb 8 23:23:50.552000 audit[2236]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.552000 audit[2236]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe299ab0b0 a2=0 a3=7ffe299ab09c items=0 ppid=2089 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.552000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 8 23:23:50.555000 audit[2237]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.555000 audit[2237]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc8c84f8a0 a2=0 a3=7ffc8c84f88c items=0 ppid=2089 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.555000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 8 23:23:50.559000 audit[2239]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.559000 audit[2239]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffea4a0b5c0 a2=0 a3=7ffea4a0b5ac items=0 ppid=2089 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.559000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 8 23:23:50.560000 audit[2240]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.560000 audit[2240]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff3c4dfda0 a2=0 a3=7fff3c4dfd8c items=0 ppid=2089 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.560000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 8 23:23:50.563000 audit[2242]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.563000 audit[2242]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd214a79b0 a2=0 a3=7ffd214a799c items=0 ppid=2089 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.563000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 8 23:23:50.567000 audit[2245]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.567000 audit[2245]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffd1042b20 a2=0 a3=7fffd1042b0c items=0 ppid=2089 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.567000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 8 23:23:50.573000 audit[2248]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2248 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.573000 audit[2248]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcb13e61f0 a2=0 a3=7ffcb13e61dc items=0 ppid=2089 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.573000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Feb 8 23:23:50.574000 audit[2249]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2249 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.574000 audit[2249]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc758980e0 a2=0 a3=7ffc758980cc items=0 ppid=2089 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.574000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 8 23:23:50.577000 audit[2251]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.577000 audit[2251]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffcf9d6d120 a2=0 a3=7ffcf9d6d10c items=0 ppid=2089 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.577000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 8 23:23:50.580000 audit[2254]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.580000 audit[2254]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fff078b9860 a2=0 a3=7fff078b984c items=0 ppid=2089 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.580000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 8 23:23:50.581000 audit[2255]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.581000 audit[2255]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcba3df6b0 a2=0 a3=7ffcba3df69c items=0 ppid=2089 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.581000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 8 23:23:50.584000 audit[2257]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=2257 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.584000 audit[2257]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe242b0b50 a2=0 a3=7ffe242b0b3c items=0 ppid=2089 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.584000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 8 23:23:50.589000 audit[2260]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=2260 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.589000 audit[2260]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc1f41f500 a2=0 a3=7ffc1f41f4ec items=0 ppid=2089 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.589000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 8 23:23:50.590000 audit[2261]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=2261 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.590000 audit[2261]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcbb8b5130 a2=0 a3=7ffcbb8b511c items=0 ppid=2089 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.590000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 8 23:23:50.592000 audit[2263]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2263 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:23:50.592000 audit[2263]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffe4bc067f0 a2=0 a3=7ffe4bc067dc items=0 ppid=2089 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.592000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 8 23:23:50.596000 audit[2265]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2265 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 8 23:23:50.596000 audit[2265]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffd3a43a120 a2=0 a3=7ffd3a43a10c items=0 ppid=2089 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.596000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:23:50.598000 audit[2265]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2265 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 8 23:23:50.598000 audit[2265]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffd3a43a120 a2=0 a3=7ffd3a43a10c items=0 ppid=2089 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:50.598000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:23:51.059423 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount195453776.mount: Deactivated successfully. Feb 8 23:23:52.621433 env[1058]: time="2024-02-08T23:23:52.621311001Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:52.626002 env[1058]: time="2024-02-08T23:23:52.625282150Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7bc79e0d3be4fa8c35133127424f9b1ec775af43145b7dd58637905c76084827,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:52.629248 env[1058]: time="2024-02-08T23:23:52.629188928Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:52.635950 env[1058]: time="2024-02-08T23:23:52.635871092Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:715ac9a30f8a9579e44258af20de354715429e11836b493918e9e1a696e9b028,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:52.638468 env[1058]: time="2024-02-08T23:23:52.638391400Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\" returns image reference \"sha256:7bc79e0d3be4fa8c35133127424f9b1ec775af43145b7dd58637905c76084827\"" Feb 8 23:23:52.646438 env[1058]: time="2024-02-08T23:23:52.646358865Z" level=info msg="CreateContainer within sandbox \"15af817da2aac657739bf9cbfd01ad9396a751419d79704d2a205d45dae9fe45\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Feb 8 23:23:52.679669 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2446575573.mount: Deactivated successfully. Feb 8 23:23:52.701405 env[1058]: time="2024-02-08T23:23:52.701311382Z" level=info msg="CreateContainer within sandbox \"15af817da2aac657739bf9cbfd01ad9396a751419d79704d2a205d45dae9fe45\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"56321d28b78d2d026f75cded44c8d5297640527c2d32e52870d52d37346ab87d\"" Feb 8 23:23:52.705829 env[1058]: time="2024-02-08T23:23:52.704801479Z" level=info msg="StartContainer for \"56321d28b78d2d026f75cded44c8d5297640527c2d32e52870d52d37346ab87d\"" Feb 8 23:23:52.747457 systemd[1]: Started cri-containerd-56321d28b78d2d026f75cded44c8d5297640527c2d32e52870d52d37346ab87d.scope. Feb 8 23:23:52.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.787534 kernel: kauditd_printk_skb: 312 callbacks suppressed Feb 8 23:23:52.787622 kernel: audit: type=1400 audit(1707434632.785:1024): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.794495 kernel: audit: type=1400 audit(1707434632.785:1025): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.798770 kernel: audit: type=1400 audit(1707434632.785:1026): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.804213 kernel: audit: type=1400 audit(1707434632.785:1027): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.804441 kernel: audit: type=1400 audit(1707434632.785:1028): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.811189 kernel: audit: type=1400 audit(1707434632.785:1029): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.815307 kernel: audit: type=1400 audit(1707434632.785:1030): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.815386 kernel: audit: type=1400 audit(1707434632.785:1031): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.822802 kernel: audit: type=1400 audit(1707434632.785:1032): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.785000 audit: BPF prog-id=117 op=LOAD Feb 8 23:23:52.829826 kernel: audit: type=1400 audit(1707434632.785:1033): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.786000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.786000 audit[2274]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2109 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:52.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536333231643238623738643264303236663735636465643434633864 Feb 8 23:23:52.786000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.786000 audit[2274]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2109 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:52.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536333231643238623738643264303236663735636465643434633864 Feb 8 23:23:52.786000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.786000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.786000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.786000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.786000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.786000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.786000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.786000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.786000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.786000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.786000 audit: BPF prog-id=118 op=LOAD Feb 8 23:23:52.786000 audit[2274]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001ed710 items=0 ppid=2109 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:52.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536333231643238623738643264303236663735636465643434633864 Feb 8 23:23:52.790000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.790000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.790000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.790000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.790000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.790000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.790000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.790000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.790000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.790000 audit: BPF prog-id=119 op=LOAD Feb 8 23:23:52.790000 audit[2274]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001ed758 items=0 ppid=2109 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:52.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536333231643238623738643264303236663735636465643434633864 Feb 8 23:23:52.793000 audit: BPF prog-id=119 op=UNLOAD Feb 8 23:23:52.793000 audit: BPF prog-id=118 op=UNLOAD Feb 8 23:23:52.794000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.794000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.794000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.794000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.794000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.794000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.794000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.794000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.794000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.794000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:52.794000 audit: BPF prog-id=120 op=LOAD Feb 8 23:23:52.794000 audit[2274]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001edb68 items=0 ppid=2109 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:52.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536333231643238623738643264303236663735636465643434633864 Feb 8 23:23:52.846700 env[1058]: time="2024-02-08T23:23:52.846635465Z" level=info msg="StartContainer for \"56321d28b78d2d026f75cded44c8d5297640527c2d32e52870d52d37346ab87d\" returns successfully" Feb 8 23:23:52.974539 kubelet[1950]: I0208 23:23:52.974499 1950 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-k8tnz" podStartSLOduration=4.974438172 podCreationTimestamp="2024-02-08 23:23:48 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-08 23:23:49.990031623 +0000 UTC m=+15.320742123" watchObservedRunningTime="2024-02-08 23:23:52.974438172 +0000 UTC m=+18.305148662" Feb 8 23:23:52.975268 kubelet[1950]: I0208 23:23:52.975235 1950 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7ff8dc855-5988h" podStartSLOduration=1.698921303 podCreationTimestamp="2024-02-08 23:23:48 +0000 UTC" firstStartedPulling="2024-02-08 23:23:49.363169073 +0000 UTC m=+14.693879553" lastFinishedPulling="2024-02-08 23:23:52.639454123 +0000 UTC m=+17.970164653" observedRunningTime="2024-02-08 23:23:52.974051938 +0000 UTC m=+18.304762418" watchObservedRunningTime="2024-02-08 23:23:52.975206403 +0000 UTC m=+18.305916893" Feb 8 23:23:54.932000 audit[2305]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2305 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:23:54.932000 audit[2305]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7fffc40a66e0 a2=0 a3=7fffc40a66cc items=0 ppid=2089 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:54.932000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:23:54.933000 audit[2305]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2305 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:23:54.933000 audit[2305]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7fffc40a66e0 a2=0 a3=0 items=0 ppid=2089 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:54.933000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:23:54.947000 audit[2307]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2307 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:23:54.947000 audit[2307]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffdbef5cc00 a2=0 a3=7ffdbef5cbec items=0 ppid=2089 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:54.947000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:23:54.947000 audit[2307]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2307 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:23:54.947000 audit[2307]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffdbef5cc00 a2=0 a3=4f4e203b7374726f items=0 ppid=2089 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:54.947000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:23:55.062001 kubelet[1950]: I0208 23:23:55.061969 1950 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:23:55.068329 systemd[1]: Created slice kubepods-besteffort-pod5535a5fb_8f00_4cb9_a869_91ad342aab9c.slice. Feb 8 23:23:55.071221 kubelet[1950]: W0208 23:23:55.071199 1950 reflector.go:533] object-"calico-system"/"typha-certs": failed to list *v1.Secret: secrets "typha-certs" is forbidden: User "system:node:ci-3510-3-2-2-def1b47031.novalocal" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510-3-2-2-def1b47031.novalocal' and this object Feb 8 23:23:55.071364 kubelet[1950]: E0208 23:23:55.071352 1950 reflector.go:148] object-"calico-system"/"typha-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "typha-certs" is forbidden: User "system:node:ci-3510-3-2-2-def1b47031.novalocal" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510-3-2-2-def1b47031.novalocal' and this object Feb 8 23:23:55.071739 kubelet[1950]: W0208 23:23:55.071723 1950 reflector.go:533] object-"calico-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510-3-2-2-def1b47031.novalocal" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510-3-2-2-def1b47031.novalocal' and this object Feb 8 23:23:55.071864 kubelet[1950]: W0208 23:23:55.071834 1950 reflector.go:533] object-"calico-system"/"tigera-ca-bundle": failed to list *v1.ConfigMap: configmaps "tigera-ca-bundle" is forbidden: User "system:node:ci-3510-3-2-2-def1b47031.novalocal" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510-3-2-2-def1b47031.novalocal' and this object Feb 8 23:23:55.072014 kubelet[1950]: E0208 23:23:55.071982 1950 reflector.go:148] object-"calico-system"/"tigera-ca-bundle": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "tigera-ca-bundle" is forbidden: User "system:node:ci-3510-3-2-2-def1b47031.novalocal" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510-3-2-2-def1b47031.novalocal' and this object Feb 8 23:23:55.072014 kubelet[1950]: E0208 23:23:55.071845 1950 reflector.go:148] object-"calico-system"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510-3-2-2-def1b47031.novalocal" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510-3-2-2-def1b47031.novalocal' and this object Feb 8 23:23:55.113797 kubelet[1950]: I0208 23:23:55.113765 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9fzbw\" (UniqueName: \"kubernetes.io/projected/5535a5fb-8f00-4cb9-a869-91ad342aab9c-kube-api-access-9fzbw\") pod \"calico-typha-544bf6d845-w42kx\" (UID: \"5535a5fb-8f00-4cb9-a869-91ad342aab9c\") " pod="calico-system/calico-typha-544bf6d845-w42kx" Feb 8 23:23:55.114022 kubelet[1950]: I0208 23:23:55.114009 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/5535a5fb-8f00-4cb9-a869-91ad342aab9c-tigera-ca-bundle\") pod \"calico-typha-544bf6d845-w42kx\" (UID: \"5535a5fb-8f00-4cb9-a869-91ad342aab9c\") " pod="calico-system/calico-typha-544bf6d845-w42kx" Feb 8 23:23:55.114418 kubelet[1950]: I0208 23:23:55.114404 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/5535a5fb-8f00-4cb9-a869-91ad342aab9c-typha-certs\") pod \"calico-typha-544bf6d845-w42kx\" (UID: \"5535a5fb-8f00-4cb9-a869-91ad342aab9c\") " pod="calico-system/calico-typha-544bf6d845-w42kx" Feb 8 23:23:55.146793 kubelet[1950]: I0208 23:23:55.146739 1950 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:23:55.152511 kubelet[1950]: W0208 23:23:55.152458 1950 reflector.go:533] object-"calico-system"/"cni-config": failed to list *v1.ConfigMap: configmaps "cni-config" is forbidden: User "system:node:ci-3510-3-2-2-def1b47031.novalocal" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510-3-2-2-def1b47031.novalocal' and this object Feb 8 23:23:55.152698 kubelet[1950]: E0208 23:23:55.152519 1950 reflector.go:148] object-"calico-system"/"cni-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cni-config" is forbidden: User "system:node:ci-3510-3-2-2-def1b47031.novalocal" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510-3-2-2-def1b47031.novalocal' and this object Feb 8 23:23:55.153508 systemd[1]: Created slice kubepods-besteffort-pod5100c0b7_91a0_4f84_af45_98b2125a8c23.slice. Feb 8 23:23:55.160534 kubelet[1950]: W0208 23:23:55.160489 1950 reflector.go:533] object-"calico-system"/"node-certs": failed to list *v1.Secret: secrets "node-certs" is forbidden: User "system:node:ci-3510-3-2-2-def1b47031.novalocal" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510-3-2-2-def1b47031.novalocal' and this object Feb 8 23:23:55.160534 kubelet[1950]: E0208 23:23:55.160538 1950 reflector.go:148] object-"calico-system"/"node-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "node-certs" is forbidden: User "system:node:ci-3510-3-2-2-def1b47031.novalocal" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510-3-2-2-def1b47031.novalocal' and this object Feb 8 23:23:55.216653 kubelet[1950]: I0208 23:23:55.216509 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hbrj9\" (UniqueName: \"kubernetes.io/projected/5100c0b7-91a0-4f84-af45-98b2125a8c23-kube-api-access-hbrj9\") pod \"calico-node-xqnb4\" (UID: \"5100c0b7-91a0-4f84-af45-98b2125a8c23\") " pod="calico-system/calico-node-xqnb4" Feb 8 23:23:55.216893 kubelet[1950]: I0208 23:23:55.216733 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/5100c0b7-91a0-4f84-af45-98b2125a8c23-var-lib-calico\") pod \"calico-node-xqnb4\" (UID: \"5100c0b7-91a0-4f84-af45-98b2125a8c23\") " pod="calico-system/calico-node-xqnb4" Feb 8 23:23:55.216893 kubelet[1950]: I0208 23:23:55.216832 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/5100c0b7-91a0-4f84-af45-98b2125a8c23-cni-net-dir\") pod \"calico-node-xqnb4\" (UID: \"5100c0b7-91a0-4f84-af45-98b2125a8c23\") " pod="calico-system/calico-node-xqnb4" Feb 8 23:23:55.217012 kubelet[1950]: I0208 23:23:55.216919 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5100c0b7-91a0-4f84-af45-98b2125a8c23-xtables-lock\") pod \"calico-node-xqnb4\" (UID: \"5100c0b7-91a0-4f84-af45-98b2125a8c23\") " pod="calico-system/calico-node-xqnb4" Feb 8 23:23:55.217012 kubelet[1950]: I0208 23:23:55.217005 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/5100c0b7-91a0-4f84-af45-98b2125a8c23-flexvol-driver-host\") pod \"calico-node-xqnb4\" (UID: \"5100c0b7-91a0-4f84-af45-98b2125a8c23\") " pod="calico-system/calico-node-xqnb4" Feb 8 23:23:55.217162 kubelet[1950]: I0208 23:23:55.217121 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/5100c0b7-91a0-4f84-af45-98b2125a8c23-policysync\") pod \"calico-node-xqnb4\" (UID: \"5100c0b7-91a0-4f84-af45-98b2125a8c23\") " pod="calico-system/calico-node-xqnb4" Feb 8 23:23:55.217237 kubelet[1950]: I0208 23:23:55.217220 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/5100c0b7-91a0-4f84-af45-98b2125a8c23-node-certs\") pod \"calico-node-xqnb4\" (UID: \"5100c0b7-91a0-4f84-af45-98b2125a8c23\") " pod="calico-system/calico-node-xqnb4" Feb 8 23:23:55.217340 kubelet[1950]: I0208 23:23:55.217307 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/5100c0b7-91a0-4f84-af45-98b2125a8c23-var-run-calico\") pod \"calico-node-xqnb4\" (UID: \"5100c0b7-91a0-4f84-af45-98b2125a8c23\") " pod="calico-system/calico-node-xqnb4" Feb 8 23:23:55.217535 kubelet[1950]: I0208 23:23:55.217493 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/5100c0b7-91a0-4f84-af45-98b2125a8c23-tigera-ca-bundle\") pod \"calico-node-xqnb4\" (UID: \"5100c0b7-91a0-4f84-af45-98b2125a8c23\") " pod="calico-system/calico-node-xqnb4" Feb 8 23:23:55.217628 kubelet[1950]: I0208 23:23:55.217616 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5100c0b7-91a0-4f84-af45-98b2125a8c23-lib-modules\") pod \"calico-node-xqnb4\" (UID: \"5100c0b7-91a0-4f84-af45-98b2125a8c23\") " pod="calico-system/calico-node-xqnb4" Feb 8 23:23:55.217778 kubelet[1950]: I0208 23:23:55.217707 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/5100c0b7-91a0-4f84-af45-98b2125a8c23-cni-bin-dir\") pod \"calico-node-xqnb4\" (UID: \"5100c0b7-91a0-4f84-af45-98b2125a8c23\") " pod="calico-system/calico-node-xqnb4" Feb 8 23:23:55.217884 kubelet[1950]: I0208 23:23:55.217811 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/5100c0b7-91a0-4f84-af45-98b2125a8c23-cni-log-dir\") pod \"calico-node-xqnb4\" (UID: \"5100c0b7-91a0-4f84-af45-98b2125a8c23\") " pod="calico-system/calico-node-xqnb4" Feb 8 23:23:55.289053 kubelet[1950]: I0208 23:23:55.288970 1950 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:23:55.289887 kubelet[1950]: E0208 23:23:55.289825 1950 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7pr2w" podUID=1ce0d9e2-3713-455f-ba71-30f83da4d2b4 Feb 8 23:23:55.319128 kubelet[1950]: I0208 23:23:55.319084 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/1ce0d9e2-3713-455f-ba71-30f83da4d2b4-varrun\") pod \"csi-node-driver-7pr2w\" (UID: \"1ce0d9e2-3713-455f-ba71-30f83da4d2b4\") " pod="calico-system/csi-node-driver-7pr2w" Feb 8 23:23:55.319128 kubelet[1950]: I0208 23:23:55.319135 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/1ce0d9e2-3713-455f-ba71-30f83da4d2b4-kubelet-dir\") pod \"csi-node-driver-7pr2w\" (UID: \"1ce0d9e2-3713-455f-ba71-30f83da4d2b4\") " pod="calico-system/csi-node-driver-7pr2w" Feb 8 23:23:55.319320 kubelet[1950]: I0208 23:23:55.319176 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/1ce0d9e2-3713-455f-ba71-30f83da4d2b4-socket-dir\") pod \"csi-node-driver-7pr2w\" (UID: \"1ce0d9e2-3713-455f-ba71-30f83da4d2b4\") " pod="calico-system/csi-node-driver-7pr2w" Feb 8 23:23:55.319320 kubelet[1950]: I0208 23:23:55.319203 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/1ce0d9e2-3713-455f-ba71-30f83da4d2b4-registration-dir\") pod \"csi-node-driver-7pr2w\" (UID: \"1ce0d9e2-3713-455f-ba71-30f83da4d2b4\") " pod="calico-system/csi-node-driver-7pr2w" Feb 8 23:23:55.319320 kubelet[1950]: I0208 23:23:55.319245 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2nl2w\" (UniqueName: \"kubernetes.io/projected/1ce0d9e2-3713-455f-ba71-30f83da4d2b4-kube-api-access-2nl2w\") pod \"csi-node-driver-7pr2w\" (UID: \"1ce0d9e2-3713-455f-ba71-30f83da4d2b4\") " pod="calico-system/csi-node-driver-7pr2w" Feb 8 23:23:55.420391 kubelet[1950]: E0208 23:23:55.420346 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.420391 kubelet[1950]: W0208 23:23:55.420376 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.420597 kubelet[1950]: E0208 23:23:55.420435 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.420683 kubelet[1950]: E0208 23:23:55.420663 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.420683 kubelet[1950]: W0208 23:23:55.420680 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.420796 kubelet[1950]: E0208 23:23:55.420695 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.420894 kubelet[1950]: E0208 23:23:55.420878 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.420894 kubelet[1950]: W0208 23:23:55.420892 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.420977 kubelet[1950]: E0208 23:23:55.420906 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.421187 kubelet[1950]: E0208 23:23:55.421170 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.421187 kubelet[1950]: W0208 23:23:55.421184 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.421284 kubelet[1950]: E0208 23:23:55.421201 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.421434 kubelet[1950]: E0208 23:23:55.421414 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.421434 kubelet[1950]: W0208 23:23:55.421431 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.421525 kubelet[1950]: E0208 23:23:55.421452 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.421864 kubelet[1950]: E0208 23:23:55.421846 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.421864 kubelet[1950]: W0208 23:23:55.421860 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.421968 kubelet[1950]: E0208 23:23:55.421883 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.422061 kubelet[1950]: E0208 23:23:55.422045 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.422061 kubelet[1950]: W0208 23:23:55.422058 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.422150 kubelet[1950]: E0208 23:23:55.422077 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.422377 kubelet[1950]: E0208 23:23:55.422361 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.422377 kubelet[1950]: W0208 23:23:55.422378 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.422482 kubelet[1950]: E0208 23:23:55.422398 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.422577 kubelet[1950]: E0208 23:23:55.422562 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.422577 kubelet[1950]: W0208 23:23:55.422577 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.422731 kubelet[1950]: E0208 23:23:55.422707 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.422996 kubelet[1950]: E0208 23:23:55.422979 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.422996 kubelet[1950]: W0208 23:23:55.422992 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.423121 kubelet[1950]: E0208 23:23:55.423107 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.423205 kubelet[1950]: E0208 23:23:55.423139 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.423275 kubelet[1950]: W0208 23:23:55.423261 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.423373 kubelet[1950]: E0208 23:23:55.423349 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.423632 kubelet[1950]: E0208 23:23:55.423621 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.423719 kubelet[1950]: W0208 23:23:55.423707 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.423883 kubelet[1950]: E0208 23:23:55.423858 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.424108 kubelet[1950]: E0208 23:23:55.424098 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.424181 kubelet[1950]: W0208 23:23:55.424169 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.424287 kubelet[1950]: E0208 23:23:55.424264 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.424523 kubelet[1950]: E0208 23:23:55.424511 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.424598 kubelet[1950]: W0208 23:23:55.424586 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.424685 kubelet[1950]: E0208 23:23:55.424673 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.424881 kubelet[1950]: E0208 23:23:55.424864 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.424881 kubelet[1950]: W0208 23:23:55.424878 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.425015 kubelet[1950]: E0208 23:23:55.425002 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.425209 kubelet[1950]: E0208 23:23:55.425184 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.425209 kubelet[1950]: W0208 23:23:55.425207 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.425333 kubelet[1950]: E0208 23:23:55.425320 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.425405 kubelet[1950]: E0208 23:23:55.425347 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.425471 kubelet[1950]: W0208 23:23:55.425459 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.425571 kubelet[1950]: E0208 23:23:55.425548 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.425816 kubelet[1950]: E0208 23:23:55.425805 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.425903 kubelet[1950]: W0208 23:23:55.425891 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.426011 kubelet[1950]: E0208 23:23:55.425989 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.426217 kubelet[1950]: E0208 23:23:55.426206 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.426290 kubelet[1950]: W0208 23:23:55.426278 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.426392 kubelet[1950]: E0208 23:23:55.426371 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.426615 kubelet[1950]: E0208 23:23:55.426604 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.426700 kubelet[1950]: W0208 23:23:55.426688 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.426824 kubelet[1950]: E0208 23:23:55.426811 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.426977 kubelet[1950]: E0208 23:23:55.426959 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.426977 kubelet[1950]: W0208 23:23:55.426974 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.427104 kubelet[1950]: E0208 23:23:55.427091 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.427318 kubelet[1950]: E0208 23:23:55.427299 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.427318 kubelet[1950]: W0208 23:23:55.427314 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.427453 kubelet[1950]: E0208 23:23:55.427439 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.427548 kubelet[1950]: E0208 23:23:55.427467 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.427548 kubelet[1950]: W0208 23:23:55.427544 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.427676 kubelet[1950]: E0208 23:23:55.427664 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.427793 kubelet[1950]: E0208 23:23:55.427685 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.427860 kubelet[1950]: W0208 23:23:55.427848 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.428097 kubelet[1950]: E0208 23:23:55.428085 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.428166 kubelet[1950]: W0208 23:23:55.428155 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.428242 kubelet[1950]: E0208 23:23:55.428231 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.430105 kubelet[1950]: E0208 23:23:55.430091 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.430413 kubelet[1950]: E0208 23:23:55.430228 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.430594 kubelet[1950]: W0208 23:23:55.430521 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.430688 kubelet[1950]: E0208 23:23:55.430677 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.431014 kubelet[1950]: E0208 23:23:55.430985 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.431014 kubelet[1950]: W0208 23:23:55.431004 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.431102 kubelet[1950]: E0208 23:23:55.431020 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.435787 kubelet[1950]: E0208 23:23:55.435545 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.435787 kubelet[1950]: W0208 23:23:55.435560 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.435787 kubelet[1950]: E0208 23:23:55.435581 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.435787 kubelet[1950]: E0208 23:23:55.435776 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.435787 kubelet[1950]: W0208 23:23:55.435785 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.435787 kubelet[1950]: E0208 23:23:55.435797 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.436065 kubelet[1950]: E0208 23:23:55.435937 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.436065 kubelet[1950]: W0208 23:23:55.435946 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.436065 kubelet[1950]: E0208 23:23:55.435957 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.437817 kubelet[1950]: E0208 23:23:55.436304 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.437817 kubelet[1950]: W0208 23:23:55.436318 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.437817 kubelet[1950]: E0208 23:23:55.436330 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.527923 kubelet[1950]: E0208 23:23:55.527837 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.528096 kubelet[1950]: W0208 23:23:55.528080 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.528178 kubelet[1950]: E0208 23:23:55.528168 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.528403 kubelet[1950]: E0208 23:23:55.528392 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.528473 kubelet[1950]: W0208 23:23:55.528462 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.528536 kubelet[1950]: E0208 23:23:55.528527 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.528786 kubelet[1950]: E0208 23:23:55.528775 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.528889 kubelet[1950]: W0208 23:23:55.528878 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.528960 kubelet[1950]: E0208 23:23:55.528951 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.532123 kubelet[1950]: E0208 23:23:55.532108 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.532222 kubelet[1950]: W0208 23:23:55.532210 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.532293 kubelet[1950]: E0208 23:23:55.532283 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.532584 kubelet[1950]: E0208 23:23:55.532572 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.532662 kubelet[1950]: W0208 23:23:55.532650 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.532731 kubelet[1950]: E0208 23:23:55.532720 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.533044 kubelet[1950]: E0208 23:23:55.533032 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.533121 kubelet[1950]: W0208 23:23:55.533110 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.533190 kubelet[1950]: E0208 23:23:55.533181 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.533462 kubelet[1950]: E0208 23:23:55.533450 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.533536 kubelet[1950]: W0208 23:23:55.533525 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.533600 kubelet[1950]: E0208 23:23:55.533591 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.634757 kubelet[1950]: E0208 23:23:55.634695 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.634757 kubelet[1950]: W0208 23:23:55.634727 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.635063 kubelet[1950]: E0208 23:23:55.634775 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.635063 kubelet[1950]: E0208 23:23:55.634954 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.635063 kubelet[1950]: W0208 23:23:55.634963 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.635063 kubelet[1950]: E0208 23:23:55.634977 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.635188 kubelet[1950]: E0208 23:23:55.635119 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.635188 kubelet[1950]: W0208 23:23:55.635128 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.635188 kubelet[1950]: E0208 23:23:55.635141 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.635284 kubelet[1950]: E0208 23:23:55.635273 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.635284 kubelet[1950]: W0208 23:23:55.635282 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.635349 kubelet[1950]: E0208 23:23:55.635296 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.635464 kubelet[1950]: E0208 23:23:55.635444 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.635464 kubelet[1950]: W0208 23:23:55.635457 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.635555 kubelet[1950]: E0208 23:23:55.635470 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.635626 kubelet[1950]: E0208 23:23:55.635601 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.635626 kubelet[1950]: W0208 23:23:55.635616 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.635626 kubelet[1950]: E0208 23:23:55.635628 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.635829 kubelet[1950]: E0208 23:23:55.635806 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.635829 kubelet[1950]: W0208 23:23:55.635821 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.635920 kubelet[1950]: E0208 23:23:55.635833 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.736716 kubelet[1950]: E0208 23:23:55.736688 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.737018 kubelet[1950]: W0208 23:23:55.737002 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.737146 kubelet[1950]: E0208 23:23:55.737134 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.737388 kubelet[1950]: E0208 23:23:55.737376 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.737468 kubelet[1950]: W0208 23:23:55.737456 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.737550 kubelet[1950]: E0208 23:23:55.737540 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.737784 kubelet[1950]: E0208 23:23:55.737772 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.737865 kubelet[1950]: W0208 23:23:55.737854 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.737941 kubelet[1950]: E0208 23:23:55.737931 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.738143 kubelet[1950]: E0208 23:23:55.738132 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.738220 kubelet[1950]: W0208 23:23:55.738208 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.738293 kubelet[1950]: E0208 23:23:55.738283 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.738491 kubelet[1950]: E0208 23:23:55.738481 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.738560 kubelet[1950]: W0208 23:23:55.738549 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.738631 kubelet[1950]: E0208 23:23:55.738621 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.738861 kubelet[1950]: E0208 23:23:55.738850 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.738926 kubelet[1950]: W0208 23:23:55.738916 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.738993 kubelet[1950]: E0208 23:23:55.738985 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.739191 kubelet[1950]: E0208 23:23:55.739181 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.739259 kubelet[1950]: W0208 23:23:55.739249 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.739320 kubelet[1950]: E0208 23:23:55.739312 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.840994 kubelet[1950]: E0208 23:23:55.840868 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.840994 kubelet[1950]: W0208 23:23:55.840894 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.840994 kubelet[1950]: E0208 23:23:55.840922 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.842921 kubelet[1950]: E0208 23:23:55.841348 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.842921 kubelet[1950]: W0208 23:23:55.841364 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.842921 kubelet[1950]: E0208 23:23:55.841381 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.843254 kubelet[1950]: E0208 23:23:55.843235 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.843254 kubelet[1950]: W0208 23:23:55.843252 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.843353 kubelet[1950]: E0208 23:23:55.843268 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.844382 kubelet[1950]: E0208 23:23:55.843497 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.844382 kubelet[1950]: W0208 23:23:55.843513 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.844382 kubelet[1950]: E0208 23:23:55.843526 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.844382 kubelet[1950]: E0208 23:23:55.843687 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.844382 kubelet[1950]: W0208 23:23:55.843697 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.844382 kubelet[1950]: E0208 23:23:55.843711 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.847294 kubelet[1950]: E0208 23:23:55.847222 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.847294 kubelet[1950]: W0208 23:23:55.847241 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.847294 kubelet[1950]: E0208 23:23:55.847263 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.847675 kubelet[1950]: E0208 23:23:55.847656 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.847675 kubelet[1950]: W0208 23:23:55.847671 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.847791 kubelet[1950]: E0208 23:23:55.847691 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.949966 kubelet[1950]: E0208 23:23:55.949934 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.949966 kubelet[1950]: W0208 23:23:55.949961 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.950153 kubelet[1950]: E0208 23:23:55.949989 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.950364 kubelet[1950]: E0208 23:23:55.950347 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.950364 kubelet[1950]: W0208 23:23:55.950361 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.950462 kubelet[1950]: E0208 23:23:55.950375 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.950677 kubelet[1950]: E0208 23:23:55.950656 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.950677 kubelet[1950]: W0208 23:23:55.950671 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.950805 kubelet[1950]: E0208 23:23:55.950685 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.951020 kubelet[1950]: E0208 23:23:55.950993 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.951020 kubelet[1950]: W0208 23:23:55.951006 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.951020 kubelet[1950]: E0208 23:23:55.951018 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.951299 kubelet[1950]: E0208 23:23:55.951278 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.951299 kubelet[1950]: W0208 23:23:55.951293 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.951391 kubelet[1950]: E0208 23:23:55.951306 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.951602 kubelet[1950]: E0208 23:23:55.951571 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.951602 kubelet[1950]: W0208 23:23:55.951595 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.951709 kubelet[1950]: E0208 23:23:55.951608 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.951933 kubelet[1950]: E0208 23:23:55.951914 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.951933 kubelet[1950]: W0208 23:23:55.951928 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.952007 kubelet[1950]: E0208 23:23:55.951942 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.966000 audit[2375]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=2375 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:23:55.966000 audit[2375]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7fffa0f33d60 a2=0 a3=7fffa0f33d4c items=0 ppid=2089 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:55.966000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:23:55.970367 kubelet[1950]: E0208 23:23:55.970348 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.970476 kubelet[1950]: W0208 23:23:55.970463 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.970554 kubelet[1950]: E0208 23:23:55.970544 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.971943 kubelet[1950]: E0208 23:23:55.971911 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:55.971943 kubelet[1950]: W0208 23:23:55.971935 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:55.972051 kubelet[1950]: E0208 23:23:55.971958 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:55.967000 audit[2375]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2375 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:23:55.967000 audit[2375]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7fffa0f33d60 a2=0 a3=0 items=0 ppid=2089 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:55.967000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:23:56.052443 kubelet[1950]: E0208 23:23:56.052410 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.052443 kubelet[1950]: W0208 23:23:56.052436 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.052622 kubelet[1950]: E0208 23:23:56.052460 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.052622 kubelet[1950]: E0208 23:23:56.052609 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.052622 kubelet[1950]: W0208 23:23:56.052617 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.052711 kubelet[1950]: E0208 23:23:56.052630 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.052826 kubelet[1950]: E0208 23:23:56.052805 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.052826 kubelet[1950]: W0208 23:23:56.052821 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.052922 kubelet[1950]: E0208 23:23:56.052834 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.053340 kubelet[1950]: E0208 23:23:56.053318 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.053340 kubelet[1950]: W0208 23:23:56.053332 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.053340 kubelet[1950]: E0208 23:23:56.053344 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.053576 kubelet[1950]: E0208 23:23:56.053498 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.053576 kubelet[1950]: W0208 23:23:56.053512 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.053576 kubelet[1950]: E0208 23:23:56.053523 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.154740 kubelet[1950]: E0208 23:23:56.154670 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.156939 kubelet[1950]: W0208 23:23:56.156895 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.157069 kubelet[1950]: E0208 23:23:56.157057 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.159072 kubelet[1950]: E0208 23:23:56.159058 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.159183 kubelet[1950]: W0208 23:23:56.159171 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.159260 kubelet[1950]: E0208 23:23:56.159250 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.160560 kubelet[1950]: E0208 23:23:56.160547 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.160642 kubelet[1950]: W0208 23:23:56.160631 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.160719 kubelet[1950]: E0208 23:23:56.160710 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.161092 kubelet[1950]: E0208 23:23:56.161082 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.161175 kubelet[1950]: W0208 23:23:56.161164 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.161261 kubelet[1950]: E0208 23:23:56.161251 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.161523 kubelet[1950]: E0208 23:23:56.161512 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.161599 kubelet[1950]: W0208 23:23:56.161588 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.161670 kubelet[1950]: E0208 23:23:56.161661 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.222321 kubelet[1950]: E0208 23:23:56.222291 1950 secret.go:194] Couldn't get secret calico-system/typha-certs: failed to sync secret cache: timed out waiting for the condition Feb 8 23:23:56.222594 kubelet[1950]: E0208 23:23:56.222579 1950 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/5535a5fb-8f00-4cb9-a869-91ad342aab9c-typha-certs podName:5535a5fb-8f00-4cb9-a869-91ad342aab9c nodeName:}" failed. No retries permitted until 2024-02-08 23:23:56.722554052 +0000 UTC m=+22.053264542 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "typha-certs" (UniqueName: "kubernetes.io/secret/5535a5fb-8f00-4cb9-a869-91ad342aab9c-typha-certs") pod "calico-typha-544bf6d845-w42kx" (UID: "5535a5fb-8f00-4cb9-a869-91ad342aab9c") : failed to sync secret cache: timed out waiting for the condition Feb 8 23:23:56.237960 kubelet[1950]: E0208 23:23:56.237932 1950 projected.go:292] Couldn't get configMap calico-system/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Feb 8 23:23:56.238150 kubelet[1950]: E0208 23:23:56.238140 1950 projected.go:198] Error preparing data for projected volume kube-api-access-9fzbw for pod calico-system/calico-typha-544bf6d845-w42kx: failed to sync configmap cache: timed out waiting for the condition Feb 8 23:23:56.238282 kubelet[1950]: E0208 23:23:56.238270 1950 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/5535a5fb-8f00-4cb9-a869-91ad342aab9c-kube-api-access-9fzbw podName:5535a5fb-8f00-4cb9-a869-91ad342aab9c nodeName:}" failed. No retries permitted until 2024-02-08 23:23:56.738251927 +0000 UTC m=+22.068962407 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-9fzbw" (UniqueName: "kubernetes.io/projected/5535a5fb-8f00-4cb9-a869-91ad342aab9c-kube-api-access-9fzbw") pod "calico-typha-544bf6d845-w42kx" (UID: "5535a5fb-8f00-4cb9-a869-91ad342aab9c") : failed to sync configmap cache: timed out waiting for the condition Feb 8 23:23:56.264005 kubelet[1950]: E0208 23:23:56.263734 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.264005 kubelet[1950]: W0208 23:23:56.263772 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.264005 kubelet[1950]: E0208 23:23:56.263817 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.264587 kubelet[1950]: E0208 23:23:56.264366 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.264587 kubelet[1950]: W0208 23:23:56.264385 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.264587 kubelet[1950]: E0208 23:23:56.264401 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.264587 kubelet[1950]: E0208 23:23:56.264543 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.264587 kubelet[1950]: W0208 23:23:56.264551 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.264587 kubelet[1950]: E0208 23:23:56.264563 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.265319 kubelet[1950]: E0208 23:23:56.265143 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.265319 kubelet[1950]: W0208 23:23:56.265158 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.265319 kubelet[1950]: E0208 23:23:56.265171 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.265576 kubelet[1950]: E0208 23:23:56.265536 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.265576 kubelet[1950]: W0208 23:23:56.265551 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.265576 kubelet[1950]: E0208 23:23:56.265563 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.307150 kubelet[1950]: E0208 23:23:56.307117 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.307150 kubelet[1950]: W0208 23:23:56.307141 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.307290 kubelet[1950]: E0208 23:23:56.307171 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.358657 env[1058]: time="2024-02-08T23:23:56.358181335Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-xqnb4,Uid:5100c0b7-91a0-4f84-af45-98b2125a8c23,Namespace:calico-system,Attempt:0,}" Feb 8 23:23:56.367382 kubelet[1950]: E0208 23:23:56.367054 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.367382 kubelet[1950]: W0208 23:23:56.367075 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.367382 kubelet[1950]: E0208 23:23:56.367100 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.367382 kubelet[1950]: E0208 23:23:56.367323 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.367382 kubelet[1950]: W0208 23:23:56.367332 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.367382 kubelet[1950]: E0208 23:23:56.367345 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.387127 env[1058]: time="2024-02-08T23:23:56.387027132Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:23:56.387127 env[1058]: time="2024-02-08T23:23:56.387092184Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:23:56.387327 env[1058]: time="2024-02-08T23:23:56.387106932Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:23:56.387612 env[1058]: time="2024-02-08T23:23:56.387561955Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a0f90cdbbd5cd667e1ae408df1e19d2ef01b1c1c3b1a7cd5d66fefed0b6227ea pid=2406 runtime=io.containerd.runc.v2 Feb 8 23:23:56.417411 systemd[1]: Started cri-containerd-a0f90cdbbd5cd667e1ae408df1e19d2ef01b1c1c3b1a7cd5d66fefed0b6227ea.scope. Feb 8 23:23:56.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.437000 audit: BPF prog-id=121 op=LOAD Feb 8 23:23:56.438000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.438000 audit[2416]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2406 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:56.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130663930636462626435636436363765316165343038646631653139 Feb 8 23:23:56.438000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.438000 audit[2416]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2406 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:56.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130663930636462626435636436363765316165343038646631653139 Feb 8 23:23:56.438000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.438000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.438000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.438000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.438000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.438000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.438000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.438000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.438000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.438000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.438000 audit: BPF prog-id=122 op=LOAD Feb 8 23:23:56.438000 audit[2416]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000335990 items=0 ppid=2406 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:56.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130663930636462626435636436363765316165343038646631653139 Feb 8 23:23:56.442000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.442000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.442000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.442000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.442000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.442000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.442000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.442000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.442000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.442000 audit: BPF prog-id=123 op=LOAD Feb 8 23:23:56.442000 audit[2416]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003359d8 items=0 ppid=2406 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:56.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130663930636462626435636436363765316165343038646631653139 Feb 8 23:23:56.444000 audit: BPF prog-id=123 op=UNLOAD Feb 8 23:23:56.444000 audit: BPF prog-id=122 op=UNLOAD Feb 8 23:23:56.444000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.444000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.444000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.444000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.444000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.444000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.444000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.444000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.444000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.444000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.444000 audit: BPF prog-id=124 op=LOAD Feb 8 23:23:56.444000 audit[2416]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000335de8 items=0 ppid=2406 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:56.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130663930636462626435636436363765316165343038646631653139 Feb 8 23:23:56.464113 env[1058]: time="2024-02-08T23:23:56.464052512Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-xqnb4,Uid:5100c0b7-91a0-4f84-af45-98b2125a8c23,Namespace:calico-system,Attempt:0,} returns sandbox id \"a0f90cdbbd5cd667e1ae408df1e19d2ef01b1c1c3b1a7cd5d66fefed0b6227ea\"" Feb 8 23:23:56.466520 env[1058]: time="2024-02-08T23:23:56.466496245Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\"" Feb 8 23:23:56.468028 kubelet[1950]: E0208 23:23:56.467975 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.468028 kubelet[1950]: W0208 23:23:56.468010 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.468145 kubelet[1950]: E0208 23:23:56.468033 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.468288 kubelet[1950]: E0208 23:23:56.468264 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.468288 kubelet[1950]: W0208 23:23:56.468280 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.468386 kubelet[1950]: E0208 23:23:56.468305 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.569089 kubelet[1950]: E0208 23:23:56.569043 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.569089 kubelet[1950]: W0208 23:23:56.569080 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.569287 kubelet[1950]: E0208 23:23:56.569107 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.569454 kubelet[1950]: E0208 23:23:56.569434 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.569454 kubelet[1950]: W0208 23:23:56.569450 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.569547 kubelet[1950]: E0208 23:23:56.569465 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.670920 kubelet[1950]: E0208 23:23:56.670807 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.670920 kubelet[1950]: W0208 23:23:56.670835 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.670920 kubelet[1950]: E0208 23:23:56.670863 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.672968 kubelet[1950]: E0208 23:23:56.671767 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.672968 kubelet[1950]: W0208 23:23:56.671786 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.672968 kubelet[1950]: E0208 23:23:56.671805 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.772896 kubelet[1950]: E0208 23:23:56.772852 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.772896 kubelet[1950]: W0208 23:23:56.772896 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.773090 kubelet[1950]: E0208 23:23:56.772938 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.773505 kubelet[1950]: E0208 23:23:56.773476 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.773590 kubelet[1950]: W0208 23:23:56.773511 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.773590 kubelet[1950]: E0208 23:23:56.773549 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.774497 kubelet[1950]: E0208 23:23:56.774466 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.774547 kubelet[1950]: W0208 23:23:56.774506 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.774598 kubelet[1950]: E0208 23:23:56.774547 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.774944 kubelet[1950]: E0208 23:23:56.774916 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.774992 kubelet[1950]: W0208 23:23:56.774948 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.775082 kubelet[1950]: E0208 23:23:56.775058 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.775508 kubelet[1950]: E0208 23:23:56.775471 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.775556 kubelet[1950]: W0208 23:23:56.775508 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.775585 kubelet[1950]: E0208 23:23:56.775575 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.776074 kubelet[1950]: E0208 23:23:56.776042 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.776141 kubelet[1950]: W0208 23:23:56.776076 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.776141 kubelet[1950]: E0208 23:23:56.776113 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.776555 kubelet[1950]: E0208 23:23:56.776524 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.776617 kubelet[1950]: W0208 23:23:56.776559 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.776617 kubelet[1950]: E0208 23:23:56.776595 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.787361 kubelet[1950]: E0208 23:23:56.787310 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.787361 kubelet[1950]: W0208 23:23:56.787359 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.787596 kubelet[1950]: E0208 23:23:56.787425 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.788027 kubelet[1950]: E0208 23:23:56.787994 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.788092 kubelet[1950]: W0208 23:23:56.788029 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.788311 kubelet[1950]: E0208 23:23:56.788202 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.788404 kubelet[1950]: E0208 23:23:56.788377 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.788447 kubelet[1950]: W0208 23:23:56.788407 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.788481 kubelet[1950]: E0208 23:23:56.788452 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.789866 kubelet[1950]: E0208 23:23:56.789835 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.789960 kubelet[1950]: W0208 23:23:56.789867 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.789960 kubelet[1950]: E0208 23:23:56.789903 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.796823 kubelet[1950]: E0208 23:23:56.796735 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:23:56.796823 kubelet[1950]: W0208 23:23:56.796813 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:23:56.796996 kubelet[1950]: E0208 23:23:56.796853 1950 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:23:56.870593 kubelet[1950]: E0208 23:23:56.870523 1950 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7pr2w" podUID=1ce0d9e2-3713-455f-ba71-30f83da4d2b4 Feb 8 23:23:56.872850 env[1058]: time="2024-02-08T23:23:56.872712705Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-544bf6d845-w42kx,Uid:5535a5fb-8f00-4cb9-a869-91ad342aab9c,Namespace:calico-system,Attempt:0,}" Feb 8 23:23:56.936556 env[1058]: time="2024-02-08T23:23:56.936460970Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:23:56.936556 env[1058]: time="2024-02-08T23:23:56.936510763Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:23:56.936556 env[1058]: time="2024-02-08T23:23:56.936525621Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:23:56.937392 env[1058]: time="2024-02-08T23:23:56.937305846Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fc043f3ea62481f2088917fd9b6f915a75af9c2f76a6d5c062b5313777a2b374 pid=2468 runtime=io.containerd.runc.v2 Feb 8 23:23:56.952939 systemd[1]: Started cri-containerd-fc043f3ea62481f2088917fd9b6f915a75af9c2f76a6d5c062b5313777a2b374.scope. Feb 8 23:23:56.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.976000 audit: BPF prog-id=125 op=LOAD Feb 8 23:23:56.978000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.978000 audit[2480]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2468 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:56.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663303433663365613632343831663230383839313766643962366639 Feb 8 23:23:56.978000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.978000 audit[2480]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2468 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:56.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663303433663365613632343831663230383839313766643962366639 Feb 8 23:23:56.978000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.978000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.978000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.978000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.978000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.978000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.978000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.978000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.978000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.978000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.978000 audit: BPF prog-id=126 op=LOAD Feb 8 23:23:56.978000 audit[2480]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0003a85a0 items=0 ppid=2468 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:56.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663303433663365613632343831663230383839313766643962366639 Feb 8 23:23:56.979000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.979000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.979000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.979000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.979000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.979000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.979000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.979000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.979000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.979000 audit: BPF prog-id=127 op=LOAD Feb 8 23:23:56.979000 audit[2480]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0003a85e8 items=0 ppid=2468 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:56.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663303433663365613632343831663230383839313766643962366639 Feb 8 23:23:56.979000 audit: BPF prog-id=127 op=UNLOAD Feb 8 23:23:56.980000 audit: BPF prog-id=126 op=UNLOAD Feb 8 23:23:56.980000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.980000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.980000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.980000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.980000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.980000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.980000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.980000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.980000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.980000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:56.980000 audit: BPF prog-id=128 op=LOAD Feb 8 23:23:56.980000 audit[2480]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003a89f8 items=0 ppid=2468 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:56.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663303433663365613632343831663230383839313766643962366639 Feb 8 23:23:57.020671 env[1058]: time="2024-02-08T23:23:57.020604873Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-544bf6d845-w42kx,Uid:5535a5fb-8f00-4cb9-a869-91ad342aab9c,Namespace:calico-system,Attempt:0,} returns sandbox id \"fc043f3ea62481f2088917fd9b6f915a75af9c2f76a6d5c062b5313777a2b374\"" Feb 8 23:23:58.101813 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1882932399.mount: Deactivated successfully. Feb 8 23:23:58.870121 kubelet[1950]: E0208 23:23:58.870065 1950 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7pr2w" podUID=1ce0d9e2-3713-455f-ba71-30f83da4d2b4 Feb 8 23:23:59.249707 env[1058]: time="2024-02-08T23:23:59.249635158Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:59.252043 env[1058]: time="2024-02-08T23:23:59.252006556Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6506d2e0be2d5ec9cb8dbe00c4b4f037c67b6ab4ec14a1f0c83333ac51f4da9a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:59.257333 env[1058]: time="2024-02-08T23:23:59.257297250Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:59.261285 env[1058]: time="2024-02-08T23:23:59.261239124Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:b05edbd1f80db4ada229e6001a666a7dd36bb6ab617143684fb3d28abfc4b71e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:23:59.262736 env[1058]: time="2024-02-08T23:23:59.262706175Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\" returns image reference \"sha256:6506d2e0be2d5ec9cb8dbe00c4b4f037c67b6ab4ec14a1f0c83333ac51f4da9a\"" Feb 8 23:23:59.264639 env[1058]: time="2024-02-08T23:23:59.264617351Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\"" Feb 8 23:23:59.266039 env[1058]: time="2024-02-08T23:23:59.266007879Z" level=info msg="CreateContainer within sandbox \"a0f90cdbbd5cd667e1ae408df1e19d2ef01b1c1c3b1a7cd5d66fefed0b6227ea\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Feb 8 23:23:59.289085 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3352947908.mount: Deactivated successfully. Feb 8 23:23:59.307272 env[1058]: time="2024-02-08T23:23:59.307226544Z" level=info msg="CreateContainer within sandbox \"a0f90cdbbd5cd667e1ae408df1e19d2ef01b1c1c3b1a7cd5d66fefed0b6227ea\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"d959448257cd0193f1af0d1c4ab2549494a273f9873cfb75e72a7d29d2fdd95d\"" Feb 8 23:23:59.308590 env[1058]: time="2024-02-08T23:23:59.308563942Z" level=info msg="StartContainer for \"d959448257cd0193f1af0d1c4ab2549494a273f9873cfb75e72a7d29d2fdd95d\"" Feb 8 23:23:59.346231 systemd[1]: Started cri-containerd-d959448257cd0193f1af0d1c4ab2549494a273f9873cfb75e72a7d29d2fdd95d.scope. Feb 8 23:23:59.415000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.418401 kernel: kauditd_printk_skb: 179 callbacks suppressed Feb 8 23:23:59.418652 kernel: audit: type=1400 audit(1707434639.415:1084): avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.415000 audit[2508]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2406 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:59.427594 kernel: audit: type=1300 audit(1707434639.415:1084): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2406 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:59.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439353934343832353763643031393366316166306431633461623235 Feb 8 23:23:59.433776 kernel: audit: type=1327 audit(1707434639.415:1084): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439353934343832353763643031393366316166306431633461623235 Feb 8 23:23:59.415000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.440246 kernel: audit: type=1400 audit(1707434639.415:1085): avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.415000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.445775 kernel: audit: type=1400 audit(1707434639.415:1085): avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.415000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.450790 kernel: audit: type=1400 audit(1707434639.415:1085): avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.450881 kernel: audit: type=1400 audit(1707434639.415:1085): avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.415000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.415000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.415000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.463461 kernel: audit: type=1400 audit(1707434639.415:1085): avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.463566 kernel: audit: type=1400 audit(1707434639.415:1085): avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.463590 kernel: audit: type=1400 audit(1707434639.415:1085): avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.415000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.415000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.415000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.415000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.415000 audit: BPF prog-id=129 op=LOAD Feb 8 23:23:59.415000 audit[2508]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0002172d0 items=0 ppid=2406 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:59.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439353934343832353763643031393366316166306431633461623235 Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit: BPF prog-id=130 op=LOAD Feb 8 23:23:59.416000 audit[2508]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000217318 items=0 ppid=2406 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:59.416000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439353934343832353763643031393366316166306431633461623235 Feb 8 23:23:59.416000 audit: BPF prog-id=130 op=UNLOAD Feb 8 23:23:59.416000 audit: BPF prog-id=129 op=UNLOAD Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:23:59.416000 audit: BPF prog-id=131 op=LOAD Feb 8 23:23:59.416000 audit[2508]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0002173a8 items=0 ppid=2406 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:23:59.416000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439353934343832353763643031393366316166306431633461623235 Feb 8 23:23:59.476065 env[1058]: time="2024-02-08T23:23:59.475991863Z" level=info msg="StartContainer for \"d959448257cd0193f1af0d1c4ab2549494a273f9873cfb75e72a7d29d2fdd95d\" returns successfully" Feb 8 23:23:59.487383 systemd[1]: cri-containerd-d959448257cd0193f1af0d1c4ab2549494a273f9873cfb75e72a7d29d2fdd95d.scope: Deactivated successfully. Feb 8 23:23:59.489000 audit: BPF prog-id=131 op=UNLOAD Feb 8 23:23:59.514671 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d959448257cd0193f1af0d1c4ab2549494a273f9873cfb75e72a7d29d2fdd95d-rootfs.mount: Deactivated successfully. Feb 8 23:23:59.871510 env[1058]: time="2024-02-08T23:23:59.871309807Z" level=info msg="shim disconnected" id=d959448257cd0193f1af0d1c4ab2549494a273f9873cfb75e72a7d29d2fdd95d Feb 8 23:23:59.871510 env[1058]: time="2024-02-08T23:23:59.871462253Z" level=warning msg="cleaning up after shim disconnected" id=d959448257cd0193f1af0d1c4ab2549494a273f9873cfb75e72a7d29d2fdd95d namespace=k8s.io Feb 8 23:23:59.871821 env[1058]: time="2024-02-08T23:23:59.871489284Z" level=info msg="cleaning up dead shim" Feb 8 23:23:59.884902 env[1058]: time="2024-02-08T23:23:59.882848029Z" level=warning msg="cleanup warnings time=\"2024-02-08T23:23:59Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2548 runtime=io.containerd.runc.v2\n" Feb 8 23:24:00.868158 kubelet[1950]: E0208 23:24:00.867277 1950 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7pr2w" podUID=1ce0d9e2-3713-455f-ba71-30f83da4d2b4 Feb 8 23:24:01.097339 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3697859257.mount: Deactivated successfully. Feb 8 23:24:02.867431 kubelet[1950]: E0208 23:24:02.867379 1950 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7pr2w" podUID=1ce0d9e2-3713-455f-ba71-30f83da4d2b4 Feb 8 23:24:03.477805 env[1058]: time="2024-02-08T23:24:03.477634224Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:03.482121 env[1058]: time="2024-02-08T23:24:03.482066344Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b33768e0da1f8a5788a6a5d8ac2dcf15292ea9f3717de450f946c0a055b3532c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:03.485473 env[1058]: time="2024-02-08T23:24:03.485436361Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:03.488578 env[1058]: time="2024-02-08T23:24:03.488526703Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:5f2d3b8c354a4eb6de46e786889913916e620c6c256982fb8d0f1a1d36a282bc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:03.489694 env[1058]: time="2024-02-08T23:24:03.489638770Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\" returns image reference \"sha256:b33768e0da1f8a5788a6a5d8ac2dcf15292ea9f3717de450f946c0a055b3532c\"" Feb 8 23:24:03.497242 env[1058]: time="2024-02-08T23:24:03.497163736Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\"" Feb 8 23:24:03.527091 env[1058]: time="2024-02-08T23:24:03.527020176Z" level=info msg="CreateContainer within sandbox \"fc043f3ea62481f2088917fd9b6f915a75af9c2f76a6d5c062b5313777a2b374\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Feb 8 23:24:03.538609 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2267803407.mount: Deactivated successfully. Feb 8 23:24:03.552899 env[1058]: time="2024-02-08T23:24:03.552143229Z" level=info msg="CreateContainer within sandbox \"fc043f3ea62481f2088917fd9b6f915a75af9c2f76a6d5c062b5313777a2b374\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"2e445991206eab6d84f00279f459e1800d459e8f390cdc9a150e254e7aa7c25a\"" Feb 8 23:24:03.561615 env[1058]: time="2024-02-08T23:24:03.561507208Z" level=info msg="StartContainer for \"2e445991206eab6d84f00279f459e1800d459e8f390cdc9a150e254e7aa7c25a\"" Feb 8 23:24:03.588223 systemd[1]: Started cri-containerd-2e445991206eab6d84f00279f459e1800d459e8f390cdc9a150e254e7aa7c25a.scope. Feb 8 23:24:03.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.606000 audit: BPF prog-id=132 op=LOAD Feb 8 23:24:03.608000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.608000 audit[2576]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2468 pid=2576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:03.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265343435393931323036656162366438346630303237396634353965 Feb 8 23:24:03.608000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.608000 audit[2576]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2468 pid=2576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:03.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265343435393931323036656162366438346630303237396634353965 Feb 8 23:24:03.608000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.608000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.608000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.608000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.608000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.608000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.608000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.608000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.608000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.608000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.608000 audit: BPF prog-id=133 op=LOAD Feb 8 23:24:03.608000 audit[2576]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001d60a0 items=0 ppid=2468 pid=2576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:03.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265343435393931323036656162366438346630303237396634353965 Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit: BPF prog-id=134 op=LOAD Feb 8 23:24:03.609000 audit[2576]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001d60e8 items=0 ppid=2468 pid=2576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:03.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265343435393931323036656162366438346630303237396634353965 Feb 8 23:24:03.609000 audit: BPF prog-id=134 op=UNLOAD Feb 8 23:24:03.609000 audit: BPF prog-id=133 op=UNLOAD Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { perfmon } for pid=2576 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit[2576]: AVC avc: denied { bpf } for pid=2576 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:03.609000 audit: BPF prog-id=135 op=LOAD Feb 8 23:24:03.609000 audit[2576]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001d64f8 items=0 ppid=2468 pid=2576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:03.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265343435393931323036656162366438346630303237396634353965 Feb 8 23:24:03.658725 env[1058]: time="2024-02-08T23:24:03.658632330Z" level=info msg="StartContainer for \"2e445991206eab6d84f00279f459e1800d459e8f390cdc9a150e254e7aa7c25a\" returns successfully" Feb 8 23:24:04.032256 kubelet[1950]: I0208 23:24:04.032191 1950 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-544bf6d845-w42kx" podStartSLOduration=2.56519948 podCreationTimestamp="2024-02-08 23:23:55 +0000 UTC" firstStartedPulling="2024-02-08 23:23:57.024349447 +0000 UTC m=+22.355059927" lastFinishedPulling="2024-02-08 23:24:03.491216292 +0000 UTC m=+28.821926822" observedRunningTime="2024-02-08 23:24:04.029235656 +0000 UTC m=+29.359946206" watchObservedRunningTime="2024-02-08 23:24:04.032066375 +0000 UTC m=+29.362776906" Feb 8 23:24:04.867857 kubelet[1950]: E0208 23:24:04.867716 1950 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7pr2w" podUID=1ce0d9e2-3713-455f-ba71-30f83da4d2b4 Feb 8 23:24:05.010906 kubelet[1950]: I0208 23:24:05.010858 1950 prober_manager.go:287] "Failed to trigger a manual run" probe="Readiness" Feb 8 23:24:05.199821 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount609756337.mount: Deactivated successfully. Feb 8 23:24:06.869586 kubelet[1950]: E0208 23:24:06.869518 1950 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7pr2w" podUID=1ce0d9e2-3713-455f-ba71-30f83da4d2b4 Feb 8 23:24:08.867132 kubelet[1950]: E0208 23:24:08.867014 1950 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7pr2w" podUID=1ce0d9e2-3713-455f-ba71-30f83da4d2b4 Feb 8 23:24:10.868562 kubelet[1950]: E0208 23:24:10.868371 1950 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7pr2w" podUID=1ce0d9e2-3713-455f-ba71-30f83da4d2b4 Feb 8 23:24:11.290957 env[1058]: time="2024-02-08T23:24:11.290846131Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:11.294287 env[1058]: time="2024-02-08T23:24:11.294230839Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8e8d96a874c0e2f137bc6e0ff4b9da4ac2341852e41d99ab81983d329bb87d93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:11.297187 env[1058]: time="2024-02-08T23:24:11.297144427Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:11.302650 env[1058]: time="2024-02-08T23:24:11.302591528Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:d943b4c23e82a39b0186a1a3b2fe8f728e543d503df72d7be521501a82b7e7b4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:11.307872 env[1058]: time="2024-02-08T23:24:11.305427319Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\" returns image reference \"sha256:8e8d96a874c0e2f137bc6e0ff4b9da4ac2341852e41d99ab81983d329bb87d93\"" Feb 8 23:24:11.310049 env[1058]: time="2024-02-08T23:24:11.309761299Z" level=info msg="CreateContainer within sandbox \"a0f90cdbbd5cd667e1ae408df1e19d2ef01b1c1c3b1a7cd5d66fefed0b6227ea\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Feb 8 23:24:11.330370 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3635934130.mount: Deactivated successfully. Feb 8 23:24:11.339836 env[1058]: time="2024-02-08T23:24:11.339788077Z" level=info msg="CreateContainer within sandbox \"a0f90cdbbd5cd667e1ae408df1e19d2ef01b1c1c3b1a7cd5d66fefed0b6227ea\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"7f96619f7dac80fd1b7bceb9f22d4abbc64c15280ab1943fbdf652071c80a592\"" Feb 8 23:24:11.341694 env[1058]: time="2024-02-08T23:24:11.341666933Z" level=info msg="StartContainer for \"7f96619f7dac80fd1b7bceb9f22d4abbc64c15280ab1943fbdf652071c80a592\"" Feb 8 23:24:11.385857 systemd[1]: Started cri-containerd-7f96619f7dac80fd1b7bceb9f22d4abbc64c15280ab1943fbdf652071c80a592.scope. Feb 8 23:24:11.412141 kernel: kauditd_printk_skb: 91 callbacks suppressed Feb 8 23:24:11.413380 kernel: audit: type=1400 audit(1707434651.406:1109): avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.406000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.406000 audit[2618]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2406 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:11.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766393636313966376461633830666431623762636562396632326434 Feb 8 23:24:11.424237 kernel: audit: type=1300 audit(1707434651.406:1109): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2406 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:11.424302 kernel: audit: type=1327 audit(1707434651.406:1109): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766393636313966376461633830666431623762636562396632326434 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.432348 kernel: audit: type=1400 audit(1707434651.411:1110): avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.432427 kernel: audit: type=1400 audit(1707434651.411:1110): avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.436943 kernel: audit: type=1400 audit(1707434651.411:1110): avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.437072 kernel: audit: type=1400 audit(1707434651.411:1110): avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.445786 kernel: audit: type=1400 audit(1707434651.411:1110): avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.449784 kernel: audit: type=1400 audit(1707434651.411:1110): avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.455612 kernel: audit: type=1400 audit(1707434651.411:1110): avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit: BPF prog-id=136 op=LOAD Feb 8 23:24:11.411000 audit[2618]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003e8190 items=0 ppid=2406 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:11.411000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766393636313966376461633830666431623762636562396632326434 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.411000 audit: BPF prog-id=137 op=LOAD Feb 8 23:24:11.411000 audit[2618]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003e81d8 items=0 ppid=2406 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:11.411000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766393636313966376461633830666431623762636562396632326434 Feb 8 23:24:11.412000 audit: BPF prog-id=137 op=UNLOAD Feb 8 23:24:11.412000 audit: BPF prog-id=136 op=UNLOAD Feb 8 23:24:11.412000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.412000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.412000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.412000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.412000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.412000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.412000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.412000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.412000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.412000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:11.412000 audit: BPF prog-id=138 op=LOAD Feb 8 23:24:11.412000 audit[2618]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003e8268 items=0 ppid=2406 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:11.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766393636313966376461633830666431623762636562396632326434 Feb 8 23:24:11.458169 env[1058]: time="2024-02-08T23:24:11.458111024Z" level=info msg="StartContainer for \"7f96619f7dac80fd1b7bceb9f22d4abbc64c15280ab1943fbdf652071c80a592\" returns successfully" Feb 8 23:24:12.867396 kubelet[1950]: E0208 23:24:12.867315 1950 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7pr2w" podUID=1ce0d9e2-3713-455f-ba71-30f83da4d2b4 Feb 8 23:24:13.658128 env[1058]: time="2024-02-08T23:24:13.657933210Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 8 23:24:13.665134 systemd[1]: cri-containerd-7f96619f7dac80fd1b7bceb9f22d4abbc64c15280ab1943fbdf652071c80a592.scope: Deactivated successfully. Feb 8 23:24:13.668000 audit: BPF prog-id=138 op=UNLOAD Feb 8 23:24:13.710640 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7f96619f7dac80fd1b7bceb9f22d4abbc64c15280ab1943fbdf652071c80a592-rootfs.mount: Deactivated successfully. Feb 8 23:24:13.721812 kubelet[1950]: I0208 23:24:13.720423 1950 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Feb 8 23:24:13.845814 env[1058]: time="2024-02-08T23:24:13.845662159Z" level=info msg="shim disconnected" id=7f96619f7dac80fd1b7bceb9f22d4abbc64c15280ab1943fbdf652071c80a592 Feb 8 23:24:13.846147 env[1058]: time="2024-02-08T23:24:13.846059009Z" level=warning msg="cleaning up after shim disconnected" id=7f96619f7dac80fd1b7bceb9f22d4abbc64c15280ab1943fbdf652071c80a592 namespace=k8s.io Feb 8 23:24:13.846254 env[1058]: time="2024-02-08T23:24:13.846144390Z" level=info msg="cleaning up dead shim" Feb 8 23:24:13.870350 env[1058]: time="2024-02-08T23:24:13.870254246Z" level=warning msg="cleanup warnings time=\"2024-02-08T23:24:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2663 runtime=io.containerd.runc.v2\n" Feb 8 23:24:13.885372 kubelet[1950]: I0208 23:24:13.885295 1950 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:24:13.901743 systemd[1]: Created slice kubepods-burstable-podd88ab937_9c80_4cfc_a62c_efccde820661.slice. Feb 8 23:24:13.908722 kubelet[1950]: I0208 23:24:13.908548 1950 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:24:13.918664 systemd[1]: Created slice kubepods-burstable-pod45e1eb15_c368_484a_b1d1_c24f2e2552a7.slice. Feb 8 23:24:13.924047 kubelet[1950]: I0208 23:24:13.924020 1950 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:24:13.931058 systemd[1]: Created slice kubepods-besteffort-pod57f71956_f2ab_4bdb_b2d7_61197f5c9997.slice. Feb 8 23:24:14.006145 kubelet[1950]: I0208 23:24:14.006102 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xmxld\" (UniqueName: \"kubernetes.io/projected/d88ab937-9c80-4cfc-a62c-efccde820661-kube-api-access-xmxld\") pod \"coredns-5d78c9869d-8tntm\" (UID: \"d88ab937-9c80-4cfc-a62c-efccde820661\") " pod="kube-system/coredns-5d78c9869d-8tntm" Feb 8 23:24:14.006309 kubelet[1950]: I0208 23:24:14.006220 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/57f71956-f2ab-4bdb-b2d7-61197f5c9997-tigera-ca-bundle\") pod \"calico-kube-controllers-7ddd6bc5b6-6sw6g\" (UID: \"57f71956-f2ab-4bdb-b2d7-61197f5c9997\") " pod="calico-system/calico-kube-controllers-7ddd6bc5b6-6sw6g" Feb 8 23:24:14.006309 kubelet[1950]: I0208 23:24:14.006306 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8rnjw\" (UniqueName: \"kubernetes.io/projected/45e1eb15-c368-484a-b1d1-c24f2e2552a7-kube-api-access-8rnjw\") pod \"coredns-5d78c9869d-z5bmg\" (UID: \"45e1eb15-c368-484a-b1d1-c24f2e2552a7\") " pod="kube-system/coredns-5d78c9869d-z5bmg" Feb 8 23:24:14.006419 kubelet[1950]: I0208 23:24:14.006393 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/d88ab937-9c80-4cfc-a62c-efccde820661-config-volume\") pod \"coredns-5d78c9869d-8tntm\" (UID: \"d88ab937-9c80-4cfc-a62c-efccde820661\") " pod="kube-system/coredns-5d78c9869d-8tntm" Feb 8 23:24:14.006577 kubelet[1950]: I0208 23:24:14.006558 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bwmww\" (UniqueName: \"kubernetes.io/projected/57f71956-f2ab-4bdb-b2d7-61197f5c9997-kube-api-access-bwmww\") pod \"calico-kube-controllers-7ddd6bc5b6-6sw6g\" (UID: \"57f71956-f2ab-4bdb-b2d7-61197f5c9997\") " pod="calico-system/calico-kube-controllers-7ddd6bc5b6-6sw6g" Feb 8 23:24:14.006893 kubelet[1950]: I0208 23:24:14.006869 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/45e1eb15-c368-484a-b1d1-c24f2e2552a7-config-volume\") pod \"coredns-5d78c9869d-z5bmg\" (UID: \"45e1eb15-c368-484a-b1d1-c24f2e2552a7\") " pod="kube-system/coredns-5d78c9869d-z5bmg" Feb 8 23:24:14.049562 env[1058]: time="2024-02-08T23:24:14.049100955Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\"" Feb 8 23:24:14.208144 env[1058]: time="2024-02-08T23:24:14.208090406Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-8tntm,Uid:d88ab937-9c80-4cfc-a62c-efccde820661,Namespace:kube-system,Attempt:0,}" Feb 8 23:24:14.225803 env[1058]: time="2024-02-08T23:24:14.225490729Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-z5bmg,Uid:45e1eb15-c368-484a-b1d1-c24f2e2552a7,Namespace:kube-system,Attempt:0,}" Feb 8 23:24:14.235158 env[1058]: time="2024-02-08T23:24:14.234980289Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7ddd6bc5b6-6sw6g,Uid:57f71956-f2ab-4bdb-b2d7-61197f5c9997,Namespace:calico-system,Attempt:0,}" Feb 8 23:24:14.389926 env[1058]: time="2024-02-08T23:24:14.389843607Z" level=error msg="Failed to destroy network for sandbox \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:14.390411 env[1058]: time="2024-02-08T23:24:14.390380080Z" level=error msg="encountered an error cleaning up failed sandbox \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:14.390531 env[1058]: time="2024-02-08T23:24:14.390501679Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-8tntm,Uid:d88ab937-9c80-4cfc-a62c-efccde820661,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:14.391298 kubelet[1950]: E0208 23:24:14.390898 1950 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:14.391298 kubelet[1950]: E0208 23:24:14.390963 1950 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-8tntm" Feb 8 23:24:14.391298 kubelet[1950]: E0208 23:24:14.390989 1950 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-8tntm" Feb 8 23:24:14.391560 kubelet[1950]: E0208 23:24:14.391044 1950 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5d78c9869d-8tntm_kube-system(d88ab937-9c80-4cfc-a62c-efccde820661)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5d78c9869d-8tntm_kube-system(d88ab937-9c80-4cfc-a62c-efccde820661)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-8tntm" podUID=d88ab937-9c80-4cfc-a62c-efccde820661 Feb 8 23:24:14.402660 env[1058]: time="2024-02-08T23:24:14.402574572Z" level=error msg="Failed to destroy network for sandbox \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:14.403213 env[1058]: time="2024-02-08T23:24:14.403179644Z" level=error msg="encountered an error cleaning up failed sandbox \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:14.403371 env[1058]: time="2024-02-08T23:24:14.403329978Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-z5bmg,Uid:45e1eb15-c368-484a-b1d1-c24f2e2552a7,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:14.403788 kubelet[1950]: E0208 23:24:14.403683 1950 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:14.403788 kubelet[1950]: E0208 23:24:14.403736 1950 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-z5bmg" Feb 8 23:24:14.405831 kubelet[1950]: E0208 23:24:14.403947 1950 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-z5bmg" Feb 8 23:24:14.405831 kubelet[1950]: E0208 23:24:14.404057 1950 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5d78c9869d-z5bmg_kube-system(45e1eb15-c368-484a-b1d1-c24f2e2552a7)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5d78c9869d-z5bmg_kube-system(45e1eb15-c368-484a-b1d1-c24f2e2552a7)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-z5bmg" podUID=45e1eb15-c368-484a-b1d1-c24f2e2552a7 Feb 8 23:24:14.414819 env[1058]: time="2024-02-08T23:24:14.414733900Z" level=error msg="Failed to destroy network for sandbox \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:14.415175 env[1058]: time="2024-02-08T23:24:14.415136048Z" level=error msg="encountered an error cleaning up failed sandbox \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:14.415269 env[1058]: time="2024-02-08T23:24:14.415201241Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7ddd6bc5b6-6sw6g,Uid:57f71956-f2ab-4bdb-b2d7-61197f5c9997,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:14.416126 kubelet[1950]: E0208 23:24:14.415564 1950 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:14.416126 kubelet[1950]: E0208 23:24:14.415623 1950 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7ddd6bc5b6-6sw6g" Feb 8 23:24:14.416126 kubelet[1950]: E0208 23:24:14.415672 1950 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7ddd6bc5b6-6sw6g" Feb 8 23:24:14.416348 kubelet[1950]: E0208 23:24:14.416105 1950 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7ddd6bc5b6-6sw6g_calico-system(57f71956-f2ab-4bdb-b2d7-61197f5c9997)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7ddd6bc5b6-6sw6g_calico-system(57f71956-f2ab-4bdb-b2d7-61197f5c9997)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7ddd6bc5b6-6sw6g" podUID=57f71956-f2ab-4bdb-b2d7-61197f5c9997 Feb 8 23:24:14.719402 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091-shm.mount: Deactivated successfully. Feb 8 23:24:14.880871 systemd[1]: Created slice kubepods-besteffort-pod1ce0d9e2_3713_455f_ba71_30f83da4d2b4.slice. Feb 8 23:24:14.886518 env[1058]: time="2024-02-08T23:24:14.885635429Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7pr2w,Uid:1ce0d9e2-3713-455f-ba71-30f83da4d2b4,Namespace:calico-system,Attempt:0,}" Feb 8 23:24:15.007940 env[1058]: time="2024-02-08T23:24:15.007802838Z" level=error msg="Failed to destroy network for sandbox \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:15.010472 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f-shm.mount: Deactivated successfully. Feb 8 23:24:15.011497 env[1058]: time="2024-02-08T23:24:15.011440720Z" level=error msg="encountered an error cleaning up failed sandbox \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:15.011561 env[1058]: time="2024-02-08T23:24:15.011515751Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7pr2w,Uid:1ce0d9e2-3713-455f-ba71-30f83da4d2b4,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:15.011861 kubelet[1950]: E0208 23:24:15.011830 1950 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:15.012102 kubelet[1950]: E0208 23:24:15.011909 1950 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-7pr2w" Feb 8 23:24:15.012102 kubelet[1950]: E0208 23:24:15.011956 1950 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-7pr2w" Feb 8 23:24:15.012102 kubelet[1950]: E0208 23:24:15.012042 1950 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-7pr2w_calico-system(1ce0d9e2-3713-455f-ba71-30f83da4d2b4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-7pr2w_calico-system(1ce0d9e2-3713-455f-ba71-30f83da4d2b4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-7pr2w" podUID=1ce0d9e2-3713-455f-ba71-30f83da4d2b4 Feb 8 23:24:15.048045 kubelet[1950]: I0208 23:24:15.048014 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Feb 8 23:24:15.050146 env[1058]: time="2024-02-08T23:24:15.050076269Z" level=info msg="StopPodSandbox for \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\"" Feb 8 23:24:15.051566 kubelet[1950]: I0208 23:24:15.051183 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Feb 8 23:24:15.051878 env[1058]: time="2024-02-08T23:24:15.051845466Z" level=info msg="StopPodSandbox for \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\"" Feb 8 23:24:15.054875 kubelet[1950]: I0208 23:24:15.054847 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Feb 8 23:24:15.055586 env[1058]: time="2024-02-08T23:24:15.055555744Z" level=info msg="StopPodSandbox for \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\"" Feb 8 23:24:15.056976 kubelet[1950]: I0208 23:24:15.056939 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Feb 8 23:24:15.057394 env[1058]: time="2024-02-08T23:24:15.057369404Z" level=info msg="StopPodSandbox for \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\"" Feb 8 23:24:15.139335 env[1058]: time="2024-02-08T23:24:15.139217315Z" level=error msg="StopPodSandbox for \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\" failed" error="failed to destroy network for sandbox \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:15.139641 kubelet[1950]: E0208 23:24:15.139604 1950 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Feb 8 23:24:15.139710 kubelet[1950]: E0208 23:24:15.139677 1950 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5} Feb 8 23:24:15.139782 kubelet[1950]: E0208 23:24:15.139739 1950 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"45e1eb15-c368-484a-b1d1-c24f2e2552a7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 8 23:24:15.139861 kubelet[1950]: E0208 23:24:15.139809 1950 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"45e1eb15-c368-484a-b1d1-c24f2e2552a7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-z5bmg" podUID=45e1eb15-c368-484a-b1d1-c24f2e2552a7 Feb 8 23:24:15.140110 env[1058]: time="2024-02-08T23:24:15.140052581Z" level=error msg="StopPodSandbox for \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\" failed" error="failed to destroy network for sandbox \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:15.140431 kubelet[1950]: E0208 23:24:15.140369 1950 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Feb 8 23:24:15.140431 kubelet[1950]: E0208 23:24:15.140397 1950 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff} Feb 8 23:24:15.140523 kubelet[1950]: E0208 23:24:15.140465 1950 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"57f71956-f2ab-4bdb-b2d7-61197f5c9997\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 8 23:24:15.140523 kubelet[1950]: E0208 23:24:15.140502 1950 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"57f71956-f2ab-4bdb-b2d7-61197f5c9997\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7ddd6bc5b6-6sw6g" podUID=57f71956-f2ab-4bdb-b2d7-61197f5c9997 Feb 8 23:24:15.143533 env[1058]: time="2024-02-08T23:24:15.143488892Z" level=error msg="StopPodSandbox for \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\" failed" error="failed to destroy network for sandbox \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:15.143833 kubelet[1950]: E0208 23:24:15.143815 1950 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Feb 8 23:24:15.143892 kubelet[1950]: E0208 23:24:15.143843 1950 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f} Feb 8 23:24:15.143928 kubelet[1950]: E0208 23:24:15.143904 1950 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1ce0d9e2-3713-455f-ba71-30f83da4d2b4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 8 23:24:15.143990 kubelet[1950]: E0208 23:24:15.143938 1950 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1ce0d9e2-3713-455f-ba71-30f83da4d2b4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-7pr2w" podUID=1ce0d9e2-3713-455f-ba71-30f83da4d2b4 Feb 8 23:24:15.160656 env[1058]: time="2024-02-08T23:24:15.160599985Z" level=error msg="StopPodSandbox for \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\" failed" error="failed to destroy network for sandbox \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:24:15.161123 kubelet[1950]: E0208 23:24:15.161075 1950 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Feb 8 23:24:15.161202 kubelet[1950]: E0208 23:24:15.161142 1950 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091} Feb 8 23:24:15.161263 kubelet[1950]: E0208 23:24:15.161236 1950 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d88ab937-9c80-4cfc-a62c-efccde820661\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 8 23:24:15.161339 kubelet[1950]: E0208 23:24:15.161292 1950 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d88ab937-9c80-4cfc-a62c-efccde820661\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-8tntm" podUID=d88ab937-9c80-4cfc-a62c-efccde820661 Feb 8 23:24:18.969801 kubelet[1950]: I0208 23:24:18.968971 1950 prober_manager.go:287] "Failed to trigger a manual run" probe="Readiness" Feb 8 23:24:19.078000 audit[2883]: NETFILTER_CFG table=filter:95 family=2 entries=15 op=nft_register_rule pid=2883 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:24:19.080138 kernel: kauditd_printk_skb: 34 callbacks suppressed Feb 8 23:24:19.080246 kernel: audit: type=1325 audit(1707434659.078:1116): table=filter:95 family=2 entries=15 op=nft_register_rule pid=2883 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:24:19.078000 audit[2883]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffe10346f20 a2=0 a3=7ffe10346f0c items=0 ppid=2089 pid=2883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:19.088971 kernel: audit: type=1300 audit(1707434659.078:1116): arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffe10346f20 a2=0 a3=7ffe10346f0c items=0 ppid=2089 pid=2883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:19.078000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:24:19.097872 kernel: audit: type=1327 audit(1707434659.078:1116): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:24:19.093000 audit[2883]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=2883 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:24:19.093000 audit[2883]: SYSCALL arch=c000003e syscall=46 success=yes exit=6068 a0=3 a1=7ffe10346f20 a2=0 a3=7ffe10346f0c items=0 ppid=2089 pid=2883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:19.107551 kernel: audit: type=1325 audit(1707434659.093:1117): table=nat:96 family=2 entries=19 op=nft_register_chain pid=2883 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:24:19.108362 kernel: audit: type=1300 audit(1707434659.093:1117): arch=c000003e syscall=46 success=yes exit=6068 a0=3 a1=7ffe10346f20 a2=0 a3=7ffe10346f0c items=0 ppid=2089 pid=2883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:19.093000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:24:19.116778 kernel: audit: type=1327 audit(1707434659.093:1117): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:24:24.214156 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1301747972.mount: Deactivated successfully. Feb 8 23:24:24.287049 env[1058]: time="2024-02-08T23:24:24.286723899Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:24.293891 env[1058]: time="2024-02-08T23:24:24.293738563Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1843802b91be8ff1c1d35ee08461ebe909e7a2199e59396f69886439a372312c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:24.297859 env[1058]: time="2024-02-08T23:24:24.296833844Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:24.300262 env[1058]: time="2024-02-08T23:24:24.300217920Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:a45dffb21a0e9ca8962f36359a2ab776beeecd93843543c2fa1745d7bbb0f754,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:24.301721 env[1058]: time="2024-02-08T23:24:24.301654917Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\" returns image reference \"sha256:1843802b91be8ff1c1d35ee08461ebe909e7a2199e59396f69886439a372312c\"" Feb 8 23:24:24.333193 env[1058]: time="2024-02-08T23:24:24.333086821Z" level=info msg="CreateContainer within sandbox \"a0f90cdbbd5cd667e1ae408df1e19d2ef01b1c1c3b1a7cd5d66fefed0b6227ea\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Feb 8 23:24:24.361826 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount726182579.mount: Deactivated successfully. Feb 8 23:24:24.366080 env[1058]: time="2024-02-08T23:24:24.366038298Z" level=info msg="CreateContainer within sandbox \"a0f90cdbbd5cd667e1ae408df1e19d2ef01b1c1c3b1a7cd5d66fefed0b6227ea\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"9c607c9d55de53839528712ad727e10916c5c13205c35d1d974ad77f0a2999f1\"" Feb 8 23:24:24.369450 env[1058]: time="2024-02-08T23:24:24.368961034Z" level=info msg="StartContainer for \"9c607c9d55de53839528712ad727e10916c5c13205c35d1d974ad77f0a2999f1\"" Feb 8 23:24:24.393983 systemd[1]: Started cri-containerd-9c607c9d55de53839528712ad727e10916c5c13205c35d1d974ad77f0a2999f1.scope. Feb 8 23:24:24.417000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.417000 audit[2895]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001996b0 a2=3c a3=8 items=0 ppid=2406 pid=2895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:24.426466 kernel: audit: type=1400 audit(1707434664.417:1118): avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.426527 kernel: audit: type=1300 audit(1707434664.417:1118): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001996b0 a2=3c a3=8 items=0 ppid=2406 pid=2895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:24.426567 kernel: audit: type=1327 audit(1707434664.417:1118): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963363037633964353564653533383339353238373132616437323765 Feb 8 23:24:24.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963363037633964353564653533383339353238373132616437323765 Feb 8 23:24:24.417000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.434666 kernel: audit: type=1400 audit(1707434664.417:1119): avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.434730 kernel: audit: type=1400 audit(1707434664.417:1119): avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.417000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.417000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.442050 kernel: audit: type=1400 audit(1707434664.417:1119): avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.442099 kernel: audit: type=1400 audit(1707434664.417:1119): avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.417000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.445526 kernel: audit: type=1400 audit(1707434664.417:1119): avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.417000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.417000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.452960 kernel: audit: type=1400 audit(1707434664.417:1119): avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.417000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.457140 kernel: audit: type=1400 audit(1707434664.417:1119): avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.417000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.417000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.417000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.417000 audit: BPF prog-id=139 op=LOAD Feb 8 23:24:24.417000 audit[2895]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001999d8 a2=78 a3=c0003564d0 items=0 ppid=2406 pid=2895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:24.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963363037633964353564653533383339353238373132616437323765 Feb 8 23:24:24.430000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.430000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.430000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.430000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.430000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.430000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.430000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.430000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.430000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.430000 audit: BPF prog-id=140 op=LOAD Feb 8 23:24:24.430000 audit[2895]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000199770 a2=78 a3=c000356518 items=0 ppid=2406 pid=2895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:24.430000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963363037633964353564653533383339353238373132616437323765 Feb 8 23:24:24.438000 audit: BPF prog-id=140 op=UNLOAD Feb 8 23:24:24.438000 audit: BPF prog-id=139 op=UNLOAD Feb 8 23:24:24.438000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.438000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.438000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.438000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.438000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.438000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.438000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.438000 audit[2895]: AVC avc: denied { perfmon } for pid=2895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.438000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.438000 audit[2895]: AVC avc: denied { bpf } for pid=2895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:24.438000 audit: BPF prog-id=141 op=LOAD Feb 8 23:24:24.438000 audit[2895]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000199c30 a2=78 a3=c0003565a8 items=0 ppid=2406 pid=2895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:24.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963363037633964353564653533383339353238373132616437323765 Feb 8 23:24:24.478423 env[1058]: time="2024-02-08T23:24:24.475092414Z" level=info msg="StartContainer for \"9c607c9d55de53839528712ad727e10916c5c13205c35d1d974ad77f0a2999f1\" returns successfully" Feb 8 23:24:24.788467 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Feb 8 23:24:24.789465 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Feb 8 23:24:25.172425 kubelet[1950]: I0208 23:24:25.171382 1950 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-xqnb4" podStartSLOduration=2.311534804 podCreationTimestamp="2024-02-08 23:23:55 +0000 UTC" firstStartedPulling="2024-02-08 23:23:56.466009803 +0000 UTC m=+21.796720293" lastFinishedPulling="2024-02-08 23:24:24.303449789 +0000 UTC m=+49.634160269" observedRunningTime="2024-02-08 23:24:25.142244131 +0000 UTC m=+50.472954621" watchObservedRunningTime="2024-02-08 23:24:25.14897478 +0000 UTC m=+50.479685270" Feb 8 23:24:26.644000 audit[3031]: AVC avc: denied { write } for pid=3031 comm="tee" name="fd" dev="proc" ino=25483 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 8 23:24:26.644000 audit[3031]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff4b25c951 a2=241 a3=1b6 items=1 ppid=3002 pid=3031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:26.644000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Feb 8 23:24:26.644000 audit: PATH item=0 name="/dev/fd/63" inode=25962 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:26.644000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 8 23:24:26.655000 audit[3033]: AVC avc: denied { write } for pid=3033 comm="tee" name="fd" dev="proc" ino=25490 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 8 23:24:26.655000 audit[3033]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd40b5c963 a2=241 a3=1b6 items=1 ppid=2997 pid=3033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:26.655000 audit: CWD cwd="/etc/service/enabled/cni/log" Feb 8 23:24:26.655000 audit: PATH item=0 name="/dev/fd/63" inode=25474 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:26.655000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 8 23:24:26.682000 audit[3046]: AVC avc: denied { write } for pid=3046 comm="tee" name="fd" dev="proc" ino=25509 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 8 23:24:26.682000 audit[3046]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd73188952 a2=241 a3=1b6 items=1 ppid=2998 pid=3046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:26.682000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Feb 8 23:24:26.682000 audit: PATH item=0 name="/dev/fd/63" inode=25487 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:26.682000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 8 23:24:26.684000 audit[3055]: AVC avc: denied { write } for pid=3055 comm="tee" name="fd" dev="proc" ino=25513 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 8 23:24:26.684000 audit[3055]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffed0fc8962 a2=241 a3=1b6 items=1 ppid=3010 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:26.684000 audit: CWD cwd="/etc/service/enabled/bird/log" Feb 8 23:24:26.684000 audit: PATH item=0 name="/dev/fd/63" inode=25501 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:26.684000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 8 23:24:26.701000 audit[3057]: AVC avc: denied { write } for pid=3057 comm="tee" name="fd" dev="proc" ino=25525 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 8 23:24:26.701000 audit[3057]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffed3901961 a2=241 a3=1b6 items=1 ppid=3000 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:26.701000 audit: CWD cwd="/etc/service/enabled/bird6/log" Feb 8 23:24:26.701000 audit: PATH item=0 name="/dev/fd/63" inode=25973 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:26.701000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 8 23:24:26.702000 audit[3048]: AVC avc: denied { write } for pid=3048 comm="tee" name="fd" dev="proc" ino=25527 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 8 23:24:26.702000 audit[3048]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffef8947961 a2=241 a3=1b6 items=1 ppid=3016 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:26.702000 audit: CWD cwd="/etc/service/enabled/confd/log" Feb 8 23:24:26.702000 audit: PATH item=0 name="/dev/fd/63" inode=25969 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:26.702000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 8 23:24:26.703000 audit[3067]: AVC avc: denied { write } for pid=3067 comm="tee" name="fd" dev="proc" ino=25531 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 8 23:24:26.703000 audit[3067]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc9c848961 a2=241 a3=1b6 items=1 ppid=3007 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:26.703000 audit: CWD cwd="/etc/service/enabled/felix/log" Feb 8 23:24:26.703000 audit: PATH item=0 name="/dev/fd/63" inode=25506 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:26.703000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 8 23:24:27.308000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.308000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.308000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.308000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.308000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.308000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.308000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.308000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.308000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.308000 audit: BPF prog-id=142 op=LOAD Feb 8 23:24:27.308000 audit[3138]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe2fd2fd70 a2=70 a3=7f2a344b8000 items=0 ppid=3008 pid=3138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:27.308000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 8 23:24:27.310000 audit: BPF prog-id=142 op=UNLOAD Feb 8 23:24:27.310000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.310000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.310000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.310000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.310000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.310000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.310000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.310000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.310000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.310000 audit: BPF prog-id=143 op=LOAD Feb 8 23:24:27.310000 audit[3138]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe2fd2fd70 a2=70 a3=6e items=0 ppid=3008 pid=3138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:27.310000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 8 23:24:27.311000 audit: BPF prog-id=143 op=UNLOAD Feb 8 23:24:27.311000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.311000 audit[3138]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffe2fd2fd20 a2=70 a3=470860 items=0 ppid=3008 pid=3138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:27.311000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 8 23:24:27.311000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.311000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.311000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.311000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.311000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.311000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.311000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.311000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.311000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.311000 audit: BPF prog-id=144 op=LOAD Feb 8 23:24:27.311000 audit[3138]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe2fd2fd00 a2=70 a3=7ffe2fd2fd70 items=0 ppid=3008 pid=3138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:27.311000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 8 23:24:27.314000 audit: BPF prog-id=144 op=UNLOAD Feb 8 23:24:27.314000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.314000 audit[3138]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe2fd2fde0 a2=70 a3=0 items=0 ppid=3008 pid=3138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:27.314000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 8 23:24:27.314000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.314000 audit[3138]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe2fd2fdd0 a2=70 a3=0 items=0 ppid=3008 pid=3138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:27.314000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 8 23:24:27.314000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.314000 audit[3138]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffe2fd2fe10 a2=70 a3=fe00 items=0 ppid=3008 pid=3138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:27.314000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 8 23:24:27.317000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.317000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.317000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.317000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.317000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.317000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.317000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.317000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.317000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.317000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.317000 audit: BPF prog-id=145 op=LOAD Feb 8 23:24:27.317000 audit[3138]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe2fd2fd30 a2=70 a3=ffffffff items=0 ppid=3008 pid=3138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:27.317000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 8 23:24:27.328000 audit[3142]: AVC avc: denied { bpf } for pid=3142 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.328000 audit[3142]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffc2e98900 a2=70 a3=ffff items=0 ppid=3008 pid=3142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:27.328000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 8 23:24:27.328000 audit[3142]: AVC avc: denied { bpf } for pid=3142 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:27.328000 audit[3142]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffc2e987d0 a2=70 a3=3 items=0 ppid=3008 pid=3142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:27.328000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 8 23:24:27.351000 audit: BPF prog-id=145 op=UNLOAD Feb 8 23:24:27.464000 audit[3165]: NETFILTER_CFG table=raw:97 family=2 entries=19 op=nft_register_chain pid=3165 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:24:27.464000 audit[3165]: SYSCALL arch=c000003e syscall=46 success=yes exit=6132 a0=3 a1=7ffe835f2430 a2=0 a3=7ffe835f241c items=0 ppid=3008 pid=3165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:27.464000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:24:27.468000 audit[3167]: NETFILTER_CFG table=mangle:98 family=2 entries=19 op=nft_register_chain pid=3167 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:24:27.468000 audit[3167]: SYSCALL arch=c000003e syscall=46 success=yes exit=6800 a0=3 a1=7fff508c01d0 a2=0 a3=0 items=0 ppid=3008 pid=3167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:27.468000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:24:27.488000 audit[3166]: NETFILTER_CFG table=nat:99 family=2 entries=16 op=nft_register_chain pid=3166 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:24:27.488000 audit[3166]: SYSCALL arch=c000003e syscall=46 success=yes exit=5188 a0=3 a1=7ffcba6c0030 a2=0 a3=7ffcba6c001c items=0 ppid=3008 pid=3166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:27.488000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:24:27.495000 audit[3171]: NETFILTER_CFG table=filter:100 family=2 entries=39 op=nft_register_chain pid=3171 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:24:27.495000 audit[3171]: SYSCALL arch=c000003e syscall=46 success=yes exit=18472 a0=3 a1=7fffe48d5cd0 a2=0 a3=0 items=0 ppid=3008 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:27.495000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:24:27.868377 env[1058]: time="2024-02-08T23:24:27.868307975Z" level=info msg="StopPodSandbox for \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\"" Feb 8 23:24:27.869161 env[1058]: time="2024-02-08T23:24:27.869105367Z" level=info msg="StopPodSandbox for \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\"" Feb 8 23:24:28.117500 systemd-networkd[972]: vxlan.calico: Link UP Feb 8 23:24:28.117519 systemd-networkd[972]: vxlan.calico: Gained carrier Feb 8 23:24:28.493903 env[1058]: 2024-02-08 23:24:28.022 [INFO][3203] k8s.go 578: Cleaning up netns ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Feb 8 23:24:28.493903 env[1058]: 2024-02-08 23:24:28.022 [INFO][3203] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" iface="eth0" netns="/var/run/netns/cni-eda4ce21-5068-7002-c777-e426ec6ebf03" Feb 8 23:24:28.493903 env[1058]: 2024-02-08 23:24:28.022 [INFO][3203] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" iface="eth0" netns="/var/run/netns/cni-eda4ce21-5068-7002-c777-e426ec6ebf03" Feb 8 23:24:28.493903 env[1058]: 2024-02-08 23:24:28.023 [INFO][3203] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" iface="eth0" netns="/var/run/netns/cni-eda4ce21-5068-7002-c777-e426ec6ebf03" Feb 8 23:24:28.493903 env[1058]: 2024-02-08 23:24:28.023 [INFO][3203] k8s.go 585: Releasing IP address(es) ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Feb 8 23:24:28.493903 env[1058]: 2024-02-08 23:24:28.023 [INFO][3203] utils.go 188: Calico CNI releasing IP address ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Feb 8 23:24:28.493903 env[1058]: 2024-02-08 23:24:28.437 [INFO][3217] ipam_plugin.go 415: Releasing address using handleID ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" HandleID="k8s-pod-network.ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" Feb 8 23:24:28.493903 env[1058]: 2024-02-08 23:24:28.441 [INFO][3217] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:24:28.493903 env[1058]: 2024-02-08 23:24:28.441 [INFO][3217] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:24:28.493903 env[1058]: 2024-02-08 23:24:28.470 [WARNING][3217] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" HandleID="k8s-pod-network.ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" Feb 8 23:24:28.493903 env[1058]: 2024-02-08 23:24:28.470 [INFO][3217] ipam_plugin.go 443: Releasing address using workloadID ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" HandleID="k8s-pod-network.ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" Feb 8 23:24:28.493903 env[1058]: 2024-02-08 23:24:28.481 [INFO][3217] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:24:28.493903 env[1058]: 2024-02-08 23:24:28.486 [INFO][3203] k8s.go 591: Teardown processing complete. ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Feb 8 23:24:28.504353 env[1058]: time="2024-02-08T23:24:28.494089887Z" level=info msg="TearDown network for sandbox \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\" successfully" Feb 8 23:24:28.504353 env[1058]: time="2024-02-08T23:24:28.497420929Z" level=info msg="StopPodSandbox for \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\" returns successfully" Feb 8 23:24:28.504353 env[1058]: time="2024-02-08T23:24:28.498234742Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7pr2w,Uid:1ce0d9e2-3713-455f-ba71-30f83da4d2b4,Namespace:calico-system,Attempt:1,}" Feb 8 23:24:28.499136 systemd[1]: run-netns-cni\x2deda4ce21\x2d5068\x2d7002\x2dc777\x2de426ec6ebf03.mount: Deactivated successfully. Feb 8 23:24:28.514038 systemd[1]: run-netns-cni\x2d92acb4c0\x2da50c\x2d8489\x2d12d4\x2d4817b31f8f18.mount: Deactivated successfully. Feb 8 23:24:28.528108 env[1058]: 2024-02-08 23:24:28.009 [INFO][3204] k8s.go 578: Cleaning up netns ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Feb 8 23:24:28.528108 env[1058]: 2024-02-08 23:24:28.010 [INFO][3204] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" iface="eth0" netns="/var/run/netns/cni-92acb4c0-a50c-8489-12d4-4817b31f8f18" Feb 8 23:24:28.528108 env[1058]: 2024-02-08 23:24:28.010 [INFO][3204] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" iface="eth0" netns="/var/run/netns/cni-92acb4c0-a50c-8489-12d4-4817b31f8f18" Feb 8 23:24:28.528108 env[1058]: 2024-02-08 23:24:28.011 [INFO][3204] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" iface="eth0" netns="/var/run/netns/cni-92acb4c0-a50c-8489-12d4-4817b31f8f18" Feb 8 23:24:28.528108 env[1058]: 2024-02-08 23:24:28.011 [INFO][3204] k8s.go 585: Releasing IP address(es) ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Feb 8 23:24:28.528108 env[1058]: 2024-02-08 23:24:28.011 [INFO][3204] utils.go 188: Calico CNI releasing IP address ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Feb 8 23:24:28.528108 env[1058]: 2024-02-08 23:24:28.436 [INFO][3216] ipam_plugin.go 415: Releasing address using handleID ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" HandleID="k8s-pod-network.752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" Feb 8 23:24:28.528108 env[1058]: 2024-02-08 23:24:28.441 [INFO][3216] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:24:28.528108 env[1058]: 2024-02-08 23:24:28.482 [INFO][3216] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:24:28.528108 env[1058]: 2024-02-08 23:24:28.502 [WARNING][3216] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" HandleID="k8s-pod-network.752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" Feb 8 23:24:28.528108 env[1058]: 2024-02-08 23:24:28.502 [INFO][3216] ipam_plugin.go 443: Releasing address using workloadID ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" HandleID="k8s-pod-network.752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" Feb 8 23:24:28.528108 env[1058]: 2024-02-08 23:24:28.506 [INFO][3216] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:24:28.528108 env[1058]: 2024-02-08 23:24:28.509 [INFO][3204] k8s.go 591: Teardown processing complete. ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Feb 8 23:24:28.528108 env[1058]: time="2024-02-08T23:24:28.514938907Z" level=info msg="TearDown network for sandbox \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\" successfully" Feb 8 23:24:28.528108 env[1058]: time="2024-02-08T23:24:28.514981829Z" level=info msg="StopPodSandbox for \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\" returns successfully" Feb 8 23:24:28.528108 env[1058]: time="2024-02-08T23:24:28.515652551Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7ddd6bc5b6-6sw6g,Uid:57f71956-f2ab-4bdb-b2d7-61197f5c9997,Namespace:calico-system,Attempt:1,}" Feb 8 23:24:28.875563 env[1058]: time="2024-02-08T23:24:28.873359708Z" level=info msg="StopPodSandbox for \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\"" Feb 8 23:24:28.886566 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 8 23:24:28.886705 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibcf02a29a99: link becomes ready Feb 8 23:24:28.889139 systemd-networkd[972]: calibcf02a29a99: Link UP Feb 8 23:24:28.889400 systemd-networkd[972]: calibcf02a29a99: Gained carrier Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.728 [INFO][3231] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0 csi-node-driver- calico-system 1ce0d9e2-3713-455f-ba71-30f83da4d2b4 699 0 2024-02-08 23:23:55 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:86b88cf7c9 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ci-3510-3-2-2-def1b47031.novalocal csi-node-driver-7pr2w eth0 default [] [] [kns.calico-system ksa.calico-system.default] calibcf02a29a99 [] []}} ContainerID="ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" Namespace="calico-system" Pod="csi-node-driver-7pr2w" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-" Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.728 [INFO][3231] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" Namespace="calico-system" Pod="csi-node-driver-7pr2w" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.790 [INFO][3257] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" HandleID="k8s-pod-network.ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.805 [INFO][3257] ipam_plugin.go 268: Auto assigning IP ContainerID="ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" HandleID="k8s-pod-network.ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002bec50), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510-3-2-2-def1b47031.novalocal", "pod":"csi-node-driver-7pr2w", "timestamp":"2024-02-08 23:24:28.790124347 +0000 UTC"}, Hostname:"ci-3510-3-2-2-def1b47031.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.805 [INFO][3257] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.805 [INFO][3257] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.805 [INFO][3257] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-2-2-def1b47031.novalocal' Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.809 [INFO][3257] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.824 [INFO][3257] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.831 [INFO][3257] ipam.go 489: Trying affinity for 192.168.16.192/26 host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.835 [INFO][3257] ipam.go 155: Attempting to load block cidr=192.168.16.192/26 host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.842 [INFO][3257] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.16.192/26 host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.842 [INFO][3257] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.16.192/26 handle="k8s-pod-network.ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.845 [INFO][3257] ipam.go 1682: Creating new handle: k8s-pod-network.ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6 Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.854 [INFO][3257] ipam.go 1203: Writing block in order to claim IPs block=192.168.16.192/26 handle="k8s-pod-network.ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.863 [INFO][3257] ipam.go 1216: Successfully claimed IPs: [192.168.16.193/26] block=192.168.16.192/26 handle="k8s-pod-network.ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.863 [INFO][3257] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.16.193/26] handle="k8s-pod-network.ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.863 [INFO][3257] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:24:28.926795 env[1058]: 2024-02-08 23:24:28.864 [INFO][3257] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.16.193/26] IPv6=[] ContainerID="ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" HandleID="k8s-pod-network.ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" Feb 8 23:24:28.928575 env[1058]: 2024-02-08 23:24:28.866 [INFO][3231] k8s.go 385: Populated endpoint ContainerID="ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" Namespace="calico-system" Pod="csi-node-driver-7pr2w" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"1ce0d9e2-3713-455f-ba71-30f83da4d2b4", ResourceVersion:"699", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 23, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-2-2-def1b47031.novalocal", ContainerID:"", Pod:"csi-node-driver-7pr2w", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.16.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calibcf02a29a99", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:24:28.928575 env[1058]: 2024-02-08 23:24:28.866 [INFO][3231] k8s.go 386: Calico CNI using IPs: [192.168.16.193/32] ContainerID="ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" Namespace="calico-system" Pod="csi-node-driver-7pr2w" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" Feb 8 23:24:28.928575 env[1058]: 2024-02-08 23:24:28.866 [INFO][3231] dataplane_linux.go 68: Setting the host side veth name to calibcf02a29a99 ContainerID="ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" Namespace="calico-system" Pod="csi-node-driver-7pr2w" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" Feb 8 23:24:28.928575 env[1058]: 2024-02-08 23:24:28.889 [INFO][3231] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" Namespace="calico-system" Pod="csi-node-driver-7pr2w" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" Feb 8 23:24:28.928575 env[1058]: 2024-02-08 23:24:28.891 [INFO][3231] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" Namespace="calico-system" Pod="csi-node-driver-7pr2w" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"1ce0d9e2-3713-455f-ba71-30f83da4d2b4", ResourceVersion:"699", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 23, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-2-2-def1b47031.novalocal", ContainerID:"ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6", Pod:"csi-node-driver-7pr2w", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.16.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calibcf02a29a99", MAC:"4e:0c:a9:36:80:92", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:24:28.928575 env[1058]: 2024-02-08 23:24:28.921 [INFO][3231] k8s.go 491: Wrote updated endpoint to datastore ContainerID="ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6" Namespace="calico-system" Pod="csi-node-driver-7pr2w" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" Feb 8 23:24:28.989000 audit[3309]: NETFILTER_CFG table=filter:101 family=2 entries=36 op=nft_register_chain pid=3309 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:24:28.989000 audit[3309]: SYSCALL arch=c000003e syscall=46 success=yes exit=19908 a0=3 a1=7fff43c6f6b0 a2=0 a3=7fff43c6f69c items=0 ppid=3008 pid=3309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:28.989000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:24:28.996305 systemd-networkd[972]: calib3d567ded91: Link UP Feb 8 23:24:28.998323 systemd-networkd[972]: calib3d567ded91: Gained carrier Feb 8 23:24:28.998872 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib3d567ded91: link becomes ready Feb 8 23:24:29.014866 env[1058]: time="2024-02-08T23:24:29.012656665Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:24:29.014866 env[1058]: time="2024-02-08T23:24:29.012929349Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:24:29.014866 env[1058]: time="2024-02-08T23:24:29.013073320Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:24:29.014866 env[1058]: time="2024-02-08T23:24:29.013717643Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6 pid=3308 runtime=io.containerd.runc.v2 Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.717 [INFO][3237] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0 calico-kube-controllers-7ddd6bc5b6- calico-system 57f71956-f2ab-4bdb-b2d7-61197f5c9997 698 0 2024-02-08 23:23:55 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7ddd6bc5b6 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510-3-2-2-def1b47031.novalocal calico-kube-controllers-7ddd6bc5b6-6sw6g eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calib3d567ded91 [] []}} ContainerID="889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" Namespace="calico-system" Pod="calico-kube-controllers-7ddd6bc5b6-6sw6g" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-" Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.723 [INFO][3237] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" Namespace="calico-system" Pod="calico-kube-controllers-7ddd6bc5b6-6sw6g" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.816 [INFO][3258] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" HandleID="k8s-pod-network.889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.843 [INFO][3258] ipam_plugin.go 268: Auto assigning IP ContainerID="889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" HandleID="k8s-pod-network.889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00027d200), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510-3-2-2-def1b47031.novalocal", "pod":"calico-kube-controllers-7ddd6bc5b6-6sw6g", "timestamp":"2024-02-08 23:24:28.816923553 +0000 UTC"}, Hostname:"ci-3510-3-2-2-def1b47031.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.843 [INFO][3258] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.863 [INFO][3258] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.864 [INFO][3258] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-2-2-def1b47031.novalocal' Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.881 [INFO][3258] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.892 [INFO][3258] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.922 [INFO][3258] ipam.go 489: Trying affinity for 192.168.16.192/26 host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.937 [INFO][3258] ipam.go 155: Attempting to load block cidr=192.168.16.192/26 host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.948 [INFO][3258] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.16.192/26 host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.948 [INFO][3258] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.16.192/26 handle="k8s-pod-network.889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.951 [INFO][3258] ipam.go 1682: Creating new handle: k8s-pod-network.889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730 Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.956 [INFO][3258] ipam.go 1203: Writing block in order to claim IPs block=192.168.16.192/26 handle="k8s-pod-network.889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.982 [INFO][3258] ipam.go 1216: Successfully claimed IPs: [192.168.16.194/26] block=192.168.16.192/26 handle="k8s-pod-network.889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.982 [INFO][3258] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.16.194/26] handle="k8s-pod-network.889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.982 [INFO][3258] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:24:29.024557 env[1058]: 2024-02-08 23:24:28.982 [INFO][3258] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.16.194/26] IPv6=[] ContainerID="889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" HandleID="k8s-pod-network.889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" Feb 8 23:24:29.025295 env[1058]: 2024-02-08 23:24:28.985 [INFO][3237] k8s.go 385: Populated endpoint ContainerID="889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" Namespace="calico-system" Pod="calico-kube-controllers-7ddd6bc5b6-6sw6g" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0", GenerateName:"calico-kube-controllers-7ddd6bc5b6-", Namespace:"calico-system", SelfLink:"", UID:"57f71956-f2ab-4bdb-b2d7-61197f5c9997", ResourceVersion:"698", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 23, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7ddd6bc5b6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-2-2-def1b47031.novalocal", ContainerID:"", Pod:"calico-kube-controllers-7ddd6bc5b6-6sw6g", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.16.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib3d567ded91", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:24:29.025295 env[1058]: 2024-02-08 23:24:28.985 [INFO][3237] k8s.go 386: Calico CNI using IPs: [192.168.16.194/32] ContainerID="889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" Namespace="calico-system" Pod="calico-kube-controllers-7ddd6bc5b6-6sw6g" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" Feb 8 23:24:29.025295 env[1058]: 2024-02-08 23:24:28.985 [INFO][3237] dataplane_linux.go 68: Setting the host side veth name to calib3d567ded91 ContainerID="889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" Namespace="calico-system" Pod="calico-kube-controllers-7ddd6bc5b6-6sw6g" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" Feb 8 23:24:29.025295 env[1058]: 2024-02-08 23:24:28.996 [INFO][3237] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" Namespace="calico-system" Pod="calico-kube-controllers-7ddd6bc5b6-6sw6g" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" Feb 8 23:24:29.025295 env[1058]: 2024-02-08 23:24:28.996 [INFO][3237] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" Namespace="calico-system" Pod="calico-kube-controllers-7ddd6bc5b6-6sw6g" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0", GenerateName:"calico-kube-controllers-7ddd6bc5b6-", Namespace:"calico-system", SelfLink:"", UID:"57f71956-f2ab-4bdb-b2d7-61197f5c9997", ResourceVersion:"698", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 23, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7ddd6bc5b6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-2-2-def1b47031.novalocal", ContainerID:"889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730", Pod:"calico-kube-controllers-7ddd6bc5b6-6sw6g", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.16.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib3d567ded91", MAC:"aa:61:48:0a:e8:ab", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:24:29.025295 env[1058]: 2024-02-08 23:24:29.019 [INFO][3237] k8s.go 491: Wrote updated endpoint to datastore ContainerID="889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730" Namespace="calico-system" Pod="calico-kube-controllers-7ddd6bc5b6-6sw6g" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" Feb 8 23:24:29.049459 systemd[1]: Started cri-containerd-ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6.scope. Feb 8 23:24:29.056824 env[1058]: time="2024-02-08T23:24:29.056400952Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:24:29.056824 env[1058]: time="2024-02-08T23:24:29.056452359Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:24:29.056824 env[1058]: time="2024-02-08T23:24:29.056465463Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:24:29.056824 env[1058]: time="2024-02-08T23:24:29.056608482Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730 pid=3349 runtime=io.containerd.runc.v2 Feb 8 23:24:29.089056 systemd[1]: Started cri-containerd-889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730.scope. Feb 8 23:24:29.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.131000 audit: BPF prog-id=146 op=LOAD Feb 8 23:24:29.133000 audit[3323]: AVC avc: denied { bpf } for pid=3323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.133000 audit[3323]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3308 pid=3323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165396430306233323730653531366363336331633437366665313337 Feb 8 23:24:29.136000 audit[3323]: AVC avc: denied { perfmon } for pid=3323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.136000 audit[3323]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3308 pid=3323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165396430306233323730653531366363336331633437366665313337 Feb 8 23:24:29.137000 audit[3323]: AVC avc: denied { bpf } for pid=3323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.137000 audit[3323]: AVC avc: denied { bpf } for pid=3323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.137000 audit[3323]: AVC avc: denied { bpf } for pid=3323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.137000 audit[3323]: AVC avc: denied { perfmon } for pid=3323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.137000 audit[3323]: AVC avc: denied { perfmon } for pid=3323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.137000 audit[3323]: AVC avc: denied { perfmon } for pid=3323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.137000 audit[3323]: AVC avc: denied { perfmon } for pid=3323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.137000 audit[3323]: AVC avc: denied { perfmon } for pid=3323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.137000 audit[3323]: AVC avc: denied { bpf } for pid=3323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.137000 audit[3323]: AVC avc: denied { bpf } for pid=3323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.137000 audit: BPF prog-id=147 op=LOAD Feb 8 23:24:29.137000 audit[3323]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003be590 items=0 ppid=3308 pid=3323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.137000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165396430306233323730653531366363336331633437366665313337 Feb 8 23:24:29.139000 audit[3323]: AVC avc: denied { bpf } for pid=3323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.139000 audit[3323]: AVC avc: denied { bpf } for pid=3323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.139000 audit[3323]: AVC avc: denied { perfmon } for pid=3323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.139000 audit[3323]: AVC avc: denied { perfmon } for pid=3323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.139000 audit[3323]: AVC avc: denied { perfmon } for pid=3323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.139000 audit[3323]: AVC avc: denied { perfmon } for pid=3323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.139000 audit[3323]: AVC avc: denied { perfmon } for pid=3323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.139000 audit[3323]: AVC avc: denied { bpf } for pid=3323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.139000 audit[3323]: AVC avc: denied { bpf } for pid=3323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.139000 audit: BPF prog-id=148 op=LOAD Feb 8 23:24:29.139000 audit[3323]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003be5d8 items=0 ppid=3308 pid=3323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165396430306233323730653531366363336331633437366665313337 Feb 8 23:24:29.141000 audit: BPF prog-id=148 op=UNLOAD Feb 8 23:24:29.141000 audit: BPF prog-id=147 op=UNLOAD Feb 8 23:24:29.141000 audit[3323]: AVC avc: denied { bpf } for pid=3323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.141000 audit[3323]: AVC avc: denied { bpf } for pid=3323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.141000 audit[3323]: AVC avc: denied { bpf } for pid=3323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.141000 audit[3323]: AVC avc: denied { perfmon } for pid=3323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.141000 audit[3323]: AVC avc: denied { perfmon } for pid=3323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.141000 audit[3323]: AVC avc: denied { perfmon } for pid=3323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.141000 audit[3323]: AVC avc: denied { perfmon } for pid=3323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.141000 audit[3323]: AVC avc: denied { perfmon } for pid=3323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.141000 audit[3323]: AVC avc: denied { bpf } for pid=3323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.141000 audit[3323]: AVC avc: denied { bpf } for pid=3323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.141000 audit: BPF prog-id=149 op=LOAD Feb 8 23:24:29.141000 audit[3323]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003be9e8 items=0 ppid=3308 pid=3323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.141000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165396430306233323730653531366363336331633437366665313337 Feb 8 23:24:29.157000 audit[3382]: NETFILTER_CFG table=filter:102 family=2 entries=34 op=nft_register_chain pid=3382 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:24:29.157000 audit[3382]: SYSCALL arch=c000003e syscall=46 success=yes exit=18320 a0=3 a1=7ffcefc44e50 a2=0 a3=7ffcefc44e3c items=0 ppid=3008 pid=3382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.157000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:24:29.169528 env[1058]: 2024-02-08 23:24:29.063 [INFO][3285] k8s.go 578: Cleaning up netns ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Feb 8 23:24:29.169528 env[1058]: 2024-02-08 23:24:29.064 [INFO][3285] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" iface="eth0" netns="/var/run/netns/cni-a6d48fe5-b0b9-510e-3c6d-8f9608fb390f" Feb 8 23:24:29.169528 env[1058]: 2024-02-08 23:24:29.064 [INFO][3285] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" iface="eth0" netns="/var/run/netns/cni-a6d48fe5-b0b9-510e-3c6d-8f9608fb390f" Feb 8 23:24:29.169528 env[1058]: 2024-02-08 23:24:29.064 [INFO][3285] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" iface="eth0" netns="/var/run/netns/cni-a6d48fe5-b0b9-510e-3c6d-8f9608fb390f" Feb 8 23:24:29.169528 env[1058]: 2024-02-08 23:24:29.064 [INFO][3285] k8s.go 585: Releasing IP address(es) ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Feb 8 23:24:29.169528 env[1058]: 2024-02-08 23:24:29.064 [INFO][3285] utils.go 188: Calico CNI releasing IP address ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Feb 8 23:24:29.169528 env[1058]: 2024-02-08 23:24:29.153 [INFO][3363] ipam_plugin.go 415: Releasing address using handleID ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" HandleID="k8s-pod-network.866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" Feb 8 23:24:29.169528 env[1058]: 2024-02-08 23:24:29.153 [INFO][3363] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:24:29.169528 env[1058]: 2024-02-08 23:24:29.153 [INFO][3363] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:24:29.169528 env[1058]: 2024-02-08 23:24:29.163 [WARNING][3363] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" HandleID="k8s-pod-network.866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" Feb 8 23:24:29.169528 env[1058]: 2024-02-08 23:24:29.163 [INFO][3363] ipam_plugin.go 443: Releasing address using workloadID ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" HandleID="k8s-pod-network.866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" Feb 8 23:24:29.169528 env[1058]: 2024-02-08 23:24:29.165 [INFO][3363] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:24:29.169528 env[1058]: 2024-02-08 23:24:29.167 [INFO][3285] k8s.go 591: Teardown processing complete. ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Feb 8 23:24:29.171997 env[1058]: time="2024-02-08T23:24:29.169590848Z" level=info msg="TearDown network for sandbox \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\" successfully" Feb 8 23:24:29.171997 env[1058]: time="2024-02-08T23:24:29.169632527Z" level=info msg="StopPodSandbox for \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\" returns successfully" Feb 8 23:24:29.171997 env[1058]: time="2024-02-08T23:24:29.170575683Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-z5bmg,Uid:45e1eb15-c368-484a-b1d1-c24f2e2552a7,Namespace:kube-system,Attempt:1,}" Feb 8 23:24:29.186000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524816 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:24:29.186000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00205f8f0 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:24:29.186000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:24:29.186000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:24:29.186000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002674b60 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:24:29.186000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:24:29.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.221000 audit: BPF prog-id=150 op=LOAD Feb 8 23:24:29.225000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.225000 audit[3356]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3349 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838393137383839313631343436376537383933633638643539656437 Feb 8 23:24:29.225000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.225000 audit[3356]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3349 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838393137383839313631343436376537383933633638643539656437 Feb 8 23:24:29.226000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.226000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.226000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.226000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.226000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.226000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.226000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.226000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.226000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.226000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.226000 audit: BPF prog-id=151 op=LOAD Feb 8 23:24:29.226000 audit[3356]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002183f0 items=0 ppid=3349 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838393137383839313631343436376537383933633638643539656437 Feb 8 23:24:29.227000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.227000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.227000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.227000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.227000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.227000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.227000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.227000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.227000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.227000 audit: BPF prog-id=152 op=LOAD Feb 8 23:24:29.227000 audit[3356]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000218438 items=0 ppid=3349 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.227000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838393137383839313631343436376537383933633638643539656437 Feb 8 23:24:29.228000 audit: BPF prog-id=152 op=UNLOAD Feb 8 23:24:29.228000 audit: BPF prog-id=151 op=UNLOAD Feb 8 23:24:29.228000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.228000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.228000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.228000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.228000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.228000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.228000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.228000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.228000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.228000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.228000 audit: BPF prog-id=153 op=LOAD Feb 8 23:24:29.233816 env[1058]: time="2024-02-08T23:24:29.233407159Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7pr2w,Uid:1ce0d9e2-3713-455f-ba71-30f83da4d2b4,Namespace:calico-system,Attempt:1,} returns sandbox id \"ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6\"" Feb 8 23:24:29.228000 audit[3356]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000218848 items=0 ppid=3349 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838393137383839313631343436376537383933633638643539656437 Feb 8 23:24:29.240039 env[1058]: time="2024-02-08T23:24:29.239993340Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\"" Feb 8 23:24:29.355895 env[1058]: time="2024-02-08T23:24:29.355806626Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7ddd6bc5b6-6sw6g,Uid:57f71956-f2ab-4bdb-b2d7-61197f5c9997,Namespace:calico-system,Attempt:1,} returns sandbox id \"889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730\"" Feb 8 23:24:29.499419 systemd[1]: run-netns-cni\x2da6d48fe5\x2db0b9\x2d510e\x2d3c6d\x2d8f9608fb390f.mount: Deactivated successfully. Feb 8 23:24:29.527003 systemd-networkd[972]: cali424c3429732: Link UP Feb 8 23:24:29.531797 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali424c3429732: link becomes ready Feb 8 23:24:29.532255 systemd-networkd[972]: cali424c3429732: Gained carrier Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.396 [INFO][3396] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0 coredns-5d78c9869d- kube-system 45e1eb15-c368-484a-b1d1-c24f2e2552a7 709 0 2024-02-08 23:23:48 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5d78c9869d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510-3-2-2-def1b47031.novalocal coredns-5d78c9869d-z5bmg eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali424c3429732 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" Namespace="kube-system" Pod="coredns-5d78c9869d-z5bmg" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-" Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.396 [INFO][3396] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" Namespace="kube-system" Pod="coredns-5d78c9869d-z5bmg" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.443 [INFO][3416] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" HandleID="k8s-pod-network.e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.465 [INFO][3416] ipam_plugin.go 268: Auto assigning IP ContainerID="e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" HandleID="k8s-pod-network.e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002bf7b0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510-3-2-2-def1b47031.novalocal", "pod":"coredns-5d78c9869d-z5bmg", "timestamp":"2024-02-08 23:24:29.443643206 +0000 UTC"}, Hostname:"ci-3510-3-2-2-def1b47031.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.465 [INFO][3416] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.465 [INFO][3416] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.465 [INFO][3416] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-2-2-def1b47031.novalocal' Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.468 [INFO][3416] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.475 [INFO][3416] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.480 [INFO][3416] ipam.go 489: Trying affinity for 192.168.16.192/26 host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.483 [INFO][3416] ipam.go 155: Attempting to load block cidr=192.168.16.192/26 host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.486 [INFO][3416] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.16.192/26 host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.486 [INFO][3416] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.16.192/26 handle="k8s-pod-network.e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.488 [INFO][3416] ipam.go 1682: Creating new handle: k8s-pod-network.e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.493 [INFO][3416] ipam.go 1203: Writing block in order to claim IPs block=192.168.16.192/26 handle="k8s-pod-network.e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.507 [INFO][3416] ipam.go 1216: Successfully claimed IPs: [192.168.16.195/26] block=192.168.16.192/26 handle="k8s-pod-network.e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.507 [INFO][3416] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.16.195/26] handle="k8s-pod-network.e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.507 [INFO][3416] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:24:29.544236 env[1058]: 2024-02-08 23:24:29.507 [INFO][3416] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.16.195/26] IPv6=[] ContainerID="e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" HandleID="k8s-pod-network.e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" Feb 8 23:24:29.545080 env[1058]: 2024-02-08 23:24:29.509 [INFO][3396] k8s.go 385: Populated endpoint ContainerID="e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" Namespace="kube-system" Pod="coredns-5d78c9869d-z5bmg" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"45e1eb15-c368-484a-b1d1-c24f2e2552a7", ResourceVersion:"709", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 23, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-2-2-def1b47031.novalocal", ContainerID:"", Pod:"coredns-5d78c9869d-z5bmg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.16.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali424c3429732", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:24:29.545080 env[1058]: 2024-02-08 23:24:29.510 [INFO][3396] k8s.go 386: Calico CNI using IPs: [192.168.16.195/32] ContainerID="e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" Namespace="kube-system" Pod="coredns-5d78c9869d-z5bmg" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" Feb 8 23:24:29.545080 env[1058]: 2024-02-08 23:24:29.510 [INFO][3396] dataplane_linux.go 68: Setting the host side veth name to cali424c3429732 ContainerID="e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" Namespace="kube-system" Pod="coredns-5d78c9869d-z5bmg" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" Feb 8 23:24:29.545080 env[1058]: 2024-02-08 23:24:29.528 [INFO][3396] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" Namespace="kube-system" Pod="coredns-5d78c9869d-z5bmg" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" Feb 8 23:24:29.545080 env[1058]: 2024-02-08 23:24:29.528 [INFO][3396] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" Namespace="kube-system" Pod="coredns-5d78c9869d-z5bmg" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"45e1eb15-c368-484a-b1d1-c24f2e2552a7", ResourceVersion:"709", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 23, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-2-2-def1b47031.novalocal", ContainerID:"e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a", Pod:"coredns-5d78c9869d-z5bmg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.16.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali424c3429732", MAC:"06:20:07:cd:0b:1e", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:24:29.545080 env[1058]: 2024-02-08 23:24:29.541 [INFO][3396] k8s.go 491: Wrote updated endpoint to datastore ContainerID="e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a" Namespace="kube-system" Pod="coredns-5d78c9869d-z5bmg" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" Feb 8 23:24:29.568495 env[1058]: time="2024-02-08T23:24:29.566976972Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:24:29.568495 env[1058]: time="2024-02-08T23:24:29.567050931Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:24:29.568495 env[1058]: time="2024-02-08T23:24:29.567066712Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:24:29.568495 env[1058]: time="2024-02-08T23:24:29.567213518Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a pid=3444 runtime=io.containerd.runc.v2 Feb 8 23:24:29.591934 systemd-networkd[972]: vxlan.calico: Gained IPv6LL Feb 8 23:24:29.620230 systemd[1]: run-containerd-runc-k8s.io-e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a-runc.qIdk1Y.mount: Deactivated successfully. Feb 8 23:24:29.624627 systemd[1]: Started cri-containerd-e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a.scope. Feb 8 23:24:29.655274 kernel: kauditd_printk_skb: 277 callbacks suppressed Feb 8 23:24:29.656116 kernel: audit: type=1400 audit(1707434669.648:1189): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.660782 kernel: audit: type=1400 audit(1707434669.648:1190): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.666776 kernel: audit: type=1400 audit(1707434669.648:1191): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.672775 kernel: audit: type=1400 audit(1707434669.648:1192): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.681775 kernel: audit: type=1400 audit(1707434669.648:1193): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.681972 kernel: audit: type=1400 audit(1707434669.648:1194): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.690783 kernel: audit: type=1400 audit(1707434669.648:1195): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.695832 kernel: audit: type=1400 audit(1707434669.648:1196): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.704106 kernel: audit: type=1400 audit(1707434669.648:1197): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.704192 kernel: audit: type=1400 audit(1707434669.648:1198): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit: BPF prog-id=154 op=LOAD Feb 8 23:24:29.648000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3444 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.648000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535616464623137656636386333353839383466623936376165343832 Feb 8 23:24:29.648000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3444 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.648000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535616464623137656636386333353839383466623936376165343832 Feb 8 23:24:29.648000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.648000 audit: BPF prog-id=155 op=LOAD Feb 8 23:24:29.648000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000200660 items=0 ppid=3444 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.648000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535616464623137656636386333353839383466623936376165343832 Feb 8 23:24:29.654000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.654000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.654000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.654000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.654000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.654000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.654000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.654000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.654000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.654000 audit: BPF prog-id=156 op=LOAD Feb 8 23:24:29.654000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002006a8 items=0 ppid=3444 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.654000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535616464623137656636386333353839383466623936376165343832 Feb 8 23:24:29.655000 audit: BPF prog-id=156 op=UNLOAD Feb 8 23:24:29.655000 audit: BPF prog-id=155 op=UNLOAD Feb 8 23:24:29.655000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.655000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.655000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.655000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.655000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.655000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.655000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.655000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.655000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.660000 audit[3466]: NETFILTER_CFG table=filter:103 family=2 entries=50 op=nft_register_chain pid=3466 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:24:29.660000 audit[3466]: SYSCALL arch=c000003e syscall=46 success=yes exit=25136 a0=3 a1=7ffddd38caf0 a2=0 a3=7ffddd38cadc items=0 ppid=3008 pid=3466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.660000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:24:29.655000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.655000 audit: BPF prog-id=157 op=LOAD Feb 8 23:24:29.655000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000200ab8 items=0 ppid=3444 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535616464623137656636386333353839383466623936376165343832 Feb 8 23:24:29.731945 env[1058]: time="2024-02-08T23:24:29.731873168Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-z5bmg,Uid:45e1eb15-c368-484a-b1d1-c24f2e2552a7,Namespace:kube-system,Attempt:1,} returns sandbox id \"e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a\"" Feb 8 23:24:29.738616 env[1058]: time="2024-02-08T23:24:29.737722191Z" level=info msg="CreateContainer within sandbox \"e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 8 23:24:29.764920 env[1058]: time="2024-02-08T23:24:29.764709336Z" level=info msg="CreateContainer within sandbox \"e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"5a4c4b55e78703c2ae99621d1aeef24f5b940adfc7a3e508d3193e7ca91ec90a\"" Feb 8 23:24:29.765569 env[1058]: time="2024-02-08T23:24:29.765535341Z" level=info msg="StartContainer for \"5a4c4b55e78703c2ae99621d1aeef24f5b940adfc7a3e508d3193e7ca91ec90a\"" Feb 8 23:24:29.795840 systemd[1]: Started cri-containerd-5a4c4b55e78703c2ae99621d1aeef24f5b940adfc7a3e508d3193e7ca91ec90a.scope. Feb 8 23:24:29.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.822000 audit: BPF prog-id=158 op=LOAD Feb 8 23:24:29.823000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.823000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3444 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561346334623535653738373033633261653939363231643161656566 Feb 8 23:24:29.824000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.824000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3444 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561346334623535653738373033633261653939363231643161656566 Feb 8 23:24:29.824000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.824000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.824000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.824000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.824000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.824000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.824000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.824000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.824000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.824000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.824000 audit: BPF prog-id=159 op=LOAD Feb 8 23:24:29.824000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0003c2210 items=0 ppid=3444 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561346334623535653738373033633261653939363231643161656566 Feb 8 23:24:29.825000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.825000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.825000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.825000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.825000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.825000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.825000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.825000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.825000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.825000 audit: BPF prog-id=160 op=LOAD Feb 8 23:24:29.825000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003c2258 items=0 ppid=3444 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.825000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561346334623535653738373033633261653939363231643161656566 Feb 8 23:24:29.826000 audit: BPF prog-id=160 op=UNLOAD Feb 8 23:24:29.826000 audit: BPF prog-id=159 op=UNLOAD Feb 8 23:24:29.826000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.826000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.826000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.826000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.826000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.826000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.826000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.826000 audit[3487]: AVC avc: denied { perfmon } for pid=3487 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.826000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.826000 audit[3487]: AVC avc: denied { bpf } for pid=3487 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:29.826000 audit: BPF prog-id=161 op=LOAD Feb 8 23:24:29.826000 audit[3487]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003c2668 items=0 ppid=3444 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:29.826000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561346334623535653738373033633261653939363231643161656566 Feb 8 23:24:29.858301 env[1058]: time="2024-02-08T23:24:29.858254282Z" level=info msg="StartContainer for \"5a4c4b55e78703c2ae99621d1aeef24f5b940adfc7a3e508d3193e7ca91ec90a\" returns successfully" Feb 8 23:24:29.868347 env[1058]: time="2024-02-08T23:24:29.868300448Z" level=info msg="StopPodSandbox for \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\"" Feb 8 23:24:29.994086 env[1058]: 2024-02-08 23:24:29.942 [INFO][3522] k8s.go 578: Cleaning up netns ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Feb 8 23:24:29.994086 env[1058]: 2024-02-08 23:24:29.942 [INFO][3522] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" iface="eth0" netns="/var/run/netns/cni-fdb69cbb-bf60-64d5-7234-2ee46bf8a716" Feb 8 23:24:29.994086 env[1058]: 2024-02-08 23:24:29.942 [INFO][3522] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" iface="eth0" netns="/var/run/netns/cni-fdb69cbb-bf60-64d5-7234-2ee46bf8a716" Feb 8 23:24:29.994086 env[1058]: 2024-02-08 23:24:29.943 [INFO][3522] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" iface="eth0" netns="/var/run/netns/cni-fdb69cbb-bf60-64d5-7234-2ee46bf8a716" Feb 8 23:24:29.994086 env[1058]: 2024-02-08 23:24:29.943 [INFO][3522] k8s.go 585: Releasing IP address(es) ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Feb 8 23:24:29.994086 env[1058]: 2024-02-08 23:24:29.943 [INFO][3522] utils.go 188: Calico CNI releasing IP address ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Feb 8 23:24:29.994086 env[1058]: 2024-02-08 23:24:29.973 [INFO][3533] ipam_plugin.go 415: Releasing address using handleID ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" HandleID="k8s-pod-network.e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" Feb 8 23:24:29.994086 env[1058]: 2024-02-08 23:24:29.974 [INFO][3533] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:24:29.994086 env[1058]: 2024-02-08 23:24:29.974 [INFO][3533] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:24:29.994086 env[1058]: 2024-02-08 23:24:29.985 [WARNING][3533] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" HandleID="k8s-pod-network.e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" Feb 8 23:24:29.994086 env[1058]: 2024-02-08 23:24:29.986 [INFO][3533] ipam_plugin.go 443: Releasing address using workloadID ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" HandleID="k8s-pod-network.e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" Feb 8 23:24:29.994086 env[1058]: 2024-02-08 23:24:29.990 [INFO][3533] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:24:29.994086 env[1058]: 2024-02-08 23:24:29.992 [INFO][3522] k8s.go 591: Teardown processing complete. ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Feb 8 23:24:29.995301 env[1058]: time="2024-02-08T23:24:29.995223223Z" level=info msg="TearDown network for sandbox \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\" successfully" Feb 8 23:24:29.995351 env[1058]: time="2024-02-08T23:24:29.995293024Z" level=info msg="StopPodSandbox for \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\" returns successfully" Feb 8 23:24:29.996271 env[1058]: time="2024-02-08T23:24:29.996228956Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-8tntm,Uid:d88ab937-9c80-4cfc-a62c-efccde820661,Namespace:kube-system,Attempt:1,}" Feb 8 23:24:30.167639 systemd-networkd[972]: calibcf02a29a99: Gained IPv6LL Feb 8 23:24:30.224000 audit[3554]: NETFILTER_CFG table=filter:104 family=2 entries=14 op=nft_register_rule pid=3554 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:24:30.224000 audit[3554]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffd1f64a600 a2=0 a3=7ffd1f64a5ec items=0 ppid=2089 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:30.224000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:24:30.225000 audit[3554]: NETFILTER_CFG table=nat:105 family=2 entries=14 op=nft_register_rule pid=3554 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:24:30.225000 audit[3554]: SYSCALL arch=c000003e syscall=46 success=yes exit=3300 a0=3 a1=7ffd1f64a600 a2=0 a3=73696874203a4554 items=0 ppid=2089 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:30.225000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:24:30.340592 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 8 23:24:30.340722 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4c11fbd0d7f: link becomes ready Feb 8 23:24:30.338498 systemd-networkd[972]: cali4c11fbd0d7f: Link UP Feb 8 23:24:30.338683 systemd-networkd[972]: cali4c11fbd0d7f: Gained carrier Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.214 [INFO][3539] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0 coredns-5d78c9869d- kube-system d88ab937-9c80-4cfc-a62c-efccde820661 720 0 2024-02-08 23:23:48 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5d78c9869d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510-3-2-2-def1b47031.novalocal coredns-5d78c9869d-8tntm eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali4c11fbd0d7f [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" Namespace="kube-system" Pod="coredns-5d78c9869d-8tntm" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-" Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.214 [INFO][3539] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" Namespace="kube-system" Pod="coredns-5d78c9869d-8tntm" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.264 [INFO][3556] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" HandleID="k8s-pod-network.077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.277 [INFO][3556] ipam_plugin.go 268: Auto assigning IP ContainerID="077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" HandleID="k8s-pod-network.077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00027cd20), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510-3-2-2-def1b47031.novalocal", "pod":"coredns-5d78c9869d-8tntm", "timestamp":"2024-02-08 23:24:30.264353946 +0000 UTC"}, Hostname:"ci-3510-3-2-2-def1b47031.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.277 [INFO][3556] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.278 [INFO][3556] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.278 [INFO][3556] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-2-2-def1b47031.novalocal' Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.282 [INFO][3556] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.289 [INFO][3556] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.300 [INFO][3556] ipam.go 489: Trying affinity for 192.168.16.192/26 host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.303 [INFO][3556] ipam.go 155: Attempting to load block cidr=192.168.16.192/26 host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.307 [INFO][3556] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.16.192/26 host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.307 [INFO][3556] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.16.192/26 handle="k8s-pod-network.077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.309 [INFO][3556] ipam.go 1682: Creating new handle: k8s-pod-network.077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.313 [INFO][3556] ipam.go 1203: Writing block in order to claim IPs block=192.168.16.192/26 handle="k8s-pod-network.077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.332 [INFO][3556] ipam.go 1216: Successfully claimed IPs: [192.168.16.196/26] block=192.168.16.192/26 handle="k8s-pod-network.077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.332 [INFO][3556] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.16.196/26] handle="k8s-pod-network.077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.332 [INFO][3556] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:24:30.360441 env[1058]: 2024-02-08 23:24:30.332 [INFO][3556] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.16.196/26] IPv6=[] ContainerID="077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" HandleID="k8s-pod-network.077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" Feb 8 23:24:30.361188 env[1058]: 2024-02-08 23:24:30.334 [INFO][3539] k8s.go 385: Populated endpoint ContainerID="077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" Namespace="kube-system" Pod="coredns-5d78c9869d-8tntm" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"d88ab937-9c80-4cfc-a62c-efccde820661", ResourceVersion:"720", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 23, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-2-2-def1b47031.novalocal", ContainerID:"", Pod:"coredns-5d78c9869d-8tntm", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.16.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4c11fbd0d7f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:24:30.361188 env[1058]: 2024-02-08 23:24:30.334 [INFO][3539] k8s.go 386: Calico CNI using IPs: [192.168.16.196/32] ContainerID="077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" Namespace="kube-system" Pod="coredns-5d78c9869d-8tntm" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" Feb 8 23:24:30.361188 env[1058]: 2024-02-08 23:24:30.334 [INFO][3539] dataplane_linux.go 68: Setting the host side veth name to cali4c11fbd0d7f ContainerID="077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" Namespace="kube-system" Pod="coredns-5d78c9869d-8tntm" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" Feb 8 23:24:30.361188 env[1058]: 2024-02-08 23:24:30.341 [INFO][3539] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" Namespace="kube-system" Pod="coredns-5d78c9869d-8tntm" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" Feb 8 23:24:30.361188 env[1058]: 2024-02-08 23:24:30.341 [INFO][3539] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" Namespace="kube-system" Pod="coredns-5d78c9869d-8tntm" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"d88ab937-9c80-4cfc-a62c-efccde820661", ResourceVersion:"720", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 23, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-2-2-def1b47031.novalocal", ContainerID:"077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b", Pod:"coredns-5d78c9869d-8tntm", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.16.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4c11fbd0d7f", MAC:"b6:17:bb:02:2b:f8", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:24:30.361188 env[1058]: 2024-02-08 23:24:30.358 [INFO][3539] k8s.go 491: Wrote updated endpoint to datastore ContainerID="077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b" Namespace="kube-system" Pod="coredns-5d78c9869d-8tntm" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" Feb 8 23:24:30.362051 kubelet[1950]: I0208 23:24:30.361971 1950 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5d78c9869d-z5bmg" podStartSLOduration=42.361920448 podCreationTimestamp="2024-02-08 23:23:48 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-08 23:24:30.167480319 +0000 UTC m=+55.498190809" watchObservedRunningTime="2024-02-08 23:24:30.361920448 +0000 UTC m=+55.692630928" Feb 8 23:24:30.397143 env[1058]: time="2024-02-08T23:24:30.397033577Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:24:30.397297 env[1058]: time="2024-02-08T23:24:30.397149786Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:24:30.397297 env[1058]: time="2024-02-08T23:24:30.397190953Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:24:30.397557 env[1058]: time="2024-02-08T23:24:30.397488122Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b pid=3582 runtime=io.containerd.runc.v2 Feb 8 23:24:30.406967 systemd-networkd[972]: calib3d567ded91: Gained IPv6LL Feb 8 23:24:30.414000 audit[3592]: NETFILTER_CFG table=filter:106 family=2 entries=40 op=nft_register_chain pid=3592 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:24:30.414000 audit[3592]: SYSCALL arch=c000003e syscall=46 success=yes exit=20736 a0=3 a1=7ffca83e84f0 a2=0 a3=7ffca83e84dc items=0 ppid=3008 pid=3592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:30.414000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:24:30.421366 systemd[1]: Started cri-containerd-077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b.scope. Feb 8 23:24:30.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.457000 audit: BPF prog-id=162 op=LOAD Feb 8 23:24:30.458000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.458000 audit[3593]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3582 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:30.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037376634616364663261333064363936366662336662376230306462 Feb 8 23:24:30.458000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.458000 audit[3593]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3582 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:30.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037376634616364663261333064363936366662336662376230306462 Feb 8 23:24:30.458000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.458000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.458000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.458000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.458000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.458000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.458000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.458000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.458000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.458000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.458000 audit: BPF prog-id=163 op=LOAD Feb 8 23:24:30.458000 audit[3593]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001a6620 items=0 ppid=3582 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:30.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037376634616364663261333064363936366662336662376230306462 Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit: BPF prog-id=164 op=LOAD Feb 8 23:24:30.459000 audit[3593]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001a6668 items=0 ppid=3582 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:30.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037376634616364663261333064363936366662336662376230306462 Feb 8 23:24:30.459000 audit: BPF prog-id=164 op=UNLOAD Feb 8 23:24:30.459000 audit: BPF prog-id=163 op=UNLOAD Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.459000 audit: BPF prog-id=165 op=LOAD Feb 8 23:24:30.459000 audit[3593]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001a6a78 items=0 ppid=3582 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:30.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037376634616364663261333064363936366662336662376230306462 Feb 8 23:24:30.500322 systemd[1]: run-netns-cni\x2dfdb69cbb\x2dbf60\x2d64d5\x2d7234\x2d2ee46bf8a716.mount: Deactivated successfully. Feb 8 23:24:30.511647 env[1058]: time="2024-02-08T23:24:30.511583614Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-8tntm,Uid:d88ab937-9c80-4cfc-a62c-efccde820661,Namespace:kube-system,Attempt:1,} returns sandbox id \"077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b\"" Feb 8 23:24:30.518353 env[1058]: time="2024-02-08T23:24:30.518301953Z" level=info msg="CreateContainer within sandbox \"077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 8 23:24:30.560866 env[1058]: time="2024-02-08T23:24:30.560796068Z" level=info msg="CreateContainer within sandbox \"077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"e5077b5aaa077af5e58f06ca51934f02de9266528155461fb0113c495305ac18\"" Feb 8 23:24:30.561894 env[1058]: time="2024-02-08T23:24:30.561863027Z" level=info msg="StartContainer for \"e5077b5aaa077af5e58f06ca51934f02de9266528155461fb0113c495305ac18\"" Feb 8 23:24:30.625889 systemd[1]: Started cri-containerd-e5077b5aaa077af5e58f06ca51934f02de9266528155461fb0113c495305ac18.scope. Feb 8 23:24:30.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.648000 audit: BPF prog-id=166 op=LOAD Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3582 pid=3626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:30.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535303737623561616130373761663565353866303663613531393334 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3582 pid=3626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:30.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535303737623561616130373761663565353866303663613531393334 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit: BPF prog-id=167 op=LOAD Feb 8 23:24:30.649000 audit[3626]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0001df2e0 items=0 ppid=3582 pid=3626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:30.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535303737623561616130373761663565353866303663613531393334 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit: BPF prog-id=168 op=LOAD Feb 8 23:24:30.649000 audit[3626]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0001df328 items=0 ppid=3582 pid=3626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:30.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535303737623561616130373761663565353866303663613531393334 Feb 8 23:24:30.649000 audit: BPF prog-id=168 op=UNLOAD Feb 8 23:24:30.649000 audit: BPF prog-id=167 op=UNLOAD Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:30.649000 audit: BPF prog-id=169 op=LOAD Feb 8 23:24:30.649000 audit[3626]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0001df738 items=0 ppid=3582 pid=3626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:30.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535303737623561616130373761663565353866303663613531393334 Feb 8 23:24:30.944148 env[1058]: time="2024-02-08T23:24:30.943215724Z" level=info msg="StartContainer for \"e5077b5aaa077af5e58f06ca51934f02de9266528155461fb0113c495305ac18\" returns successfully" Feb 8 23:24:31.253000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524816 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:24:31.253000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c0092ecb10 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:24:31.253000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:24:31.268000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=524818 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:24:31.268000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c009329200 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:24:31.268000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:24:31.270000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:24:31.270000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c0091842e0 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:24:31.270000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:24:31.277000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=524812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:24:31.277000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=66 a1=c0092ecc90 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:24:31.277000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:24:31.310000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:24:31.310000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c009185380 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:24:31.310000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:24:31.311000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524816 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:24:31.311000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c009176cf0 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:24:31.311000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:24:31.342000 audit[3658]: NETFILTER_CFG table=filter:107 family=2 entries=14 op=nft_register_rule pid=3658 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:24:31.342000 audit[3658]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffcd5148fe0 a2=0 a3=7ffcd5148fcc items=0 ppid=2089 pid=3658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:31.342000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:24:31.344000 audit[3658]: NETFILTER_CFG table=nat:108 family=2 entries=14 op=nft_register_rule pid=3658 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:24:31.344000 audit[3658]: SYSCALL arch=c000003e syscall=46 success=yes exit=3300 a0=3 a1=7ffcd5148fe0 a2=0 a3=73696874203a4554 items=0 ppid=2089 pid=3658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:31.344000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:24:31.566961 systemd-networkd[972]: cali424c3429732: Gained IPv6LL Feb 8 23:24:31.625456 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4284860306.mount: Deactivated successfully. Feb 8 23:24:32.163034 kubelet[1950]: I0208 23:24:32.161428 1950 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5d78c9869d-8tntm" podStartSLOduration=44.161387645 podCreationTimestamp="2024-02-08 23:23:48 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-08 23:24:31.286090057 +0000 UTC m=+56.616800657" watchObservedRunningTime="2024-02-08 23:24:32.161387645 +0000 UTC m=+57.492098145" Feb 8 23:24:32.241000 audit[3660]: NETFILTER_CFG table=filter:109 family=2 entries=11 op=nft_register_rule pid=3660 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:24:32.241000 audit[3660]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffef1e62600 a2=0 a3=7ffef1e625ec items=0 ppid=2089 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:32.241000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:24:32.243000 audit[3660]: NETFILTER_CFG table=nat:110 family=2 entries=35 op=nft_register_chain pid=3660 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:24:32.243000 audit[3660]: SYSCALL arch=c000003e syscall=46 success=yes exit=13788 a0=3 a1=7ffef1e62600 a2=0 a3=7ffef1e625ec items=0 ppid=2089 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:32.243000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:24:32.327481 systemd-networkd[972]: cali4c11fbd0d7f: Gained IPv6LL Feb 8 23:24:32.396522 env[1058]: time="2024-02-08T23:24:32.396423206Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:32.400011 env[1058]: time="2024-02-08T23:24:32.399956588Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:91c1c91da7602f16686c149419195b486669f3a1828fd320cf332fdc6a25297d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:32.402993 env[1058]: time="2024-02-08T23:24:32.402936637Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:32.406142 env[1058]: time="2024-02-08T23:24:32.406085625Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:2b9021393c17e87ba8a3c89f5b3719941812f4e4751caa0b71eb2233bff48738,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:32.406967 env[1058]: time="2024-02-08T23:24:32.406918964Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\" returns image reference \"sha256:91c1c91da7602f16686c149419195b486669f3a1828fd320cf332fdc6a25297d\"" Feb 8 23:24:32.412972 env[1058]: time="2024-02-08T23:24:32.408840641Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\"" Feb 8 23:24:32.412972 env[1058]: time="2024-02-08T23:24:32.409831757Z" level=info msg="CreateContainer within sandbox \"ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Feb 8 23:24:32.434402 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3949116428.mount: Deactivated successfully. Feb 8 23:24:32.441501 env[1058]: time="2024-02-08T23:24:32.441436549Z" level=info msg="CreateContainer within sandbox \"ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"b79acc78cbd8ee4a39c96b99dc8fd7f9cdba1b31cae1898281510fca339822a5\"" Feb 8 23:24:32.445870 env[1058]: time="2024-02-08T23:24:32.442399332Z" level=info msg="StartContainer for \"b79acc78cbd8ee4a39c96b99dc8fd7f9cdba1b31cae1898281510fca339822a5\"" Feb 8 23:24:32.474704 systemd[1]: Started cri-containerd-b79acc78cbd8ee4a39c96b99dc8fd7f9cdba1b31cae1898281510fca339822a5.scope. Feb 8 23:24:32.509000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.509000 audit[3670]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3308 pid=3670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:32.509000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237396163633738636264386565346133396339366239396463386664 Feb 8 23:24:32.509000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.509000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.509000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.509000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.509000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.509000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.509000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.509000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.509000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.509000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.509000 audit: BPF prog-id=170 op=LOAD Feb 8 23:24:32.509000 audit[3670]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c00035fea0 items=0 ppid=3308 pid=3670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:32.509000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237396163633738636264386565346133396339366239396463386664 Feb 8 23:24:32.510000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.510000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.510000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.510000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.510000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.510000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.510000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.510000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.510000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.510000 audit: BPF prog-id=171 op=LOAD Feb 8 23:24:32.510000 audit[3670]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c00035fee8 items=0 ppid=3308 pid=3670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:32.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237396163633738636264386565346133396339366239396463386664 Feb 8 23:24:32.511000 audit: BPF prog-id=171 op=UNLOAD Feb 8 23:24:32.511000 audit: BPF prog-id=170 op=UNLOAD Feb 8 23:24:32.511000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.511000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.511000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.511000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.511000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.511000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.511000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.511000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.511000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.511000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:32.511000 audit: BPF prog-id=172 op=LOAD Feb 8 23:24:32.511000 audit[3670]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c00035ff78 items=0 ppid=3308 pid=3670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:32.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237396163633738636264386565346133396339366239396463386664 Feb 8 23:24:32.542088 env[1058]: time="2024-02-08T23:24:32.541938013Z" level=info msg="StartContainer for \"b79acc78cbd8ee4a39c96b99dc8fd7f9cdba1b31cae1898281510fca339822a5\" returns successfully" Feb 8 23:24:33.282000 audit[3702]: NETFILTER_CFG table=filter:111 family=2 entries=8 op=nft_register_rule pid=3702 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:24:33.282000 audit[3702]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffed26b74e0 a2=0 a3=7ffed26b74cc items=0 ppid=2089 pid=3702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:33.282000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:24:33.303000 audit[3702]: NETFILTER_CFG table=nat:112 family=2 entries=56 op=nft_register_chain pid=3702 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:24:33.303000 audit[3702]: SYSCALL arch=c000003e syscall=46 success=yes exit=19452 a0=3 a1=7ffed26b74e0 a2=0 a3=7ffed26b74cc items=0 ppid=2089 pid=3702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:33.303000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:24:34.130192 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3119596196.mount: Deactivated successfully. Feb 8 23:24:34.872515 env[1058]: time="2024-02-08T23:24:34.872440475Z" level=info msg="StopPodSandbox for \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\"" Feb 8 23:24:35.037540 env[1058]: 2024-02-08 23:24:34.992 [WARNING][3720] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"45e1eb15-c368-484a-b1d1-c24f2e2552a7", ResourceVersion:"740", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 23, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-2-2-def1b47031.novalocal", ContainerID:"e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a", Pod:"coredns-5d78c9869d-z5bmg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.16.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali424c3429732", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:24:35.037540 env[1058]: 2024-02-08 23:24:34.993 [INFO][3720] k8s.go 578: Cleaning up netns ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Feb 8 23:24:35.037540 env[1058]: 2024-02-08 23:24:34.993 [INFO][3720] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" iface="eth0" netns="" Feb 8 23:24:35.037540 env[1058]: 2024-02-08 23:24:34.993 [INFO][3720] k8s.go 585: Releasing IP address(es) ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Feb 8 23:24:35.037540 env[1058]: 2024-02-08 23:24:34.993 [INFO][3720] utils.go 188: Calico CNI releasing IP address ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Feb 8 23:24:35.037540 env[1058]: 2024-02-08 23:24:35.017 [INFO][3726] ipam_plugin.go 415: Releasing address using handleID ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" HandleID="k8s-pod-network.866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" Feb 8 23:24:35.037540 env[1058]: 2024-02-08 23:24:35.018 [INFO][3726] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:24:35.037540 env[1058]: 2024-02-08 23:24:35.018 [INFO][3726] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:24:35.037540 env[1058]: 2024-02-08 23:24:35.031 [WARNING][3726] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" HandleID="k8s-pod-network.866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" Feb 8 23:24:35.037540 env[1058]: 2024-02-08 23:24:35.031 [INFO][3726] ipam_plugin.go 443: Releasing address using workloadID ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" HandleID="k8s-pod-network.866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" Feb 8 23:24:35.037540 env[1058]: 2024-02-08 23:24:35.033 [INFO][3726] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:24:35.037540 env[1058]: 2024-02-08 23:24:35.035 [INFO][3720] k8s.go 591: Teardown processing complete. ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Feb 8 23:24:35.038727 env[1058]: time="2024-02-08T23:24:35.037940505Z" level=info msg="TearDown network for sandbox \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\" successfully" Feb 8 23:24:35.038727 env[1058]: time="2024-02-08T23:24:35.037997922Z" level=info msg="StopPodSandbox for \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\" returns successfully" Feb 8 23:24:35.040057 env[1058]: time="2024-02-08T23:24:35.039721786Z" level=info msg="RemovePodSandbox for \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\"" Feb 8 23:24:35.040226 env[1058]: time="2024-02-08T23:24:35.040179628Z" level=info msg="Forcibly stopping sandbox \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\"" Feb 8 23:24:35.192773 env[1058]: 2024-02-08 23:24:35.133 [WARNING][3746] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"45e1eb15-c368-484a-b1d1-c24f2e2552a7", ResourceVersion:"740", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 23, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-2-2-def1b47031.novalocal", ContainerID:"e5addb17ef68c358984fb967ae482eb2740261a10405da270a78b17fe05ee29a", Pod:"coredns-5d78c9869d-z5bmg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.16.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali424c3429732", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:24:35.192773 env[1058]: 2024-02-08 23:24:35.133 [INFO][3746] k8s.go 578: Cleaning up netns ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Feb 8 23:24:35.192773 env[1058]: 2024-02-08 23:24:35.133 [INFO][3746] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" iface="eth0" netns="" Feb 8 23:24:35.192773 env[1058]: 2024-02-08 23:24:35.133 [INFO][3746] k8s.go 585: Releasing IP address(es) ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Feb 8 23:24:35.192773 env[1058]: 2024-02-08 23:24:35.133 [INFO][3746] utils.go 188: Calico CNI releasing IP address ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Feb 8 23:24:35.192773 env[1058]: 2024-02-08 23:24:35.166 [INFO][3752] ipam_plugin.go 415: Releasing address using handleID ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" HandleID="k8s-pod-network.866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" Feb 8 23:24:35.192773 env[1058]: 2024-02-08 23:24:35.166 [INFO][3752] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:24:35.192773 env[1058]: 2024-02-08 23:24:35.166 [INFO][3752] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:24:35.192773 env[1058]: 2024-02-08 23:24:35.185 [WARNING][3752] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" HandleID="k8s-pod-network.866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" Feb 8 23:24:35.192773 env[1058]: 2024-02-08 23:24:35.185 [INFO][3752] ipam_plugin.go 443: Releasing address using workloadID ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" HandleID="k8s-pod-network.866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--z5bmg-eth0" Feb 8 23:24:35.192773 env[1058]: 2024-02-08 23:24:35.188 [INFO][3752] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:24:35.192773 env[1058]: 2024-02-08 23:24:35.190 [INFO][3746] k8s.go 591: Teardown processing complete. ContainerID="866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5" Feb 8 23:24:35.193361 env[1058]: time="2024-02-08T23:24:35.193322593Z" level=info msg="TearDown network for sandbox \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\" successfully" Feb 8 23:24:35.197062 env[1058]: time="2024-02-08T23:24:35.197035641Z" level=info msg="RemovePodSandbox \"866a4e3be88aefeb4da8d22fa6fb1e2ffd22d545d978f8539cd0622bfef2b9a5\" returns successfully" Feb 8 23:24:35.197725 env[1058]: time="2024-02-08T23:24:35.197704149Z" level=info msg="StopPodSandbox for \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\"" Feb 8 23:24:35.362818 env[1058]: 2024-02-08 23:24:35.307 [WARNING][3772] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0", GenerateName:"calico-kube-controllers-7ddd6bc5b6-", Namespace:"calico-system", SelfLink:"", UID:"57f71956-f2ab-4bdb-b2d7-61197f5c9997", ResourceVersion:"708", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 23, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7ddd6bc5b6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-2-2-def1b47031.novalocal", ContainerID:"889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730", Pod:"calico-kube-controllers-7ddd6bc5b6-6sw6g", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.16.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib3d567ded91", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:24:35.362818 env[1058]: 2024-02-08 23:24:35.307 [INFO][3772] k8s.go 578: Cleaning up netns ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Feb 8 23:24:35.362818 env[1058]: 2024-02-08 23:24:35.307 [INFO][3772] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" iface="eth0" netns="" Feb 8 23:24:35.362818 env[1058]: 2024-02-08 23:24:35.307 [INFO][3772] k8s.go 585: Releasing IP address(es) ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Feb 8 23:24:35.362818 env[1058]: 2024-02-08 23:24:35.308 [INFO][3772] utils.go 188: Calico CNI releasing IP address ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Feb 8 23:24:35.362818 env[1058]: 2024-02-08 23:24:35.345 [INFO][3778] ipam_plugin.go 415: Releasing address using handleID ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" HandleID="k8s-pod-network.752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" Feb 8 23:24:35.362818 env[1058]: 2024-02-08 23:24:35.345 [INFO][3778] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:24:35.362818 env[1058]: 2024-02-08 23:24:35.345 [INFO][3778] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:24:35.362818 env[1058]: 2024-02-08 23:24:35.355 [WARNING][3778] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" HandleID="k8s-pod-network.752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" Feb 8 23:24:35.362818 env[1058]: 2024-02-08 23:24:35.355 [INFO][3778] ipam_plugin.go 443: Releasing address using workloadID ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" HandleID="k8s-pod-network.752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" Feb 8 23:24:35.362818 env[1058]: 2024-02-08 23:24:35.358 [INFO][3778] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:24:35.362818 env[1058]: 2024-02-08 23:24:35.360 [INFO][3772] k8s.go 591: Teardown processing complete. ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Feb 8 23:24:35.363431 env[1058]: time="2024-02-08T23:24:35.363390580Z" level=info msg="TearDown network for sandbox \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\" successfully" Feb 8 23:24:35.363521 env[1058]: time="2024-02-08T23:24:35.363501258Z" level=info msg="StopPodSandbox for \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\" returns successfully" Feb 8 23:24:35.364167 env[1058]: time="2024-02-08T23:24:35.364106637Z" level=info msg="RemovePodSandbox for \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\"" Feb 8 23:24:35.364307 env[1058]: time="2024-02-08T23:24:35.364263272Z" level=info msg="Forcibly stopping sandbox \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\"" Feb 8 23:24:35.498151 env[1058]: 2024-02-08 23:24:35.433 [WARNING][3798] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0", GenerateName:"calico-kube-controllers-7ddd6bc5b6-", Namespace:"calico-system", SelfLink:"", UID:"57f71956-f2ab-4bdb-b2d7-61197f5c9997", ResourceVersion:"708", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 23, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7ddd6bc5b6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-2-2-def1b47031.novalocal", ContainerID:"889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730", Pod:"calico-kube-controllers-7ddd6bc5b6-6sw6g", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.16.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib3d567ded91", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:24:35.498151 env[1058]: 2024-02-08 23:24:35.433 [INFO][3798] k8s.go 578: Cleaning up netns ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Feb 8 23:24:35.498151 env[1058]: 2024-02-08 23:24:35.433 [INFO][3798] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" iface="eth0" netns="" Feb 8 23:24:35.498151 env[1058]: 2024-02-08 23:24:35.433 [INFO][3798] k8s.go 585: Releasing IP address(es) ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Feb 8 23:24:35.498151 env[1058]: 2024-02-08 23:24:35.433 [INFO][3798] utils.go 188: Calico CNI releasing IP address ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Feb 8 23:24:35.498151 env[1058]: 2024-02-08 23:24:35.479 [INFO][3805] ipam_plugin.go 415: Releasing address using handleID ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" HandleID="k8s-pod-network.752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" Feb 8 23:24:35.498151 env[1058]: 2024-02-08 23:24:35.479 [INFO][3805] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:24:35.498151 env[1058]: 2024-02-08 23:24:35.479 [INFO][3805] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:24:35.498151 env[1058]: 2024-02-08 23:24:35.490 [WARNING][3805] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" HandleID="k8s-pod-network.752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" Feb 8 23:24:35.498151 env[1058]: 2024-02-08 23:24:35.490 [INFO][3805] ipam_plugin.go 443: Releasing address using workloadID ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" HandleID="k8s-pod-network.752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--kube--controllers--7ddd6bc5b6--6sw6g-eth0" Feb 8 23:24:35.498151 env[1058]: 2024-02-08 23:24:35.492 [INFO][3805] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:24:35.498151 env[1058]: 2024-02-08 23:24:35.496 [INFO][3798] k8s.go 591: Teardown processing complete. ContainerID="752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff" Feb 8 23:24:35.499967 env[1058]: time="2024-02-08T23:24:35.499884963Z" level=info msg="TearDown network for sandbox \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\" successfully" Feb 8 23:24:35.504060 env[1058]: time="2024-02-08T23:24:35.504014354Z" level=info msg="RemovePodSandbox \"752d52eaf137d38b50c9dfbd1375d4c9ef335606c92bc919fa5d4647b1d45cff\" returns successfully" Feb 8 23:24:35.504596 env[1058]: time="2024-02-08T23:24:35.504575531Z" level=info msg="StopPodSandbox for \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\"" Feb 8 23:24:35.628717 env[1058]: 2024-02-08 23:24:35.574 [WARNING][3825] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"d88ab937-9c80-4cfc-a62c-efccde820661", ResourceVersion:"744", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 23, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-2-2-def1b47031.novalocal", ContainerID:"077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b", Pod:"coredns-5d78c9869d-8tntm", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.16.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4c11fbd0d7f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:24:35.628717 env[1058]: 2024-02-08 23:24:35.574 [INFO][3825] k8s.go 578: Cleaning up netns ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Feb 8 23:24:35.628717 env[1058]: 2024-02-08 23:24:35.574 [INFO][3825] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" iface="eth0" netns="" Feb 8 23:24:35.628717 env[1058]: 2024-02-08 23:24:35.574 [INFO][3825] k8s.go 585: Releasing IP address(es) ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Feb 8 23:24:35.628717 env[1058]: 2024-02-08 23:24:35.574 [INFO][3825] utils.go 188: Calico CNI releasing IP address ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Feb 8 23:24:35.628717 env[1058]: 2024-02-08 23:24:35.610 [INFO][3831] ipam_plugin.go 415: Releasing address using handleID ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" HandleID="k8s-pod-network.e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" Feb 8 23:24:35.628717 env[1058]: 2024-02-08 23:24:35.611 [INFO][3831] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:24:35.628717 env[1058]: 2024-02-08 23:24:35.611 [INFO][3831] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:24:35.628717 env[1058]: 2024-02-08 23:24:35.620 [WARNING][3831] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" HandleID="k8s-pod-network.e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" Feb 8 23:24:35.628717 env[1058]: 2024-02-08 23:24:35.621 [INFO][3831] ipam_plugin.go 443: Releasing address using workloadID ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" HandleID="k8s-pod-network.e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" Feb 8 23:24:35.628717 env[1058]: 2024-02-08 23:24:35.624 [INFO][3831] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:24:35.628717 env[1058]: 2024-02-08 23:24:35.625 [INFO][3825] k8s.go 591: Teardown processing complete. ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Feb 8 23:24:35.630494 env[1058]: time="2024-02-08T23:24:35.629220033Z" level=info msg="TearDown network for sandbox \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\" successfully" Feb 8 23:24:35.630494 env[1058]: time="2024-02-08T23:24:35.629256361Z" level=info msg="StopPodSandbox for \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\" returns successfully" Feb 8 23:24:35.630494 env[1058]: time="2024-02-08T23:24:35.629728239Z" level=info msg="RemovePodSandbox for \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\"" Feb 8 23:24:35.630727 env[1058]: time="2024-02-08T23:24:35.630172716Z" level=info msg="Forcibly stopping sandbox \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\"" Feb 8 23:24:35.840204 env[1058]: 2024-02-08 23:24:35.702 [WARNING][3852] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"d88ab937-9c80-4cfc-a62c-efccde820661", ResourceVersion:"744", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 23, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-2-2-def1b47031.novalocal", ContainerID:"077f4acdf2a30d6966fb3fb7b00db349d0c1494ca09bb58ea454d4590f4c4b2b", Pod:"coredns-5d78c9869d-8tntm", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.16.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4c11fbd0d7f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:24:35.840204 env[1058]: 2024-02-08 23:24:35.702 [INFO][3852] k8s.go 578: Cleaning up netns ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Feb 8 23:24:35.840204 env[1058]: 2024-02-08 23:24:35.702 [INFO][3852] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" iface="eth0" netns="" Feb 8 23:24:35.840204 env[1058]: 2024-02-08 23:24:35.702 [INFO][3852] k8s.go 585: Releasing IP address(es) ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Feb 8 23:24:35.840204 env[1058]: 2024-02-08 23:24:35.702 [INFO][3852] utils.go 188: Calico CNI releasing IP address ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Feb 8 23:24:35.840204 env[1058]: 2024-02-08 23:24:35.727 [INFO][3858] ipam_plugin.go 415: Releasing address using handleID ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" HandleID="k8s-pod-network.e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" Feb 8 23:24:35.840204 env[1058]: 2024-02-08 23:24:35.728 [INFO][3858] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:24:35.840204 env[1058]: 2024-02-08 23:24:35.728 [INFO][3858] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:24:35.840204 env[1058]: 2024-02-08 23:24:35.823 [WARNING][3858] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" HandleID="k8s-pod-network.e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" Feb 8 23:24:35.840204 env[1058]: 2024-02-08 23:24:35.823 [INFO][3858] ipam_plugin.go 443: Releasing address using workloadID ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" HandleID="k8s-pod-network.e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-coredns--5d78c9869d--8tntm-eth0" Feb 8 23:24:35.840204 env[1058]: 2024-02-08 23:24:35.828 [INFO][3858] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:24:35.840204 env[1058]: 2024-02-08 23:24:35.834 [INFO][3852] k8s.go 591: Teardown processing complete. ContainerID="e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091" Feb 8 23:24:35.843234 env[1058]: time="2024-02-08T23:24:35.843173088Z" level=info msg="TearDown network for sandbox \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\" successfully" Feb 8 23:24:35.849999 env[1058]: time="2024-02-08T23:24:35.849930486Z" level=info msg="RemovePodSandbox \"e643eb6d14f3c3cc993371b2ccff0e65fe87b328b5affd1b0cbd818e87658091\" returns successfully" Feb 8 23:24:35.851201 env[1058]: time="2024-02-08T23:24:35.851154078Z" level=info msg="StopPodSandbox for \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\"" Feb 8 23:24:36.076296 env[1058]: 2024-02-08 23:24:36.005 [WARNING][3878] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"1ce0d9e2-3713-455f-ba71-30f83da4d2b4", ResourceVersion:"705", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 23, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-2-2-def1b47031.novalocal", ContainerID:"ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6", Pod:"csi-node-driver-7pr2w", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.16.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calibcf02a29a99", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:24:36.076296 env[1058]: 2024-02-08 23:24:36.005 [INFO][3878] k8s.go 578: Cleaning up netns ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Feb 8 23:24:36.076296 env[1058]: 2024-02-08 23:24:36.005 [INFO][3878] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" iface="eth0" netns="" Feb 8 23:24:36.076296 env[1058]: 2024-02-08 23:24:36.005 [INFO][3878] k8s.go 585: Releasing IP address(es) ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Feb 8 23:24:36.076296 env[1058]: 2024-02-08 23:24:36.005 [INFO][3878] utils.go 188: Calico CNI releasing IP address ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Feb 8 23:24:36.076296 env[1058]: 2024-02-08 23:24:36.059 [INFO][3884] ipam_plugin.go 415: Releasing address using handleID ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" HandleID="k8s-pod-network.ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" Feb 8 23:24:36.076296 env[1058]: 2024-02-08 23:24:36.060 [INFO][3884] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:24:36.076296 env[1058]: 2024-02-08 23:24:36.060 [INFO][3884] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:24:36.076296 env[1058]: 2024-02-08 23:24:36.069 [WARNING][3884] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" HandleID="k8s-pod-network.ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" Feb 8 23:24:36.076296 env[1058]: 2024-02-08 23:24:36.069 [INFO][3884] ipam_plugin.go 443: Releasing address using workloadID ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" HandleID="k8s-pod-network.ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" Feb 8 23:24:36.076296 env[1058]: 2024-02-08 23:24:36.072 [INFO][3884] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:24:36.076296 env[1058]: 2024-02-08 23:24:36.074 [INFO][3878] k8s.go 591: Teardown processing complete. ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Feb 8 23:24:36.077510 env[1058]: time="2024-02-08T23:24:36.076338950Z" level=info msg="TearDown network for sandbox \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\" successfully" Feb 8 23:24:36.077510 env[1058]: time="2024-02-08T23:24:36.076405495Z" level=info msg="StopPodSandbox for \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\" returns successfully" Feb 8 23:24:36.077510 env[1058]: time="2024-02-08T23:24:36.077145307Z" level=info msg="RemovePodSandbox for \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\"" Feb 8 23:24:36.077510 env[1058]: time="2024-02-08T23:24:36.077179051Z" level=info msg="Forcibly stopping sandbox \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\"" Feb 8 23:24:36.210903 systemd[1]: Started sshd@7-172.24.4.155:22-172.24.4.1:37574.service. Feb 8 23:24:36.210000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.155:22-172.24.4.1:37574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:36.212076 kernel: kauditd_printk_skb: 309 callbacks suppressed Feb 8 23:24:36.212148 kernel: audit: type=1130 audit(1707434676.210:1283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.155:22-172.24.4.1:37574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:36.260214 env[1058]: 2024-02-08 23:24:36.161 [WARNING][3908] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"1ce0d9e2-3713-455f-ba71-30f83da4d2b4", ResourceVersion:"705", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 23, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-2-2-def1b47031.novalocal", ContainerID:"ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6", Pod:"csi-node-driver-7pr2w", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.16.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calibcf02a29a99", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:24:36.260214 env[1058]: 2024-02-08 23:24:36.163 [INFO][3908] k8s.go 578: Cleaning up netns ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Feb 8 23:24:36.260214 env[1058]: 2024-02-08 23:24:36.164 [INFO][3908] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" iface="eth0" netns="" Feb 8 23:24:36.260214 env[1058]: 2024-02-08 23:24:36.164 [INFO][3908] k8s.go 585: Releasing IP address(es) ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Feb 8 23:24:36.260214 env[1058]: 2024-02-08 23:24:36.164 [INFO][3908] utils.go 188: Calico CNI releasing IP address ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Feb 8 23:24:36.260214 env[1058]: 2024-02-08 23:24:36.228 [INFO][3914] ipam_plugin.go 415: Releasing address using handleID ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" HandleID="k8s-pod-network.ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" Feb 8 23:24:36.260214 env[1058]: 2024-02-08 23:24:36.228 [INFO][3914] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:24:36.260214 env[1058]: 2024-02-08 23:24:36.228 [INFO][3914] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:24:36.260214 env[1058]: 2024-02-08 23:24:36.250 [WARNING][3914] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" HandleID="k8s-pod-network.ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" Feb 8 23:24:36.260214 env[1058]: 2024-02-08 23:24:36.251 [INFO][3914] ipam_plugin.go 443: Releasing address using workloadID ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" HandleID="k8s-pod-network.ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-csi--node--driver--7pr2w-eth0" Feb 8 23:24:36.260214 env[1058]: 2024-02-08 23:24:36.253 [INFO][3914] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:24:36.260214 env[1058]: 2024-02-08 23:24:36.254 [INFO][3908] k8s.go 591: Teardown processing complete. ContainerID="ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f" Feb 8 23:24:36.263221 env[1058]: time="2024-02-08T23:24:36.260236085Z" level=info msg="TearDown network for sandbox \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\" successfully" Feb 8 23:24:36.305034 env[1058]: time="2024-02-08T23:24:36.304975696Z" level=info msg="RemovePodSandbox \"ab57119854399b85db318d57e8f2537352bae795d5c51b1136598829465abd1f\" returns successfully" Feb 8 23:24:37.100790 env[1058]: time="2024-02-08T23:24:37.100683134Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:37.104946 env[1058]: time="2024-02-08T23:24:37.104830979Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4e87edec0297dadd6f3bb25b2f540fd40e2abed9fff582c97ff4cd751d3f9803,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:37.110346 env[1058]: time="2024-02-08T23:24:37.110291063Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:37.113976 env[1058]: time="2024-02-08T23:24:37.113941361Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:e264ab1fb2f1ae90dd1d84e226d11d2eb4350e74ac27de4c65f29f5aadba5bb1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:37.116036 env[1058]: time="2024-02-08T23:24:37.115998101Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\" returns image reference \"sha256:4e87edec0297dadd6f3bb25b2f540fd40e2abed9fff582c97ff4cd751d3f9803\"" Feb 8 23:24:37.120415 env[1058]: time="2024-02-08T23:24:37.120392490Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\"" Feb 8 23:24:37.141132 env[1058]: time="2024-02-08T23:24:37.141079866Z" level=info msg="CreateContainer within sandbox \"889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Feb 8 23:24:37.169440 env[1058]: time="2024-02-08T23:24:37.169375669Z" level=info msg="CreateContainer within sandbox \"889178891614467e7893c68d59ed72cb821018d6db8612fcefcad1cb0658e730\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"573c806466951e3f3fdeda24f260f60aca20a9679d80871095c881f60dd5c4e2\"" Feb 8 23:24:37.171786 env[1058]: time="2024-02-08T23:24:37.171724158Z" level=info msg="StartContainer for \"573c806466951e3f3fdeda24f260f60aca20a9679d80871095c881f60dd5c4e2\"" Feb 8 23:24:37.173393 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount287700289.mount: Deactivated successfully. Feb 8 23:24:37.205865 systemd[1]: Started cri-containerd-573c806466951e3f3fdeda24f260f60aca20a9679d80871095c881f60dd5c4e2.scope. Feb 8 23:24:37.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.234002 kernel: audit: type=1400 audit(1707434677.225:1284): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.234104 kernel: audit: type=1400 audit(1707434677.225:1285): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.242732 kernel: audit: type=1400 audit(1707434677.225:1286): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.243333 kernel: audit: type=1400 audit(1707434677.225:1287): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.243398 kernel: audit: type=1400 audit(1707434677.225:1288): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.254117 kernel: audit: type=1400 audit(1707434677.225:1289): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.254193 kernel: audit: type=1400 audit(1707434677.225:1290): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.257724 kernel: audit: type=1400 audit(1707434677.225:1291): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.257809 kernel: audit: type=1400 audit(1707434677.225:1292): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.225000 audit: BPF prog-id=173 op=LOAD Feb 8 23:24:37.226000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.226000 audit[3932]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3349 pid=3932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:37.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537336338303634363639353165336633666465646132346632363066 Feb 8 23:24:37.226000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.226000 audit[3932]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=3349 pid=3932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:37.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537336338303634363639353165336633666465646132346632363066 Feb 8 23:24:37.226000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.226000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.226000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.226000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.226000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.226000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.226000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.226000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.226000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.226000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.226000 audit: BPF prog-id=174 op=LOAD Feb 8 23:24:37.226000 audit[3932]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0000243a0 items=0 ppid=3349 pid=3932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:37.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537336338303634363639353165336633666465646132346632363066 Feb 8 23:24:37.230000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.230000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.230000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.230000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.230000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.230000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.230000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.230000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.230000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.230000 audit: BPF prog-id=175 op=LOAD Feb 8 23:24:37.230000 audit[3932]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0000243e8 items=0 ppid=3349 pid=3932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:37.230000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537336338303634363639353165336633666465646132346632363066 Feb 8 23:24:37.233000 audit: BPF prog-id=175 op=UNLOAD Feb 8 23:24:37.233000 audit: BPF prog-id=174 op=UNLOAD Feb 8 23:24:37.233000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.233000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.233000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.233000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.233000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.233000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.233000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.233000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.233000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.233000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:37.233000 audit: BPF prog-id=176 op=LOAD Feb 8 23:24:37.233000 audit[3932]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0000247f8 items=0 ppid=3349 pid=3932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:37.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537336338303634363639353165336633666465646132346632363066 Feb 8 23:24:37.286844 env[1058]: time="2024-02-08T23:24:37.286759634Z" level=info msg="StartContainer for \"573c806466951e3f3fdeda24f260f60aca20a9679d80871095c881f60dd5c4e2\" returns successfully" Feb 8 23:24:37.402536 sshd[3919]: Accepted publickey for core from 172.24.4.1 port 37574 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:24:37.401000 audit[3919]: USER_ACCT pid=3919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:37.403000 audit[3919]: CRED_ACQ pid=3919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:37.403000 audit[3919]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe66327260 a2=3 a3=0 items=0 ppid=1 pid=3919 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:37.403000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:24:37.407669 sshd[3919]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:24:37.418140 systemd-logind[1051]: New session 8 of user core. Feb 8 23:24:37.419731 systemd[1]: Started session-8.scope. Feb 8 23:24:37.428000 audit[3919]: USER_START pid=3919 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:37.429000 audit[3958]: CRED_ACQ pid=3958 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:38.228514 kubelet[1950]: I0208 23:24:38.228332 1950 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-7ddd6bc5b6-6sw6g" podStartSLOduration=35.469710582 podCreationTimestamp="2024-02-08 23:23:55 +0000 UTC" firstStartedPulling="2024-02-08 23:24:29.358095767 +0000 UTC m=+54.688806247" lastFinishedPulling="2024-02-08 23:24:37.116674644 +0000 UTC m=+62.447385174" observedRunningTime="2024-02-08 23:24:38.225656966 +0000 UTC m=+63.556367446" watchObservedRunningTime="2024-02-08 23:24:38.228289509 +0000 UTC m=+63.558999989" Feb 8 23:24:38.235314 systemd[1]: run-containerd-runc-k8s.io-573c806466951e3f3fdeda24f260f60aca20a9679d80871095c881f60dd5c4e2-runc.6TvbZY.mount: Deactivated successfully. Feb 8 23:24:38.602127 sshd[3919]: pam_unix(sshd:session): session closed for user core Feb 8 23:24:38.604000 audit[3919]: USER_END pid=3919 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:38.605000 audit[3919]: CRED_DISP pid=3919 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:38.609000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.155:22-172.24.4.1:37574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:38.609996 systemd[1]: sshd@7-172.24.4.155:22-172.24.4.1:37574.service: Deactivated successfully. Feb 8 23:24:38.610866 systemd-logind[1051]: Session 8 logged out. Waiting for processes to exit. Feb 8 23:24:38.615007 systemd[1]: session-8.scope: Deactivated successfully. Feb 8 23:24:38.617563 systemd-logind[1051]: Removed session 8. Feb 8 23:24:39.724624 env[1058]: time="2024-02-08T23:24:39.724551473Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:39.728010 env[1058]: time="2024-02-08T23:24:39.727981656Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d36ef67f7b24c4facd86d0bc06b0cd907431a822dee695eb06b86a905bff85d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:39.730912 env[1058]: time="2024-02-08T23:24:39.730884338Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:39.733380 env[1058]: time="2024-02-08T23:24:39.733355868Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:45a7aba6020a7cf7b866cb8a8d481b30c97e9b3407e1459aaa65a5b4cc06633a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:39.734258 env[1058]: time="2024-02-08T23:24:39.734234260Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\" returns image reference \"sha256:d36ef67f7b24c4facd86d0bc06b0cd907431a822dee695eb06b86a905bff85d4\"" Feb 8 23:24:39.737103 env[1058]: time="2024-02-08T23:24:39.737070857Z" level=info msg="CreateContainer within sandbox \"ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Feb 8 23:24:39.753182 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4048288464.mount: Deactivated successfully. Feb 8 23:24:39.760663 env[1058]: time="2024-02-08T23:24:39.760607739Z" level=info msg="CreateContainer within sandbox \"ae9d00b3270e516cc3c1c476fe137f6613b9b92fbda04c9cdb8e5a3ff63163b6\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"96c5652a4dc0256be4efb319aba25dc60673abcf2f2a8260cc9d0d69fcaf2f51\"" Feb 8 23:24:39.762091 env[1058]: time="2024-02-08T23:24:39.762038180Z" level=info msg="StartContainer for \"96c5652a4dc0256be4efb319aba25dc60673abcf2f2a8260cc9d0d69fcaf2f51\"" Feb 8 23:24:39.794543 systemd[1]: Started cri-containerd-96c5652a4dc0256be4efb319aba25dc60673abcf2f2a8260cc9d0d69fcaf2f51.scope. Feb 8 23:24:39.832000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.832000 audit[4003]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=3308 pid=4003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:39.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936633536353261346463303235366265346566623331396162613235 Feb 8 23:24:39.832000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.832000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.832000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.832000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.832000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.832000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.832000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.832000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.832000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.832000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.832000 audit: BPF prog-id=177 op=LOAD Feb 8 23:24:39.832000 audit[4003]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c0002fc130 items=0 ppid=3308 pid=4003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:39.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936633536353261346463303235366265346566623331396162613235 Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit: BPF prog-id=178 op=LOAD Feb 8 23:24:39.834000 audit[4003]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c0002fc178 items=0 ppid=3308 pid=4003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:39.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936633536353261346463303235366265346566623331396162613235 Feb 8 23:24:39.834000 audit: BPF prog-id=178 op=UNLOAD Feb 8 23:24:39.834000 audit: BPF prog-id=177 op=UNLOAD Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { perfmon } for pid=4003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit[4003]: AVC avc: denied { bpf } for pid=4003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:39.834000 audit: BPF prog-id=179 op=LOAD Feb 8 23:24:39.834000 audit[4003]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c0002fc208 items=0 ppid=3308 pid=4003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:39.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936633536353261346463303235366265346566623331396162613235 Feb 8 23:24:39.878184 env[1058]: time="2024-02-08T23:24:39.878124431Z" level=info msg="StartContainer for \"96c5652a4dc0256be4efb319aba25dc60673abcf2f2a8260cc9d0d69fcaf2f51\" returns successfully" Feb 8 23:24:40.059774 kubelet[1950]: I0208 23:24:40.059657 1950 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Feb 8 23:24:40.060837 kubelet[1950]: I0208 23:24:40.060823 1950 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Feb 8 23:24:40.211104 kubelet[1950]: I0208 23:24:40.211077 1950 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-7pr2w" podStartSLOduration=34.713749092 podCreationTimestamp="2024-02-08 23:23:55 +0000 UTC" firstStartedPulling="2024-02-08 23:24:29.237877206 +0000 UTC m=+54.568587686" lastFinishedPulling="2024-02-08 23:24:39.735162497 +0000 UTC m=+65.065872977" observedRunningTime="2024-02-08 23:24:40.210887408 +0000 UTC m=+65.541597918" watchObservedRunningTime="2024-02-08 23:24:40.211034383 +0000 UTC m=+65.541744873" Feb 8 23:24:43.611877 systemd[1]: Started sshd@8-172.24.4.155:22-172.24.4.1:37580.service. Feb 8 23:24:43.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.155:22-172.24.4.1:37580 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:43.615834 kernel: kauditd_printk_skb: 101 callbacks suppressed Feb 8 23:24:43.616077 kernel: audit: type=1130 audit(1707434683.611:1316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.155:22-172.24.4.1:37580 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:45.256000 audit[4038]: USER_ACCT pid=4038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:45.258943 sshd[4038]: Accepted publickey for core from 172.24.4.1 port 37580 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:24:45.267824 kernel: audit: type=1101 audit(1707434685.256:1317): pid=4038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:45.267999 kernel: audit: type=1103 audit(1707434685.266:1318): pid=4038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:45.266000 audit[4038]: CRED_ACQ pid=4038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:45.270863 sshd[4038]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:24:45.267000 audit[4038]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd439a6580 a2=3 a3=0 items=0 ppid=1 pid=4038 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:45.296921 kernel: audit: type=1006 audit(1707434685.267:1319): pid=4038 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Feb 8 23:24:45.297081 kernel: audit: type=1300 audit(1707434685.267:1319): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd439a6580 a2=3 a3=0 items=0 ppid=1 pid=4038 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:45.267000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:24:45.303839 kernel: audit: type=1327 audit(1707434685.267:1319): proctitle=737368643A20636F7265205B707269765D Feb 8 23:24:45.313589 systemd[1]: Started session-9.scope. Feb 8 23:24:45.314471 systemd-logind[1051]: New session 9 of user core. Feb 8 23:24:45.328000 audit[4038]: USER_START pid=4038 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:45.341866 kernel: audit: type=1105 audit(1707434685.328:1320): pid=4038 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:45.340000 audit[4060]: CRED_ACQ pid=4060 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:45.352830 kernel: audit: type=1103 audit(1707434685.340:1321): pid=4060 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:45.791000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:24:45.798799 kernel: audit: type=1400 audit(1707434685.791:1322): avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:24:45.799000 kernel: audit: type=1300 audit(1707434685.791:1322): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00015db40 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:24:45.791000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00015db40 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:24:45.791000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:24:45.797000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:24:45.797000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0017d8700 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:24:45.797000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:24:45.797000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:24:45.797000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0017d8720 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:24:45.797000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:24:45.797000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:24:45.797000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0017d8740 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:24:45.797000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:24:46.022676 sshd[4038]: pam_unix(sshd:session): session closed for user core Feb 8 23:24:46.023000 audit[4038]: USER_END pid=4038 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:46.024000 audit[4038]: CRED_DISP pid=4038 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:46.027590 systemd[1]: sshd@8-172.24.4.155:22-172.24.4.1:37580.service: Deactivated successfully. Feb 8 23:24:46.028690 systemd[1]: session-9.scope: Deactivated successfully. Feb 8 23:24:46.027000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.155:22-172.24.4.1:37580 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:46.029942 systemd-logind[1051]: Session 9 logged out. Waiting for processes to exit. Feb 8 23:24:46.031234 systemd-logind[1051]: Removed session 9. Feb 8 23:24:49.587622 systemd[1]: run-containerd-runc-k8s.io-9c607c9d55de53839528712ad727e10916c5c13205c35d1d974ad77f0a2999f1-runc.kwntkN.mount: Deactivated successfully. Feb 8 23:24:51.035833 systemd[1]: Started sshd@9-172.24.4.155:22-172.24.4.1:53108.service. Feb 8 23:24:51.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.155:22-172.24.4.1:53108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:51.039385 kernel: kauditd_printk_skb: 13 callbacks suppressed Feb 8 23:24:51.039528 kernel: audit: type=1130 audit(1707434691.035:1329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.155:22-172.24.4.1:53108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:52.376000 audit[4103]: USER_ACCT pid=4103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:52.378250 sshd[4103]: Accepted publickey for core from 172.24.4.1 port 53108 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:24:52.388818 kernel: audit: type=1101 audit(1707434692.376:1330): pid=4103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:52.389000 audit[4103]: CRED_ACQ pid=4103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:52.407607 kernel: audit: type=1103 audit(1707434692.389:1331): pid=4103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:52.407880 kernel: audit: type=1006 audit(1707434692.390:1332): pid=4103 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Feb 8 23:24:52.408020 kernel: audit: type=1300 audit(1707434692.390:1332): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcaf060d10 a2=3 a3=0 items=0 ppid=1 pid=4103 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:52.390000 audit[4103]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcaf060d10 a2=3 a3=0 items=0 ppid=1 pid=4103 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:52.419870 kernel: audit: type=1327 audit(1707434692.390:1332): proctitle=737368643A20636F7265205B707269765D Feb 8 23:24:52.390000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:24:52.425574 sshd[4103]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:24:52.469173 systemd-logind[1051]: New session 10 of user core. Feb 8 23:24:52.469869 systemd[1]: Started session-10.scope. Feb 8 23:24:52.482000 audit[4103]: USER_START pid=4103 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:52.495875 kernel: audit: type=1105 audit(1707434692.482:1333): pid=4103 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:52.497534 kernel: audit: type=1103 audit(1707434692.495:1334): pid=4105 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:52.495000 audit[4105]: CRED_ACQ pid=4105 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:53.189200 sshd[4103]: pam_unix(sshd:session): session closed for user core Feb 8 23:24:53.191000 audit[4103]: USER_END pid=4103 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:53.191000 audit[4103]: CRED_DISP pid=4103 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:53.207011 systemd[1]: sshd@9-172.24.4.155:22-172.24.4.1:53108.service: Deactivated successfully. Feb 8 23:24:53.210944 systemd[1]: session-10.scope: Deactivated successfully. Feb 8 23:24:53.214331 systemd-logind[1051]: Session 10 logged out. Waiting for processes to exit. Feb 8 23:24:53.215820 kernel: audit: type=1106 audit(1707434693.191:1335): pid=4103 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:53.216036 kernel: audit: type=1104 audit(1707434693.191:1336): pid=4103 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:53.205000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.155:22-172.24.4.1:53108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:53.218603 systemd-logind[1051]: Removed session 10. Feb 8 23:24:58.203390 systemd[1]: Started sshd@10-172.24.4.155:22-172.24.4.1:58732.service. Feb 8 23:24:58.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.155:22-172.24.4.1:58732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:58.216505 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 8 23:24:58.216617 kernel: audit: type=1130 audit(1707434698.204:1338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.155:22-172.24.4.1:58732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:59.422000 audit[4116]: USER_ACCT pid=4116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:59.436681 sshd[4116]: Accepted publickey for core from 172.24.4.1 port 58732 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:24:59.437545 kernel: audit: type=1101 audit(1707434699.422:1339): pid=4116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:59.436000 audit[4116]: CRED_ACQ pid=4116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:59.438152 sshd[4116]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:24:59.449010 kernel: audit: type=1103 audit(1707434699.436:1340): pid=4116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:59.449118 kernel: audit: type=1006 audit(1707434699.436:1341): pid=4116 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Feb 8 23:24:59.458733 kernel: audit: type=1300 audit(1707434699.436:1341): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1faba1b0 a2=3 a3=0 items=0 ppid=1 pid=4116 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:59.436000 audit[4116]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1faba1b0 a2=3 a3=0 items=0 ppid=1 pid=4116 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:59.436000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:24:59.463651 kernel: audit: type=1327 audit(1707434699.436:1341): proctitle=737368643A20636F7265205B707269765D Feb 8 23:24:59.466742 systemd-logind[1051]: New session 11 of user core. Feb 8 23:24:59.475000 audit[4116]: USER_START pid=4116 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:59.468321 systemd[1]: Started session-11.scope. Feb 8 23:24:59.477000 audit[4118]: CRED_ACQ pid=4118 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:59.502183 kernel: audit: type=1105 audit(1707434699.475:1342): pid=4116 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:24:59.502330 kernel: audit: type=1103 audit(1707434699.477:1343): pid=4118 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:00.154118 sshd[4116]: pam_unix(sshd:session): session closed for user core Feb 8 23:25:00.159000 audit[4116]: USER_END pid=4116 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:00.168122 systemd[1]: Started sshd@11-172.24.4.155:22-172.24.4.1:58738.service. Feb 8 23:25:00.168831 systemd[1]: sshd@10-172.24.4.155:22-172.24.4.1:58732.service: Deactivated successfully. Feb 8 23:25:00.169718 systemd[1]: session-11.scope: Deactivated successfully. Feb 8 23:25:00.173820 kernel: audit: type=1106 audit(1707434700.159:1344): pid=4116 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:00.182056 systemd-logind[1051]: Session 11 logged out. Waiting for processes to exit. Feb 8 23:25:00.159000 audit[4116]: CRED_DISP pid=4116 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:00.165000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.155:22-172.24.4.1:58738 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:00.191887 kernel: audit: type=1104 audit(1707434700.159:1345): pid=4116 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:00.165000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.155:22-172.24.4.1:58732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:00.191673 systemd-logind[1051]: Removed session 11. Feb 8 23:25:01.668000 audit[4129]: USER_ACCT pid=4129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:01.669824 sshd[4129]: Accepted publickey for core from 172.24.4.1 port 58738 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:25:01.670000 audit[4129]: CRED_ACQ pid=4129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:01.670000 audit[4129]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd0c5b79b0 a2=3 a3=0 items=0 ppid=1 pid=4129 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:01.670000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:01.672838 sshd[4129]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:25:01.682889 systemd-logind[1051]: New session 12 of user core. Feb 8 23:25:01.685543 systemd[1]: Started session-12.scope. Feb 8 23:25:01.703000 audit[4129]: USER_START pid=4129 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:01.707000 audit[4134]: CRED_ACQ pid=4134 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:04.090590 sshd[4129]: pam_unix(sshd:session): session closed for user core Feb 8 23:25:04.093000 audit[4129]: USER_END pid=4129 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:04.110339 kernel: kauditd_printk_skb: 9 callbacks suppressed Feb 8 23:25:04.110456 kernel: audit: type=1106 audit(1707434704.093:1353): pid=4129 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:04.094000 audit[4129]: CRED_DISP pid=4129 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:04.112780 systemd[1]: Started sshd@12-172.24.4.155:22-172.24.4.1:58742.service. Feb 8 23:25:04.121803 kernel: audit: type=1104 audit(1707434704.094:1354): pid=4129 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:04.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.155:22-172.24.4.1:58742 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:04.134800 kernel: audit: type=1130 audit(1707434704.112:1355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.155:22-172.24.4.1:58742 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:04.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.155:22-172.24.4.1:58738 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:04.206714 systemd[1]: sshd@11-172.24.4.155:22-172.24.4.1:58738.service: Deactivated successfully. Feb 8 23:25:04.208820 systemd[1]: session-12.scope: Deactivated successfully. Feb 8 23:25:04.210418 systemd-logind[1051]: Session 12 logged out. Waiting for processes to exit. Feb 8 23:25:04.217854 kernel: audit: type=1131 audit(1707434704.206:1356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.155:22-172.24.4.1:58738 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:04.219700 systemd-logind[1051]: Removed session 12. Feb 8 23:25:05.689000 audit[4141]: USER_ACCT pid=4141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:05.700805 sshd[4141]: Accepted publickey for core from 172.24.4.1 port 58742 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:25:05.701842 kernel: audit: type=1101 audit(1707434705.689:1357): pid=4141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:05.702685 kernel: audit: type=1103 audit(1707434705.700:1358): pid=4141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:05.700000 audit[4141]: CRED_ACQ pid=4141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:05.719115 kernel: audit: type=1006 audit(1707434705.700:1359): pid=4141 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Feb 8 23:25:05.719619 sshd[4141]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:25:05.720235 kernel: audit: type=1300 audit(1707434705.700:1359): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4455e680 a2=3 a3=0 items=0 ppid=1 pid=4141 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:05.700000 audit[4141]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4455e680 a2=3 a3=0 items=0 ppid=1 pid=4141 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:05.700000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:05.735371 kernel: audit: type=1327 audit(1707434705.700:1359): proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:05.747331 systemd-logind[1051]: New session 13 of user core. Feb 8 23:25:05.748836 systemd[1]: Started session-13.scope. Feb 8 23:25:05.761000 audit[4141]: USER_START pid=4141 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:05.770000 audit[4144]: CRED_ACQ pid=4144 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:05.771826 kernel: audit: type=1105 audit(1707434705.761:1360): pid=4141 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:06.763304 sshd[4141]: pam_unix(sshd:session): session closed for user core Feb 8 23:25:06.765000 audit[4141]: USER_END pid=4141 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:06.766000 audit[4141]: CRED_DISP pid=4141 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:06.770000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.155:22-172.24.4.1:58742 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:06.770191 systemd[1]: sshd@12-172.24.4.155:22-172.24.4.1:58742.service: Deactivated successfully. Feb 8 23:25:06.772206 systemd[1]: session-13.scope: Deactivated successfully. Feb 8 23:25:06.774058 systemd-logind[1051]: Session 13 logged out. Waiting for processes to exit. Feb 8 23:25:06.778820 systemd-logind[1051]: Removed session 13. Feb 8 23:25:11.771216 systemd[1]: Started sshd@13-172.24.4.155:22-172.24.4.1:35092.service. Feb 8 23:25:11.783880 kernel: kauditd_printk_skb: 4 callbacks suppressed Feb 8 23:25:11.784025 kernel: audit: type=1130 audit(1707434711.771:1365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.155:22-172.24.4.1:35092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:11.771000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.155:22-172.24.4.1:35092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:13.155898 sshd[4167]: Accepted publickey for core from 172.24.4.1 port 35092 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:25:13.154000 audit[4167]: USER_ACCT pid=4167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:13.167000 audit[4167]: CRED_ACQ pid=4167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:13.168802 sshd[4167]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:25:13.178679 kernel: audit: type=1101 audit(1707434713.154:1366): pid=4167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:13.178816 kernel: audit: type=1103 audit(1707434713.167:1367): pid=4167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:13.186909 kernel: audit: type=1006 audit(1707434713.167:1368): pid=4167 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Feb 8 23:25:13.167000 audit[4167]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebda85d50 a2=3 a3=0 items=0 ppid=1 pid=4167 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:13.204695 kernel: audit: type=1300 audit(1707434713.167:1368): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebda85d50 a2=3 a3=0 items=0 ppid=1 pid=4167 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:13.204893 kernel: audit: type=1327 audit(1707434713.167:1368): proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:13.167000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:13.207555 systemd-logind[1051]: New session 14 of user core. Feb 8 23:25:13.208457 systemd[1]: Started session-14.scope. Feb 8 23:25:13.221000 audit[4167]: USER_START pid=4167 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:13.234800 kernel: audit: type=1105 audit(1707434713.221:1369): pid=4167 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:13.235000 audit[4169]: CRED_ACQ pid=4169 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:13.242815 kernel: audit: type=1103 audit(1707434713.235:1370): pid=4169 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:13.970391 sshd[4167]: pam_unix(sshd:session): session closed for user core Feb 8 23:25:13.971000 audit[4167]: USER_END pid=4167 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:13.971000 audit[4167]: CRED_DISP pid=4167 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:13.985523 systemd[1]: sshd@13-172.24.4.155:22-172.24.4.1:35092.service: Deactivated successfully. Feb 8 23:25:13.987132 systemd[1]: session-14.scope: Deactivated successfully. Feb 8 23:25:13.990125 systemd-logind[1051]: Session 14 logged out. Waiting for processes to exit. Feb 8 23:25:13.992450 systemd-logind[1051]: Removed session 14. Feb 8 23:25:13.994644 kernel: audit: type=1106 audit(1707434713.971:1371): pid=4167 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:13.995034 kernel: audit: type=1104 audit(1707434713.971:1372): pid=4167 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:13.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.155:22-172.24.4.1:35092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:18.983053 systemd[1]: Started sshd@14-172.24.4.155:22-172.24.4.1:39232.service. Feb 8 23:25:18.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.155:22-172.24.4.1:39232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:18.989024 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 8 23:25:18.989134 kernel: audit: type=1130 audit(1707434718.982:1374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.155:22-172.24.4.1:39232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:20.078000 audit[4200]: USER_ACCT pid=4200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:20.080173 sshd[4200]: Accepted publickey for core from 172.24.4.1 port 39232 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:25:20.092000 audit[4200]: CRED_ACQ pid=4200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:20.094896 sshd[4200]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:25:20.106226 kernel: audit: type=1101 audit(1707434720.078:1375): pid=4200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:20.106349 kernel: audit: type=1103 audit(1707434720.092:1376): pid=4200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:20.107190 kernel: audit: type=1006 audit(1707434720.092:1377): pid=4200 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Feb 8 23:25:20.092000 audit[4200]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc34a14e20 a2=3 a3=0 items=0 ppid=1 pid=4200 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:20.126817 kernel: audit: type=1300 audit(1707434720.092:1377): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc34a14e20 a2=3 a3=0 items=0 ppid=1 pid=4200 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:20.092000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:20.131907 kernel: audit: type=1327 audit(1707434720.092:1377): proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:20.136578 systemd-logind[1051]: New session 15 of user core. Feb 8 23:25:20.136654 systemd[1]: Started session-15.scope. Feb 8 23:25:20.150000 audit[4200]: USER_START pid=4200 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:20.150000 audit[4225]: CRED_ACQ pid=4225 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:20.179261 kernel: audit: type=1105 audit(1707434720.150:1378): pid=4200 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:20.179389 kernel: audit: type=1103 audit(1707434720.150:1379): pid=4225 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:20.888829 sshd[4200]: pam_unix(sshd:session): session closed for user core Feb 8 23:25:20.890000 audit[4200]: USER_END pid=4200 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:20.904838 kernel: audit: type=1106 audit(1707434720.890:1380): pid=4200 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:20.905062 systemd[1]: sshd@14-172.24.4.155:22-172.24.4.1:39232.service: Deactivated successfully. Feb 8 23:25:20.890000 audit[4200]: CRED_DISP pid=4200 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:20.906653 systemd[1]: session-15.scope: Deactivated successfully. Feb 8 23:25:20.919810 kernel: audit: type=1104 audit(1707434720.890:1381): pid=4200 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:20.904000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.155:22-172.24.4.1:39232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:20.921103 systemd-logind[1051]: Session 15 logged out. Waiting for processes to exit. Feb 8 23:25:20.924047 systemd-logind[1051]: Removed session 15. Feb 8 23:25:25.902678 systemd[1]: Started sshd@15-172.24.4.155:22-172.24.4.1:58758.service. Feb 8 23:25:25.924995 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 8 23:25:25.925127 kernel: audit: type=1130 audit(1707434725.910:1383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.155:22-172.24.4.1:58758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:25.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.155:22-172.24.4.1:58758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:27.411000 audit[4238]: USER_ACCT pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:27.417241 sshd[4238]: Accepted publickey for core from 172.24.4.1 port 58758 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:25:27.418309 kernel: audit: type=1101 audit(1707434727.411:1384): pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:27.418889 sshd[4238]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:25:27.425126 kernel: audit: type=1103 audit(1707434727.417:1385): pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:27.417000 audit[4238]: CRED_ACQ pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:27.430420 systemd-logind[1051]: New session 16 of user core. Feb 8 23:25:27.431821 kernel: audit: type=1006 audit(1707434727.417:1386): pid=4238 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Feb 8 23:25:27.430922 systemd[1]: Started session-16.scope. Feb 8 23:25:27.439810 kernel: audit: type=1300 audit(1707434727.417:1386): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6ed2f120 a2=3 a3=0 items=0 ppid=1 pid=4238 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:27.417000 audit[4238]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6ed2f120 a2=3 a3=0 items=0 ppid=1 pid=4238 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:27.417000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:27.442765 kernel: audit: type=1327 audit(1707434727.417:1386): proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:27.441000 audit[4238]: USER_START pid=4238 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:27.448785 kernel: audit: type=1105 audit(1707434727.441:1387): pid=4238 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:27.447000 audit[4240]: CRED_ACQ pid=4240 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:27.455763 kernel: audit: type=1103 audit(1707434727.447:1388): pid=4240 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:28.102277 sshd[4238]: pam_unix(sshd:session): session closed for user core Feb 8 23:25:28.105000 audit[4238]: USER_END pid=4238 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:28.121838 kernel: audit: type=1106 audit(1707434728.105:1389): pid=4238 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:28.109262 systemd[1]: sshd@15-172.24.4.155:22-172.24.4.1:58758.service: Deactivated successfully. Feb 8 23:25:28.113380 systemd-logind[1051]: Session 16 logged out. Waiting for processes to exit. Feb 8 23:25:28.121733 systemd[1]: session-16.scope: Deactivated successfully. Feb 8 23:25:28.105000 audit[4238]: CRED_DISP pid=4238 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:28.132879 kernel: audit: type=1104 audit(1707434728.105:1390): pid=4238 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:28.124572 systemd-logind[1051]: Removed session 16. Feb 8 23:25:28.107000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.155:22-172.24.4.1:58758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:29.190000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524816 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:29.190000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:29.190000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0028a2860 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:25:29.190000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:25:29.190000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001edc390 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:25:29.190000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:25:31.269000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=524818 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:31.274117 kernel: kauditd_printk_skb: 7 callbacks suppressed Feb 8 23:25:31.274266 kernel: audit: type=1400 audit(1707434731.269:1394): avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=524818 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:31.269000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c007f6c2a0 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:25:31.320827 kernel: audit: type=1300 audit(1707434731.269:1394): arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c007f6c2a0 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:25:31.269000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:25:31.334826 kernel: audit: type=1327 audit(1707434731.269:1394): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:25:31.278000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=524812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:31.278000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c007f6c600 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:25:31.353362 kernel: audit: type=1400 audit(1707434731.278:1395): avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=524812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:31.353474 kernel: audit: type=1300 audit(1707434731.278:1395): arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c007f6c600 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:25:31.353517 kernel: audit: type=1327 audit(1707434731.278:1395): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:25:31.278000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:25:31.279000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:31.362300 kernel: audit: type=1400 audit(1707434731.279:1396): avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:31.362396 kernel: audit: type=1300 audit(1707434731.279:1396): arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c00c81e5a0 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:25:31.279000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c00c81e5a0 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:25:31.367908 kernel: audit: type=1327 audit(1707434731.279:1396): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:25:31.279000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:25:31.372974 kernel: audit: type=1400 audit(1707434731.284:1397): avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524816 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:31.284000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524816 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:31.284000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c007f6c630 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:25:31.284000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:25:31.312000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:31.312000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c00c81eca0 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:25:31.312000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:25:31.313000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524816 scontext=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:31.313000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c007aec270 a2=fc6 a3=0 items=0 ppid=1669 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c211,c377 key=(null) Feb 8 23:25:31.313000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313535002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 8 23:25:33.113020 systemd[1]: Started sshd@16-172.24.4.155:22-172.24.4.1:58766.service. Feb 8 23:25:33.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.155:22-172.24.4.1:58766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:34.397369 sshd[4251]: Accepted publickey for core from 172.24.4.1 port 58766 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:25:34.397869 sshd[4251]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:25:34.395000 audit[4251]: USER_ACCT pid=4251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:34.396000 audit[4251]: CRED_ACQ pid=4251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:34.396000 audit[4251]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd5d17ae0 a2=3 a3=0 items=0 ppid=1 pid=4251 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:34.396000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:34.402821 systemd-logind[1051]: New session 17 of user core. Feb 8 23:25:34.403948 systemd[1]: Started session-17.scope. Feb 8 23:25:34.409000 audit[4251]: USER_START pid=4251 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:34.410000 audit[4253]: CRED_ACQ pid=4253 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:35.017000 audit[4263]: NETFILTER_CFG table=filter:113 family=2 entries=9 op=nft_register_rule pid=4263 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:35.017000 audit[4263]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffcc3203450 a2=0 a3=7ffcc320343c items=0 ppid=2089 pid=4263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:35.017000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:35.018000 audit[4263]: NETFILTER_CFG table=nat:114 family=2 entries=20 op=nft_register_rule pid=4263 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:35.018000 audit[4263]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffcc3203450 a2=0 a3=7ffcc320343c items=0 ppid=2089 pid=4263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:35.018000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:35.054952 kubelet[1950]: I0208 23:25:35.054903 1950 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:25:35.066487 systemd[1]: Created slice kubepods-besteffort-pod6aa57d4f_91e1_44b3_a89d_27bb28a81232.slice. Feb 8 23:25:35.092000 audit[4265]: NETFILTER_CFG table=filter:115 family=2 entries=10 op=nft_register_rule pid=4265 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:35.092000 audit[4265]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffda15dfb40 a2=0 a3=7ffda15dfb2c items=0 ppid=2089 pid=4265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:35.092000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:35.094000 audit[4265]: NETFILTER_CFG table=nat:116 family=2 entries=20 op=nft_register_rule pid=4265 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:35.094000 audit[4265]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffda15dfb40 a2=0 a3=7ffda15dfb2c items=0 ppid=2089 pid=4265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:35.094000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:35.129556 sshd[4251]: pam_unix(sshd:session): session closed for user core Feb 8 23:25:35.130000 audit[4251]: USER_END pid=4251 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:35.130000 audit[4251]: CRED_DISP pid=4251 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:35.136000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.155:22-172.24.4.1:58766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:35.135182 systemd[1]: sshd@16-172.24.4.155:22-172.24.4.1:58766.service: Deactivated successfully. Feb 8 23:25:35.137987 systemd[1]: session-17.scope: Deactivated successfully. Feb 8 23:25:35.139781 systemd-logind[1051]: Session 17 logged out. Waiting for processes to exit. Feb 8 23:25:35.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.24.4.155:22-172.24.4.1:53188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:35.141721 systemd[1]: Started sshd@17-172.24.4.155:22-172.24.4.1:53188.service. Feb 8 23:25:35.149162 systemd-logind[1051]: Removed session 17. Feb 8 23:25:35.176041 kubelet[1950]: I0208 23:25:35.175990 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ngwzd\" (UniqueName: \"kubernetes.io/projected/6aa57d4f-91e1-44b3-a89d-27bb28a81232-kube-api-access-ngwzd\") pod \"calico-apiserver-7645496d95-d7bbz\" (UID: \"6aa57d4f-91e1-44b3-a89d-27bb28a81232\") " pod="calico-apiserver/calico-apiserver-7645496d95-d7bbz" Feb 8 23:25:35.176244 kubelet[1950]: I0208 23:25:35.176066 1950 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6aa57d4f-91e1-44b3-a89d-27bb28a81232-calico-apiserver-certs\") pod \"calico-apiserver-7645496d95-d7bbz\" (UID: \"6aa57d4f-91e1-44b3-a89d-27bb28a81232\") " pod="calico-apiserver/calico-apiserver-7645496d95-d7bbz" Feb 8 23:25:35.373398 env[1058]: time="2024-02-08T23:25:35.373220389Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7645496d95-d7bbz,Uid:6aa57d4f-91e1-44b3-a89d-27bb28a81232,Namespace:calico-apiserver,Attempt:0,}" Feb 8 23:25:35.879336 systemd-networkd[972]: calia3601bfe0e0: Link UP Feb 8 23:25:35.884682 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 8 23:25:35.884803 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia3601bfe0e0: link becomes ready Feb 8 23:25:35.884934 systemd-networkd[972]: calia3601bfe0e0: Gained carrier Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.764 [INFO][4271] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--apiserver--7645496d95--d7bbz-eth0 calico-apiserver-7645496d95- calico-apiserver 6aa57d4f-91e1-44b3-a89d-27bb28a81232 1074 0 2024-02-08 23:25:35 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7645496d95 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510-3-2-2-def1b47031.novalocal calico-apiserver-7645496d95-d7bbz eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calia3601bfe0e0 [] []}} ContainerID="06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" Namespace="calico-apiserver" Pod="calico-apiserver-7645496d95-d7bbz" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--apiserver--7645496d95--d7bbz-" Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.765 [INFO][4271] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" Namespace="calico-apiserver" Pod="calico-apiserver-7645496d95-d7bbz" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--apiserver--7645496d95--d7bbz-eth0" Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.819 [INFO][4285] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" HandleID="k8s-pod-network.06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--apiserver--7645496d95--d7bbz-eth0" Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.832 [INFO][4285] ipam_plugin.go 268: Auto assigning IP ContainerID="06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" HandleID="k8s-pod-network.06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--apiserver--7645496d95--d7bbz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000050360), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510-3-2-2-def1b47031.novalocal", "pod":"calico-apiserver-7645496d95-d7bbz", "timestamp":"2024-02-08 23:25:35.819532445 +0000 UTC"}, Hostname:"ci-3510-3-2-2-def1b47031.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.833 [INFO][4285] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.833 [INFO][4285] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.833 [INFO][4285] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-2-2-def1b47031.novalocal' Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.836 [INFO][4285] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.845 [INFO][4285] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.850 [INFO][4285] ipam.go 489: Trying affinity for 192.168.16.192/26 host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.854 [INFO][4285] ipam.go 155: Attempting to load block cidr=192.168.16.192/26 host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.858 [INFO][4285] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.16.192/26 host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.858 [INFO][4285] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.16.192/26 handle="k8s-pod-network.06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.859 [INFO][4285] ipam.go 1682: Creating new handle: k8s-pod-network.06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130 Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.865 [INFO][4285] ipam.go 1203: Writing block in order to claim IPs block=192.168.16.192/26 handle="k8s-pod-network.06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.872 [INFO][4285] ipam.go 1216: Successfully claimed IPs: [192.168.16.197/26] block=192.168.16.192/26 handle="k8s-pod-network.06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.872 [INFO][4285] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.16.197/26] handle="k8s-pod-network.06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" host="ci-3510-3-2-2-def1b47031.novalocal" Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.873 [INFO][4285] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:25:35.905853 env[1058]: 2024-02-08 23:25:35.873 [INFO][4285] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.16.197/26] IPv6=[] ContainerID="06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" HandleID="k8s-pod-network.06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" Workload="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--apiserver--7645496d95--d7bbz-eth0" Feb 8 23:25:35.906843 env[1058]: 2024-02-08 23:25:35.875 [INFO][4271] k8s.go 385: Populated endpoint ContainerID="06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" Namespace="calico-apiserver" Pod="calico-apiserver-7645496d95-d7bbz" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--apiserver--7645496d95--d7bbz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--apiserver--7645496d95--d7bbz-eth0", GenerateName:"calico-apiserver-7645496d95-", Namespace:"calico-apiserver", SelfLink:"", UID:"6aa57d4f-91e1-44b3-a89d-27bb28a81232", ResourceVersion:"1074", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 25, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7645496d95", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-2-2-def1b47031.novalocal", ContainerID:"", Pod:"calico-apiserver-7645496d95-d7bbz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.16.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia3601bfe0e0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:25:35.906843 env[1058]: 2024-02-08 23:25:35.875 [INFO][4271] k8s.go 386: Calico CNI using IPs: [192.168.16.197/32] ContainerID="06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" Namespace="calico-apiserver" Pod="calico-apiserver-7645496d95-d7bbz" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--apiserver--7645496d95--d7bbz-eth0" Feb 8 23:25:35.906843 env[1058]: 2024-02-08 23:25:35.875 [INFO][4271] dataplane_linux.go 68: Setting the host side veth name to calia3601bfe0e0 ContainerID="06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" Namespace="calico-apiserver" Pod="calico-apiserver-7645496d95-d7bbz" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--apiserver--7645496d95--d7bbz-eth0" Feb 8 23:25:35.906843 env[1058]: 2024-02-08 23:25:35.880 [INFO][4271] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" Namespace="calico-apiserver" Pod="calico-apiserver-7645496d95-d7bbz" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--apiserver--7645496d95--d7bbz-eth0" Feb 8 23:25:35.906843 env[1058]: 2024-02-08 23:25:35.883 [INFO][4271] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" Namespace="calico-apiserver" Pod="calico-apiserver-7645496d95-d7bbz" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--apiserver--7645496d95--d7bbz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--apiserver--7645496d95--d7bbz-eth0", GenerateName:"calico-apiserver-7645496d95-", Namespace:"calico-apiserver", SelfLink:"", UID:"6aa57d4f-91e1-44b3-a89d-27bb28a81232", ResourceVersion:"1074", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 25, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7645496d95", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-2-2-def1b47031.novalocal", ContainerID:"06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130", Pod:"calico-apiserver-7645496d95-d7bbz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.16.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia3601bfe0e0", MAC:"16:0f:c9:0d:62:6b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:25:35.906843 env[1058]: 2024-02-08 23:25:35.903 [INFO][4271] k8s.go 491: Wrote updated endpoint to datastore ContainerID="06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130" Namespace="calico-apiserver" Pod="calico-apiserver-7645496d95-d7bbz" WorkloadEndpoint="ci--3510--3--2--2--def1b47031.novalocal-k8s-calico--apiserver--7645496d95--d7bbz-eth0" Feb 8 23:25:35.952995 env[1058]: time="2024-02-08T23:25:35.952882670Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:25:35.953180 env[1058]: time="2024-02-08T23:25:35.952964184Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:25:35.953180 env[1058]: time="2024-02-08T23:25:35.953013457Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:25:35.953418 env[1058]: time="2024-02-08T23:25:35.953364526Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130 pid=4318 runtime=io.containerd.runc.v2 Feb 8 23:25:35.959000 audit[4313]: NETFILTER_CFG table=filter:117 family=2 entries=51 op=nft_register_chain pid=4313 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:25:35.959000 audit[4313]: SYSCALL arch=c000003e syscall=46 success=yes exit=26884 a0=3 a1=7ffcd80de5a0 a2=0 a3=7ffcd80de58c items=0 ppid=3008 pid=4313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:35.959000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:25:35.974888 systemd[1]: Started cri-containerd-06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130.scope. Feb 8 23:25:36.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.004000 audit: BPF prog-id=180 op=LOAD Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4318 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036636164373536323934373832313335373365636238353237383137 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4318 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036636164373536323934373832313335373365636238353237383137 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit: BPF prog-id=181 op=LOAD Feb 8 23:25:36.005000 audit[4327]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002204f0 items=0 ppid=4318 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036636164373536323934373832313335373365636238353237383137 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.005000 audit: BPF prog-id=182 op=LOAD Feb 8 23:25:36.005000 audit[4327]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000220538 items=0 ppid=4318 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036636164373536323934373832313335373365636238353237383137 Feb 8 23:25:36.006000 audit: BPF prog-id=182 op=UNLOAD Feb 8 23:25:36.006000 audit: BPF prog-id=181 op=UNLOAD Feb 8 23:25:36.006000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.006000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.006000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.006000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.006000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.006000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.006000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.006000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.006000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.006000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.006000 audit: BPF prog-id=183 op=LOAD Feb 8 23:25:36.006000 audit[4327]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000220948 items=0 ppid=4318 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036636164373536323934373832313335373365636238353237383137 Feb 8 23:25:36.058271 env[1058]: time="2024-02-08T23:25:36.058179443Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7645496d95-d7bbz,Uid:6aa57d4f-91e1-44b3-a89d-27bb28a81232,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130\"" Feb 8 23:25:36.060108 env[1058]: time="2024-02-08T23:25:36.060027363Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\"" Feb 8 23:25:36.473222 systemd[1]: run-containerd-runc-k8s.io-573c806466951e3f3fdeda24f260f60aca20a9679d80871095c881f60dd5c4e2-runc.fk5pBY.mount: Deactivated successfully. Feb 8 23:25:37.353000 audit[4268]: USER_ACCT pid=4268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:37.356531 sshd[4268]: Accepted publickey for core from 172.24.4.1 port 53188 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:25:37.359701 kernel: kauditd_printk_skb: 92 callbacks suppressed Feb 8 23:25:37.359844 kernel: audit: type=1101 audit(1707434737.353:1433): pid=4268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:37.362000 audit[4268]: CRED_ACQ pid=4268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:37.369708 kernel: audit: type=1103 audit(1707434737.362:1434): pid=4268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:37.363000 audit[4268]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd9743850 a2=3 a3=0 items=0 ppid=1 pid=4268 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:37.379865 kernel: audit: type=1006 audit(1707434737.363:1435): pid=4268 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Feb 8 23:25:37.380290 kernel: audit: type=1300 audit(1707434737.363:1435): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd9743850 a2=3 a3=0 items=0 ppid=1 pid=4268 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:37.380424 kernel: audit: type=1327 audit(1707434737.363:1435): proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:37.363000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:37.381112 sshd[4268]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:25:37.389225 systemd[1]: Started session-18.scope. Feb 8 23:25:37.390070 systemd-logind[1051]: New session 18 of user core. Feb 8 23:25:37.402000 audit[4268]: USER_START pid=4268 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:37.410119 kernel: audit: type=1105 audit(1707434737.402:1436): pid=4268 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:37.411617 kernel: audit: type=1103 audit(1707434737.410:1437): pid=4371 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:37.410000 audit[4371]: CRED_ACQ pid=4371 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:37.733042 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4184337735.mount: Deactivated successfully. Feb 8 23:25:37.867956 systemd-networkd[972]: calia3601bfe0e0: Gained IPv6LL Feb 8 23:25:38.915698 sshd[4268]: pam_unix(sshd:session): session closed for user core Feb 8 23:25:38.923000 audit[4268]: USER_END pid=4268 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:38.936799 kernel: audit: type=1106 audit(1707434738.923:1438): pid=4268 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:38.936887 systemd[1]: Started sshd@18-172.24.4.155:22-172.24.4.1:53194.service. Feb 8 23:25:38.940404 systemd[1]: sshd@17-172.24.4.155:22-172.24.4.1:53188.service: Deactivated successfully. Feb 8 23:25:38.950458 kernel: audit: type=1104 audit(1707434738.923:1439): pid=4268 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:38.923000 audit[4268]: CRED_DISP pid=4268 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:38.946853 systemd[1]: session-18.scope: Deactivated successfully. Feb 8 23:25:38.951740 systemd-logind[1051]: Session 18 logged out. Waiting for processes to exit. Feb 8 23:25:38.955327 systemd-logind[1051]: Removed session 18. Feb 8 23:25:38.936000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.155:22-172.24.4.1:53194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:38.941000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.24.4.155:22-172.24.4.1:53188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:38.960833 kernel: audit: type=1130 audit(1707434738.936:1440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.155:22-172.24.4.1:53194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:40.181000 audit[4378]: USER_ACCT pid=4378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:40.183008 sshd[4378]: Accepted publickey for core from 172.24.4.1 port 53194 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:25:40.186000 audit[4378]: CRED_ACQ pid=4378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:40.187000 audit[4378]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8a3cbe20 a2=3 a3=0 items=0 ppid=1 pid=4378 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:40.187000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:40.190660 sshd[4378]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:25:40.206006 systemd-logind[1051]: New session 19 of user core. Feb 8 23:25:40.207097 systemd[1]: Started session-19.scope. Feb 8 23:25:40.221000 audit[4378]: USER_START pid=4378 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:40.227000 audit[4382]: CRED_ACQ pid=4382 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:41.648936 env[1058]: time="2024-02-08T23:25:41.648834293Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:41.654001 env[1058]: time="2024-02-08T23:25:41.653951171Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:848c5b919e8d33dbad8c8c64aa6aec07c29cfe6e4f6312ceafc1641ea929f91a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:41.664945 env[1058]: time="2024-02-08T23:25:41.664897066Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:41.672693 env[1058]: time="2024-02-08T23:25:41.672634876Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:5ff0bdc8d0b2e9d7819703b18867f60f9153ed01da81e2bbfa22002abec9dc26,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:41.674540 env[1058]: time="2024-02-08T23:25:41.674501221Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\" returns image reference \"sha256:848c5b919e8d33dbad8c8c64aa6aec07c29cfe6e4f6312ceafc1641ea929f91a\"" Feb 8 23:25:41.678054 env[1058]: time="2024-02-08T23:25:41.678019427Z" level=info msg="CreateContainer within sandbox \"06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Feb 8 23:25:41.699973 env[1058]: time="2024-02-08T23:25:41.699901028Z" level=info msg="CreateContainer within sandbox \"06cad75629478213573ecb8527817cb1d4a07295af7cb17c6d152d11669e5130\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"e5feafb78a84ded4ef4ce997e5d2f8c2f49fe9c4fe4458a3b3948a591a715ed0\"" Feb 8 23:25:41.700860 env[1058]: time="2024-02-08T23:25:41.700835703Z" level=info msg="StartContainer for \"e5feafb78a84ded4ef4ce997e5d2f8c2f49fe9c4fe4458a3b3948a591a715ed0\"" Feb 8 23:25:41.735773 systemd[1]: run-containerd-runc-k8s.io-e5feafb78a84ded4ef4ce997e5d2f8c2f49fe9c4fe4458a3b3948a591a715ed0-runc.A07ugQ.mount: Deactivated successfully. Feb 8 23:25:41.744120 systemd[1]: Started cri-containerd-e5feafb78a84ded4ef4ce997e5d2f8c2f49fe9c4fe4458a3b3948a591a715ed0.scope. Feb 8 23:25:41.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.832000 audit: BPF prog-id=184 op=LOAD Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=4318 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:41.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535666561666237386138346465643465663463653939376535643266 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=4318 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:41.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535666561666237386138346465643465663463653939376535643266 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit: BPF prog-id=185 op=LOAD Feb 8 23:25:41.834000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000344270 items=0 ppid=4318 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:41.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535666561666237386138346465643465663463653939376535643266 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit: BPF prog-id=186 op=LOAD Feb 8 23:25:41.834000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003442b8 items=0 ppid=4318 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:41.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535666561666237386138346465643465663463653939376535643266 Feb 8 23:25:41.834000 audit: BPF prog-id=186 op=UNLOAD Feb 8 23:25:41.834000 audit: BPF prog-id=185 op=UNLOAD Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:41.834000 audit: BPF prog-id=187 op=LOAD Feb 8 23:25:41.834000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003446c8 items=0 ppid=4318 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:41.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535666561666237386138346465643465663463653939376535643266 Feb 8 23:25:41.897609 env[1058]: time="2024-02-08T23:25:41.897554810Z" level=info msg="StartContainer for \"e5feafb78a84ded4ef4ce997e5d2f8c2f49fe9c4fe4458a3b3948a591a715ed0\" returns successfully" Feb 8 23:25:42.442656 kubelet[1950]: I0208 23:25:42.442616 1950 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7645496d95-d7bbz" podStartSLOduration=1.819908809 podCreationTimestamp="2024-02-08 23:25:35 +0000 UTC" firstStartedPulling="2024-02-08 23:25:36.059647439 +0000 UTC m=+121.390357919" lastFinishedPulling="2024-02-08 23:25:41.674941497 +0000 UTC m=+127.005651978" observedRunningTime="2024-02-08 23:25:42.43372386 +0000 UTC m=+127.764434350" watchObservedRunningTime="2024-02-08 23:25:42.435202868 +0000 UTC m=+127.765913348" Feb 8 23:25:42.577000 audit[4436]: NETFILTER_CFG table=filter:118 family=2 entries=10 op=nft_register_rule pid=4436 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:42.583275 kernel: kauditd_printk_skb: 65 callbacks suppressed Feb 8 23:25:42.583340 kernel: audit: type=1325 audit(1707434742.577:1465): table=filter:118 family=2 entries=10 op=nft_register_rule pid=4436 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:42.577000 audit[4436]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffceb00bf90 a2=0 a3=7ffceb00bf7c items=0 ppid=2089 pid=4436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:42.594792 kernel: audit: type=1300 audit(1707434742.577:1465): arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffceb00bf90 a2=0 a3=7ffceb00bf7c items=0 ppid=2089 pid=4436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:42.594924 kernel: audit: type=1327 audit(1707434742.577:1465): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:42.577000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:42.596000 audit[4436]: NETFILTER_CFG table=nat:119 family=2 entries=20 op=nft_register_rule pid=4436 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:42.602785 kernel: audit: type=1325 audit(1707434742.596:1466): table=nat:119 family=2 entries=20 op=nft_register_rule pid=4436 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:42.596000 audit[4436]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffceb00bf90 a2=0 a3=7ffceb00bf7c items=0 ppid=2089 pid=4436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:42.610779 kernel: audit: type=1300 audit(1707434742.596:1466): arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffceb00bf90 a2=0 a3=7ffceb00bf7c items=0 ppid=2089 pid=4436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:42.596000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:42.614769 kernel: audit: type=1327 audit(1707434742.596:1466): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:42.714000 audit[4438]: NETFILTER_CFG table=filter:120 family=2 entries=22 op=nft_register_rule pid=4438 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:42.714000 audit[4438]: SYSCALL arch=c000003e syscall=46 success=yes exit=11996 a0=3 a1=7ffee80af200 a2=0 a3=7ffee80af1ec items=0 ppid=2089 pid=4438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:42.724838 kernel: audit: type=1325 audit(1707434742.714:1467): table=filter:120 family=2 entries=22 op=nft_register_rule pid=4438 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:42.724992 kernel: audit: type=1300 audit(1707434742.714:1467): arch=c000003e syscall=46 success=yes exit=11996 a0=3 a1=7ffee80af200 a2=0 a3=7ffee80af1ec items=0 ppid=2089 pid=4438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:42.714000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:42.733505 kernel: audit: type=1327 audit(1707434742.714:1467): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:42.734594 kernel: audit: type=1325 audit(1707434742.719:1468): table=nat:121 family=2 entries=20 op=nft_register_rule pid=4438 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:42.719000 audit[4438]: NETFILTER_CFG table=nat:121 family=2 entries=20 op=nft_register_rule pid=4438 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:42.719000 audit[4438]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffee80af200 a2=0 a3=4f4e203b7374726f items=0 ppid=2089 pid=4438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:42.719000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:42.931989 sshd[4378]: pam_unix(sshd:session): session closed for user core Feb 8 23:25:42.933816 systemd[1]: Started sshd@19-172.24.4.155:22-172.24.4.1:53198.service. Feb 8 23:25:42.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.24.4.155:22-172.24.4.1:53198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:42.937000 audit[4378]: USER_END pid=4378 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:42.938000 audit[4378]: CRED_DISP pid=4378 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:42.957251 systemd-logind[1051]: Session 19 logged out. Waiting for processes to exit. Feb 8 23:25:42.958730 systemd[1]: sshd@18-172.24.4.155:22-172.24.4.1:53194.service: Deactivated successfully. Feb 8 23:25:42.960392 systemd[1]: session-19.scope: Deactivated successfully. Feb 8 23:25:42.958000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.155:22-172.24.4.1:53194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:42.963805 systemd-logind[1051]: Removed session 19. Feb 8 23:25:43.120000 audit[4415]: AVC avc: denied { watch } for pid=4415 comm="apiserver" path="/calico-apiserver-certs/..2024_02_08_23_25_35.1746387964/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c997 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c339,c997 tclass=file permissive=0 Feb 8 23:25:43.120000 audit[4415]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ba2500 a2=fc6 a3=0 items=0 ppid=4318 pid=4415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c997 key=(null) Feb 8 23:25:43.120000 audit: PROCTITLE proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C Feb 8 23:25:43.766000 audit[4445]: NETFILTER_CFG table=filter:122 family=2 entries=34 op=nft_register_rule pid=4445 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:43.766000 audit[4445]: SYSCALL arch=c000003e syscall=46 success=yes exit=11996 a0=3 a1=7ffcedc00350 a2=0 a3=7ffcedc0033c items=0 ppid=2089 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:43.766000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:43.770000 audit[4445]: NETFILTER_CFG table=nat:123 family=2 entries=20 op=nft_register_rule pid=4445 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:43.770000 audit[4445]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffcedc00350 a2=0 a3=4f4e203b7374726f items=0 ppid=2089 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:43.770000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:44.164000 audit[4441]: USER_ACCT pid=4441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:44.167807 sshd[4441]: Accepted publickey for core from 172.24.4.1 port 53198 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:25:44.168000 audit[4441]: CRED_ACQ pid=4441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:44.168000 audit[4441]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6ce980b0 a2=3 a3=0 items=0 ppid=1 pid=4441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:44.168000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:44.170181 sshd[4441]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:25:44.183272 systemd-logind[1051]: New session 20 of user core. Feb 8 23:25:44.183445 systemd[1]: Started session-20.scope. Feb 8 23:25:44.196000 audit[4441]: USER_START pid=4441 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:44.199000 audit[4446]: CRED_ACQ pid=4446 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:45.800000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:45.800000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001847a00 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:25:45.800000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:25:45.800000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:45.800000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001847a20 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:25:45.800000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:25:45.806000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:45.806000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0015b3c20 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:25:45.806000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:25:45.818000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:45.818000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001847a40 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:25:45.818000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:25:46.563282 sshd[4441]: pam_unix(sshd:session): session closed for user core Feb 8 23:25:46.567000 audit[4441]: USER_END pid=4441 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:46.568000 audit[4441]: CRED_DISP pid=4441 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:46.574198 systemd[1]: Started sshd@20-172.24.4.155:22-172.24.4.1:48686.service. Feb 8 23:25:46.574000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.155:22-172.24.4.1:48686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:46.577838 systemd[1]: sshd@19-172.24.4.155:22-172.24.4.1:53198.service: Deactivated successfully. Feb 8 23:25:46.577000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.24.4.155:22-172.24.4.1:53198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:46.580175 systemd[1]: session-20.scope: Deactivated successfully. Feb 8 23:25:46.582331 systemd-logind[1051]: Session 20 logged out. Waiting for processes to exit. Feb 8 23:25:46.584723 systemd-logind[1051]: Removed session 20. Feb 8 23:25:47.980122 kernel: kauditd_printk_skb: 38 callbacks suppressed Feb 8 23:25:47.980372 kernel: audit: type=1101 audit(1707434747.975:1489): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:47.975000 audit[4476]: USER_ACCT pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:47.988722 sshd[4476]: Accepted publickey for core from 172.24.4.1 port 48686 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:25:47.978000 audit[4476]: CRED_ACQ pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:47.991732 sshd[4476]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:25:48.001155 kernel: audit: type=1103 audit(1707434747.978:1490): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:48.008171 kernel: audit: type=1006 audit(1707434747.978:1491): pid=4476 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Feb 8 23:25:48.008336 kernel: audit: type=1300 audit(1707434747.978:1491): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde525c3b0 a2=3 a3=0 items=0 ppid=1 pid=4476 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:47.978000 audit[4476]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde525c3b0 a2=3 a3=0 items=0 ppid=1 pid=4476 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:47.978000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:48.023573 kernel: audit: type=1327 audit(1707434747.978:1491): proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:48.030196 systemd-logind[1051]: New session 21 of user core. Feb 8 23:25:48.031911 systemd[1]: Started session-21.scope. Feb 8 23:25:48.045000 audit[4476]: USER_START pid=4476 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:48.058881 kernel: audit: type=1105 audit(1707434748.045:1492): pid=4476 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:48.059008 kernel: audit: type=1103 audit(1707434748.048:1493): pid=4485 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:48.048000 audit[4485]: CRED_ACQ pid=4485 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:48.844473 sshd[4476]: pam_unix(sshd:session): session closed for user core Feb 8 23:25:48.845000 audit[4476]: USER_END pid=4476 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:48.850906 systemd-logind[1051]: Session 21 logged out. Waiting for processes to exit. Feb 8 23:25:48.852517 systemd[1]: sshd@20-172.24.4.155:22-172.24.4.1:48686.service: Deactivated successfully. Feb 8 23:25:48.854247 systemd[1]: session-21.scope: Deactivated successfully. Feb 8 23:25:48.857521 systemd-logind[1051]: Removed session 21. Feb 8 23:25:48.846000 audit[4476]: CRED_DISP pid=4476 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:48.869940 kernel: audit: type=1106 audit(1707434748.845:1494): pid=4476 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:48.870184 kernel: audit: type=1104 audit(1707434748.846:1495): pid=4476 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:48.870258 kernel: audit: type=1131 audit(1707434748.852:1496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.155:22-172.24.4.1:48686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:48.852000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.155:22-172.24.4.1:48686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:49.590308 systemd[1]: run-containerd-runc-k8s.io-9c607c9d55de53839528712ad727e10916c5c13205c35d1d974ad77f0a2999f1-runc.b4832a.mount: Deactivated successfully. Feb 8 23:25:51.830000 audit[4518]: NETFILTER_CFG table=filter:124 family=2 entries=22 op=nft_register_rule pid=4518 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:51.830000 audit[4518]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffdf525dd90 a2=0 a3=7ffdf525dd7c items=0 ppid=2089 pid=4518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:51.830000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:51.838000 audit[4518]: NETFILTER_CFG table=nat:125 family=2 entries=104 op=nft_register_chain pid=4518 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:51.838000 audit[4518]: SYSCALL arch=c000003e syscall=46 success=yes exit=47436 a0=3 a1=7ffdf525dd90 a2=0 a3=7ffdf525dd7c items=0 ppid=2089 pid=4518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:51.838000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:53.860058 systemd[1]: Started sshd@21-172.24.4.155:22-172.24.4.1:48688.service. Feb 8 23:25:53.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.24.4.155:22-172.24.4.1:48688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:53.864786 kernel: kauditd_printk_skb: 6 callbacks suppressed Feb 8 23:25:53.864920 kernel: audit: type=1130 audit(1707434753.860:1499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.24.4.155:22-172.24.4.1:48688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:55.204000 audit[4522]: USER_ACCT pid=4522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:55.215361 sshd[4522]: Accepted publickey for core from 172.24.4.1 port 48688 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:25:55.221845 kernel: audit: type=1101 audit(1707434755.204:1500): pid=4522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:55.221000 audit[4522]: CRED_ACQ pid=4522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:55.236374 sshd[4522]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:25:55.244826 kernel: audit: type=1103 audit(1707434755.221:1501): pid=4522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:55.245012 kernel: audit: type=1006 audit(1707434755.221:1502): pid=4522 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Feb 8 23:25:55.221000 audit[4522]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdab548c90 a2=3 a3=0 items=0 ppid=1 pid=4522 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:55.258713 systemd[1]: Started session-22.scope. Feb 8 23:25:55.261249 systemd-logind[1051]: New session 22 of user core. Feb 8 23:25:55.261841 kernel: audit: type=1300 audit(1707434755.221:1502): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdab548c90 a2=3 a3=0 items=0 ppid=1 pid=4522 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:55.221000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:55.267959 kernel: audit: type=1327 audit(1707434755.221:1502): proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:55.274000 audit[4522]: USER_START pid=4522 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:55.285490 kernel: audit: type=1105 audit(1707434755.274:1503): pid=4522 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:55.285638 kernel: audit: type=1103 audit(1707434755.281:1504): pid=4524 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:55.281000 audit[4524]: CRED_ACQ pid=4524 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:56.107206 sshd[4522]: pam_unix(sshd:session): session closed for user core Feb 8 23:25:56.108000 audit[4522]: USER_END pid=4522 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:56.131847 kernel: audit: type=1106 audit(1707434756.108:1505): pid=4522 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:56.132880 systemd[1]: sshd@21-172.24.4.155:22-172.24.4.1:48688.service: Deactivated successfully. Feb 8 23:25:56.134743 systemd[1]: session-22.scope: Deactivated successfully. Feb 8 23:25:56.108000 audit[4522]: CRED_DISP pid=4522 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:56.147027 systemd-logind[1051]: Session 22 logged out. Waiting for processes to exit. Feb 8 23:25:56.147824 kernel: audit: type=1104 audit(1707434756.108:1506): pid=4522 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:25:56.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.24.4.155:22-172.24.4.1:48688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:56.150249 systemd-logind[1051]: Removed session 22. Feb 8 23:26:01.119586 systemd[1]: Started sshd@22-172.24.4.155:22-172.24.4.1:33722.service. Feb 8 23:26:01.126485 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 8 23:26:01.126674 kernel: audit: type=1130 audit(1707434761.120:1508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.155:22-172.24.4.1:33722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:01.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.155:22-172.24.4.1:33722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:02.664000 audit[4547]: USER_ACCT pid=4547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:02.666486 sshd[4547]: Accepted publickey for core from 172.24.4.1 port 33722 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:26:02.676865 kernel: audit: type=1101 audit(1707434762.664:1509): pid=4547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:02.688192 kernel: audit: type=1103 audit(1707434762.676:1510): pid=4547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:02.676000 audit[4547]: CRED_ACQ pid=4547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:02.678138 sshd[4547]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:02.697034 kernel: audit: type=1006 audit(1707434762.676:1511): pid=4547 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Feb 8 23:26:02.676000 audit[4547]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbd4bc6e0 a2=3 a3=0 items=0 ppid=1 pid=4547 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:02.703898 systemd[1]: Started session-23.scope. Feb 8 23:26:02.710105 kernel: audit: type=1300 audit(1707434762.676:1511): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbd4bc6e0 a2=3 a3=0 items=0 ppid=1 pid=4547 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:02.706593 systemd-logind[1051]: New session 23 of user core. Feb 8 23:26:02.676000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:02.715817 kernel: audit: type=1327 audit(1707434762.676:1511): proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:02.721000 audit[4547]: USER_START pid=4547 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:02.734871 kernel: audit: type=1105 audit(1707434762.721:1512): pid=4547 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:02.734000 audit[4549]: CRED_ACQ pid=4549 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:02.746856 kernel: audit: type=1103 audit(1707434762.734:1513): pid=4549 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:03.573256 sshd[4547]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:03.574000 audit[4547]: USER_END pid=4547 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:03.592833 kernel: audit: type=1106 audit(1707434763.574:1514): pid=4547 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:03.592977 kernel: audit: type=1104 audit(1707434763.576:1515): pid=4547 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:03.576000 audit[4547]: CRED_DISP pid=4547 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:03.591089 systemd[1]: sshd@22-172.24.4.155:22-172.24.4.1:33722.service: Deactivated successfully. Feb 8 23:26:03.592681 systemd[1]: session-23.scope: Deactivated successfully. Feb 8 23:26:03.604302 systemd-logind[1051]: Session 23 logged out. Waiting for processes to exit. Feb 8 23:26:03.590000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.155:22-172.24.4.1:33722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:03.608364 systemd-logind[1051]: Removed session 23. Feb 8 23:26:05.533000 audit[4579]: NETFILTER_CFG table=filter:126 family=2 entries=9 op=nft_register_rule pid=4579 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:05.533000 audit[4579]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffe9706c990 a2=0 a3=7ffe9706c97c items=0 ppid=2089 pid=4579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:05.533000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:05.535000 audit[4579]: NETFILTER_CFG table=nat:127 family=2 entries=51 op=nft_register_chain pid=4579 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:05.535000 audit[4579]: SYSCALL arch=c000003e syscall=46 success=yes exit=17716 a0=3 a1=7ffe9706c990 a2=0 a3=7ffe9706c97c items=0 ppid=2089 pid=4579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:05.535000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:05.588000 audit[4581]: NETFILTER_CFG table=filter:128 family=2 entries=8 op=nft_register_rule pid=4581 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:05.588000 audit[4581]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffc7a089140 a2=0 a3=7ffc7a08912c items=0 ppid=2089 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:05.588000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:05.590000 audit[4581]: NETFILTER_CFG table=nat:129 family=2 entries=58 op=nft_register_chain pid=4581 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:05.590000 audit[4581]: SYSCALL arch=c000003e syscall=46 success=yes exit=19604 a0=3 a1=7ffc7a089140 a2=0 a3=7ffc7a08912c items=0 ppid=2089 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:05.590000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:08.586444 systemd[1]: Started sshd@23-172.24.4.155:22-172.24.4.1:40212.service. Feb 8 23:26:08.586000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.24.4.155:22-172.24.4.1:40212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:08.590233 kernel: kauditd_printk_skb: 13 callbacks suppressed Feb 8 23:26:08.590403 kernel: audit: type=1130 audit(1707434768.586:1521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.24.4.155:22-172.24.4.1:40212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:10.063223 sshd[4584]: Accepted publickey for core from 172.24.4.1 port 40212 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:26:10.062000 audit[4584]: USER_ACCT pid=4584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:10.079633 kernel: audit: type=1101 audit(1707434770.062:1522): pid=4584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:10.078584 sshd[4584]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:10.064000 audit[4584]: CRED_ACQ pid=4584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:10.095822 kernel: audit: type=1103 audit(1707434770.064:1523): pid=4584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:10.104937 kernel: audit: type=1006 audit(1707434770.064:1524): pid=4584 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Feb 8 23:26:10.064000 audit[4584]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1c1003f0 a2=3 a3=0 items=0 ppid=1 pid=4584 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:10.117805 kernel: audit: type=1300 audit(1707434770.064:1524): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1c1003f0 a2=3 a3=0 items=0 ppid=1 pid=4584 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:10.118256 systemd-logind[1051]: New session 24 of user core. Feb 8 23:26:10.119833 systemd[1]: Started session-24.scope. Feb 8 23:26:10.064000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:10.126799 kernel: audit: type=1327 audit(1707434770.064:1524): proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:10.135000 audit[4584]: USER_START pid=4584 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:10.143098 kernel: audit: type=1105 audit(1707434770.135:1525): pid=4584 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:10.142000 audit[4586]: CRED_ACQ pid=4586 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:10.147770 kernel: audit: type=1103 audit(1707434770.142:1526): pid=4586 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:10.998283 sshd[4584]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:11.000000 audit[4584]: USER_END pid=4584 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:11.016889 kernel: audit: type=1106 audit(1707434771.000:1527): pid=4584 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:11.016991 systemd[1]: sshd@23-172.24.4.155:22-172.24.4.1:40212.service: Deactivated successfully. Feb 8 23:26:11.018601 systemd[1]: session-24.scope: Deactivated successfully. Feb 8 23:26:11.000000 audit[4584]: CRED_DISP pid=4584 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:11.021285 systemd-logind[1051]: Session 24 logged out. Waiting for processes to exit. Feb 8 23:26:11.023711 systemd-logind[1051]: Removed session 24. Feb 8 23:26:11.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.24.4.155:22-172.24.4.1:40212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:11.031854 kernel: audit: type=1104 audit(1707434771.000:1528): pid=4584 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:16.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.24.4.155:22-172.24.4.1:60534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:16.002518 systemd[1]: Started sshd@24-172.24.4.155:22-172.24.4.1:60534.service. Feb 8 23:26:16.005284 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 8 23:26:16.005345 kernel: audit: type=1130 audit(1707434776.001:1530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.24.4.155:22-172.24.4.1:60534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:17.195000 audit[4617]: USER_ACCT pid=4617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:17.198105 sshd[4617]: Accepted publickey for core from 172.24.4.1 port 60534 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:26:17.201846 kernel: audit: type=1101 audit(1707434777.195:1531): pid=4617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:17.200000 audit[4617]: CRED_ACQ pid=4617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:17.206865 kernel: audit: type=1103 audit(1707434777.200:1532): pid=4617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:17.206956 sshd[4617]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:17.210826 kernel: audit: type=1006 audit(1707434777.200:1533): pid=4617 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Feb 8 23:26:17.200000 audit[4617]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd3eef7b60 a2=3 a3=0 items=0 ppid=1 pid=4617 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:17.218110 kernel: audit: type=1300 audit(1707434777.200:1533): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd3eef7b60 a2=3 a3=0 items=0 ppid=1 pid=4617 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:17.200000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:17.224794 kernel: audit: type=1327 audit(1707434777.200:1533): proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:17.231600 systemd-logind[1051]: New session 25 of user core. Feb 8 23:26:17.232859 systemd[1]: Started session-25.scope. Feb 8 23:26:17.243000 audit[4617]: USER_START pid=4617 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:17.255939 kernel: audit: type=1105 audit(1707434777.243:1534): pid=4617 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:17.255000 audit[4619]: CRED_ACQ pid=4619 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:17.264791 kernel: audit: type=1103 audit(1707434777.255:1535): pid=4619 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:18.063940 sshd[4617]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:18.067000 audit[4617]: USER_END pid=4617 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:18.073366 systemd-logind[1051]: Session 25 logged out. Waiting for processes to exit. Feb 8 23:26:18.075642 systemd[1]: sshd@24-172.24.4.155:22-172.24.4.1:60534.service: Deactivated successfully. Feb 8 23:26:18.077390 systemd[1]: session-25.scope: Deactivated successfully. Feb 8 23:26:18.067000 audit[4617]: CRED_DISP pid=4617 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:18.084217 systemd-logind[1051]: Removed session 25. Feb 8 23:26:18.094086 kernel: audit: type=1106 audit(1707434778.067:1536): pid=4617 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:18.094272 kernel: audit: type=1104 audit(1707434778.067:1537): pid=4617 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:18.075000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.24.4.155:22-172.24.4.1:60534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:23.076493 systemd[1]: Started sshd@25-172.24.4.155:22-172.24.4.1:60540.service. Feb 8 23:26:23.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.24.4.155:22-172.24.4.1:60540 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:23.081028 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 8 23:26:23.081155 kernel: audit: type=1130 audit(1707434783.076:1539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.24.4.155:22-172.24.4.1:60540 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:24.445000 audit[4652]: USER_ACCT pid=4652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:24.448632 sshd[4652]: Accepted publickey for core from 172.24.4.1 port 60540 ssh2: RSA SHA256:hSCdy28aHh0WFAXHFi8tWlQhiCOOiQrn91fhtzGNenI Feb 8 23:26:24.457807 kernel: audit: type=1101 audit(1707434784.445:1540): pid=4652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:24.456000 audit[4652]: CRED_ACQ pid=4652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:24.475016 kernel: audit: type=1103 audit(1707434784.456:1541): pid=4652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:24.475199 kernel: audit: type=1006 audit(1707434784.457:1542): pid=4652 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Feb 8 23:26:24.475266 kernel: audit: type=1300 audit(1707434784.457:1542): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8d4226d0 a2=3 a3=0 items=0 ppid=1 pid=4652 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:24.457000 audit[4652]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8d4226d0 a2=3 a3=0 items=0 ppid=1 pid=4652 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:24.457000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:24.487027 sshd[4652]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:24.489415 kernel: audit: type=1327 audit(1707434784.457:1542): proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:24.499664 systemd-logind[1051]: New session 26 of user core. Feb 8 23:26:24.501098 systemd[1]: Started session-26.scope. Feb 8 23:26:24.512000 audit[4652]: USER_START pid=4652 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:24.512000 audit[4654]: CRED_ACQ pid=4654 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:24.534510 kernel: audit: type=1105 audit(1707434784.512:1543): pid=4652 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:24.534637 kernel: audit: type=1103 audit(1707434784.512:1544): pid=4654 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:25.333125 sshd[4652]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:25.333000 audit[4652]: USER_END pid=4652 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:25.347932 kernel: audit: type=1106 audit(1707434785.333:1545): pid=4652 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:25.348469 systemd[1]: sshd@25-172.24.4.155:22-172.24.4.1:60540.service: Deactivated successfully. Feb 8 23:26:25.350367 systemd[1]: session-26.scope: Deactivated successfully. Feb 8 23:26:25.333000 audit[4652]: CRED_DISP pid=4652 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:25.361861 kernel: audit: type=1104 audit(1707434785.333:1546): pid=4652 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Feb 8 23:26:25.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.24.4.155:22-172.24.4.1:60540 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:25.362168 systemd-logind[1051]: Session 26 logged out. Waiting for processes to exit. Feb 8 23:26:25.364483 systemd-logind[1051]: Removed session 26. Feb 8 23:26:29.191000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:29.194724 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 8 23:26:29.194811 kernel: audit: type=1400 audit(1707434789.191:1548): avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:29.192000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524816 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:29.216985 kernel: audit: type=1400 audit(1707434789.192:1549): avc: denied { watch } for pid=1808 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524816 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:29.217170 kernel: audit: type=1300 audit(1707434789.192:1549): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001fdb200 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:26:29.192000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001fdb200 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:26:29.192000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:26:29.248324 kernel: audit: type=1327 audit(1707434789.192:1549): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:26:29.248724 kernel: audit: type=1300 audit(1707434789.191:1548): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0028a2f80 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:26:29.191000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0028a2f80 a2=fc6 a3=0 items=0 ppid=1684 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c642 key=(null) Feb 8 23:26:29.191000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:26:29.273807 kernel: audit: type=1327 audit(1707434789.191:1548): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269