Feb 8 23:24:36.792515 kernel: Linux version 5.15.148-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Thu Feb 8 21:14:17 -00 2024 Feb 8 23:24:36.792533 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=ae7db544026ede4699ee2036449b75950d3fb7929b25a6731d0ad396f1aa37c9 Feb 8 23:24:36.792541 kernel: BIOS-provided physical RAM map: Feb 8 23:24:36.792547 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Feb 8 23:24:36.792552 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Feb 8 23:24:36.792558 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Feb 8 23:24:36.792564 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdcfff] usable Feb 8 23:24:36.792570 kernel: BIOS-e820: [mem 0x000000009cfdd000-0x000000009cffffff] reserved Feb 8 23:24:36.792577 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Feb 8 23:24:36.792582 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Feb 8 23:24:36.792588 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Feb 8 23:24:36.792593 kernel: NX (Execute Disable) protection: active Feb 8 23:24:36.792599 kernel: SMBIOS 2.8 present. Feb 8 23:24:36.792605 kernel: DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Feb 8 23:24:36.792613 kernel: Hypervisor detected: KVM Feb 8 23:24:36.792619 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Feb 8 23:24:36.792625 kernel: kvm-clock: cpu 0, msr 27faa001, primary cpu clock Feb 8 23:24:36.792631 kernel: kvm-clock: using sched offset of 2115484884 cycles Feb 8 23:24:36.792638 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Feb 8 23:24:36.792644 kernel: tsc: Detected 2794.750 MHz processor Feb 8 23:24:36.792650 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Feb 8 23:24:36.792657 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Feb 8 23:24:36.792663 kernel: last_pfn = 0x9cfdd max_arch_pfn = 0x400000000 Feb 8 23:24:36.792670 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Feb 8 23:24:36.792677 kernel: Using GB pages for direct mapping Feb 8 23:24:36.792683 kernel: ACPI: Early table checksum verification disabled Feb 8 23:24:36.792689 kernel: ACPI: RSDP 0x00000000000F59C0 000014 (v00 BOCHS ) Feb 8 23:24:36.792695 kernel: ACPI: RSDT 0x000000009CFE1BDD 000034 (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 8 23:24:36.792701 kernel: ACPI: FACP 0x000000009CFE1A79 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 8 23:24:36.792708 kernel: ACPI: DSDT 0x000000009CFE0040 001A39 (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 8 23:24:36.792714 kernel: ACPI: FACS 0x000000009CFE0000 000040 Feb 8 23:24:36.792720 kernel: ACPI: APIC 0x000000009CFE1AED 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 8 23:24:36.792727 kernel: ACPI: HPET 0x000000009CFE1B7D 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 8 23:24:36.792733 kernel: ACPI: WAET 0x000000009CFE1BB5 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 8 23:24:36.792739 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe1a79-0x9cfe1aec] Feb 8 23:24:36.792745 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe1a78] Feb 8 23:24:36.792751 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Feb 8 23:24:36.792757 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe1aed-0x9cfe1b7c] Feb 8 23:24:36.792763 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe1b7d-0x9cfe1bb4] Feb 8 23:24:36.792770 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe1bb5-0x9cfe1bdc] Feb 8 23:24:36.792779 kernel: No NUMA configuration found Feb 8 23:24:36.792786 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdcfff] Feb 8 23:24:36.792793 kernel: NODE_DATA(0) allocated [mem 0x9cfd7000-0x9cfdcfff] Feb 8 23:24:36.792800 kernel: Zone ranges: Feb 8 23:24:36.792806 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Feb 8 23:24:36.792813 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdcfff] Feb 8 23:24:36.792820 kernel: Normal empty Feb 8 23:24:36.792827 kernel: Movable zone start for each node Feb 8 23:24:36.792833 kernel: Early memory node ranges Feb 8 23:24:36.792840 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Feb 8 23:24:36.792847 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdcfff] Feb 8 23:24:36.792853 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdcfff] Feb 8 23:24:36.792860 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Feb 8 23:24:36.792866 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Feb 8 23:24:36.792873 kernel: On node 0, zone DMA32: 12323 pages in unavailable ranges Feb 8 23:24:36.792881 kernel: ACPI: PM-Timer IO Port: 0x608 Feb 8 23:24:36.792887 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Feb 8 23:24:36.792894 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Feb 8 23:24:36.792901 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Feb 8 23:24:36.792907 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Feb 8 23:24:36.792914 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Feb 8 23:24:36.792920 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Feb 8 23:24:36.792927 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Feb 8 23:24:36.792934 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Feb 8 23:24:36.792941 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Feb 8 23:24:36.792948 kernel: TSC deadline timer available Feb 8 23:24:36.792955 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Feb 8 23:24:36.792961 kernel: kvm-guest: KVM setup pv remote TLB flush Feb 8 23:24:36.792968 kernel: kvm-guest: setup PV sched yield Feb 8 23:24:36.792974 kernel: [mem 0x9d000000-0xfeffbfff] available for PCI devices Feb 8 23:24:36.792981 kernel: Booting paravirtualized kernel on KVM Feb 8 23:24:36.792987 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Feb 8 23:24:36.792994 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Feb 8 23:24:36.793002 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u524288 Feb 8 23:24:36.793009 kernel: pcpu-alloc: s185624 r8192 d31464 u524288 alloc=1*2097152 Feb 8 23:24:36.793015 kernel: pcpu-alloc: [0] 0 1 2 3 Feb 8 23:24:36.793021 kernel: kvm-guest: setup async PF for cpu 0 Feb 8 23:24:36.793028 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Feb 8 23:24:36.793048 kernel: kvm-guest: PV spinlocks enabled Feb 8 23:24:36.793054 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Feb 8 23:24:36.793061 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632733 Feb 8 23:24:36.793068 kernel: Policy zone: DMA32 Feb 8 23:24:36.793075 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=ae7db544026ede4699ee2036449b75950d3fb7929b25a6731d0ad396f1aa37c9 Feb 8 23:24:36.793084 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Feb 8 23:24:36.793090 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Feb 8 23:24:36.793097 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Feb 8 23:24:36.793104 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Feb 8 23:24:36.793116 kernel: Memory: 2438768K/2571756K available (12294K kernel code, 2275K rwdata, 13700K rodata, 45496K init, 4048K bss, 132728K reserved, 0K cma-reserved) Feb 8 23:24:36.793124 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Feb 8 23:24:36.793131 kernel: ftrace: allocating 34475 entries in 135 pages Feb 8 23:24:36.793137 kernel: ftrace: allocated 135 pages with 4 groups Feb 8 23:24:36.793145 kernel: rcu: Hierarchical RCU implementation. Feb 8 23:24:36.793152 kernel: rcu: RCU event tracing is enabled. Feb 8 23:24:36.793159 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Feb 8 23:24:36.793166 kernel: Rude variant of Tasks RCU enabled. Feb 8 23:24:36.793172 kernel: Tracing variant of Tasks RCU enabled. Feb 8 23:24:36.793179 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Feb 8 23:24:36.793186 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Feb 8 23:24:36.793192 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Feb 8 23:24:36.793199 kernel: random: crng init done Feb 8 23:24:36.793206 kernel: Console: colour VGA+ 80x25 Feb 8 23:24:36.793213 kernel: printk: console [ttyS0] enabled Feb 8 23:24:36.793219 kernel: ACPI: Core revision 20210730 Feb 8 23:24:36.793226 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Feb 8 23:24:36.793233 kernel: APIC: Switch to symmetric I/O mode setup Feb 8 23:24:36.793240 kernel: x2apic enabled Feb 8 23:24:36.793246 kernel: Switched APIC routing to physical x2apic. Feb 8 23:24:36.793253 kernel: kvm-guest: setup PV IPIs Feb 8 23:24:36.793259 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Feb 8 23:24:36.793267 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Feb 8 23:24:36.793273 kernel: Calibrating delay loop (skipped) preset value.. 5589.50 BogoMIPS (lpj=2794750) Feb 8 23:24:36.793280 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Feb 8 23:24:36.793287 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Feb 8 23:24:36.793293 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Feb 8 23:24:36.793300 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Feb 8 23:24:36.793307 kernel: Spectre V2 : Mitigation: Retpolines Feb 8 23:24:36.793314 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Feb 8 23:24:36.793320 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Feb 8 23:24:36.793333 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Feb 8 23:24:36.793340 kernel: RETBleed: Mitigation: untrained return thunk Feb 8 23:24:36.793355 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Feb 8 23:24:36.793376 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Feb 8 23:24:36.793389 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Feb 8 23:24:36.793407 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Feb 8 23:24:36.793418 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Feb 8 23:24:36.793427 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Feb 8 23:24:36.793435 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Feb 8 23:24:36.793443 kernel: Freeing SMP alternatives memory: 32K Feb 8 23:24:36.793451 kernel: pid_max: default: 32768 minimum: 301 Feb 8 23:24:36.793458 kernel: LSM: Security Framework initializing Feb 8 23:24:36.793465 kernel: SELinux: Initializing. Feb 8 23:24:36.793472 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Feb 8 23:24:36.793479 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Feb 8 23:24:36.793486 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Feb 8 23:24:36.793494 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Feb 8 23:24:36.793501 kernel: ... version: 0 Feb 8 23:24:36.793508 kernel: ... bit width: 48 Feb 8 23:24:36.793515 kernel: ... generic registers: 6 Feb 8 23:24:36.793522 kernel: ... value mask: 0000ffffffffffff Feb 8 23:24:36.793529 kernel: ... max period: 00007fffffffffff Feb 8 23:24:36.793536 kernel: ... fixed-purpose events: 0 Feb 8 23:24:36.793543 kernel: ... event mask: 000000000000003f Feb 8 23:24:36.793550 kernel: signal: max sigframe size: 1776 Feb 8 23:24:36.793564 kernel: rcu: Hierarchical SRCU implementation. Feb 8 23:24:36.793571 kernel: smp: Bringing up secondary CPUs ... Feb 8 23:24:36.793585 kernel: x86: Booting SMP configuration: Feb 8 23:24:36.793592 kernel: .... node #0, CPUs: #1 Feb 8 23:24:36.793599 kernel: kvm-clock: cpu 1, msr 27faa041, secondary cpu clock Feb 8 23:24:36.793606 kernel: kvm-guest: setup async PF for cpu 1 Feb 8 23:24:36.793613 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Feb 8 23:24:36.793620 kernel: #2 Feb 8 23:24:36.793627 kernel: kvm-clock: cpu 2, msr 27faa081, secondary cpu clock Feb 8 23:24:36.793634 kernel: kvm-guest: setup async PF for cpu 2 Feb 8 23:24:36.793642 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Feb 8 23:24:36.793649 kernel: #3 Feb 8 23:24:36.793656 kernel: kvm-clock: cpu 3, msr 27faa0c1, secondary cpu clock Feb 8 23:24:36.793663 kernel: kvm-guest: setup async PF for cpu 3 Feb 8 23:24:36.793670 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Feb 8 23:24:36.793677 kernel: smp: Brought up 1 node, 4 CPUs Feb 8 23:24:36.793684 kernel: smpboot: Max logical packages: 1 Feb 8 23:24:36.793691 kernel: smpboot: Total of 4 processors activated (22358.00 BogoMIPS) Feb 8 23:24:36.793698 kernel: devtmpfs: initialized Feb 8 23:24:36.793706 kernel: x86/mm: Memory block size: 128MB Feb 8 23:24:36.793713 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Feb 8 23:24:36.793720 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Feb 8 23:24:36.793727 kernel: pinctrl core: initialized pinctrl subsystem Feb 8 23:24:36.793734 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Feb 8 23:24:36.793741 kernel: audit: initializing netlink subsys (disabled) Feb 8 23:24:36.793748 kernel: audit: type=2000 audit(1707434677.112:1): state=initialized audit_enabled=0 res=1 Feb 8 23:24:36.793755 kernel: thermal_sys: Registered thermal governor 'step_wise' Feb 8 23:24:36.793762 kernel: thermal_sys: Registered thermal governor 'user_space' Feb 8 23:24:36.793770 kernel: cpuidle: using governor menu Feb 8 23:24:36.793777 kernel: ACPI: bus type PCI registered Feb 8 23:24:36.793784 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Feb 8 23:24:36.793791 kernel: dca service started, version 1.12.1 Feb 8 23:24:36.793798 kernel: PCI: Using configuration type 1 for base access Feb 8 23:24:36.793805 kernel: PCI: Using configuration type 1 for extended access Feb 8 23:24:36.793812 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Feb 8 23:24:36.793819 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Feb 8 23:24:36.793826 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Feb 8 23:24:36.793834 kernel: ACPI: Added _OSI(Module Device) Feb 8 23:24:36.793841 kernel: ACPI: Added _OSI(Processor Device) Feb 8 23:24:36.793848 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Feb 8 23:24:36.793855 kernel: ACPI: Added _OSI(Processor Aggregator Device) Feb 8 23:24:36.793862 kernel: ACPI: Added _OSI(Linux-Dell-Video) Feb 8 23:24:36.793869 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Feb 8 23:24:36.793876 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Feb 8 23:24:36.793883 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Feb 8 23:24:36.793890 kernel: ACPI: Interpreter enabled Feb 8 23:24:36.793898 kernel: ACPI: PM: (supports S0 S3 S5) Feb 8 23:24:36.793905 kernel: ACPI: Using IOAPIC for interrupt routing Feb 8 23:24:36.793912 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Feb 8 23:24:36.793919 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Feb 8 23:24:36.793926 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Feb 8 23:24:36.794051 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Feb 8 23:24:36.794062 kernel: acpiphp: Slot [3] registered Feb 8 23:24:36.794070 kernel: acpiphp: Slot [4] registered Feb 8 23:24:36.794079 kernel: acpiphp: Slot [5] registered Feb 8 23:24:36.794086 kernel: acpiphp: Slot [6] registered Feb 8 23:24:36.794093 kernel: acpiphp: Slot [7] registered Feb 8 23:24:36.794100 kernel: acpiphp: Slot [8] registered Feb 8 23:24:36.794107 kernel: acpiphp: Slot [9] registered Feb 8 23:24:36.794119 kernel: acpiphp: Slot [10] registered Feb 8 23:24:36.794126 kernel: acpiphp: Slot [11] registered Feb 8 23:24:36.794133 kernel: acpiphp: Slot [12] registered Feb 8 23:24:36.794140 kernel: acpiphp: Slot [13] registered Feb 8 23:24:36.794147 kernel: acpiphp: Slot [14] registered Feb 8 23:24:36.794155 kernel: acpiphp: Slot [15] registered Feb 8 23:24:36.794161 kernel: acpiphp: Slot [16] registered Feb 8 23:24:36.794168 kernel: acpiphp: Slot [17] registered Feb 8 23:24:36.794175 kernel: acpiphp: Slot [18] registered Feb 8 23:24:36.794182 kernel: acpiphp: Slot [19] registered Feb 8 23:24:36.794189 kernel: acpiphp: Slot [20] registered Feb 8 23:24:36.794196 kernel: acpiphp: Slot [21] registered Feb 8 23:24:36.794203 kernel: acpiphp: Slot [22] registered Feb 8 23:24:36.794209 kernel: acpiphp: Slot [23] registered Feb 8 23:24:36.794217 kernel: acpiphp: Slot [24] registered Feb 8 23:24:36.794224 kernel: acpiphp: Slot [25] registered Feb 8 23:24:36.794231 kernel: acpiphp: Slot [26] registered Feb 8 23:24:36.794238 kernel: acpiphp: Slot [27] registered Feb 8 23:24:36.794245 kernel: acpiphp: Slot [28] registered Feb 8 23:24:36.794251 kernel: acpiphp: Slot [29] registered Feb 8 23:24:36.794258 kernel: acpiphp: Slot [30] registered Feb 8 23:24:36.794265 kernel: acpiphp: Slot [31] registered Feb 8 23:24:36.794272 kernel: PCI host bridge to bus 0000:00 Feb 8 23:24:36.794351 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Feb 8 23:24:36.794418 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Feb 8 23:24:36.794481 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Feb 8 23:24:36.794542 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xfebfffff window] Feb 8 23:24:36.794981 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Feb 8 23:24:36.795065 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Feb 8 23:24:36.795157 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Feb 8 23:24:36.795245 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Feb 8 23:24:36.795318 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Feb 8 23:24:36.795388 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc0c0-0xc0cf] Feb 8 23:24:36.795456 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Feb 8 23:24:36.795523 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Feb 8 23:24:36.795590 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Feb 8 23:24:36.795660 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Feb 8 23:24:36.796151 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Feb 8 23:24:36.796288 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Feb 8 23:24:36.796359 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Feb 8 23:24:36.796436 kernel: pci 0000:00:02.0: [1234:1111] type 00 class 0x030000 Feb 8 23:24:36.796505 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Feb 8 23:24:36.796572 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Feb 8 23:24:36.796648 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Feb 8 23:24:36.796716 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Feb 8 23:24:36.796792 kernel: pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 Feb 8 23:24:36.796864 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc09f] Feb 8 23:24:36.796937 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Feb 8 23:24:36.797006 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Feb 8 23:24:36.797099 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Feb 8 23:24:36.797178 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Feb 8 23:24:36.797247 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Feb 8 23:24:36.797314 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Feb 8 23:24:36.797392 kernel: pci 0000:00:05.0: [1af4:1000] type 00 class 0x020000 Feb 8 23:24:36.797462 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0a0-0xc0bf] Feb 8 23:24:36.797530 kernel: pci 0000:00:05.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Feb 8 23:24:36.797597 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Feb 8 23:24:36.797672 kernel: pci 0000:00:05.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Feb 8 23:24:36.797682 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Feb 8 23:24:36.797689 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Feb 8 23:24:36.797697 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Feb 8 23:24:36.797704 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Feb 8 23:24:36.797712 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Feb 8 23:24:36.797719 kernel: iommu: Default domain type: Translated Feb 8 23:24:36.797726 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Feb 8 23:24:36.797792 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Feb 8 23:24:36.797862 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Feb 8 23:24:36.797929 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Feb 8 23:24:36.797938 kernel: vgaarb: loaded Feb 8 23:24:36.797946 kernel: pps_core: LinuxPPS API ver. 1 registered Feb 8 23:24:36.797953 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Feb 8 23:24:36.797961 kernel: PTP clock support registered Feb 8 23:24:36.797968 kernel: PCI: Using ACPI for IRQ routing Feb 8 23:24:36.797975 kernel: PCI: pci_cache_line_size set to 64 bytes Feb 8 23:24:36.797985 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Feb 8 23:24:36.797992 kernel: e820: reserve RAM buffer [mem 0x9cfdd000-0x9fffffff] Feb 8 23:24:36.797999 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Feb 8 23:24:36.798007 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Feb 8 23:24:36.798014 kernel: clocksource: Switched to clocksource kvm-clock Feb 8 23:24:36.798021 kernel: VFS: Disk quotas dquot_6.6.0 Feb 8 23:24:36.798040 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Feb 8 23:24:36.798048 kernel: pnp: PnP ACPI init Feb 8 23:24:36.798129 kernel: pnp 00:02: [dma 2] Feb 8 23:24:36.798143 kernel: pnp: PnP ACPI: found 6 devices Feb 8 23:24:36.798150 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Feb 8 23:24:36.798158 kernel: NET: Registered PF_INET protocol family Feb 8 23:24:36.798165 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Feb 8 23:24:36.798173 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Feb 8 23:24:36.798180 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Feb 8 23:24:36.798187 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Feb 8 23:24:36.798195 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Feb 8 23:24:36.798204 kernel: TCP: Hash tables configured (established 32768 bind 32768) Feb 8 23:24:36.798212 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Feb 8 23:24:36.798219 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Feb 8 23:24:36.798226 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Feb 8 23:24:36.798234 kernel: NET: Registered PF_XDP protocol family Feb 8 23:24:36.798305 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Feb 8 23:24:36.798367 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Feb 8 23:24:36.798429 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Feb 8 23:24:36.798490 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xfebfffff window] Feb 8 23:24:36.798557 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Feb 8 23:24:36.798635 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Feb 8 23:24:36.798710 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Feb 8 23:24:36.798779 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Feb 8 23:24:36.798789 kernel: PCI: CLS 0 bytes, default 64 Feb 8 23:24:36.798796 kernel: Initialise system trusted keyrings Feb 8 23:24:36.798804 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Feb 8 23:24:36.798811 kernel: Key type asymmetric registered Feb 8 23:24:36.798821 kernel: Asymmetric key parser 'x509' registered Feb 8 23:24:36.798829 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Feb 8 23:24:36.798836 kernel: io scheduler mq-deadline registered Feb 8 23:24:36.798843 kernel: io scheduler kyber registered Feb 8 23:24:36.798851 kernel: io scheduler bfq registered Feb 8 23:24:36.798858 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Feb 8 23:24:36.798866 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Feb 8 23:24:36.798873 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 10 Feb 8 23:24:36.798881 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Feb 8 23:24:36.798890 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Feb 8 23:24:36.798897 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Feb 8 23:24:36.798905 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Feb 8 23:24:36.798912 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Feb 8 23:24:36.798920 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Feb 8 23:24:36.798927 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Feb 8 23:24:36.798998 kernel: rtc_cmos 00:05: RTC can wake from S4 Feb 8 23:24:36.799087 kernel: rtc_cmos 00:05: registered as rtc0 Feb 8 23:24:36.799161 kernel: rtc_cmos 00:05: setting system clock to 2024-02-08T23:24:36 UTC (1707434676) Feb 8 23:24:36.799223 kernel: rtc_cmos 00:05: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Feb 8 23:24:36.799232 kernel: NET: Registered PF_INET6 protocol family Feb 8 23:24:36.799240 kernel: Segment Routing with IPv6 Feb 8 23:24:36.799247 kernel: In-situ OAM (IOAM) with IPv6 Feb 8 23:24:36.799255 kernel: NET: Registered PF_PACKET protocol family Feb 8 23:24:36.799262 kernel: Key type dns_resolver registered Feb 8 23:24:36.799269 kernel: IPI shorthand broadcast: enabled Feb 8 23:24:36.799277 kernel: sched_clock: Marking stable (362390558, 69783654)->(437398733, -5224521) Feb 8 23:24:36.799287 kernel: registered taskstats version 1 Feb 8 23:24:36.799294 kernel: Loading compiled-in X.509 certificates Feb 8 23:24:36.799302 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.148-flatcar: e9d857ae0e8100c174221878afd1046acbb054a6' Feb 8 23:24:36.799309 kernel: Key type .fscrypt registered Feb 8 23:24:36.799316 kernel: Key type fscrypt-provisioning registered Feb 8 23:24:36.799324 kernel: ima: No TPM chip found, activating TPM-bypass! Feb 8 23:24:36.799331 kernel: ima: Allocated hash algorithm: sha1 Feb 8 23:24:36.799338 kernel: ima: No architecture policies found Feb 8 23:24:36.799346 kernel: Freeing unused kernel image (initmem) memory: 45496K Feb 8 23:24:36.799354 kernel: Write protecting the kernel read-only data: 28672k Feb 8 23:24:36.799362 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Feb 8 23:24:36.799369 kernel: Freeing unused kernel image (rodata/data gap) memory: 636K Feb 8 23:24:36.799376 kernel: Run /init as init process Feb 8 23:24:36.799384 kernel: with arguments: Feb 8 23:24:36.799391 kernel: /init Feb 8 23:24:36.799398 kernel: with environment: Feb 8 23:24:36.799415 kernel: HOME=/ Feb 8 23:24:36.799424 kernel: TERM=linux Feb 8 23:24:36.799432 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Feb 8 23:24:36.799443 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 8 23:24:36.799454 systemd[1]: Detected virtualization kvm. Feb 8 23:24:36.799462 systemd[1]: Detected architecture x86-64. Feb 8 23:24:36.799470 systemd[1]: Running in initrd. Feb 8 23:24:36.799477 systemd[1]: No hostname configured, using default hostname. Feb 8 23:24:36.799485 systemd[1]: Hostname set to . Feb 8 23:24:36.799495 systemd[1]: Initializing machine ID from VM UUID. Feb 8 23:24:36.799502 systemd[1]: Queued start job for default target initrd.target. Feb 8 23:24:36.799510 systemd[1]: Started systemd-ask-password-console.path. Feb 8 23:24:36.799518 systemd[1]: Reached target cryptsetup.target. Feb 8 23:24:36.799526 systemd[1]: Reached target paths.target. Feb 8 23:24:36.799534 systemd[1]: Reached target slices.target. Feb 8 23:24:36.799541 systemd[1]: Reached target swap.target. Feb 8 23:24:36.799549 systemd[1]: Reached target timers.target. Feb 8 23:24:36.799559 systemd[1]: Listening on iscsid.socket. Feb 8 23:24:36.799567 systemd[1]: Listening on iscsiuio.socket. Feb 8 23:24:36.799574 systemd[1]: Listening on systemd-journald-audit.socket. Feb 8 23:24:36.799582 systemd[1]: Listening on systemd-journald-dev-log.socket. Feb 8 23:24:36.799590 systemd[1]: Listening on systemd-journald.socket. Feb 8 23:24:36.799598 systemd[1]: Listening on systemd-networkd.socket. Feb 8 23:24:36.799606 systemd[1]: Listening on systemd-udevd-control.socket. Feb 8 23:24:36.799614 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 8 23:24:36.799623 systemd[1]: Reached target sockets.target. Feb 8 23:24:36.799631 systemd[1]: Starting kmod-static-nodes.service... Feb 8 23:24:36.799641 systemd[1]: Finished network-cleanup.service. Feb 8 23:24:36.799649 systemd[1]: Starting systemd-fsck-usr.service... Feb 8 23:24:36.799659 systemd[1]: Starting systemd-journald.service... Feb 8 23:24:36.799668 systemd[1]: Starting systemd-modules-load.service... Feb 8 23:24:36.799677 systemd[1]: Starting systemd-resolved.service... Feb 8 23:24:36.799685 systemd[1]: Starting systemd-vconsole-setup.service... Feb 8 23:24:36.799693 systemd[1]: Finished kmod-static-nodes.service. Feb 8 23:24:36.799701 systemd[1]: Finished systemd-fsck-usr.service. Feb 8 23:24:36.799709 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 8 23:24:36.799720 systemd-journald[197]: Journal started Feb 8 23:24:36.799765 systemd-journald[197]: Runtime Journal (/run/log/journal/1db58c251adf490d9821ace3a6066230) is 6.0M, max 48.5M, 42.5M free. Feb 8 23:24:36.793592 systemd-modules-load[198]: Inserted module 'overlay' Feb 8 23:24:36.824930 systemd[1]: Started systemd-journald.service. Feb 8 23:24:36.824947 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Feb 8 23:24:36.824962 kernel: Bridge firewalling registered Feb 8 23:24:36.815097 systemd-modules-load[198]: Inserted module 'br_netfilter' Feb 8 23:24:36.820522 systemd-resolved[199]: Positive Trust Anchors: Feb 8 23:24:36.820542 systemd-resolved[199]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 8 23:24:36.820580 systemd-resolved[199]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 8 23:24:36.823379 systemd-resolved[199]: Defaulting to hostname 'linux'. Feb 8 23:24:36.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:36.833877 systemd[1]: Started systemd-resolved.service. Feb 8 23:24:36.837434 kernel: audit: type=1130 audit(1707434676.833:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:36.837448 kernel: SCSI subsystem initialized Feb 8 23:24:36.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:36.837754 systemd[1]: Finished systemd-vconsole-setup.service. Feb 8 23:24:36.840863 kernel: audit: type=1130 audit(1707434676.837:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:36.840881 kernel: audit: type=1130 audit(1707434676.840:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:36.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:36.840997 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 8 23:24:36.844000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:36.844425 systemd[1]: Reached target nss-lookup.target. Feb 8 23:24:36.847647 kernel: audit: type=1130 audit(1707434676.844:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:36.848496 systemd[1]: Starting dracut-cmdline-ask.service... Feb 8 23:24:36.851242 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Feb 8 23:24:36.851254 kernel: device-mapper: uevent: version 1.0.3 Feb 8 23:24:36.851263 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Feb 8 23:24:36.853445 systemd-modules-load[198]: Inserted module 'dm_multipath' Feb 8 23:24:36.854360 systemd[1]: Finished systemd-modules-load.service. Feb 8 23:24:36.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:36.856403 systemd[1]: Starting systemd-sysctl.service... Feb 8 23:24:36.858862 kernel: audit: type=1130 audit(1707434676.855:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:36.863817 systemd[1]: Finished systemd-sysctl.service. Feb 8 23:24:36.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:36.867049 kernel: audit: type=1130 audit(1707434676.864:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:36.867642 systemd[1]: Finished dracut-cmdline-ask.service. Feb 8 23:24:36.871497 kernel: audit: type=1130 audit(1707434676.868:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:36.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:36.868954 systemd[1]: Starting dracut-cmdline.service... Feb 8 23:24:36.875973 dracut-cmdline[220]: dracut-dracut-053 Feb 8 23:24:36.877389 dracut-cmdline[220]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=ae7db544026ede4699ee2036449b75950d3fb7929b25a6731d0ad396f1aa37c9 Feb 8 23:24:36.924048 kernel: Loading iSCSI transport class v2.0-870. Feb 8 23:24:36.937047 kernel: iscsi: registered transport (tcp) Feb 8 23:24:36.956054 kernel: iscsi: registered transport (qla4xxx) Feb 8 23:24:36.956068 kernel: QLogic iSCSI HBA Driver Feb 8 23:24:36.977659 systemd[1]: Finished dracut-cmdline.service. Feb 8 23:24:36.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:36.979530 systemd[1]: Starting dracut-pre-udev.service... Feb 8 23:24:36.981733 kernel: audit: type=1130 audit(1707434676.978:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:37.023058 kernel: raid6: avx2x4 gen() 30225 MB/s Feb 8 23:24:37.040047 kernel: raid6: avx2x4 xor() 7663 MB/s Feb 8 23:24:37.057047 kernel: raid6: avx2x2 gen() 32566 MB/s Feb 8 23:24:37.074048 kernel: raid6: avx2x2 xor() 19267 MB/s Feb 8 23:24:37.091051 kernel: raid6: avx2x1 gen() 26582 MB/s Feb 8 23:24:37.108046 kernel: raid6: avx2x1 xor() 15393 MB/s Feb 8 23:24:37.125046 kernel: raid6: sse2x4 gen() 14844 MB/s Feb 8 23:24:37.142049 kernel: raid6: sse2x4 xor() 7326 MB/s Feb 8 23:24:37.159048 kernel: raid6: sse2x2 gen() 16312 MB/s Feb 8 23:24:37.176049 kernel: raid6: sse2x2 xor() 9860 MB/s Feb 8 23:24:37.193047 kernel: raid6: sse2x1 gen() 12061 MB/s Feb 8 23:24:37.210503 kernel: raid6: sse2x1 xor() 7821 MB/s Feb 8 23:24:37.210519 kernel: raid6: using algorithm avx2x2 gen() 32566 MB/s Feb 8 23:24:37.210530 kernel: raid6: .... xor() 19267 MB/s, rmw enabled Feb 8 23:24:37.210539 kernel: raid6: using avx2x2 recovery algorithm Feb 8 23:24:37.222051 kernel: xor: automatically using best checksumming function avx Feb 8 23:24:37.309055 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Feb 8 23:24:37.315917 systemd[1]: Finished dracut-pre-udev.service. Feb 8 23:24:37.316000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:37.318000 audit: BPF prog-id=7 op=LOAD Feb 8 23:24:37.318000 audit: BPF prog-id=8 op=LOAD Feb 8 23:24:37.319048 kernel: audit: type=1130 audit(1707434677.316:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:37.319292 systemd[1]: Starting systemd-udevd.service... Feb 8 23:24:37.330467 systemd-udevd[400]: Using default interface naming scheme 'v252'. Feb 8 23:24:37.334190 systemd[1]: Started systemd-udevd.service. Feb 8 23:24:37.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:37.335373 systemd[1]: Starting dracut-pre-trigger.service... Feb 8 23:24:37.345288 dracut-pre-trigger[407]: rd.md=0: removing MD RAID activation Feb 8 23:24:37.366874 systemd[1]: Finished dracut-pre-trigger.service. Feb 8 23:24:37.367000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:37.368583 systemd[1]: Starting systemd-udev-trigger.service... Feb 8 23:24:37.400000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:37.399411 systemd[1]: Finished systemd-udev-trigger.service. Feb 8 23:24:37.420442 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Feb 8 23:24:37.427073 kernel: cryptd: max_cpu_qlen set to 1000 Feb 8 23:24:37.433843 kernel: libata version 3.00 loaded. Feb 8 23:24:37.435244 kernel: ata_piix 0000:00:01.1: version 2.13 Feb 8 23:24:37.435441 kernel: AVX2 version of gcm_enc/dec engaged. Feb 8 23:24:37.436379 kernel: AES CTR mode by8 optimization enabled Feb 8 23:24:37.437047 kernel: scsi host0: ata_piix Feb 8 23:24:37.437219 kernel: scsi host1: ata_piix Feb 8 23:24:37.439905 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14 Feb 8 23:24:37.439926 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15 Feb 8 23:24:37.439936 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Feb 8 23:24:37.441573 kernel: GPT:9289727 != 19775487 Feb 8 23:24:37.441593 kernel: GPT:Alternate GPT header not at the end of the disk. Feb 8 23:24:37.441603 kernel: GPT:9289727 != 19775487 Feb 8 23:24:37.442421 kernel: GPT: Use GNU Parted to correct GPT errors. Feb 8 23:24:37.442441 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 8 23:24:37.600054 kernel: ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Feb 8 23:24:37.602050 kernel: scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Feb 8 23:24:37.616051 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (451) Feb 8 23:24:37.617319 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Feb 8 23:24:37.618114 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Feb 8 23:24:37.624437 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Feb 8 23:24:37.627862 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Feb 8 23:24:37.633568 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 8 23:24:37.634904 systemd[1]: Starting disk-uuid.service... Feb 8 23:24:37.637323 kernel: sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Feb 8 23:24:37.637457 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Feb 8 23:24:37.642151 disk-uuid[534]: Primary Header is updated. Feb 8 23:24:37.642151 disk-uuid[534]: Secondary Entries is updated. Feb 8 23:24:37.642151 disk-uuid[534]: Secondary Header is updated. Feb 8 23:24:37.644725 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 8 23:24:37.647047 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 8 23:24:37.650045 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 8 23:24:37.654854 kernel: sr 1:0:0:0: Attached scsi CD-ROM sr0 Feb 8 23:24:38.649944 disk-uuid[535]: The operation has completed successfully. Feb 8 23:24:38.651050 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 8 23:24:38.670636 systemd[1]: disk-uuid.service: Deactivated successfully. Feb 8 23:24:38.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:38.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:38.670713 systemd[1]: Finished disk-uuid.service. Feb 8 23:24:38.675700 systemd[1]: Starting verity-setup.service... Feb 8 23:24:38.687057 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Feb 8 23:24:38.702439 systemd[1]: Found device dev-mapper-usr.device. Feb 8 23:24:38.704609 systemd[1]: Mounting sysusr-usr.mount... Feb 8 23:24:38.706276 systemd[1]: Finished verity-setup.service. Feb 8 23:24:38.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:38.760744 systemd[1]: Mounted sysusr-usr.mount. Feb 8 23:24:38.761784 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Feb 8 23:24:38.761814 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Feb 8 23:24:38.763312 systemd[1]: Starting ignition-setup.service... Feb 8 23:24:38.764827 systemd[1]: Starting parse-ip-for-networkd.service... Feb 8 23:24:38.771251 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Feb 8 23:24:38.771274 kernel: BTRFS info (device vda6): using free space tree Feb 8 23:24:38.771284 kernel: BTRFS info (device vda6): has skinny extents Feb 8 23:24:38.777479 systemd[1]: mnt-oem.mount: Deactivated successfully. Feb 8 23:24:38.784512 systemd[1]: Finished ignition-setup.service. Feb 8 23:24:38.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:38.786259 systemd[1]: Starting ignition-fetch-offline.service... Feb 8 23:24:38.818215 ignition[635]: Ignition 2.14.0 Feb 8 23:24:38.818223 ignition[635]: Stage: fetch-offline Feb 8 23:24:38.818270 ignition[635]: no configs at "/usr/lib/ignition/base.d" Feb 8 23:24:38.818277 ignition[635]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 8 23:24:38.818366 ignition[635]: parsed url from cmdline: "" Feb 8 23:24:38.818368 ignition[635]: no config URL provided Feb 8 23:24:38.818373 ignition[635]: reading system config file "/usr/lib/ignition/user.ign" Feb 8 23:24:38.818378 ignition[635]: no config at "/usr/lib/ignition/user.ign" Feb 8 23:24:38.818394 ignition[635]: op(1): [started] loading QEMU firmware config module Feb 8 23:24:38.818398 ignition[635]: op(1): executing: "modprobe" "qemu_fw_cfg" Feb 8 23:24:38.822385 ignition[635]: op(1): [finished] loading QEMU firmware config module Feb 8 23:24:38.827779 systemd[1]: Finished parse-ip-for-networkd.service. Feb 8 23:24:38.828000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:38.829000 audit: BPF prog-id=9 op=LOAD Feb 8 23:24:38.829663 systemd[1]: Starting systemd-networkd.service... Feb 8 23:24:38.882832 ignition[635]: parsing config with SHA512: b3b237885c278babb2dfdf327b957359d74e80a86be1d74fccb9f64f69c91a212e599d8c1848c1ea7c1ff757d96cbe67829847ece132ef1081197df38e7ae3e8 Feb 8 23:24:38.899574 systemd-networkd[717]: lo: Link UP Feb 8 23:24:38.899582 systemd-networkd[717]: lo: Gained carrier Feb 8 23:24:38.900000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:38.899941 systemd-networkd[717]: Enumeration completed Feb 8 23:24:38.900048 systemd[1]: Started systemd-networkd.service. Feb 8 23:24:38.900960 systemd-networkd[717]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 8 23:24:38.900969 systemd[1]: Reached target network.target. Feb 8 23:24:38.902587 systemd-networkd[717]: eth0: Link UP Feb 8 23:24:38.902591 systemd-networkd[717]: eth0: Gained carrier Feb 8 23:24:38.902762 systemd[1]: Starting iscsiuio.service... Feb 8 23:24:38.906900 systemd[1]: Started iscsiuio.service. Feb 8 23:24:38.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:38.908307 systemd[1]: Starting iscsid.service... Feb 8 23:24:38.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:38.912323 systemd[1]: Started iscsid.service. Feb 8 23:24:38.914092 systemd[1]: Starting dracut-initqueue.service... Feb 8 23:24:38.915664 iscsid[723]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Feb 8 23:24:38.915664 iscsid[723]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Feb 8 23:24:38.915664 iscsid[723]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Feb 8 23:24:38.915664 iscsid[723]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Feb 8 23:24:38.915664 iscsid[723]: If using hardware iscsi like qla4xxx this message can be ignored. Feb 8 23:24:38.915664 iscsid[723]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Feb 8 23:24:38.915664 iscsid[723]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Feb 8 23:24:38.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:38.919492 ignition[635]: fetch-offline: fetch-offline passed Feb 8 23:24:38.918896 unknown[635]: fetched base config from "system" Feb 8 23:24:38.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:38.919546 ignition[635]: Ignition finished successfully Feb 8 23:24:38.918903 unknown[635]: fetched user config from "qemu" Feb 8 23:24:38.929615 ignition[729]: Ignition 2.14.0 Feb 8 23:24:38.920452 systemd[1]: Finished ignition-fetch-offline.service. Feb 8 23:24:38.929620 ignition[729]: Stage: kargs Feb 8 23:24:38.921362 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Feb 8 23:24:38.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:38.929702 ignition[729]: no configs at "/usr/lib/ignition/base.d" Feb 8 23:24:38.922003 systemd[1]: Starting ignition-kargs.service... Feb 8 23:24:38.929709 ignition[729]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 8 23:24:38.925125 systemd-networkd[717]: eth0: DHCPv4 address 10.0.0.96/16, gateway 10.0.0.1 acquired from 10.0.0.1 Feb 8 23:24:38.937000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:38.930754 ignition[729]: kargs: kargs passed Feb 8 23:24:38.925421 systemd[1]: Finished dracut-initqueue.service. Feb 8 23:24:38.930784 ignition[729]: Ignition finished successfully Feb 8 23:24:38.926617 systemd[1]: Reached target remote-fs-pre.target. Feb 8 23:24:38.927529 systemd[1]: Reached target remote-cryptsetup.target. Feb 8 23:24:38.928113 systemd[1]: Reached target remote-fs.target. Feb 8 23:24:38.939807 ignition[741]: Ignition 2.14.0 Feb 8 23:24:38.929333 systemd[1]: Starting dracut-pre-mount.service... Feb 8 23:24:38.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:38.939812 ignition[741]: Stage: disks Feb 8 23:24:38.931997 systemd[1]: Finished ignition-kargs.service. Feb 8 23:24:38.939884 ignition[741]: no configs at "/usr/lib/ignition/base.d" Feb 8 23:24:38.934273 systemd[1]: Starting ignition-disks.service... Feb 8 23:24:38.939892 ignition[741]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 8 23:24:38.936414 systemd[1]: Finished dracut-pre-mount.service. Feb 8 23:24:38.940923 ignition[741]: disks: disks passed Feb 8 23:24:38.941437 systemd[1]: Finished ignition-disks.service. Feb 8 23:24:38.940950 ignition[741]: Ignition finished successfully Feb 8 23:24:38.941818 systemd[1]: Reached target initrd-root-device.target. Feb 8 23:24:38.941971 systemd[1]: Reached target local-fs-pre.target. Feb 8 23:24:38.942198 systemd[1]: Reached target local-fs.target. Feb 8 23:24:38.942309 systemd[1]: Reached target sysinit.target. Feb 8 23:24:38.952951 systemd-fsck[751]: ROOT: clean, 602/553520 files, 56014/553472 blocks Feb 8 23:24:38.942412 systemd[1]: Reached target basic.target. Feb 8 23:24:38.943136 systemd[1]: Starting systemd-fsck-root.service... Feb 8 23:24:38.956978 systemd[1]: Finished systemd-fsck-root.service. Feb 8 23:24:38.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:38.958147 systemd[1]: Mounting sysroot.mount... Feb 8 23:24:38.962747 systemd[1]: Mounted sysroot.mount. Feb 8 23:24:38.963663 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Feb 8 23:24:38.963679 systemd[1]: Reached target initrd-root-fs.target. Feb 8 23:24:38.965359 systemd[1]: Mounting sysroot-usr.mount... Feb 8 23:24:38.966510 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Feb 8 23:24:38.966542 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Feb 8 23:24:38.967433 systemd[1]: Reached target ignition-diskful.target. Feb 8 23:24:38.970129 systemd[1]: Mounted sysroot-usr.mount. Feb 8 23:24:38.971694 systemd[1]: Starting initrd-setup-root.service... Feb 8 23:24:38.975436 initrd-setup-root[761]: cut: /sysroot/etc/passwd: No such file or directory Feb 8 23:24:38.978219 initrd-setup-root[769]: cut: /sysroot/etc/group: No such file or directory Feb 8 23:24:38.980431 initrd-setup-root[777]: cut: /sysroot/etc/shadow: No such file or directory Feb 8 23:24:38.983375 initrd-setup-root[785]: cut: /sysroot/etc/gshadow: No such file or directory Feb 8 23:24:39.005315 systemd[1]: Finished initrd-setup-root.service. Feb 8 23:24:39.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:39.006991 systemd[1]: Starting ignition-mount.service... Feb 8 23:24:39.008393 systemd[1]: Starting sysroot-boot.service... Feb 8 23:24:39.011358 bash[802]: umount: /sysroot/usr/share/oem: not mounted. Feb 8 23:24:39.019271 ignition[804]: INFO : Ignition 2.14.0 Feb 8 23:24:39.019271 ignition[804]: INFO : Stage: mount Feb 8 23:24:39.020372 ignition[804]: INFO : no configs at "/usr/lib/ignition/base.d" Feb 8 23:24:39.020372 ignition[804]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 8 23:24:39.021894 ignition[804]: INFO : mount: mount passed Feb 8 23:24:39.021894 ignition[804]: INFO : Ignition finished successfully Feb 8 23:24:39.023183 systemd[1]: Finished sysroot-boot.service. Feb 8 23:24:39.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:39.024584 systemd[1]: Finished ignition-mount.service. Feb 8 23:24:39.024000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:39.208720 systemd-resolved[199]: Detected conflict on linux IN A 10.0.0.96 Feb 8 23:24:39.208733 systemd-resolved[199]: Hostname conflict, changing published hostname from 'linux' to 'linux2'. Feb 8 23:24:39.712317 systemd[1]: Mounting sysroot-usr-share-oem.mount... Feb 8 23:24:39.718079 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (812) Feb 8 23:24:39.718106 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Feb 8 23:24:39.718116 kernel: BTRFS info (device vda6): using free space tree Feb 8 23:24:39.719173 kernel: BTRFS info (device vda6): has skinny extents Feb 8 23:24:39.721563 systemd[1]: Mounted sysroot-usr-share-oem.mount. Feb 8 23:24:39.723159 systemd[1]: Starting ignition-files.service... Feb 8 23:24:39.734718 ignition[832]: INFO : Ignition 2.14.0 Feb 8 23:24:39.734718 ignition[832]: INFO : Stage: files Feb 8 23:24:39.735765 ignition[832]: INFO : no configs at "/usr/lib/ignition/base.d" Feb 8 23:24:39.735765 ignition[832]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 8 23:24:39.737359 ignition[832]: DEBUG : files: compiled without relabeling support, skipping Feb 8 23:24:39.737359 ignition[832]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Feb 8 23:24:39.737359 ignition[832]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Feb 8 23:24:39.739978 ignition[832]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Feb 8 23:24:39.739978 ignition[832]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Feb 8 23:24:39.739978 ignition[832]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Feb 8 23:24:39.739970 unknown[832]: wrote ssh authorized keys file for user: core Feb 8 23:24:39.743584 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Feb 8 23:24:39.743584 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Feb 8 23:24:40.223058 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Feb 8 23:24:40.355958 ignition[832]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Feb 8 23:24:40.358014 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Feb 8 23:24:40.358014 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Feb 8 23:24:40.358014 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Feb 8 23:24:40.558196 systemd-networkd[717]: eth0: Gained IPv6LL Feb 8 23:24:40.746750 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Feb 8 23:24:40.819780 ignition[832]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Feb 8 23:24:40.822057 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Feb 8 23:24:40.822057 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Feb 8 23:24:40.822057 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Feb 8 23:24:40.847467 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Feb 8 23:24:40.899232 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Feb 8 23:24:40.900992 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubeadm" Feb 8 23:24:40.900992 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://dl.k8s.io/release/v1.27.2/bin/linux/amd64/kubeadm: attempt #1 Feb 8 23:24:40.970049 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Feb 8 23:24:41.184061 ignition[832]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: f40216b7d14046931c58072d10c7122934eac5a23c08821371f8b08ac1779443ad11d3458a4c5dcde7cf80fc600a9fefb14b1942aa46a52330248d497ca88836 Feb 8 23:24:41.186125 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubeadm" Feb 8 23:24:41.186125 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubelet" Feb 8 23:24:41.186125 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://dl.k8s.io/release/v1.27.2/bin/linux/amd64/kubelet: attempt #1 Feb 8 23:24:41.233907 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Feb 8 23:24:41.623388 ignition[832]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: a283da2224d456958b2cb99b4f6faf4457c4ed89e9e95f37d970c637f6a7f64ff4dd4d2bfce538759b2d2090933bece599a285ef8fd132eb383fece9a3941560 Feb 8 23:24:41.625649 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubelet" Feb 8 23:24:41.625649 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubectl" Feb 8 23:24:41.625649 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(8): GET https://dl.k8s.io/release/v1.27.2/bin/linux/amd64/kubectl: attempt #1 Feb 8 23:24:41.673871 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(8): GET result: OK Feb 8 23:24:41.855603 ignition[832]: DEBUG : files: createFilesystemsFiles: createFiles: op(8): file matches expected sum of: 857e67001e74840518413593d90c6e64ad3f00d55fa44ad9a8e2ed6135392c908caff7ec19af18cbe10784b8f83afe687a0bc3bacbc9eee984cdeb9c0749cb83 Feb 8 23:24:41.858386 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubectl" Feb 8 23:24:41.858386 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/docker/daemon.json" Feb 8 23:24:41.858386 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/docker/daemon.json" Feb 8 23:24:41.858386 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Feb 8 23:24:41.858386 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Feb 8 23:24:41.858386 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Feb 8 23:24:41.858386 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Feb 8 23:24:41.858386 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 8 23:24:41.858386 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 8 23:24:41.858386 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 8 23:24:41.858386 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 8 23:24:41.858386 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/flatcar/update.conf" Feb 8 23:24:41.858386 ignition[832]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/flatcar/update.conf" Feb 8 23:24:41.858386 ignition[832]: INFO : files: op(f): [started] processing unit "coreos-metadata.service" Feb 8 23:24:41.858386 ignition[832]: INFO : files: op(f): op(10): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Feb 8 23:24:41.858386 ignition[832]: INFO : files: op(f): op(10): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Feb 8 23:24:41.858386 ignition[832]: INFO : files: op(f): [finished] processing unit "coreos-metadata.service" Feb 8 23:24:41.893367 kernel: kauditd_printk_skb: 23 callbacks suppressed Feb 8 23:24:41.893400 kernel: audit: type=1130 audit(1707434681.880:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.893417 kernel: audit: type=1130 audit(1707434681.889:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.893433 kernel: audit: type=1130 audit(1707434681.893:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.893000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.879049 systemd[1]: Finished ignition-files.service. Feb 8 23:24:41.899320 kernel: audit: type=1131 audit(1707434681.893:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.893000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(11): [started] processing unit "prepare-cni-plugins.service" Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(11): op(12): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(11): op(12): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(11): [finished] processing unit "prepare-cni-plugins.service" Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(13): [started] processing unit "prepare-critools.service" Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(13): op(14): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(13): op(14): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(13): [finished] processing unit "prepare-critools.service" Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(15): [started] processing unit "prepare-helm.service" Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(15): op(16): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(15): op(16): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(15): [finished] processing unit "prepare-helm.service" Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(17): [started] setting preset to disabled for "coreos-metadata.service" Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(17): op(18): [started] removing enablement symlink(s) for "coreos-metadata.service" Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(17): op(18): [finished] removing enablement symlink(s) for "coreos-metadata.service" Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(17): [finished] setting preset to disabled for "coreos-metadata.service" Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(19): [started] setting preset to enabled for "prepare-cni-plugins.service" Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-cni-plugins.service" Feb 8 23:24:41.899371 ignition[832]: INFO : files: op(1a): [started] setting preset to enabled for "prepare-critools.service" Feb 8 23:24:41.935937 kernel: audit: type=1130 audit(1707434681.912:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.935960 kernel: audit: type=1131 audit(1707434681.912:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.935978 kernel: audit: type=1130 audit(1707434681.930:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.912000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.930000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.881486 systemd[1]: Starting initrd-setup-root-after-ignition.service... Feb 8 23:24:41.936996 ignition[832]: INFO : files: op(1a): [finished] setting preset to enabled for "prepare-critools.service" Feb 8 23:24:41.936996 ignition[832]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-helm.service" Feb 8 23:24:41.936996 ignition[832]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-helm.service" Feb 8 23:24:41.936996 ignition[832]: INFO : files: createResultFile: createFiles: op(1c): [started] writing file "/sysroot/etc/.ignition-result.json" Feb 8 23:24:41.936996 ignition[832]: INFO : files: createResultFile: createFiles: op(1c): [finished] writing file "/sysroot/etc/.ignition-result.json" Feb 8 23:24:41.936996 ignition[832]: INFO : files: files passed Feb 8 23:24:41.936996 ignition[832]: INFO : Ignition finished successfully Feb 8 23:24:41.884765 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Feb 8 23:24:41.950257 kernel: audit: type=1131 audit(1707434681.946:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.946000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.950335 initrd-setup-root-after-ignition[855]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Feb 8 23:24:41.885656 systemd[1]: Starting ignition-quench.service... Feb 8 23:24:41.953528 initrd-setup-root-after-ignition[858]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Feb 8 23:24:41.887213 systemd[1]: Finished initrd-setup-root-after-ignition.service. Feb 8 23:24:41.889762 systemd[1]: ignition-quench.service: Deactivated successfully. Feb 8 23:24:41.966351 kernel: audit: type=1131 audit(1707434681.956:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.966384 kernel: audit: type=1131 audit(1707434681.957:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.956000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.957000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.960000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.889846 systemd[1]: Finished ignition-quench.service. Feb 8 23:24:41.893489 systemd[1]: Reached target ignition-complete.target. Feb 8 23:24:41.899559 systemd[1]: Starting initrd-parse-etc.service... Feb 8 23:24:41.910670 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Feb 8 23:24:41.910766 systemd[1]: Finished initrd-parse-etc.service. Feb 8 23:24:41.912325 systemd[1]: Reached target initrd-fs.target. Feb 8 23:24:41.918233 systemd[1]: Reached target initrd.target. Feb 8 23:24:41.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.920510 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Feb 8 23:24:41.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.921472 systemd[1]: Starting dracut-pre-pivot.service... Feb 8 23:24:41.929969 systemd[1]: Finished dracut-pre-pivot.service. Feb 8 23:24:41.976669 iscsid[723]: iscsid shutting down. Feb 8 23:24:41.931893 systemd[1]: Starting initrd-cleanup.service... Feb 8 23:24:41.940742 systemd[1]: Stopped target nss-lookup.target. Feb 8 23:24:41.942553 systemd[1]: Stopped target remote-cryptsetup.target. Feb 8 23:24:41.944337 systemd[1]: Stopped target timers.target. Feb 8 23:24:41.979000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.980000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.945396 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Feb 8 23:24:41.945509 systemd[1]: Stopped dracut-pre-pivot.service. Feb 8 23:24:41.946664 systemd[1]: Stopped target initrd.target. Feb 8 23:24:41.950392 systemd[1]: Stopped target basic.target. Feb 8 23:24:41.950986 systemd[1]: Stopped target ignition-complete.target. Feb 8 23:24:41.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.984813 ignition[872]: INFO : Ignition 2.14.0 Feb 8 23:24:41.984813 ignition[872]: INFO : Stage: umount Feb 8 23:24:41.984813 ignition[872]: INFO : no configs at "/usr/lib/ignition/base.d" Feb 8 23:24:41.984813 ignition[872]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 8 23:24:41.984813 ignition[872]: INFO : umount: umount passed Feb 8 23:24:41.984813 ignition[872]: INFO : Ignition finished successfully Feb 8 23:24:41.986000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.986000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.987000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.990000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.952449 systemd[1]: Stopped target ignition-diskful.target. Feb 8 23:24:41.991000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.992000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.953570 systemd[1]: Stopped target initrd-root-device.target. Feb 8 23:24:41.954256 systemd[1]: Stopped target remote-fs.target. Feb 8 23:24:41.955706 systemd[1]: Stopped target remote-fs-pre.target. Feb 8 23:24:41.994000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.995000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.956949 systemd[1]: Stopped target sysinit.target. Feb 8 23:24:41.957298 systemd[1]: Stopped target local-fs.target. Feb 8 23:24:41.996000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.957500 systemd[1]: Stopped target local-fs-pre.target. Feb 8 23:24:41.957608 systemd[1]: Stopped target swap.target. Feb 8 23:24:41.957699 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Feb 8 23:24:41.957796 systemd[1]: Stopped dracut-pre-mount.service. Feb 8 23:24:41.958018 systemd[1]: Stopped target cryptsetup.target. Feb 8 23:24:41.960268 systemd[1]: dracut-initqueue.service: Deactivated successfully. Feb 8 23:24:41.960349 systemd[1]: Stopped dracut-initqueue.service. Feb 8 23:24:41.960536 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Feb 8 23:24:41.960614 systemd[1]: Stopped ignition-fetch-offline.service. Feb 8 23:24:41.962874 systemd[1]: Stopped target paths.target. Feb 8 23:24:41.963076 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Feb 8 23:24:41.968114 systemd[1]: Stopped systemd-ask-password-console.path. Feb 8 23:24:41.969385 systemd[1]: Stopped target slices.target. Feb 8 23:24:41.970495 systemd[1]: Stopped target sockets.target. Feb 8 23:24:41.971592 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Feb 8 23:24:42.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:42.010000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.971742 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Feb 8 23:24:41.972822 systemd[1]: ignition-files.service: Deactivated successfully. Feb 8 23:24:41.972929 systemd[1]: Stopped ignition-files.service. Feb 8 23:24:41.974838 systemd[1]: Stopping ignition-mount.service... Feb 8 23:24:41.975887 systemd[1]: Stopping iscsid.service... Feb 8 23:24:41.977530 systemd[1]: Stopping sysroot-boot.service... Feb 8 23:24:42.014000 audit: BPF prog-id=6 op=UNLOAD Feb 8 23:24:41.978313 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Feb 8 23:24:42.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.978492 systemd[1]: Stopped systemd-udev-trigger.service. Feb 8 23:24:42.017000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:42.018000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.979695 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Feb 8 23:24:41.979850 systemd[1]: Stopped dracut-pre-trigger.service. Feb 8 23:24:41.983092 systemd[1]: iscsid.service: Deactivated successfully. Feb 8 23:24:41.983192 systemd[1]: Stopped iscsid.service. Feb 8 23:24:41.985586 systemd[1]: initrd-cleanup.service: Deactivated successfully. Feb 8 23:24:41.985682 systemd[1]: Finished initrd-cleanup.service. Feb 8 23:24:41.986745 systemd[1]: ignition-mount.service: Deactivated successfully. Feb 8 23:24:41.986813 systemd[1]: Stopped ignition-mount.service. Feb 8 23:24:41.988595 systemd[1]: iscsid.socket: Deactivated successfully. Feb 8 23:24:42.024000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.988628 systemd[1]: Closed iscsid.socket. Feb 8 23:24:41.989575 systemd[1]: ignition-disks.service: Deactivated successfully. Feb 8 23:24:41.989606 systemd[1]: Stopped ignition-disks.service. Feb 8 23:24:41.990676 systemd[1]: ignition-kargs.service: Deactivated successfully. Feb 8 23:24:42.027000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.990706 systemd[1]: Stopped ignition-kargs.service. Feb 8 23:24:41.991471 systemd[1]: ignition-setup.service: Deactivated successfully. Feb 8 23:24:41.991501 systemd[1]: Stopped ignition-setup.service. Feb 8 23:24:41.992677 systemd[1]: Stopping iscsiuio.service... Feb 8 23:24:42.031000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:42.032000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.993657 systemd[1]: sysroot-boot.mount: Deactivated successfully. Feb 8 23:24:42.032000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.994006 systemd[1]: sysroot-boot.service: Deactivated successfully. Feb 8 23:24:42.034000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:42.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.994081 systemd[1]: Stopped sysroot-boot.service. Feb 8 23:24:41.994795 systemd[1]: initrd-setup-root.service: Deactivated successfully. Feb 8 23:24:42.037000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.994825 systemd[1]: Stopped initrd-setup-root.service. Feb 8 23:24:41.995930 systemd[1]: iscsiuio.service: Deactivated successfully. Feb 8 23:24:41.996008 systemd[1]: Stopped iscsiuio.service. Feb 8 23:24:42.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:42.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:41.996953 systemd[1]: Stopped target network.target. Feb 8 23:24:41.997898 systemd[1]: iscsiuio.socket: Deactivated successfully. Feb 8 23:24:41.997927 systemd[1]: Closed iscsiuio.socket. Feb 8 23:24:41.998996 systemd[1]: Stopping systemd-networkd.service... Feb 8 23:24:41.999979 systemd[1]: Stopping systemd-resolved.service... Feb 8 23:24:42.007074 systemd-networkd[717]: eth0: DHCPv6 lease lost Feb 8 23:24:42.043000 audit: BPF prog-id=9 op=UNLOAD Feb 8 23:24:42.008089 systemd[1]: systemd-resolved.service: Deactivated successfully. Feb 8 23:24:42.008181 systemd[1]: Stopped systemd-resolved.service. Feb 8 23:24:42.009150 systemd[1]: systemd-networkd.service: Deactivated successfully. Feb 8 23:24:42.009225 systemd[1]: Stopped systemd-networkd.service. Feb 8 23:24:42.012529 systemd[1]: systemd-networkd.socket: Deactivated successfully. Feb 8 23:24:42.012559 systemd[1]: Closed systemd-networkd.socket. Feb 8 23:24:42.014382 systemd[1]: Stopping network-cleanup.service... Feb 8 23:24:42.015072 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Feb 8 23:24:42.015114 systemd[1]: Stopped parse-ip-for-networkd.service. Feb 8 23:24:42.016672 systemd[1]: systemd-sysctl.service: Deactivated successfully. Feb 8 23:24:42.016704 systemd[1]: Stopped systemd-sysctl.service. Feb 8 23:24:42.017446 systemd[1]: systemd-modules-load.service: Deactivated successfully. Feb 8 23:24:42.017475 systemd[1]: Stopped systemd-modules-load.service. Feb 8 23:24:42.018588 systemd[1]: Stopping systemd-udevd.service... Feb 8 23:24:42.020555 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Feb 8 23:24:42.023605 systemd[1]: network-cleanup.service: Deactivated successfully. Feb 8 23:24:42.023690 systemd[1]: Stopped network-cleanup.service. Feb 8 23:24:42.026292 systemd[1]: systemd-udevd.service: Deactivated successfully. Feb 8 23:24:42.026387 systemd[1]: Stopped systemd-udevd.service. Feb 8 23:24:42.028138 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Feb 8 23:24:42.028169 systemd[1]: Closed systemd-udevd-control.socket. Feb 8 23:24:42.029130 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Feb 8 23:24:42.029153 systemd[1]: Closed systemd-udevd-kernel.socket. Feb 8 23:24:42.030295 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Feb 8 23:24:42.030327 systemd[1]: Stopped dracut-pre-udev.service. Feb 8 23:24:42.031354 systemd[1]: dracut-cmdline.service: Deactivated successfully. Feb 8 23:24:42.031382 systemd[1]: Stopped dracut-cmdline.service. Feb 8 23:24:42.032365 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Feb 8 23:24:42.032394 systemd[1]: Stopped dracut-cmdline-ask.service. Feb 8 23:24:42.033317 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Feb 8 23:24:42.034074 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Feb 8 23:24:42.034110 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Feb 8 23:24:42.035309 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Feb 8 23:24:42.035339 systemd[1]: Stopped kmod-static-nodes.service. Feb 8 23:24:42.035936 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Feb 8 23:24:42.035964 systemd[1]: Stopped systemd-vconsole-setup.service. Feb 8 23:24:42.037777 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Feb 8 23:24:42.038287 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Feb 8 23:24:42.038349 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Feb 8 23:24:42.039572 systemd[1]: Reached target initrd-switch-root.target. Feb 8 23:24:42.041017 systemd[1]: Starting initrd-switch-root.service... Feb 8 23:24:42.056239 systemd[1]: Switching root. Feb 8 23:24:42.074129 systemd-journald[197]: Journal stopped Feb 8 23:24:44.839531 systemd-journald[197]: Received SIGTERM from PID 1 (n/a). Feb 8 23:24:44.839588 kernel: SELinux: Class mctp_socket not defined in policy. Feb 8 23:24:44.839611 kernel: SELinux: Class anon_inode not defined in policy. Feb 8 23:24:44.839629 kernel: SELinux: the above unknown classes and permissions will be allowed Feb 8 23:24:44.839646 kernel: SELinux: policy capability network_peer_controls=1 Feb 8 23:24:44.839665 kernel: SELinux: policy capability open_perms=1 Feb 8 23:24:44.839678 kernel: SELinux: policy capability extended_socket_class=1 Feb 8 23:24:44.839695 kernel: SELinux: policy capability always_check_network=0 Feb 8 23:24:44.839712 kernel: SELinux: policy capability cgroup_seclabel=1 Feb 8 23:24:44.839731 kernel: SELinux: policy capability nnp_nosuid_transition=1 Feb 8 23:24:44.839744 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Feb 8 23:24:44.839760 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Feb 8 23:24:44.839774 systemd[1]: Successfully loaded SELinux policy in 35.089ms. Feb 8 23:24:44.839796 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.431ms. Feb 8 23:24:44.839813 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 8 23:24:44.839828 systemd[1]: Detected virtualization kvm. Feb 8 23:24:44.839841 systemd[1]: Detected architecture x86-64. Feb 8 23:24:44.839855 systemd[1]: Detected first boot. Feb 8 23:24:44.839869 systemd[1]: Initializing machine ID from VM UUID. Feb 8 23:24:44.839883 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Feb 8 23:24:44.839900 systemd[1]: Populated /etc with preset unit settings. Feb 8 23:24:44.839915 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 8 23:24:44.839940 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 8 23:24:44.839957 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 8 23:24:44.839972 systemd[1]: initrd-switch-root.service: Deactivated successfully. Feb 8 23:24:44.839987 systemd[1]: Stopped initrd-switch-root.service. Feb 8 23:24:44.840001 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Feb 8 23:24:44.840015 systemd[1]: Created slice system-addon\x2dconfig.slice. Feb 8 23:24:44.840068 systemd[1]: Created slice system-addon\x2drun.slice. Feb 8 23:24:44.840084 systemd[1]: Created slice system-getty.slice. Feb 8 23:24:44.840099 systemd[1]: Created slice system-modprobe.slice. Feb 8 23:24:44.840114 systemd[1]: Created slice system-serial\x2dgetty.slice. Feb 8 23:24:44.840129 systemd[1]: Created slice system-system\x2dcloudinit.slice. Feb 8 23:24:44.840145 systemd[1]: Created slice system-systemd\x2dfsck.slice. Feb 8 23:24:44.840159 systemd[1]: Created slice user.slice. Feb 8 23:24:44.840174 systemd[1]: Started systemd-ask-password-console.path. Feb 8 23:24:44.840189 systemd[1]: Started systemd-ask-password-wall.path. Feb 8 23:24:44.840207 systemd[1]: Set up automount boot.automount. Feb 8 23:24:44.840222 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Feb 8 23:24:44.840236 systemd[1]: Stopped target initrd-switch-root.target. Feb 8 23:24:44.840251 systemd[1]: Stopped target initrd-fs.target. Feb 8 23:24:44.840266 systemd[1]: Stopped target initrd-root-fs.target. Feb 8 23:24:44.840281 systemd[1]: Reached target integritysetup.target. Feb 8 23:24:44.840295 systemd[1]: Reached target remote-cryptsetup.target. Feb 8 23:24:44.840309 systemd[1]: Reached target remote-fs.target. Feb 8 23:24:44.840326 systemd[1]: Reached target slices.target. Feb 8 23:24:44.840341 systemd[1]: Reached target swap.target. Feb 8 23:24:44.840356 systemd[1]: Reached target torcx.target. Feb 8 23:24:44.840370 systemd[1]: Reached target veritysetup.target. Feb 8 23:24:44.840385 systemd[1]: Listening on systemd-coredump.socket. Feb 8 23:24:44.840399 systemd[1]: Listening on systemd-initctl.socket. Feb 8 23:24:44.840414 systemd[1]: Listening on systemd-networkd.socket. Feb 8 23:24:44.840428 systemd[1]: Listening on systemd-udevd-control.socket. Feb 8 23:24:44.840443 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 8 23:24:44.840457 systemd[1]: Listening on systemd-userdbd.socket. Feb 8 23:24:44.840474 systemd[1]: Mounting dev-hugepages.mount... Feb 8 23:24:44.840489 systemd[1]: Mounting dev-mqueue.mount... Feb 8 23:24:44.840503 systemd[1]: Mounting media.mount... Feb 8 23:24:44.840518 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Feb 8 23:24:44.840533 systemd[1]: Mounting sys-kernel-debug.mount... Feb 8 23:24:44.840547 systemd[1]: Mounting sys-kernel-tracing.mount... Feb 8 23:24:44.840561 systemd[1]: Mounting tmp.mount... Feb 8 23:24:44.840576 systemd[1]: Starting flatcar-tmpfiles.service... Feb 8 23:24:44.840598 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Feb 8 23:24:44.840613 systemd[1]: Starting kmod-static-nodes.service... Feb 8 23:24:44.840628 systemd[1]: Starting modprobe@configfs.service... Feb 8 23:24:44.840643 systemd[1]: Starting modprobe@dm_mod.service... Feb 8 23:24:44.840658 systemd[1]: Starting modprobe@drm.service... Feb 8 23:24:44.840672 systemd[1]: Starting modprobe@efi_pstore.service... Feb 8 23:24:44.840686 systemd[1]: Starting modprobe@fuse.service... Feb 8 23:24:44.840701 systemd[1]: Starting modprobe@loop.service... Feb 8 23:24:44.840716 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Feb 8 23:24:44.840733 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Feb 8 23:24:44.840748 systemd[1]: Stopped systemd-fsck-root.service. Feb 8 23:24:44.840764 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Feb 8 23:24:44.840778 systemd[1]: Stopped systemd-fsck-usr.service. Feb 8 23:24:44.840792 kernel: loop: module loaded Feb 8 23:24:44.840805 kernel: fuse: init (API version 7.34) Feb 8 23:24:44.840820 systemd[1]: Stopped systemd-journald.service. Feb 8 23:24:44.840835 systemd[1]: Starting systemd-journald.service... Feb 8 23:24:44.840850 systemd[1]: Starting systemd-modules-load.service... Feb 8 23:24:44.840865 systemd[1]: Starting systemd-network-generator.service... Feb 8 23:24:44.840882 systemd[1]: Starting systemd-remount-fs.service... Feb 8 23:24:44.840896 systemd[1]: Starting systemd-udev-trigger.service... Feb 8 23:24:44.840911 systemd[1]: verity-setup.service: Deactivated successfully. Feb 8 23:24:44.840935 systemd[1]: Stopped verity-setup.service. Feb 8 23:24:44.840951 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Feb 8 23:24:44.840966 systemd[1]: Mounted dev-hugepages.mount. Feb 8 23:24:44.840984 systemd-journald[983]: Journal started Feb 8 23:24:44.841047 systemd-journald[983]: Runtime Journal (/run/log/journal/1db58c251adf490d9821ace3a6066230) is 6.0M, max 48.5M, 42.5M free. Feb 8 23:24:42.128000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Feb 8 23:24:42.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 8 23:24:42.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 8 23:24:42.692000 audit: BPF prog-id=10 op=LOAD Feb 8 23:24:42.692000 audit: BPF prog-id=10 op=UNLOAD Feb 8 23:24:42.692000 audit: BPF prog-id=11 op=LOAD Feb 8 23:24:42.692000 audit: BPF prog-id=11 op=UNLOAD Feb 8 23:24:42.720000 audit[906]: AVC avc: denied { associate } for pid=906 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Feb 8 23:24:42.720000 audit[906]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001178e2 a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=889 pid=906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:42.720000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 8 23:24:42.722000 audit[906]: AVC avc: denied { associate } for pid=906 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Feb 8 23:24:42.722000 audit[906]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001179b9 a2=1ed a3=0 items=2 ppid=889 pid=906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:42.722000 audit: CWD cwd="/" Feb 8 23:24:42.722000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:42.722000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:42.722000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 8 23:24:44.735000 audit: BPF prog-id=12 op=LOAD Feb 8 23:24:44.735000 audit: BPF prog-id=3 op=UNLOAD Feb 8 23:24:44.735000 audit: BPF prog-id=13 op=LOAD Feb 8 23:24:44.735000 audit: BPF prog-id=14 op=LOAD Feb 8 23:24:44.735000 audit: BPF prog-id=4 op=UNLOAD Feb 8 23:24:44.735000 audit: BPF prog-id=5 op=UNLOAD Feb 8 23:24:44.736000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.738000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.747000 audit: BPF prog-id=12 op=UNLOAD Feb 8 23:24:44.814000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.817000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.842050 systemd[1]: Started systemd-journald.service. Feb 8 23:24:44.820000 audit: BPF prog-id=15 op=LOAD Feb 8 23:24:44.820000 audit: BPF prog-id=16 op=LOAD Feb 8 23:24:44.820000 audit: BPF prog-id=17 op=LOAD Feb 8 23:24:44.820000 audit: BPF prog-id=13 op=UNLOAD Feb 8 23:24:44.820000 audit: BPF prog-id=14 op=UNLOAD Feb 8 23:24:44.836000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.838000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Feb 8 23:24:44.838000 audit[983]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7fff54b43370 a2=4000 a3=7fff54b4340c items=0 ppid=1 pid=983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:44.838000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Feb 8 23:24:44.733640 systemd[1]: Queued start job for default target multi-user.target. Feb 8 23:24:42.719225 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:42Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 8 23:24:44.733652 systemd[1]: Unnecessary job was removed for dev-vda6.device. Feb 8 23:24:42.719476 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:42Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 8 23:24:44.736123 systemd[1]: systemd-journald.service: Deactivated successfully. Feb 8 23:24:44.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:42.719499 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:42Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 8 23:24:42.719536 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:42Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Feb 8 23:24:44.842990 systemd[1]: Mounted dev-mqueue.mount. Feb 8 23:24:42.719547 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:42Z" level=debug msg="skipped missing lower profile" missing profile=oem Feb 8 23:24:42.719583 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:42Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Feb 8 23:24:42.719598 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:42Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Feb 8 23:24:42.719836 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:42Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Feb 8 23:24:42.719871 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:42Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 8 23:24:42.719881 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:42Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 8 23:24:42.720192 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:42Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Feb 8 23:24:42.720232 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:42Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Feb 8 23:24:44.843953 systemd[1]: Mounted media.mount. Feb 8 23:24:42.720253 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:42Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.2: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.2 Feb 8 23:24:42.720270 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:42Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Feb 8 23:24:42.720289 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:42Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.2: no such file or directory" path=/var/lib/torcx/store/3510.3.2 Feb 8 23:24:42.720306 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:42Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Feb 8 23:24:44.484555 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:44Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 8 23:24:44.484806 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:44Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 8 23:24:44.484920 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:44Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 8 23:24:44.485130 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:44Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 8 23:24:44.485176 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:44Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Feb 8 23:24:44.485228 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2024-02-08T23:24:44Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Feb 8 23:24:44.844890 systemd[1]: Mounted sys-kernel-debug.mount. Feb 8 23:24:44.845554 systemd[1]: Mounted sys-kernel-tracing.mount. Feb 8 23:24:44.846234 systemd[1]: Mounted tmp.mount. Feb 8 23:24:44.847233 systemd[1]: Finished kmod-static-nodes.service. Feb 8 23:24:44.847000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.848138 systemd[1]: Finished flatcar-tmpfiles.service. Feb 8 23:24:44.848000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.848911 systemd[1]: modprobe@configfs.service: Deactivated successfully. Feb 8 23:24:44.849091 systemd[1]: Finished modprobe@configfs.service. Feb 8 23:24:44.849000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.849000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.849891 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Feb 8 23:24:44.850082 systemd[1]: Finished modprobe@dm_mod.service. Feb 8 23:24:44.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.850000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.850869 systemd[1]: modprobe@drm.service: Deactivated successfully. Feb 8 23:24:44.851022 systemd[1]: Finished modprobe@drm.service. Feb 8 23:24:44.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.851000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.851795 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Feb 8 23:24:44.851954 systemd[1]: Finished modprobe@efi_pstore.service. Feb 8 23:24:44.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.852000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.852870 systemd[1]: modprobe@fuse.service: Deactivated successfully. Feb 8 23:24:44.853044 systemd[1]: Finished modprobe@fuse.service. Feb 8 23:24:44.853000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.853802 systemd[1]: modprobe@loop.service: Deactivated successfully. Feb 8 23:24:44.853954 systemd[1]: Finished modprobe@loop.service. Feb 8 23:24:44.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.854000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.854908 systemd[1]: Finished systemd-modules-load.service. Feb 8 23:24:44.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.855783 systemd[1]: Finished systemd-network-generator.service. Feb 8 23:24:44.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.856723 systemd[1]: Finished systemd-remount-fs.service. Feb 8 23:24:44.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.857701 systemd[1]: Reached target network-pre.target. Feb 8 23:24:44.859353 systemd[1]: Mounting sys-fs-fuse-connections.mount... Feb 8 23:24:44.860859 systemd[1]: Mounting sys-kernel-config.mount... Feb 8 23:24:44.861686 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Feb 8 23:24:44.863110 systemd[1]: Starting systemd-hwdb-update.service... Feb 8 23:24:44.864815 systemd[1]: Starting systemd-journal-flush.service... Feb 8 23:24:44.865590 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Feb 8 23:24:44.866553 systemd[1]: Starting systemd-random-seed.service... Feb 8 23:24:44.867432 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Feb 8 23:24:44.868377 systemd[1]: Starting systemd-sysctl.service... Feb 8 23:24:44.870493 systemd[1]: Starting systemd-sysusers.service... Feb 8 23:24:44.873851 systemd-journald[983]: Time spent on flushing to /var/log/journal/1db58c251adf490d9821ace3a6066230 is 14.037ms for 1127 entries. Feb 8 23:24:44.873851 systemd-journald[983]: System Journal (/var/log/journal/1db58c251adf490d9821ace3a6066230) is 8.0M, max 195.6M, 187.6M free. Feb 8 23:24:44.894560 systemd-journald[983]: Received client request to flush runtime journal. Feb 8 23:24:44.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.892000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.874394 systemd[1]: Mounted sys-fs-fuse-connections.mount. Feb 8 23:24:44.876380 systemd[1]: Mounted sys-kernel-config.mount. Feb 8 23:24:44.878790 systemd[1]: Finished systemd-random-seed.service. Feb 8 23:24:44.879834 systemd[1]: Reached target first-boot-complete.target. Feb 8 23:24:44.882369 systemd[1]: Finished systemd-udev-trigger.service. Feb 8 23:24:44.883390 systemd[1]: Finished systemd-sysctl.service. Feb 8 23:24:44.885267 systemd[1]: Starting systemd-udev-settle.service... Feb 8 23:24:44.891988 systemd[1]: Finished systemd-sysusers.service. Feb 8 23:24:44.894211 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 8 23:24:44.896940 systemd[1]: Finished systemd-journal-flush.service. Feb 8 23:24:44.897000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:44.898271 udevadm[1010]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Feb 8 23:24:44.907588 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 8 23:24:44.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:45.299771 systemd[1]: Finished systemd-hwdb-update.service. Feb 8 23:24:45.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:45.301000 audit: BPF prog-id=18 op=LOAD Feb 8 23:24:45.301000 audit: BPF prog-id=19 op=LOAD Feb 8 23:24:45.301000 audit: BPF prog-id=7 op=UNLOAD Feb 8 23:24:45.301000 audit: BPF prog-id=8 op=UNLOAD Feb 8 23:24:45.301663 systemd[1]: Starting systemd-udevd.service... Feb 8 23:24:45.322131 systemd-udevd[1014]: Using default interface naming scheme 'v252'. Feb 8 23:24:45.334798 systemd[1]: Started systemd-udevd.service. Feb 8 23:24:45.335000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:45.336000 audit: BPF prog-id=20 op=LOAD Feb 8 23:24:45.337319 systemd[1]: Starting systemd-networkd.service... Feb 8 23:24:45.342000 audit: BPF prog-id=21 op=LOAD Feb 8 23:24:45.342000 audit: BPF prog-id=22 op=LOAD Feb 8 23:24:45.343000 audit: BPF prog-id=23 op=LOAD Feb 8 23:24:45.343831 systemd[1]: Starting systemd-userdbd.service... Feb 8 23:24:45.374843 systemd[1]: Started systemd-userdbd.service. Feb 8 23:24:45.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:45.376296 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Feb 8 23:24:45.377928 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 8 23:24:45.406108 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Feb 8 23:24:45.411063 kernel: ACPI: button: Power Button [PWRF] Feb 8 23:24:45.435000 audit[1016]: AVC avc: denied { confidentiality } for pid=1016 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Feb 8 23:24:45.439518 systemd-networkd[1022]: lo: Link UP Feb 8 23:24:45.439530 systemd-networkd[1022]: lo: Gained carrier Feb 8 23:24:45.440049 systemd-networkd[1022]: Enumeration completed Feb 8 23:24:45.440153 systemd[1]: Started systemd-networkd.service. Feb 8 23:24:45.440171 systemd-networkd[1022]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 8 23:24:45.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:45.441785 systemd-networkd[1022]: eth0: Link UP Feb 8 23:24:45.441793 systemd-networkd[1022]: eth0: Gained carrier Feb 8 23:24:45.435000 audit[1016]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=56361ba2d4d0 a1=32194 a2=7f2e4e0dcbc5 a3=5 items=108 ppid=1014 pid=1016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:45.435000 audit: CWD cwd="/" Feb 8 23:24:45.435000 audit: PATH item=0 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=1 name=(null) inode=12748 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=2 name=(null) inode=12748 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=3 name=(null) inode=12749 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=4 name=(null) inode=12748 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=5 name=(null) inode=12750 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=6 name=(null) inode=12748 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=7 name=(null) inode=12751 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=8 name=(null) inode=12751 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=9 name=(null) inode=12752 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=10 name=(null) inode=12751 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=11 name=(null) inode=12753 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=12 name=(null) inode=12751 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=13 name=(null) inode=12754 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=14 name=(null) inode=12751 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=15 name=(null) inode=12755 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=16 name=(null) inode=12751 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=17 name=(null) inode=12756 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=18 name=(null) inode=12748 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=19 name=(null) inode=12757 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=20 name=(null) inode=12757 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=21 name=(null) inode=12758 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=22 name=(null) inode=12757 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=23 name=(null) inode=12759 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=24 name=(null) inode=12757 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=25 name=(null) inode=12760 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=26 name=(null) inode=12757 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=27 name=(null) inode=12761 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=28 name=(null) inode=12757 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=29 name=(null) inode=15784 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=30 name=(null) inode=12748 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=31 name=(null) inode=15785 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=32 name=(null) inode=15785 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=33 name=(null) inode=15786 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=34 name=(null) inode=15785 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=35 name=(null) inode=15787 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.454393 systemd-networkd[1022]: eth0: DHCPv4 address 10.0.0.96/16, gateway 10.0.0.1 acquired from 10.0.0.1 Feb 8 23:24:45.435000 audit: PATH item=36 name=(null) inode=15785 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=37 name=(null) inode=15788 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=38 name=(null) inode=15785 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=39 name=(null) inode=15789 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=40 name=(null) inode=15785 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=41 name=(null) inode=15790 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=42 name=(null) inode=12748 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=43 name=(null) inode=15791 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=44 name=(null) inode=15791 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=45 name=(null) inode=15792 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=46 name=(null) inode=15791 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=47 name=(null) inode=15793 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=48 name=(null) inode=15791 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=49 name=(null) inode=15794 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=50 name=(null) inode=15791 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=51 name=(null) inode=15795 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=52 name=(null) inode=15791 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=53 name=(null) inode=15796 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=54 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=55 name=(null) inode=15797 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=56 name=(null) inode=15797 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=57 name=(null) inode=15798 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=58 name=(null) inode=15797 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=59 name=(null) inode=15799 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=60 name=(null) inode=15797 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=61 name=(null) inode=15800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=62 name=(null) inode=15800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=63 name=(null) inode=15801 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=64 name=(null) inode=15800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=65 name=(null) inode=15802 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=66 name=(null) inode=15800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=67 name=(null) inode=15803 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=68 name=(null) inode=15800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=69 name=(null) inode=15804 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=70 name=(null) inode=15800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=71 name=(null) inode=15805 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=72 name=(null) inode=15797 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=73 name=(null) inode=15806 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=74 name=(null) inode=15806 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=75 name=(null) inode=15807 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=76 name=(null) inode=15806 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=77 name=(null) inode=15808 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=78 name=(null) inode=15806 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=79 name=(null) inode=15809 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=80 name=(null) inode=15806 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=81 name=(null) inode=15810 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=82 name=(null) inode=15806 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=83 name=(null) inode=15811 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=84 name=(null) inode=15797 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=85 name=(null) inode=15812 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=86 name=(null) inode=15812 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=87 name=(null) inode=15813 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=88 name=(null) inode=15812 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=89 name=(null) inode=15814 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=90 name=(null) inode=15812 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=91 name=(null) inode=15815 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=92 name=(null) inode=15812 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=93 name=(null) inode=15816 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=94 name=(null) inode=15812 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=95 name=(null) inode=15817 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=96 name=(null) inode=15797 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=97 name=(null) inode=15818 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=98 name=(null) inode=15818 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=99 name=(null) inode=15819 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=100 name=(null) inode=15818 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=101 name=(null) inode=15820 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=102 name=(null) inode=15818 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=103 name=(null) inode=15821 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=104 name=(null) inode=15818 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=105 name=(null) inode=15822 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=106 name=(null) inode=15818 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PATH item=107 name=(null) inode=15823 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:24:45.435000 audit: PROCTITLE proctitle="(udev-worker)" Feb 8 23:24:45.461057 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Feb 8 23:24:45.477054 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Feb 8 23:24:45.494051 kernel: mousedev: PS/2 mouse device common for all mice Feb 8 23:24:45.533222 kernel: kvm: Nested Virtualization enabled Feb 8 23:24:45.533317 kernel: SVM: kvm: Nested Paging enabled Feb 8 23:24:45.533331 kernel: SVM: Virtual VMLOAD VMSAVE supported Feb 8 23:24:45.533343 kernel: SVM: Virtual GIF supported Feb 8 23:24:45.546064 kernel: EDAC MC: Ver: 3.0.0 Feb 8 23:24:45.563349 systemd[1]: Finished systemd-udev-settle.service. Feb 8 23:24:45.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:45.564957 systemd[1]: Starting lvm2-activation-early.service... Feb 8 23:24:45.571253 lvm[1049]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 8 23:24:45.595574 systemd[1]: Finished lvm2-activation-early.service. Feb 8 23:24:45.596000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:45.596360 systemd[1]: Reached target cryptsetup.target. Feb 8 23:24:45.597807 systemd[1]: Starting lvm2-activation.service... Feb 8 23:24:45.600285 lvm[1050]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 8 23:24:45.625532 systemd[1]: Finished lvm2-activation.service. Feb 8 23:24:45.626000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:45.626248 systemd[1]: Reached target local-fs-pre.target. Feb 8 23:24:45.626892 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Feb 8 23:24:45.626918 systemd[1]: Reached target local-fs.target. Feb 8 23:24:45.627553 systemd[1]: Reached target machines.target. Feb 8 23:24:45.628995 systemd[1]: Starting ldconfig.service... Feb 8 23:24:45.629786 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Feb 8 23:24:45.629823 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 8 23:24:45.630631 systemd[1]: Starting systemd-boot-update.service... Feb 8 23:24:45.632261 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Feb 8 23:24:45.634006 systemd[1]: Starting systemd-machine-id-commit.service... Feb 8 23:24:45.634976 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Feb 8 23:24:45.635029 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Feb 8 23:24:45.635932 systemd[1]: Starting systemd-tmpfiles-setup.service... Feb 8 23:24:45.639375 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1052 (bootctl) Feb 8 23:24:45.640234 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Feb 8 23:24:45.644089 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Feb 8 23:24:45.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:45.650626 systemd-tmpfiles[1055]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Feb 8 23:24:45.651260 systemd-tmpfiles[1055]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Feb 8 23:24:45.652645 systemd-tmpfiles[1055]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Feb 8 23:24:45.673522 systemd-fsck[1060]: fsck.fat 4.2 (2021-01-31) Feb 8 23:24:45.673522 systemd-fsck[1060]: /dev/vda1: 789 files, 115332/258078 clusters Feb 8 23:24:45.676340 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Feb 8 23:24:45.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:45.679921 systemd[1]: Mounting boot.mount... Feb 8 23:24:45.890820 systemd[1]: Mounted boot.mount. Feb 8 23:24:45.902521 systemd[1]: Finished systemd-boot-update.service. Feb 8 23:24:45.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:45.979404 systemd[1]: Finished systemd-tmpfiles-setup.service. Feb 8 23:24:45.980000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:45.981530 systemd[1]: Starting audit-rules.service... Feb 8 23:24:45.983159 systemd[1]: Starting clean-ca-certificates.service... Feb 8 23:24:45.984587 systemd[1]: Starting systemd-journal-catalog-update.service... Feb 8 23:24:45.986000 audit: BPF prog-id=24 op=LOAD Feb 8 23:24:45.988000 audit: BPF prog-id=25 op=LOAD Feb 8 23:24:45.986932 systemd[1]: Starting systemd-resolved.service... Feb 8 23:24:45.989369 systemd[1]: Starting systemd-timesyncd.service... Feb 8 23:24:45.991122 systemd[1]: Starting systemd-update-utmp.service... Feb 8 23:24:45.992889 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Feb 8 23:24:45.993532 systemd[1]: Finished systemd-machine-id-commit.service. Feb 8 23:24:45.994000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:45.995225 systemd[1]: Finished clean-ca-certificates.service. Feb 8 23:24:45.995000 audit[1074]: SYSTEM_BOOT pid=1074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Feb 8 23:24:45.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:45.996336 ldconfig[1051]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Feb 8 23:24:45.998018 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Feb 8 23:24:45.998787 systemd[1]: Finished systemd-update-utmp.service. Feb 8 23:24:45.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:46.002344 systemd[1]: Finished ldconfig.service. Feb 8 23:24:46.002000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:46.005459 systemd[1]: Finished systemd-journal-catalog-update.service. Feb 8 23:24:46.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:46.007502 systemd[1]: Starting systemd-update-done.service... Feb 8 23:24:46.012183 augenrules[1085]: No rules Feb 8 23:24:46.012000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Feb 8 23:24:46.012000 audit[1085]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff00e64810 a2=420 a3=0 items=0 ppid=1063 pid=1085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:46.012000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Feb 8 23:24:46.012374 systemd[1]: Finished systemd-update-done.service. Feb 8 23:24:46.013744 systemd[1]: Finished audit-rules.service. Feb 8 23:24:46.036130 systemd-resolved[1072]: Positive Trust Anchors: Feb 8 23:24:46.036144 systemd-resolved[1072]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 8 23:24:46.036169 systemd-resolved[1072]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 8 23:24:46.042044 systemd-resolved[1072]: Defaulting to hostname 'linux'. Feb 8 23:24:46.043272 systemd[1]: Started systemd-resolved.service. Feb 8 23:24:46.043972 systemd[1]: Reached target network.target. Feb 8 23:24:46.044549 systemd[1]: Reached target nss-lookup.target. Feb 8 23:24:46.045544 systemd[1]: Started systemd-timesyncd.service. Feb 8 23:24:47.017550 systemd-resolved[1072]: Clock change detected. Flushing caches. Feb 8 23:24:47.017576 systemd-timesyncd[1073]: Contacted time server 10.0.0.1:123 (10.0.0.1). Feb 8 23:24:47.017612 systemd-timesyncd[1073]: Initial clock synchronization to Thu 2024-02-08 23:24:47.017515 UTC. Feb 8 23:24:47.018228 systemd[1]: Reached target sysinit.target. Feb 8 23:24:47.018818 systemd[1]: Started motdgen.path. Feb 8 23:24:47.019333 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Feb 8 23:24:47.020095 systemd[1]: Started systemd-tmpfiles-clean.timer. Feb 8 23:24:47.020671 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Feb 8 23:24:47.020692 systemd[1]: Reached target paths.target. Feb 8 23:24:47.021220 systemd[1]: Reached target time-set.target. Feb 8 23:24:47.021856 systemd[1]: Started logrotate.timer. Feb 8 23:24:47.022422 systemd[1]: Started mdadm.timer. Feb 8 23:24:47.022893 systemd[1]: Reached target timers.target. Feb 8 23:24:47.023621 systemd[1]: Listening on dbus.socket. Feb 8 23:24:47.024876 systemd[1]: Starting docker.socket... Feb 8 23:24:47.026754 systemd[1]: Listening on sshd.socket. Feb 8 23:24:47.027358 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 8 23:24:47.027655 systemd[1]: Listening on docker.socket. Feb 8 23:24:47.028273 systemd[1]: Reached target sockets.target. Feb 8 23:24:47.028805 systemd[1]: Reached target basic.target. Feb 8 23:24:47.029374 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 8 23:24:47.029393 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 8 23:24:47.030010 systemd[1]: Starting containerd.service... Feb 8 23:24:47.031145 systemd[1]: Starting dbus.service... Feb 8 23:24:47.032250 systemd[1]: Starting enable-oem-cloudinit.service... Feb 8 23:24:47.033496 systemd[1]: Starting extend-filesystems.service... Feb 8 23:24:47.034317 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Feb 8 23:24:47.035085 systemd[1]: Starting motdgen.service... Feb 8 23:24:47.035888 jq[1095]: false Feb 8 23:24:47.038702 systemd[1]: Starting prepare-cni-plugins.service... Feb 8 23:24:47.040598 systemd[1]: Starting prepare-critools.service... Feb 8 23:24:47.043827 dbus-daemon[1094]: [system] SELinux support is enabled Feb 8 23:24:47.049530 extend-filesystems[1096]: Found sr0 Feb 8 23:24:47.049530 extend-filesystems[1096]: Found vda Feb 8 23:24:47.049530 extend-filesystems[1096]: Found vda1 Feb 8 23:24:47.049530 extend-filesystems[1096]: Found vda2 Feb 8 23:24:47.049530 extend-filesystems[1096]: Found vda3 Feb 8 23:24:47.049530 extend-filesystems[1096]: Found usr Feb 8 23:24:47.049530 extend-filesystems[1096]: Found vda4 Feb 8 23:24:47.049530 extend-filesystems[1096]: Found vda6 Feb 8 23:24:47.049530 extend-filesystems[1096]: Found vda7 Feb 8 23:24:47.049530 extend-filesystems[1096]: Found vda9 Feb 8 23:24:47.049530 extend-filesystems[1096]: Checking size of /dev/vda9 Feb 8 23:24:47.042460 systemd[1]: Starting prepare-helm.service... Feb 8 23:24:47.079889 extend-filesystems[1096]: Resized partition /dev/vda9 Feb 8 23:24:47.043723 systemd[1]: Starting ssh-key-proc-cmdline.service... Feb 8 23:24:47.045005 systemd[1]: Starting sshd-keygen.service... Feb 8 23:24:47.047441 systemd[1]: Starting systemd-logind.service... Feb 8 23:24:47.048092 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 8 23:24:47.082599 update_engine[1112]: I0208 23:24:47.071292 1112 main.cc:92] Flatcar Update Engine starting Feb 8 23:24:47.082599 update_engine[1112]: I0208 23:24:47.082432 1112 update_check_scheduler.cc:74] Next update check in 8m12s Feb 8 23:24:47.048128 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Feb 8 23:24:47.082919 jq[1117]: true Feb 8 23:24:47.048422 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Feb 8 23:24:47.049139 systemd[1]: Starting update-engine.service... Feb 8 23:24:47.086377 tar[1122]: ./ Feb 8 23:24:47.086377 tar[1122]: ./loopback Feb 8 23:24:47.050878 systemd[1]: Starting update-ssh-keys-after-ignition.service... Feb 8 23:24:47.086701 tar[1123]: crictl Feb 8 23:24:47.053169 systemd[1]: Started dbus.service. Feb 8 23:24:47.087302 tar[1124]: linux-amd64/helm Feb 8 23:24:47.088016 extend-filesystems[1128]: resize2fs 1.46.5 (30-Dec-2021) Feb 8 23:24:47.058321 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Feb 8 23:24:47.097583 jq[1129]: true Feb 8 23:24:47.058453 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Feb 8 23:24:47.058653 systemd[1]: motdgen.service: Deactivated successfully. Feb 8 23:24:47.058762 systemd[1]: Finished motdgen.service. Feb 8 23:24:47.069144 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Feb 8 23:24:47.069268 systemd[1]: Finished ssh-key-proc-cmdline.service. Feb 8 23:24:47.075215 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Feb 8 23:24:47.075234 systemd[1]: Reached target system-config.target. Feb 8 23:24:47.076699 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Feb 8 23:24:47.076712 systemd[1]: Reached target user-config.target. Feb 8 23:24:47.082350 systemd[1]: Started update-engine.service. Feb 8 23:24:47.084263 systemd[1]: Started locksmithd.service. Feb 8 23:24:47.102446 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Feb 8 23:24:47.125859 env[1130]: time="2024-02-08T23:24:47.124729798Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Feb 8 23:24:47.133011 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Feb 8 23:24:47.151720 bash[1152]: Updated "/home/core/.ssh/authorized_keys" Feb 8 23:24:47.151868 env[1130]: time="2024-02-08T23:24:47.148485189Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Feb 8 23:24:47.151868 env[1130]: time="2024-02-08T23:24:47.151174482Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Feb 8 23:24:47.136634 systemd[1]: Finished update-ssh-keys-after-ignition.service. Feb 8 23:24:47.151571 systemd-logind[1109]: Watching system buttons on /dev/input/event1 (Power Button) Feb 8 23:24:47.151587 systemd-logind[1109]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Feb 8 23:24:47.153543 systemd-logind[1109]: New seat seat0. Feb 8 23:24:47.155044 extend-filesystems[1128]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Feb 8 23:24:47.155044 extend-filesystems[1128]: old_desc_blocks = 1, new_desc_blocks = 1 Feb 8 23:24:47.155044 extend-filesystems[1128]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Feb 8 23:24:47.162588 extend-filesystems[1096]: Resized filesystem in /dev/vda9 Feb 8 23:24:47.163307 tar[1122]: ./bandwidth Feb 8 23:24:47.156237 systemd[1]: extend-filesystems.service: Deactivated successfully. Feb 8 23:24:47.163377 env[1130]: time="2024-02-08T23:24:47.158445164Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.148-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Feb 8 23:24:47.163377 env[1130]: time="2024-02-08T23:24:47.158470381Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Feb 8 23:24:47.163377 env[1130]: time="2024-02-08T23:24:47.158639899Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 8 23:24:47.163377 env[1130]: time="2024-02-08T23:24:47.158653244Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Feb 8 23:24:47.163377 env[1130]: time="2024-02-08T23:24:47.158664035Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Feb 8 23:24:47.163377 env[1130]: time="2024-02-08T23:24:47.158672280Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Feb 8 23:24:47.163377 env[1130]: time="2024-02-08T23:24:47.158725880Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Feb 8 23:24:47.163377 env[1130]: time="2024-02-08T23:24:47.158898284Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Feb 8 23:24:47.163377 env[1130]: time="2024-02-08T23:24:47.159006797Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 8 23:24:47.163377 env[1130]: time="2024-02-08T23:24:47.159019521Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Feb 8 23:24:47.156363 systemd[1]: Finished extend-filesystems.service. Feb 8 23:24:47.163613 env[1130]: time="2024-02-08T23:24:47.159071158Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Feb 8 23:24:47.163613 env[1130]: time="2024-02-08T23:24:47.159080395Z" level=info msg="metadata content store policy set" policy=shared Feb 8 23:24:47.163967 systemd[1]: Started systemd-logind.service. Feb 8 23:24:47.173496 env[1130]: time="2024-02-08T23:24:47.173464195Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Feb 8 23:24:47.173543 env[1130]: time="2024-02-08T23:24:47.173506194Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Feb 8 23:24:47.173543 env[1130]: time="2024-02-08T23:24:47.173523225Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Feb 8 23:24:47.173591 env[1130]: time="2024-02-08T23:24:47.173560325Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Feb 8 23:24:47.173614 env[1130]: time="2024-02-08T23:24:47.173585172Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Feb 8 23:24:47.173614 env[1130]: time="2024-02-08T23:24:47.173607714Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Feb 8 23:24:47.173649 env[1130]: time="2024-02-08T23:24:47.173622922Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Feb 8 23:24:47.173649 env[1130]: time="2024-02-08T23:24:47.173641898Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Feb 8 23:24:47.173684 env[1130]: time="2024-02-08T23:24:47.173657427Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Feb 8 23:24:47.173684 env[1130]: time="2024-02-08T23:24:47.173673297Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Feb 8 23:24:47.173720 env[1130]: time="2024-02-08T23:24:47.173696280Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Feb 8 23:24:47.173739 env[1130]: time="2024-02-08T23:24:47.173718792Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Feb 8 23:24:47.173854 env[1130]: time="2024-02-08T23:24:47.173828277Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Feb 8 23:24:47.173945 env[1130]: time="2024-02-08T23:24:47.173924808Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Feb 8 23:24:47.174249 env[1130]: time="2024-02-08T23:24:47.174226695Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Feb 8 23:24:47.174290 env[1130]: time="2024-02-08T23:24:47.174264035Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Feb 8 23:24:47.174290 env[1130]: time="2024-02-08T23:24:47.174280505Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Feb 8 23:24:47.174354 env[1130]: time="2024-02-08T23:24:47.174331802Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Feb 8 23:24:47.174354 env[1130]: time="2024-02-08T23:24:47.174350927Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Feb 8 23:24:47.174410 env[1130]: time="2024-02-08T23:24:47.174365365Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Feb 8 23:24:47.174410 env[1130]: time="2024-02-08T23:24:47.174378409Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Feb 8 23:24:47.174410 env[1130]: time="2024-02-08T23:24:47.174392145Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Feb 8 23:24:47.174474 env[1130]: time="2024-02-08T23:24:47.174415649Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Feb 8 23:24:47.174474 env[1130]: time="2024-02-08T23:24:47.174436187Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Feb 8 23:24:47.174474 env[1130]: time="2024-02-08T23:24:47.174450063Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Feb 8 23:24:47.174474 env[1130]: time="2024-02-08T23:24:47.174466614Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Feb 8 23:24:47.174625 env[1130]: time="2024-02-08T23:24:47.174604363Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Feb 8 23:24:47.174625 env[1130]: time="2024-02-08T23:24:47.174628668Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Feb 8 23:24:47.174699 env[1130]: time="2024-02-08T23:24:47.174642695Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Feb 8 23:24:47.174699 env[1130]: time="2024-02-08T23:24:47.174656240Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Feb 8 23:24:47.174699 env[1130]: time="2024-02-08T23:24:47.174673011Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Feb 8 23:24:47.174699 env[1130]: time="2024-02-08T23:24:47.174685244Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Feb 8 23:24:47.174768 env[1130]: time="2024-02-08T23:24:47.174704941Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Feb 8 23:24:47.174768 env[1130]: time="2024-02-08T23:24:47.174739416Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Feb 8 23:24:47.176057 env[1130]: time="2024-02-08T23:24:47.174962915Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Feb 8 23:24:47.176652 env[1130]: time="2024-02-08T23:24:47.176068137Z" level=info msg="Connect containerd service" Feb 8 23:24:47.176652 env[1130]: time="2024-02-08T23:24:47.176098324Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Feb 8 23:24:47.176652 env[1130]: time="2024-02-08T23:24:47.176627496Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 8 23:24:47.176804 env[1130]: time="2024-02-08T23:24:47.176753663Z" level=info msg="Start subscribing containerd event" Feb 8 23:24:47.176862 env[1130]: time="2024-02-08T23:24:47.176832641Z" level=info msg="Start recovering state" Feb 8 23:24:47.176883 env[1130]: time="2024-02-08T23:24:47.176855524Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Feb 8 23:24:47.176920 env[1130]: time="2024-02-08T23:24:47.176897192Z" level=info msg=serving... address=/run/containerd/containerd.sock Feb 8 23:24:47.176920 env[1130]: time="2024-02-08T23:24:47.176903514Z" level=info msg="Start event monitor" Feb 8 23:24:47.178103 env[1130]: time="2024-02-08T23:24:47.176937327Z" level=info msg="Start snapshots syncer" Feb 8 23:24:47.178103 env[1130]: time="2024-02-08T23:24:47.176948257Z" level=info msg="Start cni network conf syncer for default" Feb 8 23:24:47.178103 env[1130]: time="2024-02-08T23:24:47.176957365Z" level=info msg="Start streaming server" Feb 8 23:24:47.178103 env[1130]: time="2024-02-08T23:24:47.176957375Z" level=info msg="containerd successfully booted in 0.059491s" Feb 8 23:24:47.177026 systemd[1]: Started containerd.service. Feb 8 23:24:47.205951 tar[1122]: ./ptp Feb 8 23:24:47.248508 tar[1122]: ./vlan Feb 8 23:24:47.289136 tar[1122]: ./host-device Feb 8 23:24:47.328542 tar[1122]: ./tuning Feb 8 23:24:47.363853 tar[1122]: ./vrf Feb 8 23:24:47.401379 tar[1122]: ./sbr Feb 8 23:24:47.423414 sshd_keygen[1119]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Feb 8 23:24:47.434861 tar[1122]: ./tap Feb 8 23:24:47.452763 systemd[1]: Finished sshd-keygen.service. Feb 8 23:24:47.454653 systemd[1]: Starting issuegen.service... Feb 8 23:24:47.459461 systemd[1]: issuegen.service: Deactivated successfully. Feb 8 23:24:47.459606 systemd[1]: Finished issuegen.service. Feb 8 23:24:47.461533 systemd[1]: Starting systemd-user-sessions.service... Feb 8 23:24:47.467587 systemd[1]: Finished systemd-user-sessions.service. Feb 8 23:24:47.469784 systemd[1]: Started getty@tty1.service. Feb 8 23:24:47.471209 systemd[1]: Started serial-getty@ttyS0.service. Feb 8 23:24:47.472072 systemd[1]: Reached target getty.target. Feb 8 23:24:47.476275 locksmithd[1138]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Feb 8 23:24:47.478161 tar[1122]: ./dhcp Feb 8 23:24:47.505072 tar[1124]: linux-amd64/LICENSE Feb 8 23:24:47.505151 tar[1124]: linux-amd64/README.md Feb 8 23:24:47.508967 systemd[1]: Finished prepare-helm.service. Feb 8 23:24:47.568376 tar[1122]: ./static Feb 8 23:24:47.580909 systemd[1]: Finished prepare-critools.service. Feb 8 23:24:47.594453 tar[1122]: ./firewall Feb 8 23:24:47.634394 tar[1122]: ./macvlan Feb 8 23:24:47.663965 tar[1122]: ./dummy Feb 8 23:24:47.693268 tar[1122]: ./bridge Feb 8 23:24:47.725166 tar[1122]: ./ipvlan Feb 8 23:24:47.754466 tar[1122]: ./portmap Feb 8 23:24:47.782313 tar[1122]: ./host-local Feb 8 23:24:47.815410 systemd[1]: Finished prepare-cni-plugins.service. Feb 8 23:24:47.816298 systemd[1]: Reached target multi-user.target. Feb 8 23:24:47.817744 systemd[1]: Starting systemd-update-utmp-runlevel.service... Feb 8 23:24:47.822882 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Feb 8 23:24:47.823086 systemd[1]: Finished systemd-update-utmp-runlevel.service. Feb 8 23:24:47.823858 systemd[1]: Startup finished in 528ms (kernel) + 5.420s (initrd) + 4.760s (userspace) = 10.709s. Feb 8 23:24:47.979262 systemd[1]: Created slice system-sshd.slice. Feb 8 23:24:47.980136 systemd[1]: Started sshd@0-10.0.0.96:22-10.0.0.1:41834.service. Feb 8 23:24:48.016257 sshd[1183]: Accepted publickey for core from 10.0.0.1 port 41834 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:24:48.017242 sshd[1183]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:24:48.024383 systemd-logind[1109]: New session 1 of user core. Feb 8 23:24:48.025166 systemd[1]: Created slice user-500.slice. Feb 8 23:24:48.026056 systemd[1]: Starting user-runtime-dir@500.service... Feb 8 23:24:48.032949 systemd[1]: Finished user-runtime-dir@500.service. Feb 8 23:24:48.033970 systemd[1]: Starting user@500.service... Feb 8 23:24:48.036212 (systemd)[1186]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:24:48.097659 systemd[1186]: Queued start job for default target default.target. Feb 8 23:24:48.098026 systemd[1186]: Reached target paths.target. Feb 8 23:24:48.098042 systemd[1186]: Reached target sockets.target. Feb 8 23:24:48.098053 systemd[1186]: Reached target timers.target. Feb 8 23:24:48.098063 systemd[1186]: Reached target basic.target. Feb 8 23:24:48.098094 systemd[1186]: Reached target default.target. Feb 8 23:24:48.098112 systemd[1186]: Startup finished in 57ms. Feb 8 23:24:48.098166 systemd[1]: Started user@500.service. Feb 8 23:24:48.098931 systemd[1]: Started session-1.scope. Feb 8 23:24:48.147925 systemd[1]: Started sshd@1-10.0.0.96:22-10.0.0.1:58634.service. Feb 8 23:24:48.183805 sshd[1195]: Accepted publickey for core from 10.0.0.1 port 58634 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:24:48.184996 sshd[1195]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:24:48.186073 systemd-networkd[1022]: eth0: Gained IPv6LL Feb 8 23:24:48.188783 systemd-logind[1109]: New session 2 of user core. Feb 8 23:24:48.189592 systemd[1]: Started session-2.scope. Feb 8 23:24:48.242711 sshd[1195]: pam_unix(sshd:session): session closed for user core Feb 8 23:24:48.245223 systemd[1]: sshd@1-10.0.0.96:22-10.0.0.1:58634.service: Deactivated successfully. Feb 8 23:24:48.245829 systemd[1]: session-2.scope: Deactivated successfully. Feb 8 23:24:48.246363 systemd-logind[1109]: Session 2 logged out. Waiting for processes to exit. Feb 8 23:24:48.247597 systemd[1]: Started sshd@2-10.0.0.96:22-10.0.0.1:58636.service. Feb 8 23:24:48.248568 systemd-logind[1109]: Removed session 2. Feb 8 23:24:48.282151 sshd[1201]: Accepted publickey for core from 10.0.0.1 port 58636 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:24:48.283343 sshd[1201]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:24:48.286419 systemd-logind[1109]: New session 3 of user core. Feb 8 23:24:48.287141 systemd[1]: Started session-3.scope. Feb 8 23:24:48.336139 sshd[1201]: pam_unix(sshd:session): session closed for user core Feb 8 23:24:48.338670 systemd[1]: sshd@2-10.0.0.96:22-10.0.0.1:58636.service: Deactivated successfully. Feb 8 23:24:48.339267 systemd[1]: session-3.scope: Deactivated successfully. Feb 8 23:24:48.339798 systemd-logind[1109]: Session 3 logged out. Waiting for processes to exit. Feb 8 23:24:48.340970 systemd[1]: Started sshd@3-10.0.0.96:22-10.0.0.1:58650.service. Feb 8 23:24:48.341649 systemd-logind[1109]: Removed session 3. Feb 8 23:24:48.375112 sshd[1207]: Accepted publickey for core from 10.0.0.1 port 58650 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:24:48.376194 sshd[1207]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:24:48.379313 systemd-logind[1109]: New session 4 of user core. Feb 8 23:24:48.380021 systemd[1]: Started session-4.scope. Feb 8 23:24:48.432483 sshd[1207]: pam_unix(sshd:session): session closed for user core Feb 8 23:24:48.434771 systemd[1]: sshd@3-10.0.0.96:22-10.0.0.1:58650.service: Deactivated successfully. Feb 8 23:24:48.435276 systemd[1]: session-4.scope: Deactivated successfully. Feb 8 23:24:48.435715 systemd-logind[1109]: Session 4 logged out. Waiting for processes to exit. Feb 8 23:24:48.436669 systemd[1]: Started sshd@4-10.0.0.96:22-10.0.0.1:58662.service. Feb 8 23:24:48.437247 systemd-logind[1109]: Removed session 4. Feb 8 23:24:48.473900 sshd[1213]: Accepted publickey for core from 10.0.0.1 port 58662 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:24:48.474903 sshd[1213]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:24:48.477938 systemd-logind[1109]: New session 5 of user core. Feb 8 23:24:48.478607 systemd[1]: Started session-5.scope. Feb 8 23:24:48.531234 sudo[1216]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Feb 8 23:24:48.531380 sudo[1216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 8 23:24:48.538202 dbus-daemon[1094]: \xd0\u001d\x87\x94\xaaU: received setenforce notice (enforcing=-1875127776) Feb 8 23:24:48.540327 sudo[1216]: pam_unix(sudo:session): session closed for user root Feb 8 23:24:48.541816 sshd[1213]: pam_unix(sshd:session): session closed for user core Feb 8 23:24:48.545350 systemd[1]: sshd@4-10.0.0.96:22-10.0.0.1:58662.service: Deactivated successfully. Feb 8 23:24:48.545838 systemd[1]: session-5.scope: Deactivated successfully. Feb 8 23:24:48.546368 systemd-logind[1109]: Session 5 logged out. Waiting for processes to exit. Feb 8 23:24:48.547210 systemd[1]: Started sshd@5-10.0.0.96:22-10.0.0.1:58678.service. Feb 8 23:24:48.547931 systemd-logind[1109]: Removed session 5. Feb 8 23:24:48.582177 sshd[1220]: Accepted publickey for core from 10.0.0.1 port 58678 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:24:48.583291 sshd[1220]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:24:48.586346 systemd-logind[1109]: New session 6 of user core. Feb 8 23:24:48.587072 systemd[1]: Started session-6.scope. Feb 8 23:24:48.637109 sudo[1224]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Feb 8 23:24:48.637324 sudo[1224]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 8 23:24:48.639257 sudo[1224]: pam_unix(sudo:session): session closed for user root Feb 8 23:24:48.642278 sudo[1223]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Feb 8 23:24:48.642420 sudo[1223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 8 23:24:48.649331 systemd[1]: Stopping audit-rules.service... Feb 8 23:24:48.649000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 8 23:24:48.650612 auditctl[1227]: No rules Feb 8 23:24:48.650866 systemd[1]: audit-rules.service: Deactivated successfully. Feb 8 23:24:48.651030 systemd[1]: Stopped audit-rules.service. Feb 8 23:24:48.651109 kernel: kauditd_printk_skb: 237 callbacks suppressed Feb 8 23:24:48.651140 kernel: audit: type=1305 audit(1707434688.649:159): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 8 23:24:48.652323 systemd[1]: Starting audit-rules.service... Feb 8 23:24:48.649000 audit[1227]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcc9389720 a2=420 a3=0 items=0 ppid=1 pid=1227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:48.655363 kernel: audit: type=1300 audit(1707434688.649:159): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcc9389720 a2=420 a3=0 items=0 ppid=1 pid=1227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:48.655394 kernel: audit: type=1327 audit(1707434688.649:159): proctitle=2F7362696E2F617564697463746C002D44 Feb 8 23:24:48.649000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Feb 8 23:24:48.656239 kernel: audit: type=1131 audit(1707434688.650:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:48.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:48.665672 augenrules[1244]: No rules Feb 8 23:24:48.666288 systemd[1]: Finished audit-rules.service. Feb 8 23:24:48.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:48.666968 sudo[1223]: pam_unix(sudo:session): session closed for user root Feb 8 23:24:48.668294 sshd[1220]: pam_unix(sshd:session): session closed for user core Feb 8 23:24:48.666000 audit[1223]: USER_END pid=1223 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:24:48.670518 systemd[1]: sshd@5-10.0.0.96:22-10.0.0.1:58678.service: Deactivated successfully. Feb 8 23:24:48.671010 systemd[1]: session-6.scope: Deactivated successfully. Feb 8 23:24:48.671877 kernel: audit: type=1130 audit(1707434688.665:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:48.671921 kernel: audit: type=1106 audit(1707434688.666:162): pid=1223 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:24:48.671954 kernel: audit: type=1104 audit(1707434688.666:163): pid=1223 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:24:48.666000 audit[1223]: CRED_DISP pid=1223 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:24:48.671524 systemd-logind[1109]: Session 6 logged out. Waiting for processes to exit. Feb 8 23:24:48.672368 systemd[1]: Started sshd@6-10.0.0.96:22-10.0.0.1:58686.service. Feb 8 23:24:48.673245 systemd-logind[1109]: Removed session 6. Feb 8 23:24:48.673813 kernel: audit: type=1106 audit(1707434688.668:164): pid=1220 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:24:48.668000 audit[1220]: USER_END pid=1220 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:24:48.668000 audit[1220]: CRED_DISP pid=1220 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:24:48.679126 kernel: audit: type=1104 audit(1707434688.668:165): pid=1220 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:24:48.679171 kernel: audit: type=1131 audit(1707434688.669:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.96:22-10.0.0.1:58678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:48.669000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.96:22-10.0.0.1:58678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:48.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.96:22-10.0.0.1:58686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:48.707000 audit[1250]: USER_ACCT pid=1250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:24:48.709108 sshd[1250]: Accepted publickey for core from 10.0.0.1 port 58686 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:24:48.708000 audit[1250]: CRED_ACQ pid=1250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:24:48.708000 audit[1250]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdddbea470 a2=3 a3=0 items=0 ppid=1 pid=1250 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:48.708000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:24:48.709972 sshd[1250]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:24:48.712860 systemd-logind[1109]: New session 7 of user core. Feb 8 23:24:48.713599 systemd[1]: Started session-7.scope. Feb 8 23:24:48.715000 audit[1250]: USER_START pid=1250 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:24:48.716000 audit[1252]: CRED_ACQ pid=1252 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:24:48.762000 audit[1253]: USER_ACCT pid=1253 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:24:48.763715 sudo[1253]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Feb 8 23:24:48.762000 audit[1253]: CRED_REFR pid=1253 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:24:48.763879 sudo[1253]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 8 23:24:48.764000 audit[1253]: USER_START pid=1253 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:24:49.284960 systemd[1]: Starting systemd-networkd-wait-online.service... Feb 8 23:24:49.289563 systemd[1]: Finished systemd-networkd-wait-online.service. Feb 8 23:24:49.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:49.289852 systemd[1]: Reached target network-online.target. Feb 8 23:24:49.290922 systemd[1]: Starting docker.service... Feb 8 23:24:49.321523 env[1271]: time="2024-02-08T23:24:49.321469314Z" level=info msg="Starting up" Feb 8 23:24:49.322794 env[1271]: time="2024-02-08T23:24:49.322747571Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 8 23:24:49.322794 env[1271]: time="2024-02-08T23:24:49.322770894Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 8 23:24:49.322794 env[1271]: time="2024-02-08T23:24:49.322800460Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 8 23:24:49.322965 env[1271]: time="2024-02-08T23:24:49.322811390Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 8 23:24:49.324173 env[1271]: time="2024-02-08T23:24:49.324148708Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 8 23:24:49.324173 env[1271]: time="2024-02-08T23:24:49.324164948Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 8 23:24:49.324245 env[1271]: time="2024-02-08T23:24:49.324175538Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 8 23:24:49.324245 env[1271]: time="2024-02-08T23:24:49.324183313Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 8 23:24:49.938516 env[1271]: time="2024-02-08T23:24:49.938464109Z" level=info msg="Loading containers: start." Feb 8 23:24:49.974000 audit[1305]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1305 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:49.974000 audit[1305]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffe5ba4b5b0 a2=0 a3=7ffe5ba4b59c items=0 ppid=1271 pid=1305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:49.974000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Feb 8 23:24:49.976000 audit[1307]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1307 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:49.976000 audit[1307]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff4ddb4c70 a2=0 a3=7fff4ddb4c5c items=0 ppid=1271 pid=1307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:49.976000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Feb 8 23:24:49.977000 audit[1309]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1309 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:49.977000 audit[1309]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffcaa72c3f0 a2=0 a3=7ffcaa72c3dc items=0 ppid=1271 pid=1309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:49.977000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 8 23:24:49.979000 audit[1311]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1311 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:49.979000 audit[1311]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc775f85f0 a2=0 a3=7ffc775f85dc items=0 ppid=1271 pid=1311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:49.979000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 8 23:24:49.980000 audit[1313]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1313 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:49.980000 audit[1313]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe145483e0 a2=0 a3=7ffe145483cc items=0 ppid=1271 pid=1313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:49.980000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Feb 8 23:24:49.997000 audit[1318]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:49.997000 audit[1318]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe2bbcd1a0 a2=0 a3=7ffe2bbcd18c items=0 ppid=1271 pid=1318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:49.997000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Feb 8 23:24:50.004000 audit[1320]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1320 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:50.004000 audit[1320]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffea549b710 a2=0 a3=7ffea549b6fc items=0 ppid=1271 pid=1320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:50.004000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Feb 8 23:24:50.006000 audit[1322]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1322 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:50.006000 audit[1322]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffe79629800 a2=0 a3=7ffe796297ec items=0 ppid=1271 pid=1322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:50.006000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Feb 8 23:24:50.008000 audit[1324]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1324 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:50.008000 audit[1324]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff2a7c4480 a2=0 a3=7fff2a7c446c items=0 ppid=1271 pid=1324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:50.008000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 8 23:24:50.016000 audit[1328]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1328 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:50.016000 audit[1328]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffdee64e410 a2=0 a3=7ffdee64e3fc items=0 ppid=1271 pid=1328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:50.016000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 8 23:24:50.017000 audit[1329]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1329 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:50.017000 audit[1329]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd3e9340a0 a2=0 a3=7ffd3e93408c items=0 ppid=1271 pid=1329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:50.017000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 8 23:24:50.025003 kernel: Initializing XFRM netlink socket Feb 8 23:24:50.051341 env[1271]: time="2024-02-08T23:24:50.051297742Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Feb 8 23:24:50.065000 audit[1336]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:50.065000 audit[1336]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffc0bf1ef10 a2=0 a3=7ffc0bf1eefc items=0 ppid=1271 pid=1336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:50.065000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Feb 8 23:24:50.078000 audit[1339]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1339 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:50.078000 audit[1339]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffc90153230 a2=0 a3=7ffc9015321c items=0 ppid=1271 pid=1339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:50.078000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Feb 8 23:24:50.081000 audit[1342]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1342 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:50.081000 audit[1342]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff98f84f00 a2=0 a3=7fff98f84eec items=0 ppid=1271 pid=1342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:50.081000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Feb 8 23:24:50.082000 audit[1344]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1344 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:50.082000 audit[1344]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe2bd04170 a2=0 a3=7ffe2bd0415c items=0 ppid=1271 pid=1344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:50.082000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Feb 8 23:24:50.084000 audit[1346]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1346 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:50.084000 audit[1346]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe61059e70 a2=0 a3=7ffe61059e5c items=0 ppid=1271 pid=1346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:50.084000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Feb 8 23:24:50.086000 audit[1348]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1348 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:50.086000 audit[1348]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffcc8311380 a2=0 a3=7ffcc831136c items=0 ppid=1271 pid=1348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:50.086000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Feb 8 23:24:50.088000 audit[1350]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1350 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:50.088000 audit[1350]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffdcec8ee60 a2=0 a3=7ffdcec8ee4c items=0 ppid=1271 pid=1350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:50.088000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Feb 8 23:24:50.094000 audit[1353]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1353 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:50.094000 audit[1353]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fff22a73330 a2=0 a3=7fff22a7331c items=0 ppid=1271 pid=1353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:50.094000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Feb 8 23:24:50.096000 audit[1355]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1355 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:50.096000 audit[1355]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffebc608330 a2=0 a3=7ffebc60831c items=0 ppid=1271 pid=1355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:50.096000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 8 23:24:50.098000 audit[1357]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1357 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:50.098000 audit[1357]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffcaa0250c0 a2=0 a3=7ffcaa0250ac items=0 ppid=1271 pid=1357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:50.098000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 8 23:24:50.100000 audit[1359]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1359 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:50.100000 audit[1359]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd40563990 a2=0 a3=7ffd4056397c items=0 ppid=1271 pid=1359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:50.100000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Feb 8 23:24:50.101468 systemd-networkd[1022]: docker0: Link UP Feb 8 23:24:50.108000 audit[1363]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1363 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:50.108000 audit[1363]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffd6e490d0 a2=0 a3=7fffd6e490bc items=0 ppid=1271 pid=1363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:50.108000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 8 23:24:50.108000 audit[1364]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1364 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:24:50.108000 audit[1364]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffefa455500 a2=0 a3=7ffefa4554ec items=0 ppid=1271 pid=1364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:24:50.108000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 8 23:24:50.110170 env[1271]: time="2024-02-08T23:24:50.110137537Z" level=info msg="Loading containers: done." Feb 8 23:24:50.118327 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2477164899-merged.mount: Deactivated successfully. Feb 8 23:24:50.122426 env[1271]: time="2024-02-08T23:24:50.122378969Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Feb 8 23:24:50.122616 env[1271]: time="2024-02-08T23:24:50.122586969Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Feb 8 23:24:50.122704 env[1271]: time="2024-02-08T23:24:50.122685213Z" level=info msg="Daemon has completed initialization" Feb 8 23:24:50.138007 systemd[1]: Started docker.service. Feb 8 23:24:50.137000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:50.144414 env[1271]: time="2024-02-08T23:24:50.144359393Z" level=info msg="API listen on /run/docker.sock" Feb 8 23:24:50.160425 systemd[1]: Reloading. Feb 8 23:24:50.230911 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2024-02-08T23:24:50Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 8 23:24:50.230939 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2024-02-08T23:24:50Z" level=info msg="torcx already run" Feb 8 23:24:50.284468 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 8 23:24:50.284486 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 8 23:24:50.302697 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 8 23:24:50.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.354000 audit: BPF prog-id=31 op=LOAD Feb 8 23:24:50.354000 audit: BPF prog-id=24 op=UNLOAD Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit: BPF prog-id=32 op=LOAD Feb 8 23:24:50.357000 audit: BPF prog-id=29 op=UNLOAD Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.357000 audit: BPF prog-id=33 op=LOAD Feb 8 23:24:50.357000 audit: BPF prog-id=20 op=UNLOAD Feb 8 23:24:50.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.358000 audit: BPF prog-id=34 op=LOAD Feb 8 23:24:50.358000 audit: BPF prog-id=26 op=UNLOAD Feb 8 23:24:50.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit: BPF prog-id=35 op=LOAD Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit: BPF prog-id=36 op=LOAD Feb 8 23:24:50.359000 audit: BPF prog-id=27 op=UNLOAD Feb 8 23:24:50.359000 audit: BPF prog-id=28 op=UNLOAD Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit: BPF prog-id=37 op=LOAD Feb 8 23:24:50.359000 audit: BPF prog-id=15 op=UNLOAD Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit: BPF prog-id=38 op=LOAD Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.359000 audit: BPF prog-id=39 op=LOAD Feb 8 23:24:50.359000 audit: BPF prog-id=16 op=UNLOAD Feb 8 23:24:50.359000 audit: BPF prog-id=17 op=UNLOAD Feb 8 23:24:50.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.360000 audit: BPF prog-id=40 op=LOAD Feb 8 23:24:50.360000 audit: BPF prog-id=25 op=UNLOAD Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit: BPF prog-id=41 op=LOAD Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit: BPF prog-id=42 op=LOAD Feb 8 23:24:50.361000 audit: BPF prog-id=18 op=UNLOAD Feb 8 23:24:50.361000 audit: BPF prog-id=19 op=UNLOAD Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit: BPF prog-id=43 op=LOAD Feb 8 23:24:50.361000 audit: BPF prog-id=21 op=UNLOAD Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.362000 audit: BPF prog-id=44 op=LOAD Feb 8 23:24:50.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:24:50.362000 audit: BPF prog-id=45 op=LOAD Feb 8 23:24:50.362000 audit: BPF prog-id=22 op=UNLOAD Feb 8 23:24:50.362000 audit: BPF prog-id=23 op=UNLOAD Feb 8 23:24:50.368344 systemd[1]: Started kubelet.service. Feb 8 23:24:50.367000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:24:50.409556 kubelet[1453]: E0208 23:24:50.409496 1453 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Feb 8 23:24:50.411280 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 8 23:24:50.411398 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 8 23:24:50.410000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 8 23:24:50.717066 env[1130]: time="2024-02-08T23:24:50.716949148Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.10\"" Feb 8 23:24:51.463580 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2844148219.mount: Deactivated successfully. Feb 8 23:24:53.059412 env[1130]: time="2024-02-08T23:24:53.059349628Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:53.061139 env[1130]: time="2024-02-08T23:24:53.061094230Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7968fc5c824ed95404f421a90882835f250220c0fd799b4fceef340dd5585ed5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:53.062677 env[1130]: time="2024-02-08T23:24:53.062627294Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:53.063911 env[1130]: time="2024-02-08T23:24:53.063878159Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:cfcebda74d6e665b68931d3589ee69fde81cd503ff3169888e4502af65579d98,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:53.064555 env[1130]: time="2024-02-08T23:24:53.064525333Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.10\" returns image reference \"sha256:7968fc5c824ed95404f421a90882835f250220c0fd799b4fceef340dd5585ed5\"" Feb 8 23:24:53.072062 env[1130]: time="2024-02-08T23:24:53.072031808Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.10\"" Feb 8 23:24:55.090581 env[1130]: time="2024-02-08T23:24:55.090528098Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:55.092355 env[1130]: time="2024-02-08T23:24:55.092314828Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c8134be729ba23c6e0c3e5dd52c393fc8d3cfc688bcec33540f64bb0137b67e0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:55.096322 env[1130]: time="2024-02-08T23:24:55.096291614Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:55.097078 env[1130]: time="2024-02-08T23:24:55.097049886Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:fa168ebca1f6dbfe86ef0a690e007531c1f53569274fc7dc2774fe228b6ce8c2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:55.097750 env[1130]: time="2024-02-08T23:24:55.097716245Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.10\" returns image reference \"sha256:c8134be729ba23c6e0c3e5dd52c393fc8d3cfc688bcec33540f64bb0137b67e0\"" Feb 8 23:24:55.106406 env[1130]: time="2024-02-08T23:24:55.106368278Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.10\"" Feb 8 23:24:56.658183 env[1130]: time="2024-02-08T23:24:56.658119741Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:56.660044 env[1130]: time="2024-02-08T23:24:56.659992333Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5eed9876e7181341b7015e3486dfd234f8e0d0d7d3d19b1bb971d720cd320975,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:56.661709 env[1130]: time="2024-02-08T23:24:56.661674196Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:56.663281 env[1130]: time="2024-02-08T23:24:56.663252596Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:09294de61e63987f181077cbc2f5c82463878af9cd8ecc6110c54150c9ae3143,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:56.663955 env[1130]: time="2024-02-08T23:24:56.663915939Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.10\" returns image reference \"sha256:5eed9876e7181341b7015e3486dfd234f8e0d0d7d3d19b1bb971d720cd320975\"" Feb 8 23:24:56.672319 env[1130]: time="2024-02-08T23:24:56.672282677Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.10\"" Feb 8 23:24:57.665232 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount582385848.mount: Deactivated successfully. Feb 8 23:24:58.435633 env[1130]: time="2024-02-08T23:24:58.435552107Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:58.466671 env[1130]: time="2024-02-08T23:24:58.466612866Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:db7b01e105753475c198490cf875df1314fd1a599f67ea1b184586cb399e1cae,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:58.480767 env[1130]: time="2024-02-08T23:24:58.480727951Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:58.491930 env[1130]: time="2024-02-08T23:24:58.491886894Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d084b53c772f62ec38fddb2348a82d4234016daf6cd43fedbf0b3281f3790f88,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:58.492433 env[1130]: time="2024-02-08T23:24:58.492385399Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.10\" returns image reference \"sha256:db7b01e105753475c198490cf875df1314fd1a599f67ea1b184586cb399e1cae\"" Feb 8 23:24:58.501732 env[1130]: time="2024-02-08T23:24:58.501688312Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Feb 8 23:24:59.020614 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1940224639.mount: Deactivated successfully. Feb 8 23:24:59.026398 env[1130]: time="2024-02-08T23:24:59.026362366Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:59.028352 env[1130]: time="2024-02-08T23:24:59.028316690Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:59.423604 env[1130]: time="2024-02-08T23:24:59.423434235Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:59.428343 env[1130]: time="2024-02-08T23:24:59.428303415Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:24:59.428854 env[1130]: time="2024-02-08T23:24:59.428816247Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Feb 8 23:24:59.437241 env[1130]: time="2024-02-08T23:24:59.437204945Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Feb 8 23:25:00.075072 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1550303539.mount: Deactivated successfully. Feb 8 23:25:00.662138 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Feb 8 23:25:00.662322 systemd[1]: Stopped kubelet.service. Feb 8 23:25:00.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:00.663187 kernel: kauditd_printk_skb: 259 callbacks suppressed Feb 8 23:25:00.663226 kernel: audit: type=1130 audit(1707434700.661:376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:00.663607 systemd[1]: Started kubelet.service. Feb 8 23:25:00.661000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:00.668705 kernel: audit: type=1131 audit(1707434700.661:377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:00.662000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:00.672605 kernel: audit: type=1130 audit(1707434700.662:378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:00.710226 kubelet[1510]: E0208 23:25:00.710160 1510 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Feb 8 23:25:00.713353 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 8 23:25:00.713477 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 8 23:25:00.712000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 8 23:25:00.717001 kernel: audit: type=1131 audit(1707434700.712:379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 8 23:25:05.289254 env[1130]: time="2024-02-08T23:25:05.289190276Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:05.290761 env[1130]: time="2024-02-08T23:25:05.290708122Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:05.292365 env[1130]: time="2024-02-08T23:25:05.292327849Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:05.293732 env[1130]: time="2024-02-08T23:25:05.293703609Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:05.295057 env[1130]: time="2024-02-08T23:25:05.295017983Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681\"" Feb 8 23:25:05.310157 env[1130]: time="2024-02-08T23:25:05.310123867Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Feb 8 23:25:05.920263 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1967201862.mount: Deactivated successfully. Feb 8 23:25:06.912150 env[1130]: time="2024-02-08T23:25:06.912090384Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:06.913901 env[1130]: time="2024-02-08T23:25:06.913872966Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:06.915536 env[1130]: time="2024-02-08T23:25:06.915499185Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:06.917845 env[1130]: time="2024-02-08T23:25:06.917790031Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:06.918519 env[1130]: time="2024-02-08T23:25:06.918484302Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Feb 8 23:25:09.708571 systemd[1]: Stopped kubelet.service. Feb 8 23:25:09.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:09.715262 kernel: audit: type=1130 audit(1707434709.707:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:09.715351 kernel: audit: type=1131 audit(1707434709.707:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:09.707000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:09.740673 systemd[1]: Reloading. Feb 8 23:25:09.878629 /usr/lib/systemd/system-generators/torcx-generator[1622]: time="2024-02-08T23:25:09Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 8 23:25:09.878659 /usr/lib/systemd/system-generators/torcx-generator[1622]: time="2024-02-08T23:25:09Z" level=info msg="torcx already run" Feb 8 23:25:09.981884 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 8 23:25:09.981908 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 8 23:25:10.006053 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 8 23:25:10.070424 kernel: audit: type=1400 audit(1707434710.058:382): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.070535 kernel: audit: type=1400 audit(1707434710.058:383): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.070554 kernel: audit: type=1400 audit(1707434710.058:384): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.070572 kernel: audit: type=1400 audit(1707434710.058:385): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.070588 kernel: audit: type=1400 audit(1707434710.058:386): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.072865 kernel: audit: type=1400 audit(1707434710.058:387): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.072916 kernel: audit: type=1400 audit(1707434710.058:388): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077326 kernel: audit: type=1400 audit(1707434710.058:389): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.062000 audit: BPF prog-id=46 op=LOAD Feb 8 23:25:10.062000 audit: BPF prog-id=31 op=UNLOAD Feb 8 23:25:10.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.069000 audit: BPF prog-id=47 op=LOAD Feb 8 23:25:10.069000 audit: BPF prog-id=32 op=UNLOAD Feb 8 23:25:10.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.071000 audit: BPF prog-id=48 op=LOAD Feb 8 23:25:10.071000 audit: BPF prog-id=33 op=UNLOAD Feb 8 23:25:10.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit: BPF prog-id=49 op=LOAD Feb 8 23:25:10.076000 audit: BPF prog-id=34 op=UNLOAD Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit: BPF prog-id=50 op=LOAD Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit: BPF prog-id=51 op=LOAD Feb 8 23:25:10.076000 audit: BPF prog-id=35 op=UNLOAD Feb 8 23:25:10.076000 audit: BPF prog-id=36 op=UNLOAD Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit: BPF prog-id=52 op=LOAD Feb 8 23:25:10.077000 audit: BPF prog-id=37 op=UNLOAD Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit: BPF prog-id=53 op=LOAD Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit: BPF prog-id=54 op=LOAD Feb 8 23:25:10.077000 audit: BPF prog-id=38 op=UNLOAD Feb 8 23:25:10.077000 audit: BPF prog-id=39 op=UNLOAD Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.078000 audit: BPF prog-id=55 op=LOAD Feb 8 23:25:10.078000 audit: BPF prog-id=40 op=UNLOAD Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit: BPF prog-id=56 op=LOAD Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit: BPF prog-id=57 op=LOAD Feb 8 23:25:10.079000 audit: BPF prog-id=41 op=UNLOAD Feb 8 23:25:10.079000 audit: BPF prog-id=42 op=UNLOAD Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit: BPF prog-id=58 op=LOAD Feb 8 23:25:10.079000 audit: BPF prog-id=43 op=UNLOAD Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit: BPF prog-id=59 op=LOAD Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.079000 audit: BPF prog-id=60 op=LOAD Feb 8 23:25:10.079000 audit: BPF prog-id=44 op=UNLOAD Feb 8 23:25:10.079000 audit: BPF prog-id=45 op=UNLOAD Feb 8 23:25:10.090418 systemd[1]: Started kubelet.service. Feb 8 23:25:10.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:10.131890 kubelet[1664]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 8 23:25:10.131890 kubelet[1664]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Feb 8 23:25:10.131890 kubelet[1664]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 8 23:25:10.132265 kubelet[1664]: I0208 23:25:10.131918 1664 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 8 23:25:10.395223 kubelet[1664]: I0208 23:25:10.395121 1664 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Feb 8 23:25:10.395223 kubelet[1664]: I0208 23:25:10.395147 1664 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 8 23:25:10.395394 kubelet[1664]: I0208 23:25:10.395379 1664 server.go:837] "Client rotation is on, will bootstrap in background" Feb 8 23:25:10.398679 kubelet[1664]: I0208 23:25:10.398659 1664 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 8 23:25:10.399746 kubelet[1664]: E0208 23:25:10.399732 1664 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.96:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.96:6443: connect: connection refused Feb 8 23:25:10.401910 kubelet[1664]: I0208 23:25:10.401891 1664 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 8 23:25:10.402099 kubelet[1664]: I0208 23:25:10.402078 1664 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 8 23:25:10.402149 kubelet[1664]: I0208 23:25:10.402135 1664 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Feb 8 23:25:10.402231 kubelet[1664]: I0208 23:25:10.402155 1664 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Feb 8 23:25:10.402231 kubelet[1664]: I0208 23:25:10.402165 1664 container_manager_linux.go:302] "Creating device plugin manager" Feb 8 23:25:10.402231 kubelet[1664]: I0208 23:25:10.402232 1664 state_mem.go:36] "Initialized new in-memory state store" Feb 8 23:25:10.404455 kubelet[1664]: I0208 23:25:10.404439 1664 kubelet.go:405] "Attempting to sync node with API server" Feb 8 23:25:10.404455 kubelet[1664]: I0208 23:25:10.404458 1664 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 8 23:25:10.404527 kubelet[1664]: I0208 23:25:10.404475 1664 kubelet.go:309] "Adding apiserver pod source" Feb 8 23:25:10.404527 kubelet[1664]: I0208 23:25:10.404488 1664 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 8 23:25:10.405083 kubelet[1664]: I0208 23:25:10.405061 1664 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 8 23:25:10.405083 kubelet[1664]: W0208 23:25:10.405067 1664 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.96:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.96:6443: connect: connection refused Feb 8 23:25:10.405147 kubelet[1664]: E0208 23:25:10.405113 1664 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.96:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.96:6443: connect: connection refused Feb 8 23:25:10.405317 kubelet[1664]: W0208 23:25:10.405298 1664 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Feb 8 23:25:10.405433 kubelet[1664]: W0208 23:25:10.405381 1664 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.96:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.96:6443: connect: connection refused Feb 8 23:25:10.405433 kubelet[1664]: E0208 23:25:10.405428 1664 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.96:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.96:6443: connect: connection refused Feb 8 23:25:10.405643 kubelet[1664]: I0208 23:25:10.405628 1664 server.go:1168] "Started kubelet" Feb 8 23:25:10.406028 kubelet[1664]: E0208 23:25:10.406014 1664 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 8 23:25:10.406103 kubelet[1664]: E0208 23:25:10.406089 1664 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 8 23:25:10.406242 kubelet[1664]: I0208 23:25:10.406232 1664 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Feb 8 23:25:10.406468 kubelet[1664]: E0208 23:25:10.406393 1664 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.17b206d29ee5e9de", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2024, time.February, 8, 23, 25, 10, 405605854, time.Local), LastTimestamp:time.Date(2024, time.February, 8, 23, 25, 10, 405605854, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.96:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.96:6443: connect: connection refused'(may retry after sleeping) Feb 8 23:25:10.405000 audit[1664]: AVC avc: denied { mac_admin } for pid=1664 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.405000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 8 23:25:10.405000 audit[1664]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00087ede0 a1=c000720780 a2=c00087edb0 a3=25 items=0 ppid=1 pid=1664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:10.405000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 8 23:25:10.406964 kubelet[1664]: I0208 23:25:10.406551 1664 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 8 23:25:10.405000 audit[1664]: AVC avc: denied { mac_admin } for pid=1664 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.405000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 8 23:25:10.405000 audit[1664]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c22080 a1=c000c16150 a2=c000a6ac90 a3=25 items=0 ppid=1 pid=1664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:10.405000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 8 23:25:10.407225 kubelet[1664]: I0208 23:25:10.407026 1664 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 8 23:25:10.407225 kubelet[1664]: I0208 23:25:10.406595 1664 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Feb 8 23:25:10.407225 kubelet[1664]: I0208 23:25:10.407115 1664 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 8 23:25:10.407627 kubelet[1664]: I0208 23:25:10.407608 1664 server.go:461] "Adding debug handlers to kubelet server" Feb 8 23:25:10.408904 kubelet[1664]: E0208 23:25:10.408884 1664 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Feb 8 23:25:10.408999 kubelet[1664]: I0208 23:25:10.408969 1664 volume_manager.go:284] "Starting Kubelet Volume Manager" Feb 8 23:25:10.409385 kubelet[1664]: I0208 23:25:10.409363 1664 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Feb 8 23:25:10.410219 kubelet[1664]: W0208 23:25:10.410177 1664 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.96:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.96:6443: connect: connection refused Feb 8 23:25:10.410310 kubelet[1664]: E0208 23:25:10.410222 1664 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.96:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.96:6443: connect: connection refused Feb 8 23:25:10.411111 kubelet[1664]: E0208 23:25:10.411099 1664 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.96:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.96:6443: connect: connection refused" interval="200ms" Feb 8 23:25:10.410000 audit[1676]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1676 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:10.410000 audit[1676]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff6954f620 a2=0 a3=7fff6954f60c items=0 ppid=1664 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:10.410000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 8 23:25:10.411000 audit[1677]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1677 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:10.411000 audit[1677]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffde2745870 a2=0 a3=7ffde274585c items=0 ppid=1664 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:10.411000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 8 23:25:10.413000 audit[1679]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1679 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:10.413000 audit[1679]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffd19ed3f0 a2=0 a3=7fffd19ed3dc items=0 ppid=1664 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:10.413000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 8 23:25:10.414000 audit[1681]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1681 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:10.414000 audit[1681]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcf7a264a0 a2=0 a3=7ffcf7a2648c items=0 ppid=1664 pid=1681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:10.414000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 8 23:25:10.418000 audit[1684]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1684 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:10.418000 audit[1684]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffc961770b0 a2=0 a3=7ffc9617709c items=0 ppid=1664 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:10.418000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Feb 8 23:25:10.419267 kubelet[1664]: I0208 23:25:10.419242 1664 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Feb 8 23:25:10.418000 audit[1685]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1685 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:10.418000 audit[1685]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd406dc7d0 a2=0 a3=7ffd406dc7bc items=0 ppid=1664 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:10.418000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 8 23:25:10.420354 kubelet[1664]: I0208 23:25:10.420338 1664 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Feb 8 23:25:10.420413 kubelet[1664]: I0208 23:25:10.420360 1664 status_manager.go:207] "Starting to sync pod status with apiserver" Feb 8 23:25:10.420413 kubelet[1664]: I0208 23:25:10.420384 1664 kubelet.go:2257] "Starting kubelet main sync loop" Feb 8 23:25:10.420454 kubelet[1664]: E0208 23:25:10.420426 1664 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Feb 8 23:25:10.420000 audit[1687]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1687 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:10.420000 audit[1687]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc50952740 a2=0 a3=7ffc5095272c items=0 ppid=1664 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:10.420000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 8 23:25:10.420000 audit[1688]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1688 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:10.420000 audit[1688]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcaf7d3840 a2=0 a3=7ffcaf7d382c items=0 ppid=1664 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:10.420000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 8 23:25:10.421000 audit[1689]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=1689 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:10.421000 audit[1689]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdafbad010 a2=0 a3=7ffdafbacffc items=0 ppid=1664 pid=1689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:10.421000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 8 23:25:10.422000 audit[1690]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=1690 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:10.422000 audit[1690]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe52f5a530 a2=0 a3=7ffe52f5a51c items=0 ppid=1664 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:10.422000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 8 23:25:10.423000 audit[1691]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1691 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:10.423000 audit[1691]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7fff3f563370 a2=0 a3=7fff3f56335c items=0 ppid=1664 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:10.423000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 8 23:25:10.424000 audit[1692]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1692 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:10.424000 audit[1692]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff24d16060 a2=0 a3=7fff24d1604c items=0 ppid=1664 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:10.424000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 8 23:25:10.425626 kubelet[1664]: W0208 23:25:10.425584 1664 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.96:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.96:6443: connect: connection refused Feb 8 23:25:10.425626 kubelet[1664]: E0208 23:25:10.425627 1664 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.96:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.96:6443: connect: connection refused Feb 8 23:25:10.427847 kubelet[1664]: I0208 23:25:10.427822 1664 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 8 23:25:10.427847 kubelet[1664]: I0208 23:25:10.427840 1664 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 8 23:25:10.427995 kubelet[1664]: I0208 23:25:10.427864 1664 state_mem.go:36] "Initialized new in-memory state store" Feb 8 23:25:10.487944 kubelet[1664]: I0208 23:25:10.487873 1664 policy_none.go:49] "None policy: Start" Feb 8 23:25:10.488787 kubelet[1664]: I0208 23:25:10.488759 1664 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 8 23:25:10.488787 kubelet[1664]: I0208 23:25:10.488784 1664 state_mem.go:35] "Initializing new in-memory state store" Feb 8 23:25:10.510840 kubelet[1664]: I0208 23:25:10.510818 1664 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 8 23:25:10.511241 kubelet[1664]: E0208 23:25:10.511222 1664 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.96:6443/api/v1/nodes\": dial tcp 10.0.0.96:6443: connect: connection refused" node="localhost" Feb 8 23:25:10.521007 kubelet[1664]: E0208 23:25:10.520964 1664 kubelet.go:2281] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Feb 8 23:25:10.524281 systemd[1]: Created slice kubepods.slice. Feb 8 23:25:10.527795 systemd[1]: Created slice kubepods-burstable.slice. Feb 8 23:25:10.530244 systemd[1]: Created slice kubepods-besteffort.slice. Feb 8 23:25:10.538461 kubelet[1664]: I0208 23:25:10.538435 1664 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 8 23:25:10.537000 audit[1664]: AVC avc: denied { mac_admin } for pid=1664 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:10.537000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 8 23:25:10.537000 audit[1664]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a6ac00 a1=c000ea0690 a2=c000a6abd0 a3=25 items=0 ppid=1 pid=1664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:10.537000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 8 23:25:10.538689 kubelet[1664]: I0208 23:25:10.538503 1664 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 8 23:25:10.538689 kubelet[1664]: I0208 23:25:10.538673 1664 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 8 23:25:10.539318 kubelet[1664]: E0208 23:25:10.539280 1664 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Feb 8 23:25:10.612464 kubelet[1664]: E0208 23:25:10.612423 1664 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.96:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.96:6443: connect: connection refused" interval="400ms" Feb 8 23:25:10.712797 kubelet[1664]: I0208 23:25:10.712712 1664 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 8 23:25:10.713009 kubelet[1664]: E0208 23:25:10.712992 1664 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.96:6443/api/v1/nodes\": dial tcp 10.0.0.96:6443: connect: connection refused" node="localhost" Feb 8 23:25:10.722113 kubelet[1664]: I0208 23:25:10.722083 1664 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:25:10.722942 kubelet[1664]: I0208 23:25:10.722918 1664 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:25:10.723450 kubelet[1664]: I0208 23:25:10.723435 1664 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:25:10.727384 systemd[1]: Created slice kubepods-burstable-pod4dd5073a91f4e38dd18d469aab166298.slice. Feb 8 23:25:10.738107 systemd[1]: Created slice kubepods-burstable-pod7709ea05d7cdf82b0d7e594b61a10331.slice. Feb 8 23:25:10.741249 systemd[1]: Created slice kubepods-burstable-pod2b0e94b38682f4e439413801d3cc54db.slice. Feb 8 23:25:10.811547 kubelet[1664]: I0208 23:25:10.811500 1664 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 8 23:25:10.811547 kubelet[1664]: I0208 23:25:10.811552 1664 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4dd5073a91f4e38dd18d469aab166298-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"4dd5073a91f4e38dd18d469aab166298\") " pod="kube-system/kube-apiserver-localhost" Feb 8 23:25:10.811718 kubelet[1664]: I0208 23:25:10.811571 1664 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 8 23:25:10.811718 kubelet[1664]: I0208 23:25:10.811695 1664 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 8 23:25:10.811805 kubelet[1664]: I0208 23:25:10.811777 1664 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 8 23:25:10.811835 kubelet[1664]: I0208 23:25:10.811814 1664 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 8 23:25:10.811873 kubelet[1664]: I0208 23:25:10.811858 1664 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/2b0e94b38682f4e439413801d3cc54db-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"2b0e94b38682f4e439413801d3cc54db\") " pod="kube-system/kube-scheduler-localhost" Feb 8 23:25:10.811902 kubelet[1664]: I0208 23:25:10.811888 1664 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4dd5073a91f4e38dd18d469aab166298-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"4dd5073a91f4e38dd18d469aab166298\") " pod="kube-system/kube-apiserver-localhost" Feb 8 23:25:10.811925 kubelet[1664]: I0208 23:25:10.811919 1664 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4dd5073a91f4e38dd18d469aab166298-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"4dd5073a91f4e38dd18d469aab166298\") " pod="kube-system/kube-apiserver-localhost" Feb 8 23:25:11.012955 kubelet[1664]: E0208 23:25:11.012855 1664 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.96:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.96:6443: connect: connection refused" interval="800ms" Feb 8 23:25:11.037246 kubelet[1664]: E0208 23:25:11.037214 1664 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:11.037942 env[1130]: time="2024-02-08T23:25:11.037899575Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:4dd5073a91f4e38dd18d469aab166298,Namespace:kube-system,Attempt:0,}" Feb 8 23:25:11.040060 kubelet[1664]: E0208 23:25:11.040032 1664 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:11.040521 env[1130]: time="2024-02-08T23:25:11.040480654Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:7709ea05d7cdf82b0d7e594b61a10331,Namespace:kube-system,Attempt:0,}" Feb 8 23:25:11.042618 kubelet[1664]: E0208 23:25:11.042595 1664 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:11.042870 env[1130]: time="2024-02-08T23:25:11.042843004Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:2b0e94b38682f4e439413801d3cc54db,Namespace:kube-system,Attempt:0,}" Feb 8 23:25:11.113995 kubelet[1664]: I0208 23:25:11.113956 1664 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 8 23:25:11.114221 kubelet[1664]: E0208 23:25:11.114204 1664 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.96:6443/api/v1/nodes\": dial tcp 10.0.0.96:6443: connect: connection refused" node="localhost" Feb 8 23:25:11.229151 kubelet[1664]: W0208 23:25:11.229089 1664 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.96:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.96:6443: connect: connection refused Feb 8 23:25:11.229151 kubelet[1664]: E0208 23:25:11.229147 1664 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.96:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.96:6443: connect: connection refused Feb 8 23:25:11.397032 kubelet[1664]: W0208 23:25:11.396916 1664 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.96:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.96:6443: connect: connection refused Feb 8 23:25:11.397032 kubelet[1664]: E0208 23:25:11.396959 1664 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.96:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.96:6443: connect: connection refused Feb 8 23:25:11.470938 kubelet[1664]: W0208 23:25:11.470908 1664 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.96:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.96:6443: connect: connection refused Feb 8 23:25:11.470938 kubelet[1664]: E0208 23:25:11.470938 1664 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.96:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.96:6443: connect: connection refused Feb 8 23:25:11.814454 kubelet[1664]: E0208 23:25:11.814346 1664 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.96:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.96:6443: connect: connection refused" interval="1.6s" Feb 8 23:25:11.852716 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3793886447.mount: Deactivated successfully. Feb 8 23:25:11.858069 env[1130]: time="2024-02-08T23:25:11.858021854Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:11.858933 env[1130]: time="2024-02-08T23:25:11.858907444Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:11.861568 env[1130]: time="2024-02-08T23:25:11.861532426Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:11.863172 env[1130]: time="2024-02-08T23:25:11.863122968Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:11.864235 env[1130]: time="2024-02-08T23:25:11.864216649Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:11.865342 env[1130]: time="2024-02-08T23:25:11.865320469Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:11.866415 env[1130]: time="2024-02-08T23:25:11.866397258Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:11.868049 env[1130]: time="2024-02-08T23:25:11.868012206Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:11.870905 env[1130]: time="2024-02-08T23:25:11.870882778Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:11.871447 env[1130]: time="2024-02-08T23:25:11.871420637Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:11.872096 env[1130]: time="2024-02-08T23:25:11.872076637Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:11.872646 env[1130]: time="2024-02-08T23:25:11.872625155Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:11.875004 kubelet[1664]: W0208 23:25:11.874933 1664 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.96:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.96:6443: connect: connection refused Feb 8 23:25:11.875004 kubelet[1664]: E0208 23:25:11.875003 1664 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.96:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.96:6443: connect: connection refused Feb 8 23:25:11.891062 env[1130]: time="2024-02-08T23:25:11.890969701Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:25:11.891062 env[1130]: time="2024-02-08T23:25:11.891037999Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:25:11.891062 env[1130]: time="2024-02-08T23:25:11.891051264Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:25:11.891272 env[1130]: time="2024-02-08T23:25:11.891186798Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/db417bbf6aa40867f8ac73aea314499a30fec8866f84eb42974f572be950885f pid=1704 runtime=io.containerd.runc.v2 Feb 8 23:25:11.901343 env[1130]: time="2024-02-08T23:25:11.901275364Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:25:11.901343 env[1130]: time="2024-02-08T23:25:11.901313666Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:25:11.901343 env[1130]: time="2024-02-08T23:25:11.901329566Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:25:11.901539 env[1130]: time="2024-02-08T23:25:11.901451124Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f97f7a06d567ba12afec453c50d38e465bcfa79d8d3ad2d94c16a7bdc8db2df6 pid=1732 runtime=io.containerd.runc.v2 Feb 8 23:25:11.903014 systemd[1]: Started cri-containerd-db417bbf6aa40867f8ac73aea314499a30fec8866f84eb42974f572be950885f.scope. Feb 8 23:25:11.907211 env[1130]: time="2024-02-08T23:25:11.907128018Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:25:11.907211 env[1130]: time="2024-02-08T23:25:11.907176008Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:25:11.907211 env[1130]: time="2024-02-08T23:25:11.907186237Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:25:11.907434 env[1130]: time="2024-02-08T23:25:11.907333974Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1d5addd4019a575da1b1946d7ff791da3eb3cb0a3df1e06cb7c9fc6642e195e6 pid=1747 runtime=io.containerd.runc.v2 Feb 8 23:25:11.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit: BPF prog-id=61 op=LOAD Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=1704 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:11.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462343137626266366161343038363766386163373361656133313434 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=1704 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:11.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462343137626266366161343038363766386163373361656133313434 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit: BPF prog-id=62 op=LOAD Feb 8 23:25:11.913000 audit[1713]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0003ca4e0 items=0 ppid=1704 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:11.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462343137626266366161343038363766386163373361656133313434 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit: BPF prog-id=63 op=LOAD Feb 8 23:25:11.913000 audit[1713]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0003ca528 items=0 ppid=1704 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:11.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462343137626266366161343038363766386163373361656133313434 Feb 8 23:25:11.913000 audit: BPF prog-id=63 op=UNLOAD Feb 8 23:25:11.913000 audit: BPF prog-id=62 op=UNLOAD Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.913000 audit: BPF prog-id=64 op=LOAD Feb 8 23:25:11.913000 audit[1713]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0003ca938 items=0 ppid=1704 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:11.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462343137626266366161343038363766386163373361656133313434 Feb 8 23:25:11.916641 kubelet[1664]: I0208 23:25:11.915544 1664 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 8 23:25:11.916641 kubelet[1664]: E0208 23:25:11.915872 1664 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.96:6443/api/v1/nodes\": dial tcp 10.0.0.96:6443: connect: connection refused" node="localhost" Feb 8 23:25:11.919751 systemd[1]: Started cri-containerd-f97f7a06d567ba12afec453c50d38e465bcfa79d8d3ad2d94c16a7bdc8db2df6.scope. Feb 8 23:25:11.924807 systemd[1]: Started cri-containerd-1d5addd4019a575da1b1946d7ff791da3eb3cb0a3df1e06cb7c9fc6642e195e6.scope. Feb 8 23:25:11.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.936000 audit: BPF prog-id=65 op=LOAD Feb 8 23:25:11.937000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.937000 audit[1762]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1747 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:11.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164356164646434303139613537356461316231393436643766663739 Feb 8 23:25:11.937000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.937000 audit[1762]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1747 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:11.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164356164646434303139613537356461316231393436643766663739 Feb 8 23:25:11.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit: BPF prog-id=66 op=LOAD Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1746]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1732 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:11.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639376637613036643536376261313261666563343533633530643338 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1746]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=1732 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:11.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639376637613036643536376261313261666563343533633530643338 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit: BPF prog-id=67 op=LOAD Feb 8 23:25:11.938000 audit[1746]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0003ceae0 items=0 ppid=1732 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:11.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639376637613036643536376261313261666563343533633530643338 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit: BPF prog-id=68 op=LOAD Feb 8 23:25:11.939000 audit[1762]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000092a10 items=0 ppid=1747 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:11.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164356164646434303139613537356461316231393436643766663739 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit: BPF prog-id=69 op=LOAD Feb 8 23:25:11.939000 audit[1762]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000092a58 items=0 ppid=1747 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:11.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164356164646434303139613537356461316231393436643766663739 Feb 8 23:25:11.939000 audit: BPF prog-id=69 op=UNLOAD Feb 8 23:25:11.939000 audit: BPF prog-id=68 op=UNLOAD Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { perfmon } for pid=1762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1762]: AVC avc: denied { bpf } for pid=1762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit: BPF prog-id=70 op=LOAD Feb 8 23:25:11.939000 audit[1762]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000092e68 items=0 ppid=1747 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:11.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164356164646434303139613537356461316231393436643766663739 Feb 8 23:25:11.938000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.938000 audit: BPF prog-id=71 op=LOAD Feb 8 23:25:11.938000 audit[1746]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003ceb28 items=0 ppid=1732 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:11.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639376637613036643536376261313261666563343533633530643338 Feb 8 23:25:11.939000 audit: BPF prog-id=71 op=UNLOAD Feb 8 23:25:11.939000 audit: BPF prog-id=67 op=UNLOAD Feb 8 23:25:11.939000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1746]: AVC avc: denied { perfmon } for pid=1746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit[1746]: AVC avc: denied { bpf } for pid=1746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:11.939000 audit: BPF prog-id=72 op=LOAD Feb 8 23:25:11.939000 audit[1746]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003cef38 items=0 ppid=1732 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:11.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639376637613036643536376261313261666563343533633530643338 Feb 8 23:25:11.948149 env[1130]: time="2024-02-08T23:25:11.948100101Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:7709ea05d7cdf82b0d7e594b61a10331,Namespace:kube-system,Attempt:0,} returns sandbox id \"db417bbf6aa40867f8ac73aea314499a30fec8866f84eb42974f572be950885f\"" Feb 8 23:25:11.949318 kubelet[1664]: E0208 23:25:11.949136 1664 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:11.951380 env[1130]: time="2024-02-08T23:25:11.951347319Z" level=info msg="CreateContainer within sandbox \"db417bbf6aa40867f8ac73aea314499a30fec8866f84eb42974f572be950885f\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Feb 8 23:25:11.966124 env[1130]: time="2024-02-08T23:25:11.966073942Z" level=info msg="CreateContainer within sandbox \"db417bbf6aa40867f8ac73aea314499a30fec8866f84eb42974f572be950885f\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"463973b5636f545e75cfd7303596a5ab21f30124f8bf20a3e5c70d45e184599a\"" Feb 8 23:25:11.966607 env[1130]: time="2024-02-08T23:25:11.966580992Z" level=info msg="StartContainer for \"463973b5636f545e75cfd7303596a5ab21f30124f8bf20a3e5c70d45e184599a\"" Feb 8 23:25:11.974860 env[1130]: time="2024-02-08T23:25:11.974817716Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:4dd5073a91f4e38dd18d469aab166298,Namespace:kube-system,Attempt:0,} returns sandbox id \"1d5addd4019a575da1b1946d7ff791da3eb3cb0a3df1e06cb7c9fc6642e195e6\"" Feb 8 23:25:11.975635 kubelet[1664]: E0208 23:25:11.975502 1664 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:11.977050 env[1130]: time="2024-02-08T23:25:11.977021228Z" level=info msg="CreateContainer within sandbox \"1d5addd4019a575da1b1946d7ff791da3eb3cb0a3df1e06cb7c9fc6642e195e6\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Feb 8 23:25:11.977357 env[1130]: time="2024-02-08T23:25:11.977321421Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:2b0e94b38682f4e439413801d3cc54db,Namespace:kube-system,Attempt:0,} returns sandbox id \"f97f7a06d567ba12afec453c50d38e465bcfa79d8d3ad2d94c16a7bdc8db2df6\"" Feb 8 23:25:11.977794 kubelet[1664]: E0208 23:25:11.977698 1664 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:11.978824 env[1130]: time="2024-02-08T23:25:11.978800494Z" level=info msg="CreateContainer within sandbox \"f97f7a06d567ba12afec453c50d38e465bcfa79d8d3ad2d94c16a7bdc8db2df6\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Feb 8 23:25:11.988199 systemd[1]: Started cri-containerd-463973b5636f545e75cfd7303596a5ab21f30124f8bf20a3e5c70d45e184599a.scope. Feb 8 23:25:12.000095 env[1130]: time="2024-02-08T23:25:12.000050798Z" level=info msg="CreateContainer within sandbox \"1d5addd4019a575da1b1946d7ff791da3eb3cb0a3df1e06cb7c9fc6642e195e6\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"c0e93c46e7db8f2da5e4d19b849cbbf1d5c6ecf9f9a414a6d948d1a3d4bd8f11\"" Feb 8 23:25:12.000549 env[1130]: time="2024-02-08T23:25:12.000525138Z" level=info msg="StartContainer for \"c0e93c46e7db8f2da5e4d19b849cbbf1d5c6ecf9f9a414a6d948d1a3d4bd8f11\"" Feb 8 23:25:12.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.000000 audit: BPF prog-id=73 op=LOAD Feb 8 23:25:12.001929 env[1130]: time="2024-02-08T23:25:12.001533158Z" level=info msg="CreateContainer within sandbox \"f97f7a06d567ba12afec453c50d38e465bcfa79d8d3ad2d94c16a7bdc8db2df6\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"5a30ec4409649a5b8651982700c0111da9164ddf64a8a9bb9cb375313095310d\"" Feb 8 23:25:12.001929 env[1130]: time="2024-02-08T23:25:12.001854500Z" level=info msg="StartContainer for \"5a30ec4409649a5b8651982700c0111da9164ddf64a8a9bb9cb375313095310d\"" Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { bpf } for pid=1824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000195c48 a2=10 a3=1c items=0 ppid=1704 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:12.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436333937336235363336663534356537356366643733303335393661 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { perfmon } for pid=1824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001956b0 a2=3c a3=c items=0 ppid=1704 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:12.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436333937336235363336663534356537356366643733303335393661 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { bpf } for pid=1824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { bpf } for pid=1824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { bpf } for pid=1824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { perfmon } for pid=1824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { perfmon } for pid=1824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { perfmon } for pid=1824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { perfmon } for pid=1824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { perfmon } for pid=1824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { bpf } for pid=1824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { bpf } for pid=1824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit: BPF prog-id=74 op=LOAD Feb 8 23:25:12.001000 audit[1824]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001959d8 a2=78 a3=c00027b050 items=0 ppid=1704 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:12.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436333937336235363336663534356537356366643733303335393661 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { bpf } for pid=1824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { bpf } for pid=1824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { perfmon } for pid=1824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { perfmon } for pid=1824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { perfmon } for pid=1824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { perfmon } for pid=1824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { perfmon } for pid=1824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { bpf } for pid=1824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { bpf } for pid=1824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit: BPF prog-id=75 op=LOAD Feb 8 23:25:12.001000 audit[1824]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000195770 a2=78 a3=c00027b098 items=0 ppid=1704 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:12.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436333937336235363336663534356537356366643733303335393661 Feb 8 23:25:12.001000 audit: BPF prog-id=75 op=UNLOAD Feb 8 23:25:12.001000 audit: BPF prog-id=74 op=UNLOAD Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { bpf } for pid=1824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { bpf } for pid=1824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { bpf } for pid=1824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { perfmon } for pid=1824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { perfmon } for pid=1824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { perfmon } for pid=1824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { perfmon } for pid=1824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { perfmon } for pid=1824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { bpf } for pid=1824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit[1824]: AVC avc: denied { bpf } for pid=1824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.001000 audit: BPF prog-id=76 op=LOAD Feb 8 23:25:12.001000 audit[1824]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000195c30 a2=78 a3=c00027b4a8 items=0 ppid=1704 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:12.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436333937336235363336663534356537356366643733303335393661 Feb 8 23:25:12.015154 systemd[1]: Started cri-containerd-5a30ec4409649a5b8651982700c0111da9164ddf64a8a9bb9cb375313095310d.scope. Feb 8 23:25:12.018687 systemd[1]: Started cri-containerd-c0e93c46e7db8f2da5e4d19b849cbbf1d5c6ecf9f9a414a6d948d1a3d4bd8f11.scope. Feb 8 23:25:12.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.025000 audit: BPF prog-id=77 op=LOAD Feb 8 23:25:12.026000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.026000 audit[1859]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1732 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:12.026000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561333065633434303936343961356238363531393832373030633031 Feb 8 23:25:12.026000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.026000 audit[1859]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1732 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:12.026000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561333065633434303936343961356238363531393832373030633031 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit: BPF prog-id=78 op=LOAD Feb 8 23:25:12.027000 audit[1859]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003d0120 items=0 ppid=1732 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:12.027000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561333065633434303936343961356238363531393832373030633031 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.027000 audit: BPF prog-id=79 op=LOAD Feb 8 23:25:12.027000 audit[1859]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003d0168 items=0 ppid=1732 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:12.027000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561333065633434303936343961356238363531393832373030633031 Feb 8 23:25:12.028000 audit: BPF prog-id=79 op=UNLOAD Feb 8 23:25:12.028000 audit: BPF prog-id=78 op=UNLOAD Feb 8 23:25:12.028000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.028000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.028000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.028000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.028000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.028000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.028000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.028000 audit[1859]: AVC avc: denied { perfmon } for pid=1859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.028000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.028000 audit[1859]: AVC avc: denied { bpf } for pid=1859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.028000 audit: BPF prog-id=80 op=LOAD Feb 8 23:25:12.028000 audit[1859]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003d0578 items=0 ppid=1732 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:12.028000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561333065633434303936343961356238363531393832373030633031 Feb 8 23:25:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.030000 audit: BPF prog-id=81 op=LOAD Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1747 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:12.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330653933633436653764623866326461356534643139623834396362 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=1747 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:12.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330653933633436653764623866326461356534643139623834396362 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit: BPF prog-id=82 op=LOAD Feb 8 23:25:12.031000 audit[1860]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003d6120 items=0 ppid=1747 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:12.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330653933633436653764623866326461356534643139623834396362 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit: BPF prog-id=83 op=LOAD Feb 8 23:25:12.031000 audit[1860]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003d6168 items=0 ppid=1747 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:12.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330653933633436653764623866326461356534643139623834396362 Feb 8 23:25:12.031000 audit: BPF prog-id=83 op=UNLOAD Feb 8 23:25:12.031000 audit: BPF prog-id=82 op=UNLOAD Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:12.031000 audit: BPF prog-id=84 op=LOAD Feb 8 23:25:12.031000 audit[1860]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003d6578 items=0 ppid=1747 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:12.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330653933633436653764623866326461356534643139623834396362 Feb 8 23:25:12.043112 env[1130]: time="2024-02-08T23:25:12.043060111Z" level=info msg="StartContainer for \"463973b5636f545e75cfd7303596a5ab21f30124f8bf20a3e5c70d45e184599a\" returns successfully" Feb 8 23:25:12.061690 env[1130]: time="2024-02-08T23:25:12.061640629Z" level=info msg="StartContainer for \"c0e93c46e7db8f2da5e4d19b849cbbf1d5c6ecf9f9a414a6d948d1a3d4bd8f11\" returns successfully" Feb 8 23:25:12.063001 env[1130]: time="2024-02-08T23:25:12.062580301Z" level=info msg="StartContainer for \"5a30ec4409649a5b8651982700c0111da9164ddf64a8a9bb9cb375313095310d\" returns successfully" Feb 8 23:25:12.431284 kubelet[1664]: E0208 23:25:12.431257 1664 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:12.432661 kubelet[1664]: E0208 23:25:12.432639 1664 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:12.434380 kubelet[1664]: E0208 23:25:12.434357 1664 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:13.150000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:13.150000 audit[1888]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3e a1=c00439e000 a2=fc6 a3=0 items=0 ppid=1747 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 key=(null) Feb 8 23:25:13.150000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3936002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 8 23:25:13.150000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:13.150000 audit[1888]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c0042f40c0 a2=fc6 a3=0 items=0 ppid=1747 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 key=(null) Feb 8 23:25:13.150000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3936002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 8 23:25:13.151000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:13.151000 audit[1888]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3e a1=c003926120 a2=fc6 a3=0 items=0 ppid=1747 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 key=(null) Feb 8 23:25:13.151000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3936002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 8 23:25:13.160000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:13.160000 audit[1888]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5e a1=c0045a61e0 a2=fc6 a3=0 items=0 ppid=1747 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 key=(null) Feb 8 23:25:13.160000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3936002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 8 23:25:13.165000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:13.165000 audit[1888]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c00350d1c0 a2=fc6 a3=0 items=0 ppid=1747 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 key=(null) Feb 8 23:25:13.165000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3936002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 8 23:25:13.165000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:13.165000 audit[1888]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c0052a83c0 a2=fc6 a3=0 items=0 ppid=1747 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 key=(null) Feb 8 23:25:13.165000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3936002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 8 23:25:13.181000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:13.181000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e10930 a2=fc6 a3=0 items=0 ppid=1704 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 key=(null) Feb 8 23:25:13.181000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:25:13.181000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:13.181000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000546020 a2=fc6 a3=0 items=0 ppid=1704 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 key=(null) Feb 8 23:25:13.181000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:25:13.436579 kubelet[1664]: E0208 23:25:13.436466 1664 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:13.448930 kubelet[1664]: E0208 23:25:13.448891 1664 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Feb 8 23:25:13.517110 kubelet[1664]: I0208 23:25:13.517091 1664 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 8 23:25:13.519747 kubelet[1664]: I0208 23:25:13.519715 1664 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Feb 8 23:25:13.538088 kubelet[1664]: E0208 23:25:13.538062 1664 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Feb 8 23:25:14.406705 kubelet[1664]: I0208 23:25:14.406661 1664 apiserver.go:52] "Watching apiserver" Feb 8 23:25:14.409964 kubelet[1664]: I0208 23:25:14.409931 1664 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Feb 8 23:25:14.431955 kubelet[1664]: I0208 23:25:14.431929 1664 reconciler.go:41] "Reconciler: start to sync state" Feb 8 23:25:17.024222 kubelet[1664]: E0208 23:25:17.024186 1664 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:17.191445 systemd[1]: Reloading. Feb 8 23:25:17.247348 /usr/lib/systemd/system-generators/torcx-generator[1960]: time="2024-02-08T23:25:17Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 8 23:25:17.247375 /usr/lib/systemd/system-generators/torcx-generator[1960]: time="2024-02-08T23:25:17Z" level=info msg="torcx already run" Feb 8 23:25:17.305636 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 8 23:25:17.305650 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 8 23:25:17.323848 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 8 23:25:17.394707 kernel: kauditd_printk_skb: 579 callbacks suppressed Feb 8 23:25:17.394808 kernel: audit: type=1400 audit(1707434717.383:686): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.394934 kernel: audit: type=1400 audit(1707434717.383:687): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.394949 kernel: audit: type=1400 audit(1707434717.383:688): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.394962 kernel: audit: type=1400 audit(1707434717.383:689): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.394993 kernel: audit: type=1400 audit(1707434717.383:690): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.398934 kernel: audit: type=1400 audit(1707434717.383:691): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.398977 kernel: audit: type=1400 audit(1707434717.383:692): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.399003 kernel: audit: type=1400 audit(1707434717.383:693): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.402676 kernel: audit: type=1400 audit(1707434717.383:694): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.404637 kernel: audit: type=1400 audit(1707434717.386:695): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.386000 audit: BPF prog-id=85 op=LOAD Feb 8 23:25:17.386000 audit: BPF prog-id=65 op=UNLOAD Feb 8 23:25:17.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.389000 audit: BPF prog-id=86 op=LOAD Feb 8 23:25:17.389000 audit: BPF prog-id=73 op=UNLOAD Feb 8 23:25:17.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.393000 audit: BPF prog-id=87 op=LOAD Feb 8 23:25:17.393000 audit: BPF prog-id=46 op=UNLOAD Feb 8 23:25:17.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.396000 audit: BPF prog-id=88 op=LOAD Feb 8 23:25:17.396000 audit: BPF prog-id=77 op=UNLOAD Feb 8 23:25:17.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.397000 audit: BPF prog-id=89 op=LOAD Feb 8 23:25:17.397000 audit: BPF prog-id=66 op=UNLOAD Feb 8 23:25:17.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.401000 audit: BPF prog-id=90 op=LOAD Feb 8 23:25:17.401000 audit: BPF prog-id=61 op=UNLOAD Feb 8 23:25:17.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.403000 audit: BPF prog-id=91 op=LOAD Feb 8 23:25:17.403000 audit: BPF prog-id=47 op=UNLOAD Feb 8 23:25:17.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.404000 audit: BPF prog-id=92 op=LOAD Feb 8 23:25:17.404000 audit: BPF prog-id=48 op=UNLOAD Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit: BPF prog-id=93 op=LOAD Feb 8 23:25:17.405000 audit: BPF prog-id=49 op=UNLOAD Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit: BPF prog-id=94 op=LOAD Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit: BPF prog-id=95 op=LOAD Feb 8 23:25:17.405000 audit: BPF prog-id=50 op=UNLOAD Feb 8 23:25:17.405000 audit: BPF prog-id=51 op=UNLOAD Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.405000 audit: BPF prog-id=96 op=LOAD Feb 8 23:25:17.406000 audit: BPF prog-id=52 op=UNLOAD Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit: BPF prog-id=97 op=LOAD Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit: BPF prog-id=98 op=LOAD Feb 8 23:25:17.406000 audit: BPF prog-id=53 op=UNLOAD Feb 8 23:25:17.406000 audit: BPF prog-id=54 op=UNLOAD Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit: BPF prog-id=99 op=LOAD Feb 8 23:25:17.407000 audit: BPF prog-id=55 op=UNLOAD Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit: BPF prog-id=100 op=LOAD Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.407000 audit: BPF prog-id=101 op=LOAD Feb 8 23:25:17.407000 audit: BPF prog-id=56 op=UNLOAD Feb 8 23:25:17.407000 audit: BPF prog-id=57 op=UNLOAD Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit: BPF prog-id=102 op=LOAD Feb 8 23:25:17.408000 audit: BPF prog-id=58 op=UNLOAD Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit: BPF prog-id=103 op=LOAD Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit: BPF prog-id=104 op=LOAD Feb 8 23:25:17.408000 audit: BPF prog-id=59 op=UNLOAD Feb 8 23:25:17.408000 audit: BPF prog-id=60 op=UNLOAD Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.409000 audit: BPF prog-id=105 op=LOAD Feb 8 23:25:17.409000 audit: BPF prog-id=81 op=UNLOAD Feb 8 23:25:17.417761 kubelet[1664]: I0208 23:25:17.417736 1664 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 8 23:25:17.417815 systemd[1]: Stopping kubelet.service... Feb 8 23:25:17.435287 systemd[1]: kubelet.service: Deactivated successfully. Feb 8 23:25:17.435438 systemd[1]: Stopped kubelet.service. Feb 8 23:25:17.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:17.436773 systemd[1]: Started kubelet.service. Feb 8 23:25:17.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:17.482849 kubelet[2001]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 8 23:25:17.482849 kubelet[2001]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Feb 8 23:25:17.482849 kubelet[2001]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 8 23:25:17.483213 kubelet[2001]: I0208 23:25:17.482873 2001 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 8 23:25:17.486297 kubelet[2001]: I0208 23:25:17.486279 2001 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Feb 8 23:25:17.486297 kubelet[2001]: I0208 23:25:17.486297 2001 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 8 23:25:17.486443 kubelet[2001]: I0208 23:25:17.486432 2001 server.go:837] "Client rotation is on, will bootstrap in background" Feb 8 23:25:17.487608 kubelet[2001]: I0208 23:25:17.487595 2001 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Feb 8 23:25:17.488364 kubelet[2001]: I0208 23:25:17.488350 2001 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 8 23:25:17.491346 kubelet[2001]: I0208 23:25:17.491329 2001 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 8 23:25:17.491489 kubelet[2001]: I0208 23:25:17.491478 2001 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 8 23:25:17.491541 kubelet[2001]: I0208 23:25:17.491532 2001 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Feb 8 23:25:17.491612 kubelet[2001]: I0208 23:25:17.491547 2001 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Feb 8 23:25:17.491612 kubelet[2001]: I0208 23:25:17.491555 2001 container_manager_linux.go:302] "Creating device plugin manager" Feb 8 23:25:17.491612 kubelet[2001]: I0208 23:25:17.491579 2001 state_mem.go:36] "Initialized new in-memory state store" Feb 8 23:25:17.493774 kubelet[2001]: I0208 23:25:17.493754 2001 kubelet.go:405] "Attempting to sync node with API server" Feb 8 23:25:17.493774 kubelet[2001]: I0208 23:25:17.493776 2001 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 8 23:25:17.493837 kubelet[2001]: I0208 23:25:17.493792 2001 kubelet.go:309] "Adding apiserver pod source" Feb 8 23:25:17.493837 kubelet[2001]: I0208 23:25:17.493806 2001 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 8 23:25:17.495112 kubelet[2001]: I0208 23:25:17.495101 2001 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 8 23:25:17.495706 kubelet[2001]: I0208 23:25:17.495693 2001 server.go:1168] "Started kubelet" Feb 8 23:25:17.496000 audit[2001]: AVC avc: denied { mac_admin } for pid=2001 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.496000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 8 23:25:17.496000 audit[2001]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e7a450 a1=c000e70558 a2=c000e7a420 a3=25 items=0 ppid=1 pid=2001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:17.496000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 8 23:25:17.497930 kubelet[2001]: I0208 23:25:17.497903 2001 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 8 23:25:17.496000 audit[2001]: AVC avc: denied { mac_admin } for pid=2001 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.496000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 8 23:25:17.496000 audit[2001]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0007da080 a1=c00005c258 a2=c0007dc210 a3=25 items=0 ppid=1 pid=2001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:17.496000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 8 23:25:17.498102 kubelet[2001]: I0208 23:25:17.497953 2001 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 8 23:25:17.498102 kubelet[2001]: I0208 23:25:17.497974 2001 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 8 23:25:17.498391 kubelet[2001]: E0208 23:25:17.498370 2001 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 8 23:25:17.498446 kubelet[2001]: E0208 23:25:17.498404 2001 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 8 23:25:17.498561 kubelet[2001]: I0208 23:25:17.498545 2001 volume_manager.go:284] "Starting Kubelet Volume Manager" Feb 8 23:25:17.498786 kubelet[2001]: I0208 23:25:17.498774 2001 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Feb 8 23:25:17.509239 kubelet[2001]: I0208 23:25:17.509226 2001 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Feb 8 23:25:17.509897 kubelet[2001]: I0208 23:25:17.509884 2001 server.go:461] "Adding debug handlers to kubelet server" Feb 8 23:25:17.510833 kubelet[2001]: I0208 23:25:17.510820 2001 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Feb 8 23:25:17.521265 kubelet[2001]: I0208 23:25:17.521230 2001 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Feb 8 23:25:17.522247 kubelet[2001]: I0208 23:25:17.522228 2001 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Feb 8 23:25:17.522318 kubelet[2001]: I0208 23:25:17.522253 2001 status_manager.go:207] "Starting to sync pod status with apiserver" Feb 8 23:25:17.522318 kubelet[2001]: I0208 23:25:17.522271 2001 kubelet.go:2257] "Starting kubelet main sync loop" Feb 8 23:25:17.522318 kubelet[2001]: E0208 23:25:17.522310 2001 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Feb 8 23:25:17.550852 kubelet[2001]: I0208 23:25:17.550820 2001 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 8 23:25:17.550852 kubelet[2001]: I0208 23:25:17.550841 2001 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 8 23:25:17.550852 kubelet[2001]: I0208 23:25:17.550855 2001 state_mem.go:36] "Initialized new in-memory state store" Feb 8 23:25:17.551067 kubelet[2001]: I0208 23:25:17.550972 2001 state_mem.go:88] "Updated default CPUSet" cpuSet="" Feb 8 23:25:17.551067 kubelet[2001]: I0208 23:25:17.550996 2001 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Feb 8 23:25:17.551067 kubelet[2001]: I0208 23:25:17.551002 2001 policy_none.go:49] "None policy: Start" Feb 8 23:25:17.551420 kubelet[2001]: I0208 23:25:17.551398 2001 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 8 23:25:17.551420 kubelet[2001]: I0208 23:25:17.551418 2001 state_mem.go:35] "Initializing new in-memory state store" Feb 8 23:25:17.551566 kubelet[2001]: I0208 23:25:17.551547 2001 state_mem.go:75] "Updated machine memory state" Feb 8 23:25:17.554465 kubelet[2001]: I0208 23:25:17.554443 2001 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 8 23:25:17.553000 audit[2001]: AVC avc: denied { mac_admin } for pid=2001 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:17.553000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 8 23:25:17.553000 audit[2001]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00080c2d0 a1=c00005d7b8 a2=c00080c270 a3=25 items=0 ppid=1 pid=2001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:17.553000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 8 23:25:17.554737 kubelet[2001]: I0208 23:25:17.554503 2001 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 8 23:25:17.554737 kubelet[2001]: I0208 23:25:17.554675 2001 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 8 23:25:17.601398 kubelet[2001]: I0208 23:25:17.601309 2001 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 8 23:25:17.610678 kubelet[2001]: I0208 23:25:17.610549 2001 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Feb 8 23:25:17.610678 kubelet[2001]: I0208 23:25:17.610649 2001 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Feb 8 23:25:17.622671 kubelet[2001]: I0208 23:25:17.622633 2001 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:25:17.622799 kubelet[2001]: I0208 23:25:17.622718 2001 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:25:17.622799 kubelet[2001]: I0208 23:25:17.622754 2001 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:25:17.629592 kubelet[2001]: E0208 23:25:17.629564 2001 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Feb 8 23:25:17.799722 kubelet[2001]: I0208 23:25:17.799685 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4dd5073a91f4e38dd18d469aab166298-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"4dd5073a91f4e38dd18d469aab166298\") " pod="kube-system/kube-apiserver-localhost" Feb 8 23:25:17.799722 kubelet[2001]: I0208 23:25:17.799739 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 8 23:25:17.799941 kubelet[2001]: I0208 23:25:17.799797 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 8 23:25:17.799941 kubelet[2001]: I0208 23:25:17.799844 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 8 23:25:17.799941 kubelet[2001]: I0208 23:25:17.799866 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/2b0e94b38682f4e439413801d3cc54db-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"2b0e94b38682f4e439413801d3cc54db\") " pod="kube-system/kube-scheduler-localhost" Feb 8 23:25:17.799941 kubelet[2001]: I0208 23:25:17.799897 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4dd5073a91f4e38dd18d469aab166298-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"4dd5073a91f4e38dd18d469aab166298\") " pod="kube-system/kube-apiserver-localhost" Feb 8 23:25:17.799941 kubelet[2001]: I0208 23:25:17.799915 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4dd5073a91f4e38dd18d469aab166298-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"4dd5073a91f4e38dd18d469aab166298\") " pod="kube-system/kube-apiserver-localhost" Feb 8 23:25:17.800165 kubelet[2001]: I0208 23:25:17.799955 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 8 23:25:17.800165 kubelet[2001]: I0208 23:25:17.800035 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 8 23:25:17.928340 kubelet[2001]: E0208 23:25:17.928223 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:17.929257 kubelet[2001]: E0208 23:25:17.928686 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:17.930259 kubelet[2001]: E0208 23:25:17.930233 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:18.495041 kubelet[2001]: I0208 23:25:18.495001 2001 apiserver.go:52] "Watching apiserver" Feb 8 23:25:18.532552 kubelet[2001]: E0208 23:25:18.532519 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:18.533124 kubelet[2001]: E0208 23:25:18.533106 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:18.538603 kubelet[2001]: E0208 23:25:18.538575 2001 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Feb 8 23:25:18.539015 kubelet[2001]: E0208 23:25:18.538997 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:18.557278 kubelet[2001]: I0208 23:25:18.557232 2001 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.557091698 podCreationTimestamp="2024-02-08 23:25:17 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-08 23:25:18.556853381 +0000 UTC m=+1.117390838" watchObservedRunningTime="2024-02-08 23:25:18.557091698 +0000 UTC m=+1.117629145" Feb 8 23:25:18.576355 kubelet[2001]: I0208 23:25:18.576309 2001 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.5762705380000002 podCreationTimestamp="2024-02-08 23:25:17 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-08 23:25:18.576014669 +0000 UTC m=+1.136552116" watchObservedRunningTime="2024-02-08 23:25:18.576270538 +0000 UTC m=+1.136807985" Feb 8 23:25:18.600118 kubelet[2001]: I0208 23:25:18.600049 2001 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Feb 8 23:25:18.605283 kubelet[2001]: I0208 23:25:18.605257 2001 reconciler.go:41] "Reconciler: start to sync state" Feb 8 23:25:19.534146 kubelet[2001]: E0208 23:25:19.534106 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:20.226842 sudo[1253]: pam_unix(sudo:session): session closed for user root Feb 8 23:25:20.225000 audit[1253]: USER_END pid=1253 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:25:20.225000 audit[1253]: CRED_DISP pid=1253 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 8 23:25:20.228246 sshd[1250]: pam_unix(sshd:session): session closed for user core Feb 8 23:25:20.228000 audit[1250]: USER_END pid=1250 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:20.228000 audit[1250]: CRED_DISP pid=1250 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:20.230386 systemd[1]: sshd@6-10.0.0.96:22-10.0.0.1:58686.service: Deactivated successfully. Feb 8 23:25:20.229000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.96:22-10.0.0.1:58686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:20.231042 systemd[1]: session-7.scope: Deactivated successfully. Feb 8 23:25:20.231189 systemd[1]: session-7.scope: Consumed 4.346s CPU time. Feb 8 23:25:20.231656 systemd-logind[1109]: Session 7 logged out. Waiting for processes to exit. Feb 8 23:25:20.232275 systemd-logind[1109]: Removed session 7. Feb 8 23:25:24.260125 kubelet[2001]: E0208 23:25:24.260092 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:24.271757 kubelet[2001]: I0208 23:25:24.271722 2001 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=7.27168893 podCreationTimestamp="2024-02-08 23:25:17 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-08 23:25:18.58565819 +0000 UTC m=+1.146195637" watchObservedRunningTime="2024-02-08 23:25:24.27168893 +0000 UTC m=+6.832226397" Feb 8 23:25:24.358085 kubelet[2001]: E0208 23:25:24.358041 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:24.541204 kubelet[2001]: E0208 23:25:24.540418 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:24.541204 kubelet[2001]: E0208 23:25:24.540484 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:25.285952 kubelet[2001]: E0208 23:25:25.285908 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:25.542104 kubelet[2001]: E0208 23:25:25.542016 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:27.334011 kernel: kauditd_printk_skb: 265 callbacks suppressed Feb 8 23:25:27.334158 kernel: audit: type=1400 audit(1707434727.327:934): avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:27.334200 kernel: audit: type=1300 audit(1707434727.327:934): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0005479e0 a2=fc6 a3=0 items=0 ppid=1704 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 key=(null) Feb 8 23:25:27.327000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:27.327000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0005479e0 a2=fc6 a3=0 items=0 ppid=1704 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 key=(null) Feb 8 23:25:27.327000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:25:27.341325 kernel: audit: type=1327 audit(1707434727.327:934): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:25:27.341383 kernel: audit: type=1400 audit(1707434727.329:935): avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:27.329000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:27.329000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000b346a0 a2=fc6 a3=0 items=0 ppid=1704 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 key=(null) Feb 8 23:25:27.349524 kernel: audit: type=1300 audit(1707434727.329:935): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000b346a0 a2=fc6 a3=0 items=0 ppid=1704 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 key=(null) Feb 8 23:25:27.349576 kernel: audit: type=1327 audit(1707434727.329:935): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:25:27.329000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:25:27.329000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:27.356122 kernel: audit: type=1400 audit(1707434727.329:936): avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:27.356176 kernel: audit: type=1300 audit(1707434727.329:936): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000b347e0 a2=fc6 a3=0 items=0 ppid=1704 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 key=(null) Feb 8 23:25:27.329000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000b347e0 a2=fc6 a3=0 items=0 ppid=1704 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 key=(null) Feb 8 23:25:27.329000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:25:27.362111 kernel: audit: type=1327 audit(1707434727.329:936): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:25:27.362147 kernel: audit: type=1400 audit(1707434727.329:937): avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:27.329000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:25:27.329000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000cb93e0 a2=fc6 a3=0 items=0 ppid=1704 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 key=(null) Feb 8 23:25:27.329000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:25:28.101000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Feb 8 23:25:28.101000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e7f540 a2=fc6 a3=0 items=0 ppid=1704 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 key=(null) Feb 8 23:25:28.101000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:25:29.838831 kubelet[2001]: I0208 23:25:29.838799 2001 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Feb 8 23:25:29.839313 env[1130]: time="2024-02-08T23:25:29.839272236Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Feb 8 23:25:29.839584 kubelet[2001]: I0208 23:25:29.839540 2001 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Feb 8 23:25:30.614567 kubelet[2001]: I0208 23:25:30.614533 2001 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:25:30.620398 systemd[1]: Created slice kubepods-besteffort-pod1b183ede_85ce_42b4_ba6a_a055f6ed1ad3.slice. Feb 8 23:25:30.687110 kubelet[2001]: I0208 23:25:30.687059 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1b183ede-85ce-42b4-ba6a-a055f6ed1ad3-xtables-lock\") pod \"kube-proxy-bpq4r\" (UID: \"1b183ede-85ce-42b4-ba6a-a055f6ed1ad3\") " pod="kube-system/kube-proxy-bpq4r" Feb 8 23:25:30.687110 kubelet[2001]: I0208 23:25:30.687096 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1b183ede-85ce-42b4-ba6a-a055f6ed1ad3-lib-modules\") pod \"kube-proxy-bpq4r\" (UID: \"1b183ede-85ce-42b4-ba6a-a055f6ed1ad3\") " pod="kube-system/kube-proxy-bpq4r" Feb 8 23:25:30.687333 kubelet[2001]: I0208 23:25:30.687114 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/1b183ede-85ce-42b4-ba6a-a055f6ed1ad3-kube-proxy\") pod \"kube-proxy-bpq4r\" (UID: \"1b183ede-85ce-42b4-ba6a-a055f6ed1ad3\") " pod="kube-system/kube-proxy-bpq4r" Feb 8 23:25:30.687333 kubelet[2001]: I0208 23:25:30.687184 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5ld5c\" (UniqueName: \"kubernetes.io/projected/1b183ede-85ce-42b4-ba6a-a055f6ed1ad3-kube-api-access-5ld5c\") pod \"kube-proxy-bpq4r\" (UID: \"1b183ede-85ce-42b4-ba6a-a055f6ed1ad3\") " pod="kube-system/kube-proxy-bpq4r" Feb 8 23:25:30.871680 kubelet[2001]: I0208 23:25:30.871544 2001 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:25:30.876039 systemd[1]: Created slice kubepods-besteffort-podfca4ffe9_953d_4895_bad5_58b4adfdce40.slice. Feb 8 23:25:30.888435 kubelet[2001]: I0208 23:25:30.888398 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-65dl9\" (UniqueName: \"kubernetes.io/projected/fca4ffe9-953d-4895-bad5-58b4adfdce40-kube-api-access-65dl9\") pod \"tigera-operator-7ff8dc855-rftl9\" (UID: \"fca4ffe9-953d-4895-bad5-58b4adfdce40\") " pod="tigera-operator/tigera-operator-7ff8dc855-rftl9" Feb 8 23:25:30.888435 kubelet[2001]: I0208 23:25:30.888437 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/fca4ffe9-953d-4895-bad5-58b4adfdce40-var-lib-calico\") pod \"tigera-operator-7ff8dc855-rftl9\" (UID: \"fca4ffe9-953d-4895-bad5-58b4adfdce40\") " pod="tigera-operator/tigera-operator-7ff8dc855-rftl9" Feb 8 23:25:30.933637 kubelet[2001]: E0208 23:25:30.933603 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:30.934257 env[1130]: time="2024-02-08T23:25:30.934214581Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-bpq4r,Uid:1b183ede-85ce-42b4-ba6a-a055f6ed1ad3,Namespace:kube-system,Attempt:0,}" Feb 8 23:25:30.948317 env[1130]: time="2024-02-08T23:25:30.948241888Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:25:30.948317 env[1130]: time="2024-02-08T23:25:30.948293456Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:25:30.948317 env[1130]: time="2024-02-08T23:25:30.948306782Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:25:30.948544 env[1130]: time="2024-02-08T23:25:30.948483788Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/55b78ced3638cecfe1d0db4551f7960746fe50fcd928825ef649938580d61a92 pid=2093 runtime=io.containerd.runc.v2 Feb 8 23:25:30.961113 systemd[1]: Started cri-containerd-55b78ced3638cecfe1d0db4551f7960746fe50fcd928825ef649938580d61a92.scope. Feb 8 23:25:30.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.969000 audit: BPF prog-id=106 op=LOAD Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2093 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:30.970000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535623738636564333633386365636665316430646234353531663739 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2093 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:30.970000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535623738636564333633386365636665316430646234353531663739 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit: BPF prog-id=107 op=LOAD Feb 8 23:25:30.970000 audit[2104]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000185860 items=0 ppid=2093 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:30.970000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535623738636564333633386365636665316430646234353531663739 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit: BPF prog-id=108 op=LOAD Feb 8 23:25:30.970000 audit[2104]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0001858a8 items=0 ppid=2093 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:30.970000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535623738636564333633386365636665316430646234353531663739 Feb 8 23:25:30.970000 audit: BPF prog-id=108 op=UNLOAD Feb 8 23:25:30.970000 audit: BPF prog-id=107 op=UNLOAD Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:30.970000 audit: BPF prog-id=109 op=LOAD Feb 8 23:25:30.970000 audit[2104]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000185cb8 items=0 ppid=2093 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:30.970000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535623738636564333633386365636665316430646234353531663739 Feb 8 23:25:30.982547 env[1130]: time="2024-02-08T23:25:30.982508731Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-bpq4r,Uid:1b183ede-85ce-42b4-ba6a-a055f6ed1ad3,Namespace:kube-system,Attempt:0,} returns sandbox id \"55b78ced3638cecfe1d0db4551f7960746fe50fcd928825ef649938580d61a92\"" Feb 8 23:25:30.983272 kubelet[2001]: E0208 23:25:30.983250 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:30.984724 env[1130]: time="2024-02-08T23:25:30.984659916Z" level=info msg="CreateContainer within sandbox \"55b78ced3638cecfe1d0db4551f7960746fe50fcd928825ef649938580d61a92\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Feb 8 23:25:31.021407 env[1130]: time="2024-02-08T23:25:31.021356283Z" level=info msg="CreateContainer within sandbox \"55b78ced3638cecfe1d0db4551f7960746fe50fcd928825ef649938580d61a92\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"fdc893f6e30cec314bfaa5c4fe8242ce120a75a11ecf6c3ed2085bad00d20b68\"" Feb 8 23:25:31.021965 env[1130]: time="2024-02-08T23:25:31.021932045Z" level=info msg="StartContainer for \"fdc893f6e30cec314bfaa5c4fe8242ce120a75a11ecf6c3ed2085bad00d20b68\"" Feb 8 23:25:31.038135 systemd[1]: Started cri-containerd-fdc893f6e30cec314bfaa5c4fe8242ce120a75a11ecf6c3ed2085bad00d20b68.scope. Feb 8 23:25:31.052000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.052000 audit[2136]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2093 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664633839336636653330636563333134626661613563346665383234 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit: BPF prog-id=110 op=LOAD Feb 8 23:25:31.053000 audit[2136]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003929e0 items=0 ppid=2093 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664633839336636653330636563333134626661613563346665383234 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit: BPF prog-id=111 op=LOAD Feb 8 23:25:31.053000 audit[2136]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000392a28 items=0 ppid=2093 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664633839336636653330636563333134626661613563346665383234 Feb 8 23:25:31.053000 audit: BPF prog-id=111 op=UNLOAD Feb 8 23:25:31.053000 audit: BPF prog-id=110 op=UNLOAD Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.053000 audit: BPF prog-id=112 op=LOAD Feb 8 23:25:31.053000 audit[2136]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000392ab8 items=0 ppid=2093 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664633839336636653330636563333134626661613563346665383234 Feb 8 23:25:31.071875 env[1130]: time="2024-02-08T23:25:31.071847791Z" level=info msg="StartContainer for \"fdc893f6e30cec314bfaa5c4fe8242ce120a75a11ecf6c3ed2085bad00d20b68\" returns successfully" Feb 8 23:25:31.119000 audit[2188]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.119000 audit[2188]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffbb54ffb0 a2=0 a3=7fffbb54ff9c items=0 ppid=2148 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.119000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 8 23:25:31.120000 audit[2189]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2189 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.120000 audit[2189]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffcdda70a0 a2=0 a3=7fffcdda708c items=0 ppid=2148 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.120000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 8 23:25:31.122000 audit[2191]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.122000 audit[2191]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc787ae040 a2=0 a3=7ffc787ae02c items=0 ppid=2148 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.122000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 8 23:25:31.123000 audit[2192]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2192 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.123000 audit[2192]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd4a4346b0 a2=0 a3=7ffd4a43469c items=0 ppid=2148 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.123000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 8 23:25:31.125000 audit[2193]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2193 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.125000 audit[2193]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe33144fd0 a2=0 a3=7ffe33144fbc items=0 ppid=2148 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.125000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 8 23:25:31.128000 audit[2194]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.128000 audit[2194]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe378c1e70 a2=0 a3=7ffe378c1e5c items=0 ppid=2148 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.128000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 8 23:25:31.179163 env[1130]: time="2024-02-08T23:25:31.179121564Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7ff8dc855-rftl9,Uid:fca4ffe9-953d-4895-bad5-58b4adfdce40,Namespace:tigera-operator,Attempt:0,}" Feb 8 23:25:31.193499 env[1130]: time="2024-02-08T23:25:31.193420846Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:25:31.193499 env[1130]: time="2024-02-08T23:25:31.193466874Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:25:31.193499 env[1130]: time="2024-02-08T23:25:31.193477495Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:25:31.193806 env[1130]: time="2024-02-08T23:25:31.193748769Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c6f8b802446f3e04f073ccb8cd73f46216eba0eee6e35c93993e838851da81df pid=2203 runtime=io.containerd.runc.v2 Feb 8 23:25:31.203712 systemd[1]: Started cri-containerd-c6f8b802446f3e04f073ccb8cd73f46216eba0eee6e35c93993e838851da81df.scope. Feb 8 23:25:31.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.212000 audit: BPF prog-id=113 op=LOAD Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2203 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336663862383032343436663365303466303733636362386364373366 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2203 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336663862383032343436663365303466303733636362386364373366 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit: BPF prog-id=114 op=LOAD Feb 8 23:25:31.213000 audit[2214]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000398590 items=0 ppid=2203 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336663862383032343436663365303466303733636362386364373366 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit: BPF prog-id=115 op=LOAD Feb 8 23:25:31.213000 audit[2214]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003985d8 items=0 ppid=2203 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336663862383032343436663365303466303733636362386364373366 Feb 8 23:25:31.213000 audit: BPF prog-id=115 op=UNLOAD Feb 8 23:25:31.213000 audit: BPF prog-id=114 op=UNLOAD Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:31.213000 audit: BPF prog-id=116 op=LOAD Feb 8 23:25:31.213000 audit[2214]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003989e8 items=0 ppid=2203 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336663862383032343436663365303466303733636362386364373366 Feb 8 23:25:31.226000 audit[2231]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2231 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.226000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffdede29cc0 a2=0 a3=7ffdede29cac items=0 ppid=2148 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.226000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 8 23:25:31.230000 audit[2234]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2234 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.230000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fffb80aa7e0 a2=0 a3=7fffb80aa7cc items=0 ppid=2148 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.230000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Feb 8 23:25:31.233000 audit[2242]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2242 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.233000 audit[2242]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe0dfba870 a2=0 a3=7ffe0dfba85c items=0 ppid=2148 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.233000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Feb 8 23:25:31.234000 audit[2243]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2243 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.234000 audit[2243]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeaf5a8960 a2=0 a3=7ffeaf5a894c items=0 ppid=2148 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.234000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 8 23:25:31.236000 audit[2245]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2245 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.236000 audit[2245]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe7a796080 a2=0 a3=7ffe7a79606c items=0 ppid=2148 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.236000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 8 23:25:31.237641 env[1130]: time="2024-02-08T23:25:31.237559020Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7ff8dc855-rftl9,Uid:fca4ffe9-953d-4895-bad5-58b4adfdce40,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"c6f8b802446f3e04f073ccb8cd73f46216eba0eee6e35c93993e838851da81df\"" Feb 8 23:25:31.237000 audit[2246]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2246 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.237000 audit[2246]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe971750c0 a2=0 a3=7ffe971750ac items=0 ppid=2148 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.237000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 8 23:25:31.239836 env[1130]: time="2024-02-08T23:25:31.239309981Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\"" Feb 8 23:25:31.239000 audit[2248]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2248 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.239000 audit[2248]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff662920a0 a2=0 a3=7fff6629208c items=0 ppid=2148 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.239000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 8 23:25:31.242000 audit[2251]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2251 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.242000 audit[2251]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffca056b3c0 a2=0 a3=7ffca056b3ac items=0 ppid=2148 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.242000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Feb 8 23:25:31.243000 audit[2252]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2252 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.243000 audit[2252]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdf54be590 a2=0 a3=7ffdf54be57c items=0 ppid=2148 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.243000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 8 23:25:31.245000 audit[2254]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2254 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.245000 audit[2254]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffeafe0f00 a2=0 a3=7fffeafe0eec items=0 ppid=2148 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.245000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 8 23:25:31.246000 audit[2255]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.246000 audit[2255]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe20a5e650 a2=0 a3=7ffe20a5e63c items=0 ppid=2148 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.246000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 8 23:25:31.248000 audit[2257]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2257 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.248000 audit[2257]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff8f77b300 a2=0 a3=7fff8f77b2ec items=0 ppid=2148 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.248000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 8 23:25:31.250000 audit[2260]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2260 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.250000 audit[2260]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffea5417cf0 a2=0 a3=7ffea5417cdc items=0 ppid=2148 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.250000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 8 23:25:31.253000 audit[2263]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2263 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.253000 audit[2263]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffed5b57b00 a2=0 a3=7ffed5b57aec items=0 ppid=2148 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.253000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 8 23:25:31.254000 audit[2264]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2264 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.254000 audit[2264]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdeaa2e7f0 a2=0 a3=7ffdeaa2e7dc items=0 ppid=2148 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.254000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 8 23:25:31.256000 audit[2266]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2266 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.256000 audit[2266]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffe3c53eee0 a2=0 a3=7ffe3c53eecc items=0 ppid=2148 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.256000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 8 23:25:31.259000 audit[2269]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2269 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.259000 audit[2269]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffedae3b9e0 a2=0 a3=7ffedae3b9cc items=0 ppid=2148 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.259000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 8 23:25:31.263000 audit[2274]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2274 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.263000 audit[2274]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffec995d720 a2=0 a3=7ffec995d70c items=0 ppid=2148 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.263000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 8 23:25:31.265000 audit[2276]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 8 23:25:31.265000 audit[2276]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7fff42a8fd20 a2=0 a3=7fff42a8fd0c items=0 ppid=2148 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.265000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 8 23:25:31.275000 audit[2278]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2278 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:31.275000 audit[2278]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7fffdc792400 a2=0 a3=7fffdc7923ec items=0 ppid=2148 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.275000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:31.279000 audit[2278]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2278 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:31.279000 audit[2278]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7fffdc792400 a2=0 a3=7fffdc7923ec items=0 ppid=2148 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.279000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:31.283000 audit[2284]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2284 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.283000 audit[2284]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffdcffee0f0 a2=0 a3=7ffdcffee0dc items=0 ppid=2148 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.283000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 8 23:25:31.285000 audit[2286]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2286 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.285000 audit[2286]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc92f35340 a2=0 a3=7ffc92f3532c items=0 ppid=2148 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.285000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Feb 8 23:25:31.288000 audit[2289]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2289 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.288000 audit[2289]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc1ec6e940 a2=0 a3=7ffc1ec6e92c items=0 ppid=2148 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.288000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Feb 8 23:25:31.289000 audit[2290]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.289000 audit[2290]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd4fe127e0 a2=0 a3=7ffd4fe127cc items=0 ppid=2148 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.289000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 8 23:25:31.290000 audit[2292]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2292 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.290000 audit[2292]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffed271ac40 a2=0 a3=7ffed271ac2c items=0 ppid=2148 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.290000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 8 23:25:31.291000 audit[2293]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2293 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.291000 audit[2293]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffea6c63490 a2=0 a3=7ffea6c6347c items=0 ppid=2148 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.291000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 8 23:25:31.293000 audit[2295]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2295 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.293000 audit[2295]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc38e283c0 a2=0 a3=7ffc38e283ac items=0 ppid=2148 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.293000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Feb 8 23:25:31.296000 audit[2298]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2298 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.296000 audit[2298]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7fffd2312310 a2=0 a3=7fffd23122fc items=0 ppid=2148 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.296000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 8 23:25:31.297000 audit[2299]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2299 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.297000 audit[2299]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd98fc94e0 a2=0 a3=7ffd98fc94cc items=0 ppid=2148 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.297000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 8 23:25:31.298000 audit[2301]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2301 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.298000 audit[2301]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcd7d3c530 a2=0 a3=7ffcd7d3c51c items=0 ppid=2148 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.298000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 8 23:25:31.299000 audit[2302]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.299000 audit[2302]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffed01968c0 a2=0 a3=7ffed01968ac items=0 ppid=2148 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.299000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 8 23:25:31.301000 audit[2304]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2304 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.301000 audit[2304]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd268001b0 a2=0 a3=7ffd2680019c items=0 ppid=2148 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.301000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 8 23:25:31.304000 audit[2307]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2307 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.304000 audit[2307]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffff1ad6b10 a2=0 a3=7ffff1ad6afc items=0 ppid=2148 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.304000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 8 23:25:31.307000 audit[2310]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.307000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffe515d990 a2=0 a3=7fffe515d97c items=0 ppid=2148 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.307000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Feb 8 23:25:31.307000 audit[2311]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.307000 audit[2311]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff1e50bf80 a2=0 a3=7fff1e50bf6c items=0 ppid=2148 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.307000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 8 23:25:31.309000 audit[2313]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2313 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.309000 audit[2313]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffcab426720 a2=0 a3=7ffcab42670c items=0 ppid=2148 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.309000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 8 23:25:31.312000 audit[2316]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2316 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.312000 audit[2316]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffe848508c0 a2=0 a3=7ffe848508ac items=0 ppid=2148 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.312000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 8 23:25:31.312000 audit[2317]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=2317 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.312000 audit[2317]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff32e025f0 a2=0 a3=7fff32e025dc items=0 ppid=2148 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.312000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 8 23:25:31.314000 audit[2319]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=2319 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.314000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffef322f270 a2=0 a3=7ffef322f25c items=0 ppid=2148 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.314000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 8 23:25:31.317000 audit[2322]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=2322 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.317000 audit[2322]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe6012a040 a2=0 a3=7ffe6012a02c items=0 ppid=2148 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.317000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 8 23:25:31.318000 audit[2323]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=2323 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.318000 audit[2323]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe49a52f40 a2=0 a3=7ffe49a52f2c items=0 ppid=2148 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.318000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 8 23:25:31.319000 audit[2325]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2325 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 8 23:25:31.319000 audit[2325]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffd248f6680 a2=0 a3=7ffd248f666c items=0 ppid=2148 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.319000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 8 23:25:31.322000 audit[2327]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2327 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 8 23:25:31.322000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7fff1ae86070 a2=0 a3=7fff1ae8605c items=0 ppid=2148 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.322000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:31.322000 audit[2327]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2327 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 8 23:25:31.322000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7fff1ae86070 a2=0 a3=7fff1ae8605c items=0 ppid=2148 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:31.322000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:31.550679 kubelet[2001]: E0208 23:25:31.550571 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:31.557312 kubelet[2001]: I0208 23:25:31.557286 2001 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-bpq4r" podStartSLOduration=1.557258251 podCreationTimestamp="2024-02-08 23:25:30 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-08 23:25:31.557024167 +0000 UTC m=+14.117561604" watchObservedRunningTime="2024-02-08 23:25:31.557258251 +0000 UTC m=+14.117795698" Feb 8 23:25:31.799100 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount790135775.mount: Deactivated successfully. Feb 8 23:25:32.115321 update_engine[1112]: I0208 23:25:32.115271 1112 update_attempter.cc:509] Updating boot flags... Feb 8 23:25:34.608973 env[1130]: time="2024-02-08T23:25:34.608923578Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:34.610675 env[1130]: time="2024-02-08T23:25:34.610613748Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7bc79e0d3be4fa8c35133127424f9b1ec775af43145b7dd58637905c76084827,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:34.611993 env[1130]: time="2024-02-08T23:25:34.611962171Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:34.613429 env[1130]: time="2024-02-08T23:25:34.613396357Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:715ac9a30f8a9579e44258af20de354715429e11836b493918e9e1a696e9b028,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:34.613960 env[1130]: time="2024-02-08T23:25:34.613929756Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\" returns image reference \"sha256:7bc79e0d3be4fa8c35133127424f9b1ec775af43145b7dd58637905c76084827\"" Feb 8 23:25:34.616665 env[1130]: time="2024-02-08T23:25:34.616634398Z" level=info msg="CreateContainer within sandbox \"c6f8b802446f3e04f073ccb8cd73f46216eba0eee6e35c93993e838851da81df\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Feb 8 23:25:34.626664 env[1130]: time="2024-02-08T23:25:34.626632160Z" level=info msg="CreateContainer within sandbox \"c6f8b802446f3e04f073ccb8cd73f46216eba0eee6e35c93993e838851da81df\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"dd4bb20feaf60b95a6a89bcf6148fcf3856e0527c839fc1c37a72ef804546f85\"" Feb 8 23:25:34.627052 env[1130]: time="2024-02-08T23:25:34.627030674Z" level=info msg="StartContainer for \"dd4bb20feaf60b95a6a89bcf6148fcf3856e0527c839fc1c37a72ef804546f85\"" Feb 8 23:25:34.642718 systemd[1]: Started cri-containerd-dd4bb20feaf60b95a6a89bcf6148fcf3856e0527c839fc1c37a72ef804546f85.scope. Feb 8 23:25:34.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.652453 kernel: kauditd_printk_skb: 315 callbacks suppressed Feb 8 23:25:34.652512 kernel: audit: type=1400 audit(1707434734.650:1032): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.657291 kernel: audit: type=1400 audit(1707434734.650:1033): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.657333 kernel: audit: type=1400 audit(1707434734.650:1034): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.661630 kernel: audit: type=1400 audit(1707434734.650:1035): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.661733 kernel: audit: type=1400 audit(1707434734.650:1036): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.666256 kernel: audit: type=1400 audit(1707434734.650:1037): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.666296 kernel: audit: type=1400 audit(1707434734.650:1038): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.670284 kernel: audit: type=1400 audit(1707434734.650:1039): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.670330 kernel: audit: type=1400 audit(1707434734.650:1040): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.674154 kernel: audit: type=1400 audit(1707434734.654:1041): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.654000 audit: BPF prog-id=117 op=LOAD Feb 8 23:25:34.655000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.655000 audit[2347]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2203 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:34.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464346262323066656166363062393561366138396263663631343866 Feb 8 23:25:34.655000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.655000 audit[2347]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2203 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:34.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464346262323066656166363062393561366138396263663631343866 Feb 8 23:25:34.655000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.655000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.655000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.655000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.655000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.655000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.655000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.655000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.655000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.655000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.655000 audit: BPF prog-id=118 op=LOAD Feb 8 23:25:34.655000 audit[2347]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000308ea0 items=0 ppid=2203 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:34.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464346262323066656166363062393561366138396263663631343866 Feb 8 23:25:34.658000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.658000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.658000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.658000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.658000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.658000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.658000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.658000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.658000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.658000 audit: BPF prog-id=119 op=LOAD Feb 8 23:25:34.658000 audit[2347]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000308ee8 items=0 ppid=2203 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:34.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464346262323066656166363062393561366138396263663631343866 Feb 8 23:25:34.663000 audit: BPF prog-id=119 op=UNLOAD Feb 8 23:25:34.663000 audit: BPF prog-id=118 op=UNLOAD Feb 8 23:25:34.663000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.663000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.663000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.663000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.663000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.663000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.663000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.663000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.663000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.663000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:34.663000 audit: BPF prog-id=120 op=LOAD Feb 8 23:25:34.663000 audit[2347]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003092f8 items=0 ppid=2203 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:34.663000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464346262323066656166363062393561366138396263663631343866 Feb 8 23:25:34.805291 env[1130]: time="2024-02-08T23:25:34.805238108Z" level=info msg="StartContainer for \"dd4bb20feaf60b95a6a89bcf6148fcf3856e0527c839fc1c37a72ef804546f85\" returns successfully" Feb 8 23:25:35.564462 kubelet[2001]: I0208 23:25:35.564412 2001 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7ff8dc855-rftl9" podStartSLOduration=2.188901487 podCreationTimestamp="2024-02-08 23:25:30 +0000 UTC" firstStartedPulling="2024-02-08 23:25:31.238806026 +0000 UTC m=+13.799343473" lastFinishedPulling="2024-02-08 23:25:34.614273828 +0000 UTC m=+17.174811275" observedRunningTime="2024-02-08 23:25:35.564209086 +0000 UTC m=+18.124746533" watchObservedRunningTime="2024-02-08 23:25:35.564369289 +0000 UTC m=+18.124906736" Feb 8 23:25:36.340000 audit[2380]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2380 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:36.340000 audit[2380]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffccfa766e0 a2=0 a3=7ffccfa766cc items=0 ppid=2148 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.340000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:36.340000 audit[2380]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2380 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:36.340000 audit[2380]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffccfa766e0 a2=0 a3=31030 items=0 ppid=2148 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.340000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:36.348000 audit[2382]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2382 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:36.348000 audit[2382]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffcd1c22160 a2=0 a3=7ffcd1c2214c items=0 ppid=2148 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.348000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:36.354000 audit[2382]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2382 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:36.354000 audit[2382]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffcd1c22160 a2=0 a3=31030 items=0 ppid=2148 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.354000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:36.485268 kubelet[2001]: I0208 23:25:36.485211 2001 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:25:36.489663 systemd[1]: Created slice kubepods-besteffort-podc64b9c9a_ba37_42b6_bf82_65aa6a19bbcc.slice. Feb 8 23:25:36.520590 kubelet[2001]: I0208 23:25:36.520556 2001 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:25:36.525347 systemd[1]: Created slice kubepods-besteffort-poddd1a8fa6_5fb2_49f3_984c_2c6487273a05.slice. Feb 8 23:25:36.526428 kubelet[2001]: I0208 23:25:36.526412 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/c64b9c9a-ba37-42b6-bf82-65aa6a19bbcc-typha-certs\") pod \"calico-typha-766f766994-bw7nl\" (UID: \"c64b9c9a-ba37-42b6-bf82-65aa6a19bbcc\") " pod="calico-system/calico-typha-766f766994-bw7nl" Feb 8 23:25:36.526557 kubelet[2001]: I0208 23:25:36.526542 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-68wsr\" (UniqueName: \"kubernetes.io/projected/c64b9c9a-ba37-42b6-bf82-65aa6a19bbcc-kube-api-access-68wsr\") pod \"calico-typha-766f766994-bw7nl\" (UID: \"c64b9c9a-ba37-42b6-bf82-65aa6a19bbcc\") " pod="calico-system/calico-typha-766f766994-bw7nl" Feb 8 23:25:36.526651 kubelet[2001]: I0208 23:25:36.526637 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c64b9c9a-ba37-42b6-bf82-65aa6a19bbcc-tigera-ca-bundle\") pod \"calico-typha-766f766994-bw7nl\" (UID: \"c64b9c9a-ba37-42b6-bf82-65aa6a19bbcc\") " pod="calico-system/calico-typha-766f766994-bw7nl" Feb 8 23:25:36.627651 kubelet[2001]: I0208 23:25:36.627624 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/dd1a8fa6-5fb2-49f3-984c-2c6487273a05-cni-bin-dir\") pod \"calico-node-mtcz7\" (UID: \"dd1a8fa6-5fb2-49f3-984c-2c6487273a05\") " pod="calico-system/calico-node-mtcz7" Feb 8 23:25:36.628070 kubelet[2001]: I0208 23:25:36.628042 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/dd1a8fa6-5fb2-49f3-984c-2c6487273a05-flexvol-driver-host\") pod \"calico-node-mtcz7\" (UID: \"dd1a8fa6-5fb2-49f3-984c-2c6487273a05\") " pod="calico-system/calico-node-mtcz7" Feb 8 23:25:36.628070 kubelet[2001]: I0208 23:25:36.628070 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/dd1a8fa6-5fb2-49f3-984c-2c6487273a05-var-run-calico\") pod \"calico-node-mtcz7\" (UID: \"dd1a8fa6-5fb2-49f3-984c-2c6487273a05\") " pod="calico-system/calico-node-mtcz7" Feb 8 23:25:36.628213 kubelet[2001]: I0208 23:25:36.628089 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/dd1a8fa6-5fb2-49f3-984c-2c6487273a05-cni-net-dir\") pod \"calico-node-mtcz7\" (UID: \"dd1a8fa6-5fb2-49f3-984c-2c6487273a05\") " pod="calico-system/calico-node-mtcz7" Feb 8 23:25:36.628213 kubelet[2001]: I0208 23:25:36.628111 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7m7kd\" (UniqueName: \"kubernetes.io/projected/dd1a8fa6-5fb2-49f3-984c-2c6487273a05-kube-api-access-7m7kd\") pod \"calico-node-mtcz7\" (UID: \"dd1a8fa6-5fb2-49f3-984c-2c6487273a05\") " pod="calico-system/calico-node-mtcz7" Feb 8 23:25:36.628213 kubelet[2001]: I0208 23:25:36.628141 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/dd1a8fa6-5fb2-49f3-984c-2c6487273a05-var-lib-calico\") pod \"calico-node-mtcz7\" (UID: \"dd1a8fa6-5fb2-49f3-984c-2c6487273a05\") " pod="calico-system/calico-node-mtcz7" Feb 8 23:25:36.628213 kubelet[2001]: I0208 23:25:36.628170 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/dd1a8fa6-5fb2-49f3-984c-2c6487273a05-cni-log-dir\") pod \"calico-node-mtcz7\" (UID: \"dd1a8fa6-5fb2-49f3-984c-2c6487273a05\") " pod="calico-system/calico-node-mtcz7" Feb 8 23:25:36.628213 kubelet[2001]: I0208 23:25:36.628188 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/dd1a8fa6-5fb2-49f3-984c-2c6487273a05-lib-modules\") pod \"calico-node-mtcz7\" (UID: \"dd1a8fa6-5fb2-49f3-984c-2c6487273a05\") " pod="calico-system/calico-node-mtcz7" Feb 8 23:25:36.628356 kubelet[2001]: I0208 23:25:36.628211 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/dd1a8fa6-5fb2-49f3-984c-2c6487273a05-policysync\") pod \"calico-node-mtcz7\" (UID: \"dd1a8fa6-5fb2-49f3-984c-2c6487273a05\") " pod="calico-system/calico-node-mtcz7" Feb 8 23:25:36.628356 kubelet[2001]: I0208 23:25:36.628256 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/dd1a8fa6-5fb2-49f3-984c-2c6487273a05-node-certs\") pod \"calico-node-mtcz7\" (UID: \"dd1a8fa6-5fb2-49f3-984c-2c6487273a05\") " pod="calico-system/calico-node-mtcz7" Feb 8 23:25:36.628356 kubelet[2001]: I0208 23:25:36.628307 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/dd1a8fa6-5fb2-49f3-984c-2c6487273a05-xtables-lock\") pod \"calico-node-mtcz7\" (UID: \"dd1a8fa6-5fb2-49f3-984c-2c6487273a05\") " pod="calico-system/calico-node-mtcz7" Feb 8 23:25:36.628429 kubelet[2001]: I0208 23:25:36.628368 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/dd1a8fa6-5fb2-49f3-984c-2c6487273a05-tigera-ca-bundle\") pod \"calico-node-mtcz7\" (UID: \"dd1a8fa6-5fb2-49f3-984c-2c6487273a05\") " pod="calico-system/calico-node-mtcz7" Feb 8 23:25:36.634149 kubelet[2001]: I0208 23:25:36.634118 2001 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:25:36.634636 kubelet[2001]: E0208 23:25:36.634622 2001 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7tr8t" podUID=211d3bdb-9af7-4c78-a8e9-0d755299bf4e Feb 8 23:25:36.729068 kubelet[2001]: I0208 23:25:36.729022 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/211d3bdb-9af7-4c78-a8e9-0d755299bf4e-varrun\") pod \"csi-node-driver-7tr8t\" (UID: \"211d3bdb-9af7-4c78-a8e9-0d755299bf4e\") " pod="calico-system/csi-node-driver-7tr8t" Feb 8 23:25:36.729068 kubelet[2001]: I0208 23:25:36.729064 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/211d3bdb-9af7-4c78-a8e9-0d755299bf4e-socket-dir\") pod \"csi-node-driver-7tr8t\" (UID: \"211d3bdb-9af7-4c78-a8e9-0d755299bf4e\") " pod="calico-system/csi-node-driver-7tr8t" Feb 8 23:25:36.729268 kubelet[2001]: I0208 23:25:36.729106 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tmbpd\" (UniqueName: \"kubernetes.io/projected/211d3bdb-9af7-4c78-a8e9-0d755299bf4e-kube-api-access-tmbpd\") pod \"csi-node-driver-7tr8t\" (UID: \"211d3bdb-9af7-4c78-a8e9-0d755299bf4e\") " pod="calico-system/csi-node-driver-7tr8t" Feb 8 23:25:36.729268 kubelet[2001]: I0208 23:25:36.729131 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/211d3bdb-9af7-4c78-a8e9-0d755299bf4e-registration-dir\") pod \"csi-node-driver-7tr8t\" (UID: \"211d3bdb-9af7-4c78-a8e9-0d755299bf4e\") " pod="calico-system/csi-node-driver-7tr8t" Feb 8 23:25:36.729268 kubelet[2001]: I0208 23:25:36.729163 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/211d3bdb-9af7-4c78-a8e9-0d755299bf4e-kubelet-dir\") pod \"csi-node-driver-7tr8t\" (UID: \"211d3bdb-9af7-4c78-a8e9-0d755299bf4e\") " pod="calico-system/csi-node-driver-7tr8t" Feb 8 23:25:36.735081 kubelet[2001]: E0208 23:25:36.735051 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.735081 kubelet[2001]: W0208 23:25:36.735071 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.735243 kubelet[2001]: E0208 23:25:36.735101 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.735279 kubelet[2001]: E0208 23:25:36.735266 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.735279 kubelet[2001]: W0208 23:25:36.735275 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.735339 kubelet[2001]: E0208 23:25:36.735287 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.740292 kubelet[2001]: E0208 23:25:36.740275 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.740394 kubelet[2001]: W0208 23:25:36.740377 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.740547 kubelet[2001]: E0208 23:25:36.740500 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.792086 kubelet[2001]: E0208 23:25:36.792041 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:36.792616 env[1130]: time="2024-02-08T23:25:36.792572539Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-766f766994-bw7nl,Uid:c64b9c9a-ba37-42b6-bf82-65aa6a19bbcc,Namespace:calico-system,Attempt:0,}" Feb 8 23:25:36.829021 kubelet[2001]: E0208 23:25:36.828951 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:36.829581 env[1130]: time="2024-02-08T23:25:36.829540996Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-mtcz7,Uid:dd1a8fa6-5fb2-49f3-984c-2c6487273a05,Namespace:calico-system,Attempt:0,}" Feb 8 23:25:36.830223 kubelet[2001]: E0208 23:25:36.830203 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.830344 kubelet[2001]: W0208 23:25:36.830320 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.830404 kubelet[2001]: E0208 23:25:36.830355 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.830626 kubelet[2001]: E0208 23:25:36.830613 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.830691 kubelet[2001]: W0208 23:25:36.830626 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.830691 kubelet[2001]: E0208 23:25:36.830651 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.831184 kubelet[2001]: E0208 23:25:36.831164 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.831184 kubelet[2001]: W0208 23:25:36.831180 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.831591 kubelet[2001]: E0208 23:25:36.831199 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.831591 kubelet[2001]: E0208 23:25:36.831419 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.831591 kubelet[2001]: W0208 23:25:36.831428 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.831591 kubelet[2001]: E0208 23:25:36.831441 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.831724 kubelet[2001]: E0208 23:25:36.831693 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.831724 kubelet[2001]: W0208 23:25:36.831702 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.831724 kubelet[2001]: E0208 23:25:36.831718 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.831943 kubelet[2001]: E0208 23:25:36.831928 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.832016 kubelet[2001]: W0208 23:25:36.831941 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.832094 kubelet[2001]: E0208 23:25:36.832079 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.832219 kubelet[2001]: E0208 23:25:36.832176 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.832219 kubelet[2001]: W0208 23:25:36.832195 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.832219 kubelet[2001]: E0208 23:25:36.832226 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.832426 kubelet[2001]: E0208 23:25:36.832366 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.832426 kubelet[2001]: W0208 23:25:36.832376 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.832426 kubelet[2001]: E0208 23:25:36.832393 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.832585 kubelet[2001]: E0208 23:25:36.832558 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.832585 kubelet[2001]: W0208 23:25:36.832571 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.832658 kubelet[2001]: E0208 23:25:36.832628 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.832764 kubelet[2001]: E0208 23:25:36.832746 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.832764 kubelet[2001]: W0208 23:25:36.832762 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.832891 kubelet[2001]: E0208 23:25:36.832846 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.832996 kubelet[2001]: E0208 23:25:36.832957 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.833198 kubelet[2001]: W0208 23:25:36.832971 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.833300 kubelet[2001]: E0208 23:25:36.833263 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.833439 kubelet[2001]: E0208 23:25:36.833420 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.833439 kubelet[2001]: W0208 23:25:36.833435 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.833548 kubelet[2001]: E0208 23:25:36.833484 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.833715 kubelet[2001]: E0208 23:25:36.833699 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.833715 kubelet[2001]: W0208 23:25:36.833711 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.833892 kubelet[2001]: E0208 23:25:36.833871 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.833892 kubelet[2001]: E0208 23:25:36.833888 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.834011 kubelet[2001]: W0208 23:25:36.833898 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.834011 kubelet[2001]: E0208 23:25:36.833929 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.834469 kubelet[2001]: E0208 23:25:36.834448 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.834469 kubelet[2001]: W0208 23:25:36.834461 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.834573 kubelet[2001]: E0208 23:25:36.834499 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.834611 kubelet[2001]: E0208 23:25:36.834589 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.834611 kubelet[2001]: W0208 23:25:36.834596 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.834677 kubelet[2001]: E0208 23:25:36.834649 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.834781 kubelet[2001]: E0208 23:25:36.834766 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.834843 kubelet[2001]: W0208 23:25:36.834831 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.834901 kubelet[2001]: E0208 23:25:36.834871 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.835077 kubelet[2001]: E0208 23:25:36.835060 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.835077 kubelet[2001]: W0208 23:25:36.835074 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.835180 kubelet[2001]: E0208 23:25:36.835098 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.835608 kubelet[2001]: E0208 23:25:36.835543 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.835608 kubelet[2001]: W0208 23:25:36.835556 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.835608 kubelet[2001]: E0208 23:25:36.835602 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.835795 kubelet[2001]: E0208 23:25:36.835777 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.835795 kubelet[2001]: W0208 23:25:36.835789 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.835881 kubelet[2001]: E0208 23:25:36.835847 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.836027 kubelet[2001]: E0208 23:25:36.836004 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.836141 kubelet[2001]: W0208 23:25:36.836114 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.836227 kubelet[2001]: E0208 23:25:36.836171 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.836781 kubelet[2001]: E0208 23:25:36.836321 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.836781 kubelet[2001]: W0208 23:25:36.836334 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.836781 kubelet[2001]: E0208 23:25:36.836432 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.836781 kubelet[2001]: E0208 23:25:36.836610 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.836781 kubelet[2001]: W0208 23:25:36.836617 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.836781 kubelet[2001]: E0208 23:25:36.836635 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.837089 kubelet[2001]: E0208 23:25:36.836897 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.837089 kubelet[2001]: W0208 23:25:36.836910 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.837089 kubelet[2001]: E0208 23:25:36.836925 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.837402 kubelet[2001]: E0208 23:25:36.837375 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.837402 kubelet[2001]: W0208 23:25:36.837388 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.837485 kubelet[2001]: E0208 23:25:36.837398 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.847595 kubelet[2001]: E0208 23:25:36.847571 2001 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 8 23:25:36.847755 kubelet[2001]: W0208 23:25:36.847735 2001 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 8 23:25:36.847858 kubelet[2001]: E0208 23:25:36.847842 2001 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 8 23:25:36.851427 env[1130]: time="2024-02-08T23:25:36.851361286Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:25:36.851652 env[1130]: time="2024-02-08T23:25:36.851567054Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:25:36.851652 env[1130]: time="2024-02-08T23:25:36.851584888Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:25:36.851910 env[1130]: time="2024-02-08T23:25:36.851881890Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fc58be3126fc4b9c0b66013de2febc761f4ab581cc1bafdb58d607366ed7285e pid=2424 runtime=io.containerd.runc.v2 Feb 8 23:25:36.856797 env[1130]: time="2024-02-08T23:25:36.856731872Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:25:36.856915 env[1130]: time="2024-02-08T23:25:36.856779382Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:25:36.856915 env[1130]: time="2024-02-08T23:25:36.856789662Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:25:36.857072 env[1130]: time="2024-02-08T23:25:36.856930439Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/acf561d5999c25fd537ddd4465e27d2c8d432af392d3a95f6be06859d6ef87bd pid=2441 runtime=io.containerd.runc.v2 Feb 8 23:25:36.862217 systemd[1]: Started cri-containerd-fc58be3126fc4b9c0b66013de2febc761f4ab581cc1bafdb58d607366ed7285e.scope. Feb 8 23:25:36.876167 systemd[1]: Started cri-containerd-acf561d5999c25fd537ddd4465e27d2c8d432af392d3a95f6be06859d6ef87bd.scope. Feb 8 23:25:36.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit: BPF prog-id=121 op=LOAD Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2424 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663353862653331323666633462396330623636303133646532666562 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2424 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663353862653331323666633462396330623636303133646532666562 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit: BPF prog-id=122 op=LOAD Feb 8 23:25:36.888000 audit[2437]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025980 items=0 ppid=2424 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663353862653331323666633462396330623636303133646532666562 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit: BPF prog-id=123 op=LOAD Feb 8 23:25:36.888000 audit[2437]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000259c8 items=0 ppid=2424 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663353862653331323666633462396330623636303133646532666562 Feb 8 23:25:36.888000 audit: BPF prog-id=123 op=UNLOAD Feb 8 23:25:36.888000 audit: BPF prog-id=122 op=UNLOAD Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.888000 audit: BPF prog-id=124 op=LOAD Feb 8 23:25:36.888000 audit[2437]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000025dd8 items=0 ppid=2424 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663353862653331323666633462396330623636303133646532666562 Feb 8 23:25:36.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.890000 audit: BPF prog-id=125 op=LOAD Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c7c48 a2=10 a3=1c items=0 ppid=2441 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163663536316435393939633235666435333764646434343635653237 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c76b0 a2=3c a3=c items=0 ppid=2441 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163663536316435393939633235666435333764646434343635653237 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit: BPF prog-id=126 op=LOAD Feb 8 23:25:36.891000 audit[2460]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c79d8 a2=78 a3=c0000a76b0 items=0 ppid=2441 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163663536316435393939633235666435333764646434343635653237 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit: BPF prog-id=127 op=LOAD Feb 8 23:25:36.891000 audit[2460]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7770 a2=78 a3=c0000a76f8 items=0 ppid=2441 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163663536316435393939633235666435333764646434343635653237 Feb 8 23:25:36.891000 audit: BPF prog-id=127 op=UNLOAD Feb 8 23:25:36.891000 audit: BPF prog-id=126 op=UNLOAD Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:36.891000 audit: BPF prog-id=128 op=LOAD Feb 8 23:25:36.891000 audit[2460]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c7c30 a2=78 a3=c0000a7b08 items=0 ppid=2441 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:36.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163663536316435393939633235666435333764646434343635653237 Feb 8 23:25:36.907779 env[1130]: time="2024-02-08T23:25:36.907733171Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-mtcz7,Uid:dd1a8fa6-5fb2-49f3-984c-2c6487273a05,Namespace:calico-system,Attempt:0,} returns sandbox id \"acf561d5999c25fd537ddd4465e27d2c8d432af392d3a95f6be06859d6ef87bd\"" Feb 8 23:25:36.909255 kubelet[2001]: E0208 23:25:36.909236 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:36.911225 env[1130]: time="2024-02-08T23:25:36.911193376Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\"" Feb 8 23:25:36.924281 env[1130]: time="2024-02-08T23:25:36.924237106Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-766f766994-bw7nl,Uid:c64b9c9a-ba37-42b6-bf82-65aa6a19bbcc,Namespace:calico-system,Attempt:0,} returns sandbox id \"fc58be3126fc4b9c0b66013de2febc761f4ab581cc1bafdb58d607366ed7285e\"" Feb 8 23:25:36.925016 kubelet[2001]: E0208 23:25:36.924969 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:37.368000 audit[2499]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=2499 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:37.368000 audit[2499]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffcee8512c0 a2=0 a3=7ffcee8512ac items=0 ppid=2148 pid=2499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:37.368000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:37.369000 audit[2499]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2499 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:37.369000 audit[2499]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffcee8512c0 a2=0 a3=31030 items=0 ppid=2148 pid=2499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:37.369000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:38.523297 kubelet[2001]: E0208 23:25:38.523268 2001 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7tr8t" podUID=211d3bdb-9af7-4c78-a8e9-0d755299bf4e Feb 8 23:25:40.447272 env[1130]: time="2024-02-08T23:25:40.447219486Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:40.449177 env[1130]: time="2024-02-08T23:25:40.449144339Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6506d2e0be2d5ec9cb8dbe00c4b4f037c67b6ab4ec14a1f0c83333ac51f4da9a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:40.451264 env[1130]: time="2024-02-08T23:25:40.451237150Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:40.453932 env[1130]: time="2024-02-08T23:25:40.453891580Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:b05edbd1f80db4ada229e6001a666a7dd36bb6ab617143684fb3d28abfc4b71e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:40.454271 env[1130]: time="2024-02-08T23:25:40.454234326Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\" returns image reference \"sha256:6506d2e0be2d5ec9cb8dbe00c4b4f037c67b6ab4ec14a1f0c83333ac51f4da9a\"" Feb 8 23:25:40.455833 env[1130]: time="2024-02-08T23:25:40.455804671Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\"" Feb 8 23:25:40.456512 env[1130]: time="2024-02-08T23:25:40.456483272Z" level=info msg="CreateContainer within sandbox \"acf561d5999c25fd537ddd4465e27d2c8d432af392d3a95f6be06859d6ef87bd\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Feb 8 23:25:40.467081 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1311041238.mount: Deactivated successfully. Feb 8 23:25:40.470950 env[1130]: time="2024-02-08T23:25:40.470899294Z" level=info msg="CreateContainer within sandbox \"acf561d5999c25fd537ddd4465e27d2c8d432af392d3a95f6be06859d6ef87bd\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"8829fde62b8ae540a567ded91dee491bd8184b4e085234d663443b6d2edfa647\"" Feb 8 23:25:40.471840 env[1130]: time="2024-02-08T23:25:40.471807508Z" level=info msg="StartContainer for \"8829fde62b8ae540a567ded91dee491bd8184b4e085234d663443b6d2edfa647\"" Feb 8 23:25:40.489952 systemd[1]: Started cri-containerd-8829fde62b8ae540a567ded91dee491bd8184b4e085234d663443b6d2edfa647.scope. Feb 8 23:25:40.501000 audit[2507]: AVC avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.509769 kernel: kauditd_printk_skb: 179 callbacks suppressed Feb 8 23:25:40.509844 kernel: audit: type=1400 audit(1707434740.501:1092): avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.509875 kernel: audit: type=1300 audit(1707434740.501:1092): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2441 pid=2507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:40.501000 audit[2507]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2441 pid=2507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:40.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838323966646536326238616535343061353637646564393164656534 Feb 8 23:25:40.501000 audit[2507]: AVC avc: denied { bpf } for pid=2507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.515330 kernel: audit: type=1327 audit(1707434740.501:1092): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838323966646536326238616535343061353637646564393164656534 Feb 8 23:25:40.515378 kernel: audit: type=1400 audit(1707434740.501:1093): avc: denied { bpf } for pid=2507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.517968 kernel: audit: type=1400 audit(1707434740.501:1093): avc: denied { bpf } for pid=2507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.501000 audit[2507]: AVC avc: denied { bpf } for pid=2507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.501000 audit[2507]: AVC avc: denied { bpf } for pid=2507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.501000 audit[2507]: AVC avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.524837 kernel: audit: type=1400 audit(1707434740.501:1093): avc: denied { bpf } for pid=2507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.524917 kernel: audit: type=1400 audit(1707434740.501:1093): avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.524950 kernel: audit: type=1400 audit(1707434740.501:1093): avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.501000 audit[2507]: AVC avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.525199 kubelet[2001]: E0208 23:25:40.523272 2001 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7tr8t" podUID=211d3bdb-9af7-4c78-a8e9-0d755299bf4e Feb 8 23:25:40.501000 audit[2507]: AVC avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.528564 kernel: audit: type=1400 audit(1707434740.501:1093): avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.528603 kernel: audit: type=1400 audit(1707434740.501:1093): avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.501000 audit[2507]: AVC avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.501000 audit[2507]: AVC avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.501000 audit[2507]: AVC avc: denied { bpf } for pid=2507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.501000 audit[2507]: AVC avc: denied { bpf } for pid=2507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.501000 audit: BPF prog-id=129 op=LOAD Feb 8 23:25:40.501000 audit[2507]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c00025fbe0 items=0 ppid=2441 pid=2507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:40.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838323966646536326238616535343061353637646564393164656534 Feb 8 23:25:40.505000 audit[2507]: AVC avc: denied { bpf } for pid=2507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.505000 audit[2507]: AVC avc: denied { bpf } for pid=2507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.505000 audit[2507]: AVC avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.505000 audit[2507]: AVC avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.505000 audit[2507]: AVC avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.505000 audit[2507]: AVC avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.505000 audit[2507]: AVC avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.505000 audit[2507]: AVC avc: denied { bpf } for pid=2507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.505000 audit[2507]: AVC avc: denied { bpf } for pid=2507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.505000 audit: BPF prog-id=130 op=LOAD Feb 8 23:25:40.505000 audit[2507]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c00025fc28 items=0 ppid=2441 pid=2507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:40.505000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838323966646536326238616535343061353637646564393164656534 Feb 8 23:25:40.508000 audit: BPF prog-id=130 op=UNLOAD Feb 8 23:25:40.508000 audit: BPF prog-id=129 op=UNLOAD Feb 8 23:25:40.508000 audit[2507]: AVC avc: denied { bpf } for pid=2507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.508000 audit[2507]: AVC avc: denied { bpf } for pid=2507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.508000 audit[2507]: AVC avc: denied { bpf } for pid=2507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.508000 audit[2507]: AVC avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.508000 audit[2507]: AVC avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.508000 audit[2507]: AVC avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.508000 audit[2507]: AVC avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.508000 audit[2507]: AVC avc: denied { perfmon } for pid=2507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.508000 audit[2507]: AVC avc: denied { bpf } for pid=2507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.508000 audit[2507]: AVC avc: denied { bpf } for pid=2507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:40.508000 audit: BPF prog-id=131 op=LOAD Feb 8 23:25:40.508000 audit[2507]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c00025fcb8 items=0 ppid=2441 pid=2507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:40.508000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838323966646536326238616535343061353637646564393164656534 Feb 8 23:25:40.533312 env[1130]: time="2024-02-08T23:25:40.533272739Z" level=info msg="StartContainer for \"8829fde62b8ae540a567ded91dee491bd8184b4e085234d663443b6d2edfa647\" returns successfully" Feb 8 23:25:40.540966 systemd[1]: cri-containerd-8829fde62b8ae540a567ded91dee491bd8184b4e085234d663443b6d2edfa647.scope: Deactivated successfully. Feb 8 23:25:40.543000 audit: BPF prog-id=131 op=UNLOAD Feb 8 23:25:40.566469 kubelet[2001]: E0208 23:25:40.566446 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:40.607827 env[1130]: time="2024-02-08T23:25:40.607775980Z" level=info msg="shim disconnected" id=8829fde62b8ae540a567ded91dee491bd8184b4e085234d663443b6d2edfa647 Feb 8 23:25:40.607827 env[1130]: time="2024-02-08T23:25:40.607822959Z" level=warning msg="cleaning up after shim disconnected" id=8829fde62b8ae540a567ded91dee491bd8184b4e085234d663443b6d2edfa647 namespace=k8s.io Feb 8 23:25:40.607827 env[1130]: time="2024-02-08T23:25:40.607831956Z" level=info msg="cleaning up dead shim" Feb 8 23:25:40.615314 env[1130]: time="2024-02-08T23:25:40.615270197Z" level=warning msg="cleanup warnings time=\"2024-02-08T23:25:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2548 runtime=io.containerd.runc.v2\n" Feb 8 23:25:41.465250 systemd[1]: run-containerd-runc-k8s.io-8829fde62b8ae540a567ded91dee491bd8184b4e085234d663443b6d2edfa647-runc.SJHnyF.mount: Deactivated successfully. Feb 8 23:25:41.465357 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8829fde62b8ae540a567ded91dee491bd8184b4e085234d663443b6d2edfa647-rootfs.mount: Deactivated successfully. Feb 8 23:25:41.569778 kubelet[2001]: E0208 23:25:41.569740 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:42.256556 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount691160532.mount: Deactivated successfully. Feb 8 23:25:42.523421 kubelet[2001]: E0208 23:25:42.523224 2001 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7tr8t" podUID=211d3bdb-9af7-4c78-a8e9-0d755299bf4e Feb 8 23:25:44.338197 env[1130]: time="2024-02-08T23:25:44.338143809Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:44.339806 env[1130]: time="2024-02-08T23:25:44.339768221Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b33768e0da1f8a5788a6a5d8ac2dcf15292ea9f3717de450f946c0a055b3532c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:44.341510 env[1130]: time="2024-02-08T23:25:44.341480989Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:44.342955 env[1130]: time="2024-02-08T23:25:44.342926534Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:5f2d3b8c354a4eb6de46e786889913916e620c6c256982fb8d0f1a1d36a282bc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:44.343667 env[1130]: time="2024-02-08T23:25:44.343633085Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\" returns image reference \"sha256:b33768e0da1f8a5788a6a5d8ac2dcf15292ea9f3717de450f946c0a055b3532c\"" Feb 8 23:25:44.345166 env[1130]: time="2024-02-08T23:25:44.345134936Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\"" Feb 8 23:25:44.353373 env[1130]: time="2024-02-08T23:25:44.353318129Z" level=info msg="CreateContainer within sandbox \"fc58be3126fc4b9c0b66013de2febc761f4ab581cc1bafdb58d607366ed7285e\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Feb 8 23:25:44.363027 env[1130]: time="2024-02-08T23:25:44.362961544Z" level=info msg="CreateContainer within sandbox \"fc58be3126fc4b9c0b66013de2febc761f4ab581cc1bafdb58d607366ed7285e\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"b420fdc2907629d5f2a005b6086b705bbbaba910f78fc93fcd3196cf166383e6\"" Feb 8 23:25:44.363532 env[1130]: time="2024-02-08T23:25:44.363503176Z" level=info msg="StartContainer for \"b420fdc2907629d5f2a005b6086b705bbbaba910f78fc93fcd3196cf166383e6\"" Feb 8 23:25:44.377576 systemd[1]: Started cri-containerd-b420fdc2907629d5f2a005b6086b705bbbaba910f78fc93fcd3196cf166383e6.scope. Feb 8 23:25:44.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.389000 audit: BPF prog-id=132 op=LOAD Feb 8 23:25:44.389000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.389000 audit[2575]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2424 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:44.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234323066646332393037363239643566326130303562363038366237 Feb 8 23:25:44.389000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.389000 audit[2575]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2424 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:44.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234323066646332393037363239643566326130303562363038366237 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit: BPF prog-id=133 op=LOAD Feb 8 23:25:44.390000 audit[2575]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003c60a0 items=0 ppid=2424 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:44.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234323066646332393037363239643566326130303562363038366237 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit: BPF prog-id=134 op=LOAD Feb 8 23:25:44.390000 audit[2575]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003c60e8 items=0 ppid=2424 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:44.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234323066646332393037363239643566326130303562363038366237 Feb 8 23:25:44.390000 audit: BPF prog-id=134 op=UNLOAD Feb 8 23:25:44.390000 audit: BPF prog-id=133 op=UNLOAD Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:44.390000 audit: BPF prog-id=135 op=LOAD Feb 8 23:25:44.390000 audit[2575]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003c64f8 items=0 ppid=2424 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:44.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234323066646332393037363239643566326130303562363038366237 Feb 8 23:25:44.415128 env[1130]: time="2024-02-08T23:25:44.415091044Z" level=info msg="StartContainer for \"b420fdc2907629d5f2a005b6086b705bbbaba910f78fc93fcd3196cf166383e6\" returns successfully" Feb 8 23:25:44.522739 kubelet[2001]: E0208 23:25:44.522701 2001 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7tr8t" podUID=211d3bdb-9af7-4c78-a8e9-0d755299bf4e Feb 8 23:25:44.576168 kubelet[2001]: E0208 23:25:44.576141 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:44.583052 kubelet[2001]: I0208 23:25:44.583024 2001 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-766f766994-bw7nl" podStartSLOduration=1.164721783 podCreationTimestamp="2024-02-08 23:25:36 +0000 UTC" firstStartedPulling="2024-02-08 23:25:36.925670386 +0000 UTC m=+19.486207823" lastFinishedPulling="2024-02-08 23:25:44.343941006 +0000 UTC m=+26.904478453" observedRunningTime="2024-02-08 23:25:44.582293044 +0000 UTC m=+27.142830492" watchObservedRunningTime="2024-02-08 23:25:44.582992413 +0000 UTC m=+27.143529860" Feb 8 23:25:45.576838 kubelet[2001]: I0208 23:25:45.576812 2001 prober_manager.go:287] "Failed to trigger a manual run" probe="Readiness" Feb 8 23:25:45.577762 kubelet[2001]: E0208 23:25:45.577749 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:46.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.96:22-10.0.0.1:59652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:46.132602 systemd[1]: Started sshd@7-10.0.0.96:22-10.0.0.1:59652.service. Feb 8 23:25:46.133699 kernel: kauditd_printk_skb: 91 callbacks suppressed Feb 8 23:25:46.133760 kernel: audit: type=1130 audit(1707434746.131:1117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.96:22-10.0.0.1:59652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:46.176124 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount938371554.mount: Deactivated successfully. Feb 8 23:25:46.175000 audit[2610]: USER_ACCT pid=2610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:46.177000 audit[2610]: CRED_ACQ pid=2610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:46.178514 sshd[2610]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:25:46.180461 sshd[2610]: Accepted publickey for core from 10.0.0.1 port 59652 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:25:46.183071 kernel: audit: type=1101 audit(1707434746.175:1118): pid=2610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:46.183112 kernel: audit: type=1103 audit(1707434746.177:1119): pid=2610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:46.183136 kernel: audit: type=1006 audit(1707434746.177:1120): pid=2610 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Feb 8 23:25:46.183125 systemd[1]: Started session-8.scope. Feb 8 23:25:46.183383 systemd-logind[1109]: New session 8 of user core. Feb 8 23:25:46.195157 kernel: audit: type=1300 audit(1707434746.177:1120): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed5afece0 a2=3 a3=0 items=0 ppid=1 pid=2610 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:46.195271 kernel: audit: type=1327 audit(1707434746.177:1120): proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:46.195299 kernel: audit: type=1105 audit(1707434746.188:1121): pid=2610 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:46.195330 kernel: audit: type=1103 audit(1707434746.189:1122): pid=2612 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:46.177000 audit[2610]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed5afece0 a2=3 a3=0 items=0 ppid=1 pid=2610 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:46.177000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:46.188000 audit[2610]: USER_START pid=2610 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:46.189000 audit[2612]: CRED_ACQ pid=2612 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:46.294623 sshd[2610]: pam_unix(sshd:session): session closed for user core Feb 8 23:25:46.294000 audit[2610]: USER_END pid=2610 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:46.296883 systemd[1]: sshd@7-10.0.0.96:22-10.0.0.1:59652.service: Deactivated successfully. Feb 8 23:25:46.297596 systemd[1]: session-8.scope: Deactivated successfully. Feb 8 23:25:46.294000 audit[2610]: CRED_DISP pid=2610 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:46.300819 kernel: audit: type=1106 audit(1707434746.294:1123): pid=2610 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:46.300864 kernel: audit: type=1104 audit(1707434746.294:1124): pid=2610 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:46.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.96:22-10.0.0.1:59652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:46.301276 systemd-logind[1109]: Session 8 logged out. Waiting for processes to exit. Feb 8 23:25:46.301907 systemd-logind[1109]: Removed session 8. Feb 8 23:25:46.523573 kubelet[2001]: E0208 23:25:46.523480 2001 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7tr8t" podUID=211d3bdb-9af7-4c78-a8e9-0d755299bf4e Feb 8 23:25:48.398142 kubelet[2001]: I0208 23:25:48.398103 2001 prober_manager.go:287] "Failed to trigger a manual run" probe="Readiness" Feb 8 23:25:48.398603 kubelet[2001]: E0208 23:25:48.398586 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:48.417000 audit[2626]: NETFILTER_CFG table=filter:95 family=2 entries=15 op=nft_register_rule pid=2626 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:48.417000 audit[2626]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffe24d559f0 a2=0 a3=7ffe24d559dc items=0 ppid=2148 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:48.417000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:48.418000 audit[2626]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=2626 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:25:48.418000 audit[2626]: SYSCALL arch=c000003e syscall=46 success=yes exit=6068 a0=3 a1=7ffe24d559f0 a2=0 a3=7ffe24d559dc items=0 ppid=2148 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:48.418000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:25:48.523400 kubelet[2001]: E0208 23:25:48.523355 2001 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7tr8t" podUID=211d3bdb-9af7-4c78-a8e9-0d755299bf4e Feb 8 23:25:48.584088 kubelet[2001]: E0208 23:25:48.584054 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:50.523568 kubelet[2001]: E0208 23:25:50.523523 2001 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7tr8t" podUID=211d3bdb-9af7-4c78-a8e9-0d755299bf4e Feb 8 23:25:51.139483 env[1130]: time="2024-02-08T23:25:51.139423046Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:51.141497 env[1130]: time="2024-02-08T23:25:51.141449859Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8e8d96a874c0e2f137bc6e0ff4b9da4ac2341852e41d99ab81983d329bb87d93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:51.143415 env[1130]: time="2024-02-08T23:25:51.143376444Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:51.145242 env[1130]: time="2024-02-08T23:25:51.145209642Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:d943b4c23e82a39b0186a1a3b2fe8f728e543d503df72d7be521501a82b7e7b4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:25:51.145828 env[1130]: time="2024-02-08T23:25:51.145787519Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\" returns image reference \"sha256:8e8d96a874c0e2f137bc6e0ff4b9da4ac2341852e41d99ab81983d329bb87d93\"" Feb 8 23:25:51.147893 env[1130]: time="2024-02-08T23:25:51.147515279Z" level=info msg="CreateContainer within sandbox \"acf561d5999c25fd537ddd4465e27d2c8d432af392d3a95f6be06859d6ef87bd\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Feb 8 23:25:51.161482 env[1130]: time="2024-02-08T23:25:51.161435325Z" level=info msg="CreateContainer within sandbox \"acf561d5999c25fd537ddd4465e27d2c8d432af392d3a95f6be06859d6ef87bd\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"fe11eee92760923a28abb8d2e5205821fb27c37f2068edef8c40723cf49024f0\"" Feb 8 23:25:51.162021 env[1130]: time="2024-02-08T23:25:51.161937991Z" level=info msg="StartContainer for \"fe11eee92760923a28abb8d2e5205821fb27c37f2068edef8c40723cf49024f0\"" Feb 8 23:25:51.186193 systemd[1]: run-containerd-runc-k8s.io-fe11eee92760923a28abb8d2e5205821fb27c37f2068edef8c40723cf49024f0-runc.FcXnik.mount: Deactivated successfully. Feb 8 23:25:51.191320 systemd[1]: Started cri-containerd-fe11eee92760923a28abb8d2e5205821fb27c37f2068edef8c40723cf49024f0.scope. Feb 8 23:25:51.203000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.212721 kernel: kauditd_printk_skb: 7 callbacks suppressed Feb 8 23:25:51.212787 kernel: audit: type=1400 audit(1707434751.203:1128): avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.212810 kernel: audit: type=1300 audit(1707434751.203:1128): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2441 pid=2634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:51.212829 kernel: audit: type=1327 audit(1707434751.203:1128): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665313165656539323736303932336132386162623864326535323035 Feb 8 23:25:51.203000 audit[2634]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2441 pid=2634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:51.203000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665313165656539323736303932336132386162623864326535323035 Feb 8 23:25:51.203000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.218758 kernel: audit: type=1400 audit(1707434751.203:1129): avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.218803 kernel: audit: type=1400 audit(1707434751.203:1129): avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.203000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.203000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.231233 kernel: audit: type=1400 audit(1707434751.203:1129): avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.231360 kernel: audit: type=1400 audit(1707434751.203:1129): avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.203000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.203000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.234816 kernel: audit: type=1400 audit(1707434751.203:1129): avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.236603 kernel: audit: type=1400 audit(1707434751.203:1129): avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.203000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.203000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.203000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.203000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.203000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.240996 kernel: audit: type=1400 audit(1707434751.203:1129): avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.203000 audit: BPF prog-id=136 op=LOAD Feb 8 23:25:51.203000 audit[2634]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003cc070 items=0 ppid=2441 pid=2634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:51.203000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665313165656539323736303932336132386162623864326535323035 Feb 8 23:25:51.206000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.206000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.206000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.206000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.206000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.206000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.206000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.206000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.206000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.206000 audit: BPF prog-id=137 op=LOAD Feb 8 23:25:51.206000 audit[2634]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003cc0b8 items=0 ppid=2441 pid=2634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:51.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665313165656539323736303932336132386162623864326535323035 Feb 8 23:25:51.211000 audit: BPF prog-id=137 op=UNLOAD Feb 8 23:25:51.211000 audit: BPF prog-id=136 op=UNLOAD Feb 8 23:25:51.211000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.211000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.211000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.211000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.211000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.211000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.211000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.211000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.211000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.211000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:25:51.211000 audit: BPF prog-id=138 op=LOAD Feb 8 23:25:51.211000 audit[2634]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003cc148 items=0 ppid=2441 pid=2634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:51.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665313165656539323736303932336132386162623864326535323035 Feb 8 23:25:51.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.96:22-10.0.0.1:55922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:51.297949 systemd[1]: Started sshd@8-10.0.0.96:22-10.0.0.1:55922.service. Feb 8 23:25:51.562009 env[1130]: time="2024-02-08T23:25:51.560547673Z" level=info msg="StartContainer for \"fe11eee92760923a28abb8d2e5205821fb27c37f2068edef8c40723cf49024f0\" returns successfully" Feb 8 23:25:51.589590 kubelet[2001]: E0208 23:25:51.589556 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:51.606000 audit[2664]: USER_ACCT pid=2664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:51.608257 sshd[2664]: Accepted publickey for core from 10.0.0.1 port 55922 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:25:51.607000 audit[2664]: CRED_ACQ pid=2664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:51.608000 audit[2664]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdcaa9a8c0 a2=3 a3=0 items=0 ppid=1 pid=2664 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:51.608000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:51.609351 sshd[2664]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:25:51.612926 systemd-logind[1109]: New session 9 of user core. Feb 8 23:25:51.613664 systemd[1]: Started session-9.scope. Feb 8 23:25:51.616000 audit[2664]: USER_START pid=2664 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:51.617000 audit[2666]: CRED_ACQ pid=2666 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:51.832372 sshd[2664]: pam_unix(sshd:session): session closed for user core Feb 8 23:25:51.832000 audit[2664]: USER_END pid=2664 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:51.832000 audit[2664]: CRED_DISP pid=2664 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:51.833000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.96:22-10.0.0.1:55922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:51.834747 systemd[1]: sshd@8-10.0.0.96:22-10.0.0.1:55922.service: Deactivated successfully. Feb 8 23:25:51.835395 systemd[1]: session-9.scope: Deactivated successfully. Feb 8 23:25:51.836201 systemd-logind[1109]: Session 9 logged out. Waiting for processes to exit. Feb 8 23:25:51.836784 systemd-logind[1109]: Removed session 9. Feb 8 23:25:52.325089 env[1130]: time="2024-02-08T23:25:52.325009496Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 8 23:25:52.326880 systemd[1]: cri-containerd-fe11eee92760923a28abb8d2e5205821fb27c37f2068edef8c40723cf49024f0.scope: Deactivated successfully. Feb 8 23:25:52.331000 audit: BPF prog-id=138 op=UNLOAD Feb 8 23:25:52.341682 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fe11eee92760923a28abb8d2e5205821fb27c37f2068edef8c40723cf49024f0-rootfs.mount: Deactivated successfully. Feb 8 23:25:52.349171 env[1130]: time="2024-02-08T23:25:52.349121446Z" level=info msg="shim disconnected" id=fe11eee92760923a28abb8d2e5205821fb27c37f2068edef8c40723cf49024f0 Feb 8 23:25:52.349171 env[1130]: time="2024-02-08T23:25:52.349163434Z" level=warning msg="cleaning up after shim disconnected" id=fe11eee92760923a28abb8d2e5205821fb27c37f2068edef8c40723cf49024f0 namespace=k8s.io Feb 8 23:25:52.349171 env[1130]: time="2024-02-08T23:25:52.349172271Z" level=info msg="cleaning up dead shim" Feb 8 23:25:52.355206 env[1130]: time="2024-02-08T23:25:52.355166134Z" level=warning msg="cleanup warnings time=\"2024-02-08T23:25:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2698 runtime=io.containerd.runc.v2\n" Feb 8 23:25:52.368960 kubelet[2001]: I0208 23:25:52.368925 2001 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Feb 8 23:25:52.383131 kubelet[2001]: I0208 23:25:52.382906 2001 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:25:52.383994 kubelet[2001]: I0208 23:25:52.383949 2001 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:25:52.384185 kubelet[2001]: I0208 23:25:52.384038 2001 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:25:52.388730 systemd[1]: Created slice kubepods-burstable-podaa96042e_2058_41d5_98ca_d5fded36e77b.slice. Feb 8 23:25:52.394517 systemd[1]: Created slice kubepods-burstable-pod8b9f922e_dc05_483c_beb0_229c9657f06b.slice. Feb 8 23:25:52.399176 systemd[1]: Created slice kubepods-besteffort-pod829c3bff_69b7_47c6_8ac4_a1f30b7a44a7.slice. Feb 8 23:25:52.438758 kubelet[2001]: I0208 23:25:52.438721 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/829c3bff-69b7-47c6-8ac4-a1f30b7a44a7-tigera-ca-bundle\") pod \"calico-kube-controllers-54ddcc647b-rmzvz\" (UID: \"829c3bff-69b7-47c6-8ac4-a1f30b7a44a7\") " pod="calico-system/calico-kube-controllers-54ddcc647b-rmzvz" Feb 8 23:25:52.438758 kubelet[2001]: I0208 23:25:52.438758 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/aa96042e-2058-41d5-98ca-d5fded36e77b-config-volume\") pod \"coredns-5d78c9869d-5jdvd\" (UID: \"aa96042e-2058-41d5-98ca-d5fded36e77b\") " pod="kube-system/coredns-5d78c9869d-5jdvd" Feb 8 23:25:52.438931 kubelet[2001]: I0208 23:25:52.438794 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-44btw\" (UniqueName: \"kubernetes.io/projected/829c3bff-69b7-47c6-8ac4-a1f30b7a44a7-kube-api-access-44btw\") pod \"calico-kube-controllers-54ddcc647b-rmzvz\" (UID: \"829c3bff-69b7-47c6-8ac4-a1f30b7a44a7\") " pod="calico-system/calico-kube-controllers-54ddcc647b-rmzvz" Feb 8 23:25:52.438931 kubelet[2001]: I0208 23:25:52.438833 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-57845\" (UniqueName: \"kubernetes.io/projected/8b9f922e-dc05-483c-beb0-229c9657f06b-kube-api-access-57845\") pod \"coredns-5d78c9869d-dnxsd\" (UID: \"8b9f922e-dc05-483c-beb0-229c9657f06b\") " pod="kube-system/coredns-5d78c9869d-dnxsd" Feb 8 23:25:52.439050 kubelet[2001]: I0208 23:25:52.439010 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-blt48\" (UniqueName: \"kubernetes.io/projected/aa96042e-2058-41d5-98ca-d5fded36e77b-kube-api-access-blt48\") pod \"coredns-5d78c9869d-5jdvd\" (UID: \"aa96042e-2058-41d5-98ca-d5fded36e77b\") " pod="kube-system/coredns-5d78c9869d-5jdvd" Feb 8 23:25:52.439085 kubelet[2001]: I0208 23:25:52.439071 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/8b9f922e-dc05-483c-beb0-229c9657f06b-config-volume\") pod \"coredns-5d78c9869d-dnxsd\" (UID: \"8b9f922e-dc05-483c-beb0-229c9657f06b\") " pod="kube-system/coredns-5d78c9869d-dnxsd" Feb 8 23:25:52.527507 systemd[1]: Created slice kubepods-besteffort-pod211d3bdb_9af7_4c78_a8e9_0d755299bf4e.slice. Feb 8 23:25:52.529015 env[1130]: time="2024-02-08T23:25:52.528972821Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7tr8t,Uid:211d3bdb-9af7-4c78-a8e9-0d755299bf4e,Namespace:calico-system,Attempt:0,}" Feb 8 23:25:52.588614 env[1130]: time="2024-02-08T23:25:52.588482928Z" level=error msg="Failed to destroy network for sandbox \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:52.588868 env[1130]: time="2024-02-08T23:25:52.588786558Z" level=error msg="encountered an error cleaning up failed sandbox \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:52.588868 env[1130]: time="2024-02-08T23:25:52.588827917Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7tr8t,Uid:211d3bdb-9af7-4c78-a8e9-0d755299bf4e,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:52.589170 kubelet[2001]: E0208 23:25:52.589144 2001 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:52.589250 kubelet[2001]: E0208 23:25:52.589235 2001 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-7tr8t" Feb 8 23:25:52.589282 kubelet[2001]: E0208 23:25:52.589269 2001 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-7tr8t" Feb 8 23:25:52.589327 kubelet[2001]: E0208 23:25:52.589318 2001 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-7tr8t_calico-system(211d3bdb-9af7-4c78-a8e9-0d755299bf4e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-7tr8t_calico-system(211d3bdb-9af7-4c78-a8e9-0d755299bf4e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-7tr8t" podUID=211d3bdb-9af7-4c78-a8e9-0d755299bf4e Feb 8 23:25:52.592339 kubelet[2001]: E0208 23:25:52.592063 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:52.593673 kubelet[2001]: I0208 23:25:52.593596 2001 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Feb 8 23:25:52.594484 env[1130]: time="2024-02-08T23:25:52.594404194Z" level=info msg="StopPodSandbox for \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\"" Feb 8 23:25:52.594484 env[1130]: time="2024-02-08T23:25:52.594461542Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\"" Feb 8 23:25:52.621845 env[1130]: time="2024-02-08T23:25:52.621785673Z" level=error msg="StopPodSandbox for \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\" failed" error="failed to destroy network for sandbox \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:52.622113 kubelet[2001]: E0208 23:25:52.622084 2001 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Feb 8 23:25:52.622163 kubelet[2001]: E0208 23:25:52.622152 2001 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f} Feb 8 23:25:52.622195 kubelet[2001]: E0208 23:25:52.622184 2001 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"211d3bdb-9af7-4c78-a8e9-0d755299bf4e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 8 23:25:52.622260 kubelet[2001]: E0208 23:25:52.622212 2001 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"211d3bdb-9af7-4c78-a8e9-0d755299bf4e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-7tr8t" podUID=211d3bdb-9af7-4c78-a8e9-0d755299bf4e Feb 8 23:25:52.691821 kubelet[2001]: E0208 23:25:52.691784 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:52.692423 env[1130]: time="2024-02-08T23:25:52.692371001Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-5jdvd,Uid:aa96042e-2058-41d5-98ca-d5fded36e77b,Namespace:kube-system,Attempt:0,}" Feb 8 23:25:52.698391 kubelet[2001]: E0208 23:25:52.698356 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:25:52.703855 env[1130]: time="2024-02-08T23:25:52.703816677Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-dnxsd,Uid:8b9f922e-dc05-483c-beb0-229c9657f06b,Namespace:kube-system,Attempt:0,}" Feb 8 23:25:52.704135 env[1130]: time="2024-02-08T23:25:52.703817048Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-54ddcc647b-rmzvz,Uid:829c3bff-69b7-47c6-8ac4-a1f30b7a44a7,Namespace:calico-system,Attempt:0,}" Feb 8 23:25:52.752941 env[1130]: time="2024-02-08T23:25:52.752872703Z" level=error msg="Failed to destroy network for sandbox \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:52.753272 env[1130]: time="2024-02-08T23:25:52.753237559Z" level=error msg="encountered an error cleaning up failed sandbox \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:52.753354 env[1130]: time="2024-02-08T23:25:52.753326445Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-5jdvd,Uid:aa96042e-2058-41d5-98ca-d5fded36e77b,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:52.753598 kubelet[2001]: E0208 23:25:52.753576 2001 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:52.753674 kubelet[2001]: E0208 23:25:52.753633 2001 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-5jdvd" Feb 8 23:25:52.753674 kubelet[2001]: E0208 23:25:52.753654 2001 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-5jdvd" Feb 8 23:25:52.753726 kubelet[2001]: E0208 23:25:52.753702 2001 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5d78c9869d-5jdvd_kube-system(aa96042e-2058-41d5-98ca-d5fded36e77b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5d78c9869d-5jdvd_kube-system(aa96042e-2058-41d5-98ca-d5fded36e77b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-5jdvd" podUID=aa96042e-2058-41d5-98ca-d5fded36e77b Feb 8 23:25:52.768461 env[1130]: time="2024-02-08T23:25:52.768394826Z" level=error msg="Failed to destroy network for sandbox \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:52.768844 env[1130]: time="2024-02-08T23:25:52.768806130Z" level=error msg="encountered an error cleaning up failed sandbox \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:52.768894 env[1130]: time="2024-02-08T23:25:52.768868578Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-54ddcc647b-rmzvz,Uid:829c3bff-69b7-47c6-8ac4-a1f30b7a44a7,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:52.769171 kubelet[2001]: E0208 23:25:52.769142 2001 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:52.769242 kubelet[2001]: E0208 23:25:52.769213 2001 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-54ddcc647b-rmzvz" Feb 8 23:25:52.769242 kubelet[2001]: E0208 23:25:52.769236 2001 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-54ddcc647b-rmzvz" Feb 8 23:25:52.769298 kubelet[2001]: E0208 23:25:52.769283 2001 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-54ddcc647b-rmzvz_calico-system(829c3bff-69b7-47c6-8ac4-a1f30b7a44a7)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-54ddcc647b-rmzvz_calico-system(829c3bff-69b7-47c6-8ac4-a1f30b7a44a7)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-54ddcc647b-rmzvz" podUID=829c3bff-69b7-47c6-8ac4-a1f30b7a44a7 Feb 8 23:25:52.769857 env[1130]: time="2024-02-08T23:25:52.769818534Z" level=error msg="Failed to destroy network for sandbox \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:52.770166 env[1130]: time="2024-02-08T23:25:52.770131914Z" level=error msg="encountered an error cleaning up failed sandbox \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:52.770229 env[1130]: time="2024-02-08T23:25:52.770181386Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-dnxsd,Uid:8b9f922e-dc05-483c-beb0-229c9657f06b,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:52.770378 kubelet[2001]: E0208 23:25:52.770348 2001 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:52.770437 kubelet[2001]: E0208 23:25:52.770381 2001 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-dnxsd" Feb 8 23:25:52.770437 kubelet[2001]: E0208 23:25:52.770398 2001 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-dnxsd" Feb 8 23:25:52.770489 kubelet[2001]: E0208 23:25:52.770442 2001 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5d78c9869d-dnxsd_kube-system(8b9f922e-dc05-483c-beb0-229c9657f06b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5d78c9869d-dnxsd_kube-system(8b9f922e-dc05-483c-beb0-229c9657f06b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-dnxsd" podUID=8b9f922e-dc05-483c-beb0-229c9657f06b Feb 8 23:25:53.344035 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f-shm.mount: Deactivated successfully. Feb 8 23:25:53.595759 kubelet[2001]: I0208 23:25:53.595649 2001 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Feb 8 23:25:53.596246 env[1130]: time="2024-02-08T23:25:53.596196564Z" level=info msg="StopPodSandbox for \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\"" Feb 8 23:25:53.596913 kubelet[2001]: I0208 23:25:53.596867 2001 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Feb 8 23:25:53.597759 env[1130]: time="2024-02-08T23:25:53.597729908Z" level=info msg="StopPodSandbox for \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\"" Feb 8 23:25:53.599792 kubelet[2001]: I0208 23:25:53.599727 2001 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Feb 8 23:25:53.600282 env[1130]: time="2024-02-08T23:25:53.600251519Z" level=info msg="StopPodSandbox for \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\"" Feb 8 23:25:53.620641 env[1130]: time="2024-02-08T23:25:53.620563545Z" level=error msg="StopPodSandbox for \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\" failed" error="failed to destroy network for sandbox \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:53.620843 kubelet[2001]: E0208 23:25:53.620826 2001 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Feb 8 23:25:53.620931 kubelet[2001]: E0208 23:25:53.620868 2001 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a} Feb 8 23:25:53.620931 kubelet[2001]: E0208 23:25:53.620898 2001 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"829c3bff-69b7-47c6-8ac4-a1f30b7a44a7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 8 23:25:53.621038 kubelet[2001]: E0208 23:25:53.620933 2001 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"829c3bff-69b7-47c6-8ac4-a1f30b7a44a7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-54ddcc647b-rmzvz" podUID=829c3bff-69b7-47c6-8ac4-a1f30b7a44a7 Feb 8 23:25:53.621407 env[1130]: time="2024-02-08T23:25:53.621368889Z" level=error msg="StopPodSandbox for \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\" failed" error="failed to destroy network for sandbox \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:53.621527 kubelet[2001]: E0208 23:25:53.621508 2001 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Feb 8 23:25:53.621527 kubelet[2001]: E0208 23:25:53.621534 2001 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a} Feb 8 23:25:53.621611 kubelet[2001]: E0208 23:25:53.621569 2001 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8b9f922e-dc05-483c-beb0-229c9657f06b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 8 23:25:53.621611 kubelet[2001]: E0208 23:25:53.621595 2001 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8b9f922e-dc05-483c-beb0-229c9657f06b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-dnxsd" podUID=8b9f922e-dc05-483c-beb0-229c9657f06b Feb 8 23:25:53.635820 env[1130]: time="2024-02-08T23:25:53.635767415Z" level=error msg="StopPodSandbox for \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\" failed" error="failed to destroy network for sandbox \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 8 23:25:53.636026 kubelet[2001]: E0208 23:25:53.636002 2001 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Feb 8 23:25:53.636075 kubelet[2001]: E0208 23:25:53.636046 2001 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06} Feb 8 23:25:53.636103 kubelet[2001]: E0208 23:25:53.636077 2001 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"aa96042e-2058-41d5-98ca-d5fded36e77b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 8 23:25:53.636162 kubelet[2001]: E0208 23:25:53.636109 2001 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"aa96042e-2058-41d5-98ca-d5fded36e77b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-5jdvd" podUID=aa96042e-2058-41d5-98ca-d5fded36e77b Feb 8 23:25:56.835955 systemd[1]: Started sshd@9-10.0.0.96:22-10.0.0.1:55934.service. Feb 8 23:25:56.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.96:22-10.0.0.1:55934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:56.840300 kernel: kauditd_printk_skb: 45 callbacks suppressed Feb 8 23:25:56.840380 kernel: audit: type=1130 audit(1707434756.835:1144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.96:22-10.0.0.1:55934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:56.877000 audit[2967]: USER_ACCT pid=2967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:56.879080 sshd[2967]: Accepted publickey for core from 10.0.0.1 port 55934 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:25:56.881596 sshd[2967]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:25:56.880000 audit[2967]: CRED_ACQ pid=2967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:56.890240 kernel: audit: type=1101 audit(1707434756.877:1145): pid=2967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:56.890345 kernel: audit: type=1103 audit(1707434756.880:1146): pid=2967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:56.890374 kernel: audit: type=1006 audit(1707434756.880:1147): pid=2967 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Feb 8 23:25:56.890398 kernel: audit: type=1300 audit(1707434756.880:1147): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdabb48d30 a2=3 a3=0 items=0 ppid=1 pid=2967 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:56.880000 audit[2967]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdabb48d30 a2=3 a3=0 items=0 ppid=1 pid=2967 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:25:56.886029 systemd-logind[1109]: New session 10 of user core. Feb 8 23:25:56.886179 systemd[1]: Started session-10.scope. Feb 8 23:25:56.892045 kernel: audit: type=1327 audit(1707434756.880:1147): proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:56.880000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:25:56.889000 audit[2967]: USER_START pid=2967 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:56.895819 kernel: audit: type=1105 audit(1707434756.889:1148): pid=2967 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:56.895874 kernel: audit: type=1103 audit(1707434756.891:1149): pid=2969 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:56.891000 audit[2969]: CRED_ACQ pid=2969 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:57.001727 sshd[2967]: pam_unix(sshd:session): session closed for user core Feb 8 23:25:57.009660 kernel: audit: type=1106 audit(1707434757.001:1150): pid=2967 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:57.009778 kernel: audit: type=1104 audit(1707434757.001:1151): pid=2967 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:57.001000 audit[2967]: USER_END pid=2967 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:57.001000 audit[2967]: CRED_DISP pid=2967 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:25:57.003000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.96:22-10.0.0.1:55934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:25:57.003829 systemd[1]: sshd@9-10.0.0.96:22-10.0.0.1:55934.service: Deactivated successfully. Feb 8 23:25:57.004496 systemd[1]: session-10.scope: Deactivated successfully. Feb 8 23:25:57.009881 systemd-logind[1109]: Session 10 logged out. Waiting for processes to exit. Feb 8 23:25:57.010610 systemd-logind[1109]: Removed session 10. Feb 8 23:26:00.834302 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2647309751.mount: Deactivated successfully. Feb 8 23:26:01.888531 env[1130]: time="2024-02-08T23:26:01.888478697Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:01.933349 env[1130]: time="2024-02-08T23:26:01.933308869Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1843802b91be8ff1c1d35ee08461ebe909e7a2199e59396f69886439a372312c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:01.976351 env[1130]: time="2024-02-08T23:26:01.976315656Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:01.998677 env[1130]: time="2024-02-08T23:26:01.998645948Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:a45dffb21a0e9ca8962f36359a2ab776beeecd93843543c2fa1745d7bbb0f754,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:01.999148 env[1130]: time="2024-02-08T23:26:01.999112945Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\" returns image reference \"sha256:1843802b91be8ff1c1d35ee08461ebe909e7a2199e59396f69886439a372312c\"" Feb 8 23:26:02.006841 env[1130]: time="2024-02-08T23:26:02.006201528Z" level=info msg="CreateContainer within sandbox \"acf561d5999c25fd537ddd4465e27d2c8d432af392d3a95f6be06859d6ef87bd\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Feb 8 23:26:02.008738 systemd[1]: Started sshd@10-10.0.0.96:22-10.0.0.1:42286.service. Feb 8 23:26:02.007000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.96:22-10.0.0.1:42286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:02.009548 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 8 23:26:02.009619 kernel: audit: type=1130 audit(1707434762.007:1153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.96:22-10.0.0.1:42286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:02.053000 audit[2988]: USER_ACCT pid=2988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:02.054939 sshd[2988]: Accepted publickey for core from 10.0.0.1 port 42286 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:26:02.056000 audit[2988]: CRED_ACQ pid=2988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:02.057940 sshd[2988]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:02.060706 kernel: audit: type=1101 audit(1707434762.053:1154): pid=2988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:02.060768 kernel: audit: type=1103 audit(1707434762.056:1155): pid=2988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:02.060789 kernel: audit: type=1006 audit(1707434762.056:1156): pid=2988 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Feb 8 23:26:02.061216 systemd-logind[1109]: New session 11 of user core. Feb 8 23:26:02.061927 systemd[1]: Started session-11.scope. Feb 8 23:26:02.056000 audit[2988]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc78981700 a2=3 a3=0 items=0 ppid=1 pid=2988 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:02.066559 kernel: audit: type=1300 audit(1707434762.056:1156): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc78981700 a2=3 a3=0 items=0 ppid=1 pid=2988 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:02.066614 kernel: audit: type=1327 audit(1707434762.056:1156): proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:02.056000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:02.065000 audit[2988]: USER_START pid=2988 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:02.071466 kernel: audit: type=1105 audit(1707434762.065:1157): pid=2988 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:02.071508 kernel: audit: type=1103 audit(1707434762.066:1158): pid=2990 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:02.066000 audit[2990]: CRED_ACQ pid=2990 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:02.178938 sshd[2988]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:02.179000 audit[2988]: USER_END pid=2988 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:02.181496 systemd[1]: sshd@10-10.0.0.96:22-10.0.0.1:42286.service: Deactivated successfully. Feb 8 23:26:02.182324 systemd[1]: session-11.scope: Deactivated successfully. Feb 8 23:26:02.183321 systemd-logind[1109]: Session 11 logged out. Waiting for processes to exit. Feb 8 23:26:02.179000 audit[2988]: CRED_DISP pid=2988 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:02.184128 systemd-logind[1109]: Removed session 11. Feb 8 23:26:02.186893 kernel: audit: type=1106 audit(1707434762.179:1159): pid=2988 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:02.186949 kernel: audit: type=1104 audit(1707434762.179:1160): pid=2988 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:02.179000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.96:22-10.0.0.1:42286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:02.261956 env[1130]: time="2024-02-08T23:26:02.261898719Z" level=info msg="CreateContainer within sandbox \"acf561d5999c25fd537ddd4465e27d2c8d432af392d3a95f6be06859d6ef87bd\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"1d5738adc5dc8b51ee64d70ef174bd1c0375a8176f48bebcc868b31db48d60ad\"" Feb 8 23:26:02.262459 env[1130]: time="2024-02-08T23:26:02.262422613Z" level=info msg="StartContainer for \"1d5738adc5dc8b51ee64d70ef174bd1c0375a8176f48bebcc868b31db48d60ad\"" Feb 8 23:26:02.276346 systemd[1]: Started cri-containerd-1d5738adc5dc8b51ee64d70ef174bd1c0375a8176f48bebcc868b31db48d60ad.scope. Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00019f6b0 a2=3c a3=8 items=0 ppid=2441 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:02.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164353733386164633564633862353165653634643730656631373462 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit: BPF prog-id=139 op=LOAD Feb 8 23:26:02.288000 audit[3009]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00019f9d8 a2=78 a3=c000385190 items=0 ppid=2441 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:02.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164353733386164633564633862353165653634643730656631373462 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit: BPF prog-id=140 op=LOAD Feb 8 23:26:02.288000 audit[3009]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00019f770 a2=78 a3=c0003851d8 items=0 ppid=2441 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:02.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164353733386164633564633862353165653634643730656631373462 Feb 8 23:26:02.288000 audit: BPF prog-id=140 op=UNLOAD Feb 8 23:26:02.288000 audit: BPF prog-id=139 op=UNLOAD Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:02.288000 audit: BPF prog-id=141 op=LOAD Feb 8 23:26:02.288000 audit[3009]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00019fc30 a2=78 a3=c000385268 items=0 ppid=2441 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:02.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164353733386164633564633862353165653634643730656631373462 Feb 8 23:26:02.365346 env[1130]: time="2024-02-08T23:26:02.365288459Z" level=info msg="StartContainer for \"1d5738adc5dc8b51ee64d70ef174bd1c0375a8176f48bebcc868b31db48d60ad\" returns successfully" Feb 8 23:26:02.372312 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Feb 8 23:26:02.372383 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Feb 8 23:26:02.628817 kubelet[2001]: E0208 23:26:02.628782 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:26:02.651391 kubelet[2001]: I0208 23:26:02.650947 2001 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-mtcz7" podStartSLOduration=1.561363455 podCreationTimestamp="2024-02-08 23:25:36 +0000 UTC" firstStartedPulling="2024-02-08 23:25:36.909785954 +0000 UTC m=+19.470323401" lastFinishedPulling="2024-02-08 23:26:01.999332057 +0000 UTC m=+44.559869504" observedRunningTime="2024-02-08 23:26:02.650834397 +0000 UTC m=+45.211371844" watchObservedRunningTime="2024-02-08 23:26:02.650909558 +0000 UTC m=+45.211447005" Feb 8 23:26:03.630744 kubelet[2001]: E0208 23:26:03.630690 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:26:03.646014 systemd[1]: run-containerd-runc-k8s.io-1d5738adc5dc8b51ee64d70ef174bd1c0375a8176f48bebcc868b31db48d60ad-runc.0JYBAA.mount: Deactivated successfully. Feb 8 23:26:04.092000 audit[3158]: AVC avc: denied { write } for pid=3158 comm="tee" name="fd" dev="proc" ino=22320 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 8 23:26:04.092000 audit[3158]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc6967a98f a2=241 a3=1b6 items=1 ppid=3122 pid=3158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.094000 audit[3175]: AVC avc: denied { write } for pid=3175 comm="tee" name="fd" dev="proc" ino=25217 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 8 23:26:04.094000 audit[3175]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe673f9990 a2=241 a3=1b6 items=1 ppid=3133 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.094000 audit: CWD cwd="/etc/service/enabled/bird/log" Feb 8 23:26:04.094000 audit: PATH item=0 name="/dev/fd/63" inode=25211 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:26:04.094000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 8 23:26:04.092000 audit: CWD cwd="/etc/service/enabled/bird6/log" Feb 8 23:26:04.092000 audit: PATH item=0 name="/dev/fd/63" inode=24281 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:26:04.092000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 8 23:26:04.098000 audit[3155]: AVC avc: denied { write } for pid=3155 comm="tee" name="fd" dev="proc" ino=24290 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 8 23:26:04.099000 audit[3162]: AVC avc: denied { write } for pid=3162 comm="tee" name="fd" dev="proc" ino=23290 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 8 23:26:04.099000 audit[3162]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc0378398f a2=241 a3=1b6 items=1 ppid=3132 pid=3162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.099000 audit: CWD cwd="/etc/service/enabled/felix/log" Feb 8 23:26:04.099000 audit: PATH item=0 name="/dev/fd/63" inode=24284 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:26:04.099000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 8 23:26:04.098000 audit[3155]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdbf1a7991 a2=241 a3=1b6 items=1 ppid=3121 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.098000 audit: CWD cwd="/etc/service/enabled/cni/log" Feb 8 23:26:04.098000 audit: PATH item=0 name="/dev/fd/63" inode=22307 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:26:04.098000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 8 23:26:04.100000 audit[3181]: AVC avc: denied { write } for pid=3181 comm="tee" name="fd" dev="proc" ino=22327 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 8 23:26:04.100000 audit[3181]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffaebc597f a2=241 a3=1b6 items=1 ppid=3125 pid=3181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.100000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Feb 8 23:26:04.100000 audit: PATH item=0 name="/dev/fd/63" inode=22317 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:26:04.100000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 8 23:26:04.102000 audit[3184]: AVC avc: denied { write } for pid=3184 comm="tee" name="fd" dev="proc" ino=25221 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 8 23:26:04.102000 audit[3184]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffec24a1980 a2=241 a3=1b6 items=1 ppid=3128 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.102000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Feb 8 23:26:04.102000 audit: PATH item=0 name="/dev/fd/63" inode=22323 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:26:04.102000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 8 23:26:04.136000 audit[3204]: AVC avc: denied { write } for pid=3204 comm="tee" name="fd" dev="proc" ino=22339 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 8 23:26:04.136000 audit[3204]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd6652598f a2=241 a3=1b6 items=1 ppid=3148 pid=3204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.136000 audit: CWD cwd="/etc/service/enabled/confd/log" Feb 8 23:26:04.136000 audit: PATH item=0 name="/dev/fd/63" inode=23295 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 8 23:26:04.136000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit: BPF prog-id=142 op=LOAD Feb 8 23:26:04.314000 audit[3267]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffccf8ecf00 a2=70 a3=7fe2b11eb000 items=0 ppid=3142 pid=3267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.314000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 8 23:26:04.314000 audit: BPF prog-id=142 op=UNLOAD Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit: BPF prog-id=143 op=LOAD Feb 8 23:26:04.314000 audit[3267]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffccf8ecf00 a2=70 a3=6e items=0 ppid=3142 pid=3267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.314000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 8 23:26:04.314000 audit: BPF prog-id=143 op=UNLOAD Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffccf8eceb0 a2=70 a3=7ffccf8ecf00 items=0 ppid=3142 pid=3267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.314000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit: BPF prog-id=144 op=LOAD Feb 8 23:26:04.314000 audit[3267]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffccf8ece90 a2=70 a3=7ffccf8ecf00 items=0 ppid=3142 pid=3267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.314000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 8 23:26:04.314000 audit: BPF prog-id=144 op=UNLOAD Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffccf8ecf70 a2=70 a3=0 items=0 ppid=3142 pid=3267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.314000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffccf8ecf60 a2=70 a3=0 items=0 ppid=3142 pid=3267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.314000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 8 23:26:04.314000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.314000 audit[3267]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffccf8ecfa0 a2=70 a3=0 items=0 ppid=3142 pid=3267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.314000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 8 23:26:04.315000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.315000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.315000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.315000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.315000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.315000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.315000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.315000 audit[3267]: AVC avc: denied { perfmon } for pid=3267 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.315000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.315000 audit[3267]: AVC avc: denied { bpf } for pid=3267 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.315000 audit: BPF prog-id=145 op=LOAD Feb 8 23:26:04.315000 audit[3267]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffccf8ecec0 a2=70 a3=ffffffff items=0 ppid=3142 pid=3267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.315000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 8 23:26:04.320000 audit[3269]: AVC avc: denied { bpf } for pid=3269 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.320000 audit[3269]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff40e4b020 a2=70 a3=208 items=0 ppid=3142 pid=3269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.320000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 8 23:26:04.321000 audit[3269]: AVC avc: denied { bpf } for pid=3269 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:04.321000 audit[3269]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff40e4aef0 a2=70 a3=3 items=0 ppid=3142 pid=3269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.321000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 8 23:26:04.326000 audit: BPF prog-id=145 op=UNLOAD Feb 8 23:26:04.365000 audit[3295]: NETFILTER_CFG table=raw:97 family=2 entries=19 op=nft_register_chain pid=3295 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:26:04.365000 audit[3295]: SYSCALL arch=c000003e syscall=46 success=yes exit=6132 a0=3 a1=7ffed9fa40a0 a2=0 a3=7ffed9fa408c items=0 ppid=3142 pid=3295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.365000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:26:04.366000 audit[3298]: NETFILTER_CFG table=mangle:98 family=2 entries=19 op=nft_register_chain pid=3298 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:26:04.366000 audit[3298]: SYSCALL arch=c000003e syscall=46 success=yes exit=6800 a0=3 a1=7ffec82b2120 a2=0 a3=5608636af000 items=0 ppid=3142 pid=3298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.366000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:26:04.369000 audit[3296]: NETFILTER_CFG table=nat:99 family=2 entries=16 op=nft_register_chain pid=3296 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:26:04.369000 audit[3296]: SYSCALL arch=c000003e syscall=46 success=yes exit=5188 a0=3 a1=7ffdffa3de10 a2=0 a3=555d353a5000 items=0 ppid=3142 pid=3296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.369000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:26:04.370000 audit[3297]: NETFILTER_CFG table=filter:100 family=2 entries=39 op=nft_register_chain pid=3297 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:26:04.370000 audit[3297]: SYSCALL arch=c000003e syscall=46 success=yes exit=18472 a0=3 a1=7ffc61058c20 a2=0 a3=55c5a238f000 items=0 ppid=3142 pid=3297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:04.370000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:26:05.248731 systemd-networkd[1022]: vxlan.calico: Link UP Feb 8 23:26:05.248736 systemd-networkd[1022]: vxlan.calico: Gained carrier Feb 8 23:26:05.524057 env[1130]: time="2024-02-08T23:26:05.523892497Z" level=info msg="StopPodSandbox for \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\"" Feb 8 23:26:05.524499 env[1130]: time="2024-02-08T23:26:05.523892517Z" level=info msg="StopPodSandbox for \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\"" Feb 8 23:26:05.932927 env[1130]: 2024-02-08 23:26:05.729 [INFO][3347] k8s.go 578: Cleaning up netns ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Feb 8 23:26:05.932927 env[1130]: 2024-02-08 23:26:05.730 [INFO][3347] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" iface="eth0" netns="/var/run/netns/cni-2a1dce6e-377e-7170-327e-e63b705dba9b" Feb 8 23:26:05.932927 env[1130]: 2024-02-08 23:26:05.730 [INFO][3347] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" iface="eth0" netns="/var/run/netns/cni-2a1dce6e-377e-7170-327e-e63b705dba9b" Feb 8 23:26:05.932927 env[1130]: 2024-02-08 23:26:05.730 [INFO][3347] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" iface="eth0" netns="/var/run/netns/cni-2a1dce6e-377e-7170-327e-e63b705dba9b" Feb 8 23:26:05.932927 env[1130]: 2024-02-08 23:26:05.731 [INFO][3347] k8s.go 585: Releasing IP address(es) ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Feb 8 23:26:05.932927 env[1130]: 2024-02-08 23:26:05.731 [INFO][3347] utils.go 188: Calico CNI releasing IP address ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Feb 8 23:26:05.932927 env[1130]: 2024-02-08 23:26:05.767 [INFO][3362] ipam_plugin.go 415: Releasing address using handleID ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" HandleID="k8s-pod-network.5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Workload="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" Feb 8 23:26:05.932927 env[1130]: 2024-02-08 23:26:05.768 [INFO][3362] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:26:05.932927 env[1130]: 2024-02-08 23:26:05.768 [INFO][3362] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:26:05.932927 env[1130]: 2024-02-08 23:26:05.791 [WARNING][3362] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" HandleID="k8s-pod-network.5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Workload="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" Feb 8 23:26:05.932927 env[1130]: 2024-02-08 23:26:05.791 [INFO][3362] ipam_plugin.go 443: Releasing address using workloadID ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" HandleID="k8s-pod-network.5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Workload="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" Feb 8 23:26:05.932927 env[1130]: 2024-02-08 23:26:05.929 [INFO][3362] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:26:05.932927 env[1130]: 2024-02-08 23:26:05.930 [INFO][3347] k8s.go 591: Teardown processing complete. ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Feb 8 23:26:05.934700 systemd[1]: run-netns-cni\x2d2a1dce6e\x2d377e\x2d7170\x2d327e\x2de63b705dba9b.mount: Deactivated successfully. Feb 8 23:26:05.935347 env[1130]: time="2024-02-08T23:26:05.935305589Z" level=info msg="TearDown network for sandbox \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\" successfully" Feb 8 23:26:05.935397 env[1130]: time="2024-02-08T23:26:05.935344742Z" level=info msg="StopPodSandbox for \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\" returns successfully" Feb 8 23:26:05.936108 env[1130]: time="2024-02-08T23:26:05.936055457Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-54ddcc647b-rmzvz,Uid:829c3bff-69b7-47c6-8ac4-a1f30b7a44a7,Namespace:calico-system,Attempt:1,}" Feb 8 23:26:05.955995 env[1130]: 2024-02-08 23:26:05.791 [INFO][3348] k8s.go 578: Cleaning up netns ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Feb 8 23:26:05.955995 env[1130]: 2024-02-08 23:26:05.791 [INFO][3348] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" iface="eth0" netns="/var/run/netns/cni-547c401f-74e3-425a-857d-57d1af98e2f0" Feb 8 23:26:05.955995 env[1130]: 2024-02-08 23:26:05.791 [INFO][3348] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" iface="eth0" netns="/var/run/netns/cni-547c401f-74e3-425a-857d-57d1af98e2f0" Feb 8 23:26:05.955995 env[1130]: 2024-02-08 23:26:05.791 [INFO][3348] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" iface="eth0" netns="/var/run/netns/cni-547c401f-74e3-425a-857d-57d1af98e2f0" Feb 8 23:26:05.955995 env[1130]: 2024-02-08 23:26:05.791 [INFO][3348] k8s.go 585: Releasing IP address(es) ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Feb 8 23:26:05.955995 env[1130]: 2024-02-08 23:26:05.791 [INFO][3348] utils.go 188: Calico CNI releasing IP address ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Feb 8 23:26:05.955995 env[1130]: 2024-02-08 23:26:05.806 [INFO][3371] ipam_plugin.go 415: Releasing address using handleID ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" HandleID="k8s-pod-network.bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Workload="localhost-k8s-csi--node--driver--7tr8t-eth0" Feb 8 23:26:05.955995 env[1130]: 2024-02-08 23:26:05.806 [INFO][3371] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:26:05.955995 env[1130]: 2024-02-08 23:26:05.929 [INFO][3371] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:26:05.955995 env[1130]: 2024-02-08 23:26:05.948 [WARNING][3371] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" HandleID="k8s-pod-network.bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Workload="localhost-k8s-csi--node--driver--7tr8t-eth0" Feb 8 23:26:05.955995 env[1130]: 2024-02-08 23:26:05.948 [INFO][3371] ipam_plugin.go 443: Releasing address using workloadID ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" HandleID="k8s-pod-network.bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Workload="localhost-k8s-csi--node--driver--7tr8t-eth0" Feb 8 23:26:05.955995 env[1130]: 2024-02-08 23:26:05.952 [INFO][3371] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:26:05.955995 env[1130]: 2024-02-08 23:26:05.954 [INFO][3348] k8s.go 591: Teardown processing complete. ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Feb 8 23:26:05.956415 env[1130]: time="2024-02-08T23:26:05.956121190Z" level=info msg="TearDown network for sandbox \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\" successfully" Feb 8 23:26:05.956415 env[1130]: time="2024-02-08T23:26:05.956150625Z" level=info msg="StopPodSandbox for \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\" returns successfully" Feb 8 23:26:05.956815 env[1130]: time="2024-02-08T23:26:05.956774577Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7tr8t,Uid:211d3bdb-9af7-4c78-a8e9-0d755299bf4e,Namespace:calico-system,Attempt:1,}" Feb 8 23:26:05.957715 systemd[1]: run-netns-cni\x2d547c401f\x2d74e3\x2d425a\x2d857d\x2d57d1af98e2f0.mount: Deactivated successfully. Feb 8 23:26:06.458150 systemd-networkd[1022]: vxlan.calico: Gained IPv6LL Feb 8 23:26:06.523815 env[1130]: time="2024-02-08T23:26:06.523765664Z" level=info msg="StopPodSandbox for \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\"" Feb 8 23:26:06.790923 env[1130]: 2024-02-08 23:26:06.624 [INFO][3398] k8s.go 578: Cleaning up netns ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Feb 8 23:26:06.790923 env[1130]: 2024-02-08 23:26:06.624 [INFO][3398] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" iface="eth0" netns="/var/run/netns/cni-295a5a2e-3a53-943d-5210-9f839651379c" Feb 8 23:26:06.790923 env[1130]: 2024-02-08 23:26:06.625 [INFO][3398] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" iface="eth0" netns="/var/run/netns/cni-295a5a2e-3a53-943d-5210-9f839651379c" Feb 8 23:26:06.790923 env[1130]: 2024-02-08 23:26:06.625 [INFO][3398] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" iface="eth0" netns="/var/run/netns/cni-295a5a2e-3a53-943d-5210-9f839651379c" Feb 8 23:26:06.790923 env[1130]: 2024-02-08 23:26:06.625 [INFO][3398] k8s.go 585: Releasing IP address(es) ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Feb 8 23:26:06.790923 env[1130]: 2024-02-08 23:26:06.625 [INFO][3398] utils.go 188: Calico CNI releasing IP address ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Feb 8 23:26:06.790923 env[1130]: 2024-02-08 23:26:06.642 [INFO][3407] ipam_plugin.go 415: Releasing address using handleID ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" HandleID="k8s-pod-network.8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Workload="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" Feb 8 23:26:06.790923 env[1130]: 2024-02-08 23:26:06.642 [INFO][3407] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:26:06.790923 env[1130]: 2024-02-08 23:26:06.642 [INFO][3407] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:26:06.790923 env[1130]: 2024-02-08 23:26:06.785 [WARNING][3407] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" HandleID="k8s-pod-network.8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Workload="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" Feb 8 23:26:06.790923 env[1130]: 2024-02-08 23:26:06.786 [INFO][3407] ipam_plugin.go 443: Releasing address using workloadID ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" HandleID="k8s-pod-network.8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Workload="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" Feb 8 23:26:06.790923 env[1130]: 2024-02-08 23:26:06.787 [INFO][3407] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:26:06.790923 env[1130]: 2024-02-08 23:26:06.789 [INFO][3398] k8s.go 591: Teardown processing complete. ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Feb 8 23:26:06.791669 env[1130]: time="2024-02-08T23:26:06.791003564Z" level=info msg="TearDown network for sandbox \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\" successfully" Feb 8 23:26:06.791669 env[1130]: time="2024-02-08T23:26:06.791040053Z" level=info msg="StopPodSandbox for \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\" returns successfully" Feb 8 23:26:06.791718 kubelet[2001]: E0208 23:26:06.791421 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:26:06.791889 env[1130]: time="2024-02-08T23:26:06.791795440Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-dnxsd,Uid:8b9f922e-dc05-483c-beb0-229c9657f06b,Namespace:kube-system,Attempt:1,}" Feb 8 23:26:06.935869 systemd[1]: run-netns-cni\x2d295a5a2e\x2d3a53\x2d943d\x2d5210\x2d9f839651379c.mount: Deactivated successfully. Feb 8 23:26:06.993931 systemd-networkd[1022]: caliede3b24506e: Link UP Feb 8 23:26:06.996213 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 8 23:26:06.996377 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliede3b24506e: link becomes ready Feb 8 23:26:06.996921 systemd-networkd[1022]: caliede3b24506e: Gained carrier Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.851 [INFO][3416] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0 calico-kube-controllers-54ddcc647b- calico-system 829c3bff-69b7-47c6-8ac4-a1f30b7a44a7 790 0 2024-02-08 23:25:36 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:54ddcc647b projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-54ddcc647b-rmzvz eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] caliede3b24506e [] []}} ContainerID="5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" Namespace="calico-system" Pod="calico-kube-controllers-54ddcc647b-rmzvz" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-" Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.851 [INFO][3416] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" Namespace="calico-system" Pod="calico-kube-controllers-54ddcc647b-rmzvz" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.882 [INFO][3438] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" HandleID="k8s-pod-network.5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" Workload="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.943 [INFO][3438] ipam_plugin.go 268: Auto assigning IP ContainerID="5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" HandleID="k8s-pod-network.5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" Workload="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00029f9c0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-54ddcc647b-rmzvz", "timestamp":"2024-02-08 23:26:06.882794929 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.943 [INFO][3438] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.944 [INFO][3438] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.944 [INFO][3438] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.945 [INFO][3438] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" host="localhost" Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.950 [INFO][3438] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.961 [INFO][3438] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.963 [INFO][3438] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.969 [INFO][3438] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.969 [INFO][3438] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" host="localhost" Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.970 [INFO][3438] ipam.go 1682: Creating new handle: k8s-pod-network.5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8 Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.973 [INFO][3438] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" host="localhost" Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.985 [INFO][3438] ipam.go 1216: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" host="localhost" Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.985 [INFO][3438] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" host="localhost" Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.985 [INFO][3438] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:26:07.012924 env[1130]: 2024-02-08 23:26:06.985 [INFO][3438] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" HandleID="k8s-pod-network.5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" Workload="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" Feb 8 23:26:07.013675 env[1130]: 2024-02-08 23:26:06.987 [INFO][3416] k8s.go 385: Populated endpoint ContainerID="5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" Namespace="calico-system" Pod="calico-kube-controllers-54ddcc647b-rmzvz" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0", GenerateName:"calico-kube-controllers-54ddcc647b-", Namespace:"calico-system", SelfLink:"", UID:"829c3bff-69b7-47c6-8ac4-a1f30b7a44a7", ResourceVersion:"790", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 25, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"54ddcc647b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-54ddcc647b-rmzvz", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliede3b24506e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:26:07.013675 env[1130]: 2024-02-08 23:26:06.987 [INFO][3416] k8s.go 386: Calico CNI using IPs: [192.168.88.129/32] ContainerID="5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" Namespace="calico-system" Pod="calico-kube-controllers-54ddcc647b-rmzvz" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" Feb 8 23:26:07.013675 env[1130]: 2024-02-08 23:26:06.987 [INFO][3416] dataplane_linux.go 68: Setting the host side veth name to caliede3b24506e ContainerID="5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" Namespace="calico-system" Pod="calico-kube-controllers-54ddcc647b-rmzvz" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" Feb 8 23:26:07.013675 env[1130]: 2024-02-08 23:26:06.997 [INFO][3416] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" Namespace="calico-system" Pod="calico-kube-controllers-54ddcc647b-rmzvz" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" Feb 8 23:26:07.013675 env[1130]: 2024-02-08 23:26:06.998 [INFO][3416] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" Namespace="calico-system" Pod="calico-kube-controllers-54ddcc647b-rmzvz" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0", GenerateName:"calico-kube-controllers-54ddcc647b-", Namespace:"calico-system", SelfLink:"", UID:"829c3bff-69b7-47c6-8ac4-a1f30b7a44a7", ResourceVersion:"790", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 25, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"54ddcc647b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8", Pod:"calico-kube-controllers-54ddcc647b-rmzvz", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliede3b24506e", MAC:"06:c6:8c:b2:19:c4", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:26:07.013675 env[1130]: 2024-02-08 23:26:07.007 [INFO][3416] k8s.go 491: Wrote updated endpoint to datastore ContainerID="5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8" Namespace="calico-system" Pod="calico-kube-controllers-54ddcc647b-rmzvz" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" Feb 8 23:26:07.032000 audit[3476]: NETFILTER_CFG table=filter:101 family=2 entries=36 op=nft_register_chain pid=3476 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:26:07.034845 kernel: kauditd_printk_skb: 162 callbacks suppressed Feb 8 23:26:07.034918 kernel: audit: type=1325 audit(1707434767.032:1193): table=filter:101 family=2 entries=36 op=nft_register_chain pid=3476 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:26:07.045452 kernel: audit: type=1300 audit(1707434767.032:1193): arch=c000003e syscall=46 success=yes exit=19908 a0=3 a1=7fffc5459c90 a2=0 a3=7fffc5459c7c items=0 ppid=3142 pid=3476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.045527 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8b7ac1cefb9: link becomes ready Feb 8 23:26:07.045548 kernel: audit: type=1327 audit(1707434767.032:1193): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:26:07.032000 audit[3476]: SYSCALL arch=c000003e syscall=46 success=yes exit=19908 a0=3 a1=7fffc5459c90 a2=0 a3=7fffc5459c7c items=0 ppid=3142 pid=3476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.032000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:26:07.038504 systemd-networkd[1022]: cali8b7ac1cefb9: Link UP Feb 8 23:26:07.042418 systemd-networkd[1022]: cali8b7ac1cefb9: Gained carrier Feb 8 23:26:07.094476 env[1130]: time="2024-02-08T23:26:07.094294754Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:26:07.094476 env[1130]: time="2024-02-08T23:26:07.094335361Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:26:07.094476 env[1130]: time="2024-02-08T23:26:07.094347394Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:26:07.094733 env[1130]: time="2024-02-08T23:26:07.094521480Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8 pid=3485 runtime=io.containerd.runc.v2 Feb 8 23:26:07.112720 systemd[1]: Started cri-containerd-5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8.scope. Feb 8 23:26:07.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.129296 kernel: audit: type=1400 audit(1707434767.123:1194): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.129345 kernel: audit: type=1400 audit(1707434767.123:1195): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.129377 kernel: audit: type=1400 audit(1707434767.123:1196): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.133322 kernel: audit: type=1400 audit(1707434767.123:1197): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.136138 kernel: audit: type=1400 audit(1707434767.123:1198): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:06.944 [INFO][3428] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--7tr8t-eth0 csi-node-driver- calico-system 211d3bdb-9af7-4c78-a8e9-0d755299bf4e 791 0 2024-02-08 23:25:36 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:86b88cf7c9 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s localhost csi-node-driver-7tr8t eth0 default [] [] [kns.calico-system ksa.calico-system.default] cali8b7ac1cefb9 [] []}} ContainerID="02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" Namespace="calico-system" Pod="csi-node-driver-7tr8t" WorkloadEndpoint="localhost-k8s-csi--node--driver--7tr8t-" Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:06.944 [INFO][3428] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" Namespace="calico-system" Pod="csi-node-driver-7tr8t" WorkloadEndpoint="localhost-k8s-csi--node--driver--7tr8t-eth0" Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:06.979 [INFO][3451] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" HandleID="k8s-pod-network.02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" Workload="localhost-k8s-csi--node--driver--7tr8t-eth0" Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:06.993 [INFO][3451] ipam_plugin.go 268: Auto assigning IP ContainerID="02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" HandleID="k8s-pod-network.02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" Workload="localhost-k8s-csi--node--driver--7tr8t-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002958f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-7tr8t", "timestamp":"2024-02-08 23:26:06.979106229 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:06.993 [INFO][3451] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:06.993 [INFO][3451] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:06.993 [INFO][3451] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:06.997 [INFO][3451] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" host="localhost" Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:07.002 [INFO][3451] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:07.020 [INFO][3451] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:07.022 [INFO][3451] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:07.024 [INFO][3451] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:07.025 [INFO][3451] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" host="localhost" Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:07.026 [INFO][3451] ipam.go 1682: Creating new handle: k8s-pod-network.02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:07.029 [INFO][3451] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" host="localhost" Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:07.034 [INFO][3451] ipam.go 1216: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" host="localhost" Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:07.034 [INFO][3451] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" host="localhost" Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:07.034 [INFO][3451] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:26:07.138208 env[1130]: 2024-02-08 23:26:07.034 [INFO][3451] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" HandleID="k8s-pod-network.02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" Workload="localhost-k8s-csi--node--driver--7tr8t-eth0" Feb 8 23:26:07.138968 env[1130]: 2024-02-08 23:26:07.036 [INFO][3428] k8s.go 385: Populated endpoint ContainerID="02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" Namespace="calico-system" Pod="csi-node-driver-7tr8t" WorkloadEndpoint="localhost-k8s-csi--node--driver--7tr8t-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--7tr8t-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"211d3bdb-9af7-4c78-a8e9-0d755299bf4e", ResourceVersion:"791", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 25, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-7tr8t", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali8b7ac1cefb9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:26:07.138968 env[1130]: 2024-02-08 23:26:07.036 [INFO][3428] k8s.go 386: Calico CNI using IPs: [192.168.88.130/32] ContainerID="02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" Namespace="calico-system" Pod="csi-node-driver-7tr8t" WorkloadEndpoint="localhost-k8s-csi--node--driver--7tr8t-eth0" Feb 8 23:26:07.138968 env[1130]: 2024-02-08 23:26:07.036 [INFO][3428] dataplane_linux.go 68: Setting the host side veth name to cali8b7ac1cefb9 ContainerID="02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" Namespace="calico-system" Pod="csi-node-driver-7tr8t" WorkloadEndpoint="localhost-k8s-csi--node--driver--7tr8t-eth0" Feb 8 23:26:07.138968 env[1130]: 2024-02-08 23:26:07.042 [INFO][3428] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" Namespace="calico-system" Pod="csi-node-driver-7tr8t" WorkloadEndpoint="localhost-k8s-csi--node--driver--7tr8t-eth0" Feb 8 23:26:07.138968 env[1130]: 2024-02-08 23:26:07.048 [INFO][3428] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" Namespace="calico-system" Pod="csi-node-driver-7tr8t" WorkloadEndpoint="localhost-k8s-csi--node--driver--7tr8t-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--7tr8t-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"211d3bdb-9af7-4c78-a8e9-0d755299bf4e", ResourceVersion:"791", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 25, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec", Pod:"csi-node-driver-7tr8t", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali8b7ac1cefb9", MAC:"32:4d:f0:13:06:d5", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:26:07.138968 env[1130]: 2024-02-08 23:26:07.135 [INFO][3428] k8s.go 491: Wrote updated endpoint to datastore ContainerID="02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec" Namespace="calico-system" Pod="csi-node-driver-7tr8t" WorkloadEndpoint="localhost-k8s-csi--node--driver--7tr8t-eth0" Feb 8 23:26:07.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.143417 kernel: audit: type=1400 audit(1707434767.123:1199): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.143464 kernel: audit: type=1400 audit(1707434767.123:1200): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.128000 audit: BPF prog-id=146 op=LOAD Feb 8 23:26:07.128000 audit[3493]: AVC avc: denied { bpf } for pid=3493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.128000 audit[3493]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3485 pid=3493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530373866386432393664333562363766363637383235326137626263 Feb 8 23:26:07.128000 audit[3493]: AVC avc: denied { perfmon } for pid=3493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.128000 audit[3493]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3485 pid=3493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530373866386432393664333562363766363637383235326137626263 Feb 8 23:26:07.128000 audit[3493]: AVC avc: denied { bpf } for pid=3493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.128000 audit[3493]: AVC avc: denied { bpf } for pid=3493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.128000 audit[3493]: AVC avc: denied { bpf } for pid=3493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.128000 audit[3493]: AVC avc: denied { perfmon } for pid=3493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.128000 audit[3493]: AVC avc: denied { perfmon } for pid=3493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.128000 audit[3493]: AVC avc: denied { perfmon } for pid=3493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.128000 audit[3493]: AVC avc: denied { perfmon } for pid=3493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.128000 audit[3493]: AVC avc: denied { perfmon } for pid=3493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.128000 audit[3493]: AVC avc: denied { bpf } for pid=3493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.128000 audit[3493]: AVC avc: denied { bpf } for pid=3493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.128000 audit: BPF prog-id=147 op=LOAD Feb 8 23:26:07.128000 audit[3493]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000324ae0 items=0 ppid=3485 pid=3493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530373866386432393664333562363766363637383235326137626263 Feb 8 23:26:07.130000 audit[3493]: AVC avc: denied { bpf } for pid=3493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.130000 audit[3493]: AVC avc: denied { bpf } for pid=3493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.130000 audit[3493]: AVC avc: denied { perfmon } for pid=3493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.130000 audit[3493]: AVC avc: denied { perfmon } for pid=3493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.130000 audit[3493]: AVC avc: denied { perfmon } for pid=3493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.130000 audit[3493]: AVC avc: denied { perfmon } for pid=3493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.130000 audit[3493]: AVC avc: denied { perfmon } for pid=3493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.130000 audit[3493]: AVC avc: denied { bpf } for pid=3493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.130000 audit[3493]: AVC avc: denied { bpf } for pid=3493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.130000 audit: BPF prog-id=148 op=LOAD Feb 8 23:26:07.130000 audit[3493]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000324b28 items=0 ppid=3485 pid=3493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530373866386432393664333562363766363637383235326137626263 Feb 8 23:26:07.133000 audit: BPF prog-id=148 op=UNLOAD Feb 8 23:26:07.133000 audit: BPF prog-id=147 op=UNLOAD Feb 8 23:26:07.133000 audit[3493]: AVC avc: denied { bpf } for pid=3493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.133000 audit[3493]: AVC avc: denied { bpf } for pid=3493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.133000 audit[3493]: AVC avc: denied { bpf } for pid=3493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.133000 audit[3493]: AVC avc: denied { perfmon } for pid=3493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.133000 audit[3493]: AVC avc: denied { perfmon } for pid=3493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.133000 audit[3493]: AVC avc: denied { perfmon } for pid=3493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.133000 audit[3493]: AVC avc: denied { perfmon } for pid=3493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.133000 audit[3493]: AVC avc: denied { perfmon } for pid=3493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.133000 audit[3493]: AVC avc: denied { bpf } for pid=3493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.133000 audit[3493]: AVC avc: denied { bpf } for pid=3493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.133000 audit: BPF prog-id=149 op=LOAD Feb 8 23:26:07.133000 audit[3493]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000324f38 items=0 ppid=3485 pid=3493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530373866386432393664333562363766363637383235326137626263 Feb 8 23:26:07.145266 systemd-resolved[1072]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 8 23:26:07.156000 audit[3523]: NETFILTER_CFG table=filter:102 family=2 entries=34 op=nft_register_chain pid=3523 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:26:07.156000 audit[3523]: SYSCALL arch=c000003e syscall=46 success=yes exit=18320 a0=3 a1=7fffacf87fe0 a2=0 a3=7fffacf87fcc items=0 ppid=3142 pid=3523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.156000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:26:07.172717 env[1130]: time="2024-02-08T23:26:07.172632260Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-54ddcc647b-rmzvz,Uid:829c3bff-69b7-47c6-8ac4-a1f30b7a44a7,Namespace:calico-system,Attempt:1,} returns sandbox id \"5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8\"" Feb 8 23:26:07.174372 env[1130]: time="2024-02-08T23:26:07.174333573Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\"" Feb 8 23:26:07.183409 systemd[1]: Started sshd@11-10.0.0.96:22-10.0.0.1:42300.service. Feb 8 23:26:07.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.96:22-10.0.0.1:42300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:07.197522 env[1130]: time="2024-02-08T23:26:07.197369066Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:26:07.197522 env[1130]: time="2024-02-08T23:26:07.197417697Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:26:07.197522 env[1130]: time="2024-02-08T23:26:07.197440920Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:26:07.198023 env[1130]: time="2024-02-08T23:26:07.197947071Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec pid=3555 runtime=io.containerd.runc.v2 Feb 8 23:26:07.213803 systemd[1]: Started cri-containerd-02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec.scope. Feb 8 23:26:07.231000 audit[3547]: USER_ACCT pid=3547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:07.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.232000 audit: BPF prog-id=150 op=LOAD Feb 8 23:26:07.232000 audit[3547]: CRED_ACQ pid=3547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:07.233000 audit[3547]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffca21b710 a2=3 a3=0 items=0 ppid=1 pid=3547 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.233000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3555 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032313430303038636664326533626438336634306139353664366139 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3555 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032313430303038636664326533626438336634306139353664366139 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit: BPF prog-id=151 op=LOAD Feb 8 23:26:07.233000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0001dd4d0 items=0 ppid=3555 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032313430303038636664326533626438336634306139353664366139 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit: BPF prog-id=152 op=LOAD Feb 8 23:26:07.233000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0001dd518 items=0 ppid=3555 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032313430303038636664326533626438336634306139353664366139 Feb 8 23:26:07.233000 audit: BPF prog-id=152 op=UNLOAD Feb 8 23:26:07.233000 audit: BPF prog-id=151 op=UNLOAD Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.233000 audit: BPF prog-id=153 op=LOAD Feb 8 23:26:07.233000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0001dd928 items=0 ppid=3555 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032313430303038636664326533626438336634306139353664366139 Feb 8 23:26:07.237294 sshd[3547]: Accepted publickey for core from 10.0.0.1 port 42300 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:26:07.234591 sshd[3547]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:07.239076 systemd-resolved[1072]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 8 23:26:07.239287 systemd[1]: Started session-12.scope. Feb 8 23:26:07.243198 systemd-logind[1109]: New session 12 of user core. Feb 8 23:26:07.246000 audit[3547]: USER_START pid=3547 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:07.248000 audit[3593]: CRED_ACQ pid=3593 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:07.250762 env[1130]: time="2024-02-08T23:26:07.250721269Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7tr8t,Uid:211d3bdb-9af7-4c78-a8e9-0d755299bf4e,Namespace:calico-system,Attempt:1,} returns sandbox id \"02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec\"" Feb 8 23:26:07.338318 systemd-networkd[1022]: calicf3edd6fd19: Link UP Feb 8 23:26:07.342516 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calicf3edd6fd19: link becomes ready Feb 8 23:26:07.342154 systemd-networkd[1022]: calicf3edd6fd19: Gained carrier Feb 8 23:26:07.523589 env[1130]: time="2024-02-08T23:26:07.523532422Z" level=info msg="StopPodSandbox for \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\"" Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.220 [INFO][3524] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--5d78c9869d--dnxsd-eth0 coredns-5d78c9869d- kube-system 8b9f922e-dc05-483c-beb0-229c9657f06b 797 0 2024-02-08 23:25:30 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5d78c9869d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-5d78c9869d-dnxsd eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calicf3edd6fd19 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" Namespace="kube-system" Pod="coredns-5d78c9869d-dnxsd" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--dnxsd-" Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.220 [INFO][3524] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" Namespace="kube-system" Pod="coredns-5d78c9869d-dnxsd" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.264 [INFO][3577] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" HandleID="k8s-pod-network.7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" Workload="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.297 [INFO][3577] ipam_plugin.go 268: Auto assigning IP ContainerID="7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" HandleID="k8s-pod-network.7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" Workload="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000246c90), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-5d78c9869d-dnxsd", "timestamp":"2024-02-08 23:26:07.264623597 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.297 [INFO][3577] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.297 [INFO][3577] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.297 [INFO][3577] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.299 [INFO][3577] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" host="localhost" Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.306 [INFO][3577] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.309 [INFO][3577] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.311 [INFO][3577] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.312 [INFO][3577] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.312 [INFO][3577] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" host="localhost" Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.314 [INFO][3577] ipam.go 1682: Creating new handle: k8s-pod-network.7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.319 [INFO][3577] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" host="localhost" Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.334 [INFO][3577] ipam.go 1216: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" host="localhost" Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.334 [INFO][3577] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" host="localhost" Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.334 [INFO][3577] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:26:07.550686 env[1130]: 2024-02-08 23:26:07.334 [INFO][3577] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" HandleID="k8s-pod-network.7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" Workload="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" Feb 8 23:26:07.551270 env[1130]: 2024-02-08 23:26:07.336 [INFO][3524] k8s.go 385: Populated endpoint ContainerID="7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" Namespace="kube-system" Pod="coredns-5d78c9869d-dnxsd" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--dnxsd-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"8b9f922e-dc05-483c-beb0-229c9657f06b", ResourceVersion:"797", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 25, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-5d78c9869d-dnxsd", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicf3edd6fd19", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:26:07.551270 env[1130]: 2024-02-08 23:26:07.336 [INFO][3524] k8s.go 386: Calico CNI using IPs: [192.168.88.131/32] ContainerID="7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" Namespace="kube-system" Pod="coredns-5d78c9869d-dnxsd" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" Feb 8 23:26:07.551270 env[1130]: 2024-02-08 23:26:07.336 [INFO][3524] dataplane_linux.go 68: Setting the host side veth name to calicf3edd6fd19 ContainerID="7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" Namespace="kube-system" Pod="coredns-5d78c9869d-dnxsd" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" Feb 8 23:26:07.551270 env[1130]: 2024-02-08 23:26:07.339 [INFO][3524] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" Namespace="kube-system" Pod="coredns-5d78c9869d-dnxsd" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" Feb 8 23:26:07.551270 env[1130]: 2024-02-08 23:26:07.342 [INFO][3524] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" Namespace="kube-system" Pod="coredns-5d78c9869d-dnxsd" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--dnxsd-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"8b9f922e-dc05-483c-beb0-229c9657f06b", ResourceVersion:"797", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 25, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c", Pod:"coredns-5d78c9869d-dnxsd", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicf3edd6fd19", MAC:"12:ec:fd:b3:ad:ed", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:26:07.551270 env[1130]: 2024-02-08 23:26:07.547 [INFO][3524] k8s.go 491: Wrote updated endpoint to datastore ContainerID="7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c" Namespace="kube-system" Pod="coredns-5d78c9869d-dnxsd" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" Feb 8 23:26:07.551472 sshd[3547]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:07.554000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.96:22-10.0.0.1:42302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:07.555000 audit[3547]: USER_END pid=3547 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:07.556000 audit[3547]: CRED_DISP pid=3547 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:07.557000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.96:22-10.0.0.1:42300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:07.555509 systemd[1]: Started sshd@12-10.0.0.96:22-10.0.0.1:42302.service. Feb 8 23:26:07.558214 systemd[1]: sshd@11-10.0.0.96:22-10.0.0.1:42300.service: Deactivated successfully. Feb 8 23:26:07.558728 systemd[1]: session-12.scope: Deactivated successfully. Feb 8 23:26:07.559908 systemd-logind[1109]: Session 12 logged out. Waiting for processes to exit. Feb 8 23:26:07.560871 systemd-logind[1109]: Removed session 12. Feb 8 23:26:07.573000 audit[3649]: NETFILTER_CFG table=filter:103 family=2 entries=44 op=nft_register_chain pid=3649 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:26:07.573000 audit[3649]: SYSCALL arch=c000003e syscall=46 success=yes exit=22284 a0=3 a1=7ffc99b5b200 a2=0 a3=7ffc99b5b1ec items=0 ppid=3142 pid=3649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.573000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:26:07.593000 audit[3637]: USER_ACCT pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:07.595015 sshd[3637]: Accepted publickey for core from 10.0.0.1 port 42302 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:26:07.595000 audit[3637]: CRED_ACQ pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:07.596000 audit[3637]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5d149f10 a2=3 a3=0 items=0 ppid=1 pid=3637 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.596000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:07.597244 sshd[3637]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:07.600547 env[1130]: time="2024-02-08T23:26:07.598369796Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:26:07.600547 env[1130]: time="2024-02-08T23:26:07.598403620Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:26:07.600547 env[1130]: time="2024-02-08T23:26:07.598412777Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:26:07.601166 env[1130]: time="2024-02-08T23:26:07.601029509Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c pid=3657 runtime=io.containerd.runc.v2 Feb 8 23:26:07.603323 systemd[1]: Started session-13.scope. Feb 8 23:26:07.604545 systemd-logind[1109]: New session 13 of user core. Feb 8 23:26:07.608000 audit[3637]: USER_START pid=3637 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:07.609000 audit[3677]: CRED_ACQ pid=3677 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:07.619505 systemd[1]: Started cri-containerd-7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c.scope. Feb 8 23:26:07.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit: BPF prog-id=154 op=LOAD Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3657 pid=3671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764626465376334396361653730363261383239303663663861386235 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3657 pid=3671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764626465376334396361653730363261383239303663663861386235 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit: BPF prog-id=155 op=LOAD Feb 8 23:26:07.639000 audit[3671]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000229500 items=0 ppid=3657 pid=3671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764626465376334396361653730363261383239303663663861386235 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit: BPF prog-id=156 op=LOAD Feb 8 23:26:07.639000 audit[3671]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000229548 items=0 ppid=3657 pid=3671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764626465376334396361653730363261383239303663663861386235 Feb 8 23:26:07.639000 audit: BPF prog-id=156 op=UNLOAD Feb 8 23:26:07.639000 audit: BPF prog-id=155 op=UNLOAD Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:07.639000 audit: BPF prog-id=157 op=LOAD Feb 8 23:26:07.639000 audit[3671]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000229958 items=0 ppid=3657 pid=3671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:07.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764626465376334396361653730363261383239303663663861386235 Feb 8 23:26:07.641808 systemd-resolved[1072]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 8 23:26:07.664767 kubelet[2001]: E0208 23:26:07.664709 2001 cadvisor_stats_provider.go:442] "Partial failure issuing cadvisor.ContainerInfoV2" err="partial failures: [\"/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8b9f922e_dc05_483c_beb0_229c9657f06b.slice/cri-containerd-7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c.scope\": RecentStats: unable to find data in memory cache]" Feb 8 23:26:07.680499 env[1130]: time="2024-02-08T23:26:07.680460066Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-dnxsd,Uid:8b9f922e-dc05-483c-beb0-229c9657f06b,Namespace:kube-system,Attempt:1,} returns sandbox id \"7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c\"" Feb 8 23:26:07.681835 kubelet[2001]: E0208 23:26:07.681439 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:26:07.683838 env[1130]: time="2024-02-08T23:26:07.683814544Z" level=info msg="CreateContainer within sandbox \"7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 8 23:26:07.687519 env[1130]: 2024-02-08 23:26:07.599 [INFO][3624] k8s.go 578: Cleaning up netns ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Feb 8 23:26:07.687519 env[1130]: 2024-02-08 23:26:07.600 [INFO][3624] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" iface="eth0" netns="/var/run/netns/cni-4ea74e2d-1a59-9a6a-d32c-c2b67f62d87c" Feb 8 23:26:07.687519 env[1130]: 2024-02-08 23:26:07.600 [INFO][3624] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" iface="eth0" netns="/var/run/netns/cni-4ea74e2d-1a59-9a6a-d32c-c2b67f62d87c" Feb 8 23:26:07.687519 env[1130]: 2024-02-08 23:26:07.600 [INFO][3624] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" iface="eth0" netns="/var/run/netns/cni-4ea74e2d-1a59-9a6a-d32c-c2b67f62d87c" Feb 8 23:26:07.687519 env[1130]: 2024-02-08 23:26:07.600 [INFO][3624] k8s.go 585: Releasing IP address(es) ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Feb 8 23:26:07.687519 env[1130]: 2024-02-08 23:26:07.600 [INFO][3624] utils.go 188: Calico CNI releasing IP address ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Feb 8 23:26:07.687519 env[1130]: 2024-02-08 23:26:07.650 [INFO][3667] ipam_plugin.go 415: Releasing address using handleID ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" HandleID="k8s-pod-network.d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Workload="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" Feb 8 23:26:07.687519 env[1130]: 2024-02-08 23:26:07.650 [INFO][3667] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:26:07.687519 env[1130]: 2024-02-08 23:26:07.650 [INFO][3667] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:26:07.687519 env[1130]: 2024-02-08 23:26:07.673 [WARNING][3667] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" HandleID="k8s-pod-network.d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Workload="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" Feb 8 23:26:07.687519 env[1130]: 2024-02-08 23:26:07.673 [INFO][3667] ipam_plugin.go 443: Releasing address using workloadID ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" HandleID="k8s-pod-network.d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Workload="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" Feb 8 23:26:07.687519 env[1130]: 2024-02-08 23:26:07.677 [INFO][3667] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:26:07.687519 env[1130]: 2024-02-08 23:26:07.678 [INFO][3624] k8s.go 591: Teardown processing complete. ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Feb 8 23:26:07.688046 env[1130]: time="2024-02-08T23:26:07.688026250Z" level=info msg="TearDown network for sandbox \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\" successfully" Feb 8 23:26:07.688129 env[1130]: time="2024-02-08T23:26:07.688109275Z" level=info msg="StopPodSandbox for \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\" returns successfully" Feb 8 23:26:07.688455 kubelet[2001]: E0208 23:26:07.688334 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:26:07.688664 env[1130]: time="2024-02-08T23:26:07.688645422Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-5jdvd,Uid:aa96042e-2058-41d5-98ca-d5fded36e77b,Namespace:kube-system,Attempt:1,}" Feb 8 23:26:07.939461 systemd[1]: run-netns-cni\x2d4ea74e2d\x2d1a59\x2d9a6a\x2dd32c\x2dc2b67f62d87c.mount: Deactivated successfully. Feb 8 23:26:08.315160 systemd-networkd[1022]: cali8b7ac1cefb9: Gained IPv6LL Feb 8 23:26:08.391427 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4002351177.mount: Deactivated successfully. Feb 8 23:26:08.485813 sshd[3637]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:08.485000 audit[3637]: USER_END pid=3637 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:08.485000 audit[3637]: CRED_DISP pid=3637 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:08.488000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.96:22-10.0.0.1:42302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:08.488881 systemd[1]: sshd@12-10.0.0.96:22-10.0.0.1:42302.service: Deactivated successfully. Feb 8 23:26:08.489420 systemd[1]: session-13.scope: Deactivated successfully. Feb 8 23:26:08.490393 systemd-logind[1109]: Session 13 logged out. Waiting for processes to exit. Feb 8 23:26:08.491910 systemd[1]: Started sshd@13-10.0.0.96:22-10.0.0.1:46244.service. Feb 8 23:26:08.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.96:22-10.0.0.1:46244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:08.493251 systemd-logind[1109]: Removed session 13. Feb 8 23:26:08.531000 audit[3710]: USER_ACCT pid=3710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:08.532290 sshd[3710]: Accepted publickey for core from 10.0.0.1 port 46244 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:26:08.532000 audit[3710]: CRED_ACQ pid=3710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:08.532000 audit[3710]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffff31fda10 a2=3 a3=0 items=0 ppid=1 pid=3710 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:08.532000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:08.533376 sshd[3710]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:08.537011 systemd-logind[1109]: New session 14 of user core. Feb 8 23:26:08.537872 systemd[1]: Started session-14.scope. Feb 8 23:26:08.541000 audit[3710]: USER_START pid=3710 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:08.542000 audit[3712]: CRED_ACQ pid=3712 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:08.570153 systemd-networkd[1022]: caliede3b24506e: Gained IPv6LL Feb 8 23:26:08.691361 sshd[3710]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:08.691000 audit[3710]: USER_END pid=3710 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:08.691000 audit[3710]: CRED_DISP pid=3710 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:08.693381 systemd[1]: sshd@13-10.0.0.96:22-10.0.0.1:46244.service: Deactivated successfully. Feb 8 23:26:08.692000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.96:22-10.0.0.1:46244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:08.694189 systemd[1]: session-14.scope: Deactivated successfully. Feb 8 23:26:08.694731 systemd-logind[1109]: Session 14 logged out. Waiting for processes to exit. Feb 8 23:26:08.695375 systemd-logind[1109]: Removed session 14. Feb 8 23:26:08.971751 env[1130]: time="2024-02-08T23:26:08.971697238Z" level=info msg="CreateContainer within sandbox \"7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"f78235fcf1d001f12608680c0303ac2be37d75d6982a11faafcf0e97abcdf142\"" Feb 8 23:26:08.972398 env[1130]: time="2024-02-08T23:26:08.972365723Z" level=info msg="StartContainer for \"f78235fcf1d001f12608680c0303ac2be37d75d6982a11faafcf0e97abcdf142\"" Feb 8 23:26:08.990467 systemd[1]: Started cri-containerd-f78235fcf1d001f12608680c0303ac2be37d75d6982a11faafcf0e97abcdf142.scope. Feb 8 23:26:08.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:08.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:08.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:08.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:08.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:08.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:08.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:08.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:08.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:08.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:08.999000 audit: BPF prog-id=158 op=LOAD Feb 8 23:26:08.999000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:08.999000 audit[3732]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3657 pid=3732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:08.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637383233356663663164303031663132363038363830633033303361 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3657 pid=3732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637383233356663663164303031663132363038363830633033303361 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit: BPF prog-id=159 op=LOAD Feb 8 23:26:09.000000 audit[3732]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0001df2e0 items=0 ppid=3657 pid=3732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637383233356663663164303031663132363038363830633033303361 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit: BPF prog-id=160 op=LOAD Feb 8 23:26:09.000000 audit[3732]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0001df328 items=0 ppid=3657 pid=3732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637383233356663663164303031663132363038363830633033303361 Feb 8 23:26:09.000000 audit: BPF prog-id=160 op=UNLOAD Feb 8 23:26:09.000000 audit: BPF prog-id=159 op=UNLOAD Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.000000 audit: BPF prog-id=161 op=LOAD Feb 8 23:26:09.000000 audit[3732]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0001df738 items=0 ppid=3657 pid=3732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637383233356663663164303031663132363038363830633033303361 Feb 8 23:26:09.073456 env[1130]: time="2024-02-08T23:26:09.073405692Z" level=info msg="StartContainer for \"f78235fcf1d001f12608680c0303ac2be37d75d6982a11faafcf0e97abcdf142\" returns successfully" Feb 8 23:26:09.157350 systemd-networkd[1022]: cali1c8a3350dca: Link UP Feb 8 23:26:09.165014 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 8 23:26:09.165102 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1c8a3350dca: link becomes ready Feb 8 23:26:09.165209 systemd-networkd[1022]: cali1c8a3350dca: Gained carrier Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.057 [INFO][3755] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--5d78c9869d--5jdvd-eth0 coredns-5d78c9869d- kube-system aa96042e-2058-41d5-98ca-d5fded36e77b 812 0 2024-02-08 23:25:30 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5d78c9869d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-5d78c9869d-5jdvd eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali1c8a3350dca [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" Namespace="kube-system" Pod="coredns-5d78c9869d-5jdvd" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--5jdvd-" Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.057 [INFO][3755] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" Namespace="kube-system" Pod="coredns-5d78c9869d-5jdvd" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.088 [INFO][3774] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" HandleID="k8s-pod-network.cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" Workload="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.097 [INFO][3774] ipam_plugin.go 268: Auto assigning IP ContainerID="cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" HandleID="k8s-pod-network.cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" Workload="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00029e830), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-5d78c9869d-5jdvd", "timestamp":"2024-02-08 23:26:09.08887106 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.097 [INFO][3774] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.098 [INFO][3774] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.098 [INFO][3774] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.099 [INFO][3774] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" host="localhost" Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.102 [INFO][3774] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.139 [INFO][3774] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.141 [INFO][3774] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.143 [INFO][3774] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.143 [INFO][3774] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" host="localhost" Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.144 [INFO][3774] ipam.go 1682: Creating new handle: k8s-pod-network.cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81 Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.147 [INFO][3774] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" host="localhost" Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.151 [INFO][3774] ipam.go 1216: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" host="localhost" Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.151 [INFO][3774] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" host="localhost" Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.151 [INFO][3774] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:26:09.174802 env[1130]: 2024-02-08 23:26:09.151 [INFO][3774] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" HandleID="k8s-pod-network.cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" Workload="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" Feb 8 23:26:09.175424 env[1130]: 2024-02-08 23:26:09.154 [INFO][3755] k8s.go 385: Populated endpoint ContainerID="cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" Namespace="kube-system" Pod="coredns-5d78c9869d-5jdvd" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--5jdvd-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"aa96042e-2058-41d5-98ca-d5fded36e77b", ResourceVersion:"812", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 25, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-5d78c9869d-5jdvd", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1c8a3350dca", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:26:09.175424 env[1130]: 2024-02-08 23:26:09.154 [INFO][3755] k8s.go 386: Calico CNI using IPs: [192.168.88.132/32] ContainerID="cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" Namespace="kube-system" Pod="coredns-5d78c9869d-5jdvd" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" Feb 8 23:26:09.175424 env[1130]: 2024-02-08 23:26:09.154 [INFO][3755] dataplane_linux.go 68: Setting the host side veth name to cali1c8a3350dca ContainerID="cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" Namespace="kube-system" Pod="coredns-5d78c9869d-5jdvd" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" Feb 8 23:26:09.175424 env[1130]: 2024-02-08 23:26:09.162 [INFO][3755] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" Namespace="kube-system" Pod="coredns-5d78c9869d-5jdvd" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" Feb 8 23:26:09.175424 env[1130]: 2024-02-08 23:26:09.162 [INFO][3755] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" Namespace="kube-system" Pod="coredns-5d78c9869d-5jdvd" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--5jdvd-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"aa96042e-2058-41d5-98ca-d5fded36e77b", ResourceVersion:"812", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 25, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81", Pod:"coredns-5d78c9869d-5jdvd", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1c8a3350dca", MAC:"82:b6:b5:63:d3:4c", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:26:09.175424 env[1130]: 2024-02-08 23:26:09.173 [INFO][3755] k8s.go 491: Wrote updated endpoint to datastore ContainerID="cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81" Namespace="kube-system" Pod="coredns-5d78c9869d-5jdvd" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" Feb 8 23:26:09.189046 env[1130]: time="2024-02-08T23:26:09.187224213Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:26:09.189046 env[1130]: time="2024-02-08T23:26:09.187275799Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:26:09.189046 env[1130]: time="2024-02-08T23:26:09.187299655Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:26:09.189046 env[1130]: time="2024-02-08T23:26:09.187518576Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81 pid=3805 runtime=io.containerd.runc.v2 Feb 8 23:26:09.189000 audit[3812]: NETFILTER_CFG table=filter:104 family=2 entries=38 op=nft_register_chain pid=3812 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:26:09.189000 audit[3812]: SYSCALL arch=c000003e syscall=46 success=yes exit=19088 a0=3 a1=7fffeb153f90 a2=0 a3=7fffeb153f7c items=0 ppid=3142 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.189000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:26:09.201414 systemd[1]: Started cri-containerd-cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81.scope. Feb 8 23:26:09.215000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.215000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.215000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.215000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.215000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.215000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.215000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.215000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.215000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.215000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.215000 audit: BPF prog-id=162 op=LOAD Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { bpf } for pid=3816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3805 pid=3816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365626331626238386366323639313732663234646630313961623162 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { perfmon } for pid=3816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3805 pid=3816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365626331626238386366323639313732663234646630313961623162 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { bpf } for pid=3816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { bpf } for pid=3816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { bpf } for pid=3816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { perfmon } for pid=3816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { perfmon } for pid=3816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { perfmon } for pid=3816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { perfmon } for pid=3816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { perfmon } for pid=3816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { bpf } for pid=3816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { bpf } for pid=3816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit: BPF prog-id=163 op=LOAD Feb 8 23:26:09.216000 audit[3816]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000a8b40 items=0 ppid=3805 pid=3816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365626331626238386366323639313732663234646630313961623162 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { bpf } for pid=3816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { bpf } for pid=3816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { perfmon } for pid=3816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { perfmon } for pid=3816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { perfmon } for pid=3816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { perfmon } for pid=3816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { perfmon } for pid=3816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { bpf } for pid=3816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { bpf } for pid=3816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit: BPF prog-id=164 op=LOAD Feb 8 23:26:09.216000 audit[3816]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000a8b88 items=0 ppid=3805 pid=3816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365626331626238386366323639313732663234646630313961623162 Feb 8 23:26:09.216000 audit: BPF prog-id=164 op=UNLOAD Feb 8 23:26:09.216000 audit: BPF prog-id=163 op=UNLOAD Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { bpf } for pid=3816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { bpf } for pid=3816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { bpf } for pid=3816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { perfmon } for pid=3816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { perfmon } for pid=3816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { perfmon } for pid=3816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { perfmon } for pid=3816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { perfmon } for pid=3816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { bpf } for pid=3816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit[3816]: AVC avc: denied { bpf } for pid=3816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.216000 audit: BPF prog-id=165 op=LOAD Feb 8 23:26:09.216000 audit[3816]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0000a8f98 items=0 ppid=3805 pid=3816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365626331626238386366323639313732663234646630313961623162 Feb 8 23:26:09.219311 systemd-resolved[1072]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 8 23:26:09.245112 env[1130]: time="2024-02-08T23:26:09.244920816Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-5jdvd,Uid:aa96042e-2058-41d5-98ca-d5fded36e77b,Namespace:kube-system,Attempt:1,} returns sandbox id \"cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81\"" Feb 8 23:26:09.247813 kubelet[2001]: E0208 23:26:09.247784 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:26:09.250295 env[1130]: time="2024-02-08T23:26:09.250264716Z" level=info msg="CreateContainer within sandbox \"cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 8 23:26:09.264961 env[1130]: time="2024-02-08T23:26:09.264908732Z" level=info msg="CreateContainer within sandbox \"cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"acff9fd4ef23c21dad0c8ae0fc0e94e4bfb6259d59b16ddab471a75e102701f1\"" Feb 8 23:26:09.265550 env[1130]: time="2024-02-08T23:26:09.265524487Z" level=info msg="StartContainer for \"acff9fd4ef23c21dad0c8ae0fc0e94e4bfb6259d59b16ddab471a75e102701f1\"" Feb 8 23:26:09.277076 systemd-networkd[1022]: calicf3edd6fd19: Gained IPv6LL Feb 8 23:26:09.278970 systemd[1]: Started cri-containerd-acff9fd4ef23c21dad0c8ae0fc0e94e4bfb6259d59b16ddab471a75e102701f1.scope. Feb 8 23:26:09.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.297000 audit: BPF prog-id=166 op=LOAD Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3805 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163666639666434656632336332316461643063386165306663306539 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3805 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163666639666434656632336332316461643063386165306663306539 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit: BPF prog-id=167 op=LOAD Feb 8 23:26:09.298000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000198e70 items=0 ppid=3805 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163666639666434656632336332316461643063386165306663306539 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit: BPF prog-id=168 op=LOAD Feb 8 23:26:09.298000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000198eb8 items=0 ppid=3805 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163666639666434656632336332316461643063386165306663306539 Feb 8 23:26:09.298000 audit: BPF prog-id=168 op=UNLOAD Feb 8 23:26:09.298000 audit: BPF prog-id=167 op=UNLOAD Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:09.298000 audit: BPF prog-id=169 op=LOAD Feb 8 23:26:09.298000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001992c8 items=0 ppid=3805 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163666639666434656632336332316461643063386165306663306539 Feb 8 23:26:09.318672 env[1130]: time="2024-02-08T23:26:09.318632969Z" level=info msg="StartContainer for \"acff9fd4ef23c21dad0c8ae0fc0e94e4bfb6259d59b16ddab471a75e102701f1\" returns successfully" Feb 8 23:26:09.653150 kubelet[2001]: E0208 23:26:09.653122 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:26:09.655912 kubelet[2001]: E0208 23:26:09.655651 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:26:09.699516 kubelet[2001]: E0208 23:26:09.699476 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:26:09.718000 audit[3911]: NETFILTER_CFG table=filter:105 family=2 entries=14 op=nft_register_rule pid=3911 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:09.721311 kubelet[2001]: I0208 23:26:09.721280 2001 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5d78c9869d-5jdvd" podStartSLOduration=39.721234717 podCreationTimestamp="2024-02-08 23:25:30 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-08 23:26:09.692835955 +0000 UTC m=+52.253373402" watchObservedRunningTime="2024-02-08 23:26:09.721234717 +0000 UTC m=+52.281772164" Feb 8 23:26:09.718000 audit[3911]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffd0a107cf0 a2=0 a3=7ffd0a107cdc items=0 ppid=2148 pid=3911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.718000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:09.722000 audit[3911]: NETFILTER_CFG table=nat:106 family=2 entries=14 op=nft_register_rule pid=3911 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:09.722000 audit[3911]: SYSCALL arch=c000003e syscall=46 success=yes exit=3300 a0=3 a1=7ffd0a107cf0 a2=0 a3=31030 items=0 ppid=2148 pid=3911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.722000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:09.732196 kubelet[2001]: I0208 23:26:09.731729 2001 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5d78c9869d-dnxsd" podStartSLOduration=39.731692876 podCreationTimestamp="2024-02-08 23:25:30 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-08 23:26:09.721717814 +0000 UTC m=+52.282255261" watchObservedRunningTime="2024-02-08 23:26:09.731692876 +0000 UTC m=+52.292230323" Feb 8 23:26:09.743000 audit[3913]: NETFILTER_CFG table=filter:107 family=2 entries=11 op=nft_register_rule pid=3913 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:09.743000 audit[3913]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffd6bb6ecf0 a2=0 a3=7ffd6bb6ecdc items=0 ppid=2148 pid=3913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.743000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:09.749000 audit[3913]: NETFILTER_CFG table=nat:108 family=2 entries=35 op=nft_register_chain pid=3913 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:09.749000 audit[3913]: SYSCALL arch=c000003e syscall=46 success=yes exit=13788 a0=3 a1=7ffd6bb6ecf0 a2=0 a3=7ffd6bb6ecdc items=0 ppid=2148 pid=3913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:09.749000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:10.426156 systemd-networkd[1022]: cali1c8a3350dca: Gained IPv6LL Feb 8 23:26:10.657149 kubelet[2001]: E0208 23:26:10.657114 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:26:10.657460 kubelet[2001]: E0208 23:26:10.657274 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:26:10.768000 audit[3916]: NETFILTER_CFG table=filter:109 family=2 entries=8 op=nft_register_rule pid=3916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:10.768000 audit[3916]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7fffdee74320 a2=0 a3=7fffdee7430c items=0 ppid=2148 pid=3916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:10.768000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:10.773000 audit[3916]: NETFILTER_CFG table=nat:110 family=2 entries=56 op=nft_register_chain pid=3916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:10.773000 audit[3916]: SYSCALL arch=c000003e syscall=46 success=yes exit=19452 a0=3 a1=7fffdee74320 a2=0 a3=7fffdee7430c items=0 ppid=2148 pid=3916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:10.773000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:11.658451 kubelet[2001]: E0208 23:26:11.658422 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:26:11.659030 kubelet[2001]: E0208 23:26:11.658617 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:26:13.157009 kernel: kauditd_printk_skb: 395 callbacks suppressed Feb 8 23:26:13.157160 kernel: audit: type=1400 audit(1707434773.152:1338): avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:13.157252 kernel: audit: type=1400 audit(1707434773.152:1339): avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:13.152000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:13.152000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:13.152000 audit[1888]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c01194aa80 a2=fc6 a3=0 items=0 ppid=1747 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 key=(null) Feb 8 23:26:13.163204 kernel: audit: type=1300 audit(1707434773.152:1339): arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c01194aa80 a2=fc6 a3=0 items=0 ppid=1747 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 key=(null) Feb 8 23:26:13.152000 audit[1888]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c0105f0940 a2=fc6 a3=0 items=0 ppid=1747 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 key=(null) Feb 8 23:26:13.166650 kernel: audit: type=1300 audit(1707434773.152:1338): arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c0105f0940 a2=fc6 a3=0 items=0 ppid=1747 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 key=(null) Feb 8 23:26:13.166701 kernel: audit: type=1327 audit(1707434773.152:1338): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3936002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 8 23:26:13.152000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3936002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 8 23:26:13.152000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3936002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 8 23:26:13.172499 kernel: audit: type=1327 audit(1707434773.152:1339): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3936002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 8 23:26:13.172569 kernel: audit: type=1400 audit(1707434773.152:1340): avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:13.152000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:13.152000 audit[1888]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c0134ca480 a2=fc6 a3=0 items=0 ppid=1747 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 key=(null) Feb 8 23:26:13.178610 kernel: audit: type=1300 audit(1707434773.152:1340): arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c0134ca480 a2=fc6 a3=0 items=0 ppid=1747 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 key=(null) Feb 8 23:26:13.178657 kernel: audit: type=1327 audit(1707434773.152:1340): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3936002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 8 23:26:13.152000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3936002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 8 23:26:13.159000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:13.185523 kernel: audit: type=1400 audit(1707434773.159:1341): avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:13.159000 audit[1888]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c0134cab70 a2=fc6 a3=0 items=0 ppid=1747 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 key=(null) Feb 8 23:26:13.159000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3936002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 8 23:26:13.162000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:13.162000 audit[1888]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c01194ae40 a2=fc6 a3=0 items=0 ppid=1747 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 key=(null) Feb 8 23:26:13.162000 audit[1888]: AVC avc: denied { watch } for pid=1888 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:13.162000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3936002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 8 23:26:13.162000 audit[1888]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c011e96800 a2=fc6 a3=0 items=0 ppid=1747 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c35,c48 key=(null) Feb 8 23:26:13.162000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3936002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 8 23:26:13.183000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:13.183000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:13.183000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002983800 a2=fc6 a3=0 items=0 ppid=1704 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 key=(null) Feb 8 23:26:13.183000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:26:13.183000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0008a18f0 a2=fc6 a3=0 items=0 ppid=1704 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 key=(null) Feb 8 23:26:13.183000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:26:13.696312 systemd[1]: Started sshd@14-10.0.0.96:22-10.0.0.1:46248.service. Feb 8 23:26:13.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.96:22-10.0.0.1:46248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:13.737000 audit[3922]: USER_ACCT pid=3922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:13.739040 sshd[3922]: Accepted publickey for core from 10.0.0.1 port 46248 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:26:13.738000 audit[3922]: CRED_ACQ pid=3922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:13.738000 audit[3922]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff34ccf460 a2=3 a3=0 items=0 ppid=1 pid=3922 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:13.738000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:13.742204 sshd[3922]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:13.758571 systemd-logind[1109]: New session 15 of user core. Feb 8 23:26:13.758730 systemd[1]: Started session-15.scope. Feb 8 23:26:13.762000 audit[3922]: USER_START pid=3922 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:13.763000 audit[3925]: CRED_ACQ pid=3925 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:13.861183 sshd[3922]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:13.861000 audit[3922]: USER_END pid=3922 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:13.861000 audit[3922]: CRED_DISP pid=3922 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:13.863032 systemd[1]: sshd@14-10.0.0.96:22-10.0.0.1:46248.service: Deactivated successfully. Feb 8 23:26:13.862000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.96:22-10.0.0.1:46248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:13.863812 systemd[1]: session-15.scope: Deactivated successfully. Feb 8 23:26:13.864307 systemd-logind[1109]: Session 15 logged out. Waiting for processes to exit. Feb 8 23:26:13.864863 systemd-logind[1109]: Removed session 15. Feb 8 23:26:17.523552 env[1130]: time="2024-02-08T23:26:17.523011700Z" level=info msg="StopPodSandbox for \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\"" Feb 8 23:26:17.674957 env[1130]: 2024-02-08 23:26:17.589 [WARNING][3961] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--7tr8t-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"211d3bdb-9af7-4c78-a8e9-0d755299bf4e", ResourceVersion:"804", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 25, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec", Pod:"csi-node-driver-7tr8t", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali8b7ac1cefb9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:26:17.674957 env[1130]: 2024-02-08 23:26:17.589 [INFO][3961] k8s.go 578: Cleaning up netns ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Feb 8 23:26:17.674957 env[1130]: 2024-02-08 23:26:17.589 [INFO][3961] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" iface="eth0" netns="" Feb 8 23:26:17.674957 env[1130]: 2024-02-08 23:26:17.589 [INFO][3961] k8s.go 585: Releasing IP address(es) ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Feb 8 23:26:17.674957 env[1130]: 2024-02-08 23:26:17.589 [INFO][3961] utils.go 188: Calico CNI releasing IP address ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Feb 8 23:26:17.674957 env[1130]: 2024-02-08 23:26:17.637 [INFO][3972] ipam_plugin.go 415: Releasing address using handleID ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" HandleID="k8s-pod-network.bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Workload="localhost-k8s-csi--node--driver--7tr8t-eth0" Feb 8 23:26:17.674957 env[1130]: 2024-02-08 23:26:17.638 [INFO][3972] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:26:17.674957 env[1130]: 2024-02-08 23:26:17.638 [INFO][3972] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:26:17.674957 env[1130]: 2024-02-08 23:26:17.660 [WARNING][3972] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" HandleID="k8s-pod-network.bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Workload="localhost-k8s-csi--node--driver--7tr8t-eth0" Feb 8 23:26:17.674957 env[1130]: 2024-02-08 23:26:17.660 [INFO][3972] ipam_plugin.go 443: Releasing address using workloadID ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" HandleID="k8s-pod-network.bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Workload="localhost-k8s-csi--node--driver--7tr8t-eth0" Feb 8 23:26:17.674957 env[1130]: 2024-02-08 23:26:17.662 [INFO][3972] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:26:17.674957 env[1130]: 2024-02-08 23:26:17.666 [INFO][3961] k8s.go 591: Teardown processing complete. ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Feb 8 23:26:17.674957 env[1130]: time="2024-02-08T23:26:17.673840578Z" level=info msg="TearDown network for sandbox \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\" successfully" Feb 8 23:26:17.674957 env[1130]: time="2024-02-08T23:26:17.673869843Z" level=info msg="StopPodSandbox for \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\" returns successfully" Feb 8 23:26:17.674957 env[1130]: time="2024-02-08T23:26:17.674243885Z" level=info msg="RemovePodSandbox for \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\"" Feb 8 23:26:17.674957 env[1130]: time="2024-02-08T23:26:17.674268852Z" level=info msg="Forcibly stopping sandbox \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\"" Feb 8 23:26:17.834852 env[1130]: 2024-02-08 23:26:17.756 [WARNING][3994] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--7tr8t-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"211d3bdb-9af7-4c78-a8e9-0d755299bf4e", ResourceVersion:"804", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 25, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec", Pod:"csi-node-driver-7tr8t", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali8b7ac1cefb9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:26:17.834852 env[1130]: 2024-02-08 23:26:17.757 [INFO][3994] k8s.go 578: Cleaning up netns ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Feb 8 23:26:17.834852 env[1130]: 2024-02-08 23:26:17.757 [INFO][3994] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" iface="eth0" netns="" Feb 8 23:26:17.834852 env[1130]: 2024-02-08 23:26:17.757 [INFO][3994] k8s.go 585: Releasing IP address(es) ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Feb 8 23:26:17.834852 env[1130]: 2024-02-08 23:26:17.757 [INFO][3994] utils.go 188: Calico CNI releasing IP address ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Feb 8 23:26:17.834852 env[1130]: 2024-02-08 23:26:17.809 [INFO][4002] ipam_plugin.go 415: Releasing address using handleID ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" HandleID="k8s-pod-network.bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Workload="localhost-k8s-csi--node--driver--7tr8t-eth0" Feb 8 23:26:17.834852 env[1130]: 2024-02-08 23:26:17.809 [INFO][4002] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:26:17.834852 env[1130]: 2024-02-08 23:26:17.809 [INFO][4002] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:26:17.834852 env[1130]: 2024-02-08 23:26:17.828 [WARNING][4002] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" HandleID="k8s-pod-network.bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Workload="localhost-k8s-csi--node--driver--7tr8t-eth0" Feb 8 23:26:17.834852 env[1130]: 2024-02-08 23:26:17.828 [INFO][4002] ipam_plugin.go 443: Releasing address using workloadID ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" HandleID="k8s-pod-network.bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Workload="localhost-k8s-csi--node--driver--7tr8t-eth0" Feb 8 23:26:17.834852 env[1130]: 2024-02-08 23:26:17.830 [INFO][4002] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:26:17.834852 env[1130]: 2024-02-08 23:26:17.832 [INFO][3994] k8s.go 591: Teardown processing complete. ContainerID="bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f" Feb 8 23:26:17.834852 env[1130]: time="2024-02-08T23:26:17.834243960Z" level=info msg="TearDown network for sandbox \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\" successfully" Feb 8 23:26:17.838666 env[1130]: time="2024-02-08T23:26:17.838614860Z" level=info msg="RemovePodSandbox \"bde417a978dc593ee7e6cbf2135e232462fae8f585a1c53d44f228db06c3e05f\" returns successfully" Feb 8 23:26:17.839371 env[1130]: time="2024-02-08T23:26:17.839342646Z" level=info msg="StopPodSandbox for \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\"" Feb 8 23:26:18.068040 env[1130]: 2024-02-08 23:26:17.952 [WARNING][4026] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0", GenerateName:"calico-kube-controllers-54ddcc647b-", Namespace:"calico-system", SelfLink:"", UID:"829c3bff-69b7-47c6-8ac4-a1f30b7a44a7", ResourceVersion:"801", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 25, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"54ddcc647b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8", Pod:"calico-kube-controllers-54ddcc647b-rmzvz", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliede3b24506e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:26:18.068040 env[1130]: 2024-02-08 23:26:17.952 [INFO][4026] k8s.go 578: Cleaning up netns ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Feb 8 23:26:18.068040 env[1130]: 2024-02-08 23:26:17.952 [INFO][4026] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" iface="eth0" netns="" Feb 8 23:26:18.068040 env[1130]: 2024-02-08 23:26:17.952 [INFO][4026] k8s.go 585: Releasing IP address(es) ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Feb 8 23:26:18.068040 env[1130]: 2024-02-08 23:26:17.952 [INFO][4026] utils.go 188: Calico CNI releasing IP address ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Feb 8 23:26:18.068040 env[1130]: 2024-02-08 23:26:18.007 [INFO][4034] ipam_plugin.go 415: Releasing address using handleID ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" HandleID="k8s-pod-network.5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Workload="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" Feb 8 23:26:18.068040 env[1130]: 2024-02-08 23:26:18.007 [INFO][4034] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:26:18.068040 env[1130]: 2024-02-08 23:26:18.007 [INFO][4034] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:26:18.068040 env[1130]: 2024-02-08 23:26:18.039 [WARNING][4034] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" HandleID="k8s-pod-network.5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Workload="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" Feb 8 23:26:18.068040 env[1130]: 2024-02-08 23:26:18.040 [INFO][4034] ipam_plugin.go 443: Releasing address using workloadID ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" HandleID="k8s-pod-network.5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Workload="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" Feb 8 23:26:18.068040 env[1130]: 2024-02-08 23:26:18.056 [INFO][4034] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:26:18.068040 env[1130]: 2024-02-08 23:26:18.062 [INFO][4026] k8s.go 591: Teardown processing complete. ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Feb 8 23:26:18.069587 env[1130]: time="2024-02-08T23:26:18.068077163Z" level=info msg="TearDown network for sandbox \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\" successfully" Feb 8 23:26:18.069587 env[1130]: time="2024-02-08T23:26:18.068112318Z" level=info msg="StopPodSandbox for \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\" returns successfully" Feb 8 23:26:18.074361 env[1130]: time="2024-02-08T23:26:18.071912848Z" level=info msg="RemovePodSandbox for \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\"" Feb 8 23:26:18.074361 env[1130]: time="2024-02-08T23:26:18.071958464Z" level=info msg="Forcibly stopping sandbox \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\"" Feb 8 23:26:18.326507 env[1130]: 2024-02-08 23:26:18.193 [WARNING][4056] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0", GenerateName:"calico-kube-controllers-54ddcc647b-", Namespace:"calico-system", SelfLink:"", UID:"829c3bff-69b7-47c6-8ac4-a1f30b7a44a7", ResourceVersion:"801", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 25, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"54ddcc647b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8", Pod:"calico-kube-controllers-54ddcc647b-rmzvz", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliede3b24506e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:26:18.326507 env[1130]: 2024-02-08 23:26:18.194 [INFO][4056] k8s.go 578: Cleaning up netns ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Feb 8 23:26:18.326507 env[1130]: 2024-02-08 23:26:18.194 [INFO][4056] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" iface="eth0" netns="" Feb 8 23:26:18.326507 env[1130]: 2024-02-08 23:26:18.194 [INFO][4056] k8s.go 585: Releasing IP address(es) ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Feb 8 23:26:18.326507 env[1130]: 2024-02-08 23:26:18.194 [INFO][4056] utils.go 188: Calico CNI releasing IP address ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Feb 8 23:26:18.326507 env[1130]: 2024-02-08 23:26:18.270 [INFO][4064] ipam_plugin.go 415: Releasing address using handleID ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" HandleID="k8s-pod-network.5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Workload="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" Feb 8 23:26:18.326507 env[1130]: 2024-02-08 23:26:18.270 [INFO][4064] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:26:18.326507 env[1130]: 2024-02-08 23:26:18.270 [INFO][4064] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:26:18.326507 env[1130]: 2024-02-08 23:26:18.287 [WARNING][4064] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" HandleID="k8s-pod-network.5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Workload="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" Feb 8 23:26:18.326507 env[1130]: 2024-02-08 23:26:18.291 [INFO][4064] ipam_plugin.go 443: Releasing address using workloadID ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" HandleID="k8s-pod-network.5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Workload="localhost-k8s-calico--kube--controllers--54ddcc647b--rmzvz-eth0" Feb 8 23:26:18.326507 env[1130]: 2024-02-08 23:26:18.312 [INFO][4064] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:26:18.326507 env[1130]: 2024-02-08 23:26:18.319 [INFO][4056] k8s.go 591: Teardown processing complete. ContainerID="5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a" Feb 8 23:26:18.326507 env[1130]: time="2024-02-08T23:26:18.325545255Z" level=info msg="TearDown network for sandbox \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\" successfully" Feb 8 23:26:18.391471 env[1130]: time="2024-02-08T23:26:18.387568806Z" level=info msg="RemovePodSandbox \"5cd4679216fc320dbdf7d475942db8fc69a29cd3c9b749321e15a66d35d37f0a\" returns successfully" Feb 8 23:26:18.391471 env[1130]: time="2024-02-08T23:26:18.388154124Z" level=info msg="StopPodSandbox for \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\"" Feb 8 23:26:18.655595 env[1130]: 2024-02-08 23:26:18.518 [WARNING][4085] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--dnxsd-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"8b9f922e-dc05-483c-beb0-229c9657f06b", ResourceVersion:"848", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 25, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c", Pod:"coredns-5d78c9869d-dnxsd", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicf3edd6fd19", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:26:18.655595 env[1130]: 2024-02-08 23:26:18.519 [INFO][4085] k8s.go 578: Cleaning up netns ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Feb 8 23:26:18.655595 env[1130]: 2024-02-08 23:26:18.519 [INFO][4085] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" iface="eth0" netns="" Feb 8 23:26:18.655595 env[1130]: 2024-02-08 23:26:18.519 [INFO][4085] k8s.go 585: Releasing IP address(es) ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Feb 8 23:26:18.655595 env[1130]: 2024-02-08 23:26:18.519 [INFO][4085] utils.go 188: Calico CNI releasing IP address ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Feb 8 23:26:18.655595 env[1130]: 2024-02-08 23:26:18.592 [INFO][4092] ipam_plugin.go 415: Releasing address using handleID ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" HandleID="k8s-pod-network.8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Workload="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" Feb 8 23:26:18.655595 env[1130]: 2024-02-08 23:26:18.592 [INFO][4092] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:26:18.655595 env[1130]: 2024-02-08 23:26:18.593 [INFO][4092] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:26:18.655595 env[1130]: 2024-02-08 23:26:18.616 [WARNING][4092] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" HandleID="k8s-pod-network.8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Workload="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" Feb 8 23:26:18.655595 env[1130]: 2024-02-08 23:26:18.616 [INFO][4092] ipam_plugin.go 443: Releasing address using workloadID ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" HandleID="k8s-pod-network.8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Workload="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" Feb 8 23:26:18.655595 env[1130]: 2024-02-08 23:26:18.635 [INFO][4092] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:26:18.655595 env[1130]: 2024-02-08 23:26:18.643 [INFO][4085] k8s.go 591: Teardown processing complete. ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Feb 8 23:26:18.655595 env[1130]: time="2024-02-08T23:26:18.652691569Z" level=info msg="TearDown network for sandbox \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\" successfully" Feb 8 23:26:18.655595 env[1130]: time="2024-02-08T23:26:18.652723459Z" level=info msg="StopPodSandbox for \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\" returns successfully" Feb 8 23:26:18.656565 env[1130]: time="2024-02-08T23:26:18.655840757Z" level=info msg="RemovePodSandbox for \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\"" Feb 8 23:26:18.656565 env[1130]: time="2024-02-08T23:26:18.655867377Z" level=info msg="Forcibly stopping sandbox \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\"" Feb 8 23:26:18.840022 env[1130]: 2024-02-08 23:26:18.757 [WARNING][4114] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--dnxsd-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"8b9f922e-dc05-483c-beb0-229c9657f06b", ResourceVersion:"848", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 25, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7dbde7c49cae7062a82906cf8a8b5d50544ea911d9f6a346a904c840af83c52c", Pod:"coredns-5d78c9869d-dnxsd", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicf3edd6fd19", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:26:18.840022 env[1130]: 2024-02-08 23:26:18.758 [INFO][4114] k8s.go 578: Cleaning up netns ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Feb 8 23:26:18.840022 env[1130]: 2024-02-08 23:26:18.758 [INFO][4114] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" iface="eth0" netns="" Feb 8 23:26:18.840022 env[1130]: 2024-02-08 23:26:18.758 [INFO][4114] k8s.go 585: Releasing IP address(es) ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Feb 8 23:26:18.840022 env[1130]: 2024-02-08 23:26:18.758 [INFO][4114] utils.go 188: Calico CNI releasing IP address ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Feb 8 23:26:18.840022 env[1130]: 2024-02-08 23:26:18.803 [INFO][4121] ipam_plugin.go 415: Releasing address using handleID ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" HandleID="k8s-pod-network.8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Workload="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" Feb 8 23:26:18.840022 env[1130]: 2024-02-08 23:26:18.803 [INFO][4121] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:26:18.840022 env[1130]: 2024-02-08 23:26:18.803 [INFO][4121] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:26:18.840022 env[1130]: 2024-02-08 23:26:18.816 [WARNING][4121] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" HandleID="k8s-pod-network.8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Workload="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" Feb 8 23:26:18.840022 env[1130]: 2024-02-08 23:26:18.816 [INFO][4121] ipam_plugin.go 443: Releasing address using workloadID ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" HandleID="k8s-pod-network.8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Workload="localhost-k8s-coredns--5d78c9869d--dnxsd-eth0" Feb 8 23:26:18.840022 env[1130]: 2024-02-08 23:26:18.829 [INFO][4121] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:26:18.840022 env[1130]: 2024-02-08 23:26:18.834 [INFO][4114] k8s.go 591: Teardown processing complete. ContainerID="8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a" Feb 8 23:26:18.840732 env[1130]: time="2024-02-08T23:26:18.840684309Z" level=info msg="TearDown network for sandbox \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\" successfully" Feb 8 23:26:18.872114 kernel: kauditd_printk_skb: 25 callbacks suppressed Feb 8 23:26:18.872247 kernel: audit: type=1130 audit(1707434778.866:1355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.96:22-10.0.0.1:51122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:18.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.96:22-10.0.0.1:51122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:18.869372 systemd[1]: Started sshd@15-10.0.0.96:22-10.0.0.1:51122.service. Feb 8 23:26:18.935671 env[1130]: time="2024-02-08T23:26:18.933726895Z" level=info msg="RemovePodSandbox \"8e1e975d52d489a39996dadd19ce468b5986de221424f71744feb69207dc8e1a\" returns successfully" Feb 8 23:26:18.935671 env[1130]: time="2024-02-08T23:26:18.934746928Z" level=info msg="StopPodSandbox for \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\"" Feb 8 23:26:19.013000 audit[4129]: USER_ACCT pid=4129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:19.019013 sshd[4129]: Accepted publickey for core from 10.0.0.1 port 51122 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:26:19.028019 kernel: audit: type=1101 audit(1707434779.013:1356): pid=4129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:19.028144 kernel: audit: type=1103 audit(1707434779.019:1357): pid=4129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:19.019000 audit[4129]: CRED_ACQ pid=4129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:19.025238 sshd[4129]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:19.038013 kernel: audit: type=1006 audit(1707434779.019:1358): pid=4129 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Feb 8 23:26:19.038114 kernel: audit: type=1300 audit(1707434779.019:1358): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff40f90fd0 a2=3 a3=0 items=0 ppid=1 pid=4129 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:19.038154 kernel: audit: type=1327 audit(1707434779.019:1358): proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:19.019000 audit[4129]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff40f90fd0 a2=3 a3=0 items=0 ppid=1 pid=4129 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:19.019000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:19.038917 systemd[1]: Started session-16.scope. Feb 8 23:26:19.040811 systemd-logind[1109]: New session 16 of user core. Feb 8 23:26:19.049000 audit[4129]: USER_START pid=4129 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:19.049000 audit[4158]: CRED_ACQ pid=4158 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:19.057546 kernel: audit: type=1105 audit(1707434779.049:1359): pid=4129 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:19.057617 kernel: audit: type=1103 audit(1707434779.049:1360): pid=4158 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:19.073942 env[1130]: 2024-02-08 23:26:19.037 [WARNING][4145] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--5jdvd-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"aa96042e-2058-41d5-98ca-d5fded36e77b", ResourceVersion:"852", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 25, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81", Pod:"coredns-5d78c9869d-5jdvd", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1c8a3350dca", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:26:19.073942 env[1130]: 2024-02-08 23:26:19.038 [INFO][4145] k8s.go 578: Cleaning up netns ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Feb 8 23:26:19.073942 env[1130]: 2024-02-08 23:26:19.038 [INFO][4145] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" iface="eth0" netns="" Feb 8 23:26:19.073942 env[1130]: 2024-02-08 23:26:19.038 [INFO][4145] k8s.go 585: Releasing IP address(es) ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Feb 8 23:26:19.073942 env[1130]: 2024-02-08 23:26:19.038 [INFO][4145] utils.go 188: Calico CNI releasing IP address ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Feb 8 23:26:19.073942 env[1130]: 2024-02-08 23:26:19.060 [INFO][4152] ipam_plugin.go 415: Releasing address using handleID ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" HandleID="k8s-pod-network.d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Workload="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" Feb 8 23:26:19.073942 env[1130]: 2024-02-08 23:26:19.061 [INFO][4152] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:26:19.073942 env[1130]: 2024-02-08 23:26:19.061 [INFO][4152] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:26:19.073942 env[1130]: 2024-02-08 23:26:19.068 [WARNING][4152] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" HandleID="k8s-pod-network.d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Workload="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" Feb 8 23:26:19.073942 env[1130]: 2024-02-08 23:26:19.068 [INFO][4152] ipam_plugin.go 443: Releasing address using workloadID ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" HandleID="k8s-pod-network.d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Workload="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" Feb 8 23:26:19.073942 env[1130]: 2024-02-08 23:26:19.070 [INFO][4152] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:26:19.073942 env[1130]: 2024-02-08 23:26:19.071 [INFO][4145] k8s.go 591: Teardown processing complete. ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Feb 8 23:26:19.074448 env[1130]: time="2024-02-08T23:26:19.074004562Z" level=info msg="TearDown network for sandbox \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\" successfully" Feb 8 23:26:19.074448 env[1130]: time="2024-02-08T23:26:19.074041602Z" level=info msg="StopPodSandbox for \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\" returns successfully" Feb 8 23:26:19.074585 env[1130]: time="2024-02-08T23:26:19.074548864Z" level=info msg="RemovePodSandbox for \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\"" Feb 8 23:26:19.074750 env[1130]: time="2024-02-08T23:26:19.074581455Z" level=info msg="Forcibly stopping sandbox \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\"" Feb 8 23:26:19.156744 env[1130]: 2024-02-08 23:26:19.109 [WARNING][4175] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--5jdvd-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"aa96042e-2058-41d5-98ca-d5fded36e77b", ResourceVersion:"852", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 25, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cebc1bb88cf269172f24df019ab1bdcc8b4accfc0bd75f725937f653b98f4f81", Pod:"coredns-5d78c9869d-5jdvd", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1c8a3350dca", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:26:19.156744 env[1130]: 2024-02-08 23:26:19.110 [INFO][4175] k8s.go 578: Cleaning up netns ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Feb 8 23:26:19.156744 env[1130]: 2024-02-08 23:26:19.110 [INFO][4175] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" iface="eth0" netns="" Feb 8 23:26:19.156744 env[1130]: 2024-02-08 23:26:19.110 [INFO][4175] k8s.go 585: Releasing IP address(es) ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Feb 8 23:26:19.156744 env[1130]: 2024-02-08 23:26:19.110 [INFO][4175] utils.go 188: Calico CNI releasing IP address ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Feb 8 23:26:19.156744 env[1130]: 2024-02-08 23:26:19.141 [INFO][4189] ipam_plugin.go 415: Releasing address using handleID ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" HandleID="k8s-pod-network.d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Workload="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" Feb 8 23:26:19.156744 env[1130]: 2024-02-08 23:26:19.141 [INFO][4189] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:26:19.156744 env[1130]: 2024-02-08 23:26:19.141 [INFO][4189] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:26:19.156744 env[1130]: 2024-02-08 23:26:19.150 [WARNING][4189] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" HandleID="k8s-pod-network.d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Workload="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" Feb 8 23:26:19.156744 env[1130]: 2024-02-08 23:26:19.150 [INFO][4189] ipam_plugin.go 443: Releasing address using workloadID ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" HandleID="k8s-pod-network.d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Workload="localhost-k8s-coredns--5d78c9869d--5jdvd-eth0" Feb 8 23:26:19.156744 env[1130]: 2024-02-08 23:26:19.151 [INFO][4189] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:26:19.156744 env[1130]: 2024-02-08 23:26:19.155 [INFO][4175] k8s.go 591: Teardown processing complete. ContainerID="d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06" Feb 8 23:26:19.157381 env[1130]: time="2024-02-08T23:26:19.157348326Z" level=info msg="TearDown network for sandbox \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\" successfully" Feb 8 23:26:19.161605 env[1130]: time="2024-02-08T23:26:19.161509703Z" level=info msg="RemovePodSandbox \"d7e89fa26c83947a5fd80a05b1b58ed0154412571dc6308c4b2d14266a224a06\" returns successfully" Feb 8 23:26:19.176903 sshd[4129]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:19.176000 audit[4129]: USER_END pid=4129 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:19.179247 systemd[1]: sshd@15-10.0.0.96:22-10.0.0.1:51122.service: Deactivated successfully. Feb 8 23:26:19.180097 systemd[1]: session-16.scope: Deactivated successfully. Feb 8 23:26:19.180784 systemd-logind[1109]: Session 16 logged out. Waiting for processes to exit. Feb 8 23:26:19.181516 systemd-logind[1109]: Removed session 16. Feb 8 23:26:19.176000 audit[4129]: CRED_DISP pid=4129 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:19.184931 kernel: audit: type=1106 audit(1707434779.176:1361): pid=4129 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:19.185019 kernel: audit: type=1104 audit(1707434779.176:1362): pid=4129 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:19.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.96:22-10.0.0.1:51122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:24.181460 systemd[1]: Started sshd@16-10.0.0.96:22-10.0.0.1:51130.service. Feb 8 23:26:24.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.96:22-10.0.0.1:51130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:24.182505 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 8 23:26:24.182639 kernel: audit: type=1130 audit(1707434784.180:1364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.96:22-10.0.0.1:51130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:24.215000 audit[4201]: USER_ACCT pid=4201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:24.216344 sshd[4201]: Accepted publickey for core from 10.0.0.1 port 51130 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:26:24.217435 sshd[4201]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:24.216000 audit[4201]: CRED_ACQ pid=4201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:24.221591 systemd-logind[1109]: New session 17 of user core. Feb 8 23:26:24.222251 kernel: audit: type=1101 audit(1707434784.215:1365): pid=4201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:24.222310 kernel: audit: type=1103 audit(1707434784.216:1366): pid=4201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:24.222347 kernel: audit: type=1006 audit(1707434784.216:1367): pid=4201 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Feb 8 23:26:24.222295 systemd[1]: Started session-17.scope. Feb 8 23:26:24.216000 audit[4201]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce83c33c0 a2=3 a3=0 items=0 ppid=1 pid=4201 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:24.227753 kernel: audit: type=1300 audit(1707434784.216:1367): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce83c33c0 a2=3 a3=0 items=0 ppid=1 pid=4201 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:24.227803 kernel: audit: type=1327 audit(1707434784.216:1367): proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:24.216000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:24.226000 audit[4201]: USER_START pid=4201 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:24.231602 kernel: audit: type=1105 audit(1707434784.226:1368): pid=4201 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:24.231631 kernel: audit: type=1103 audit(1707434784.227:1369): pid=4203 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:24.227000 audit[4203]: CRED_ACQ pid=4203 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:24.350805 sshd[4201]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:24.350000 audit[4201]: USER_END pid=4201 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:24.353039 systemd[1]: sshd@16-10.0.0.96:22-10.0.0.1:51130.service: Deactivated successfully. Feb 8 23:26:24.353738 systemd[1]: session-17.scope: Deactivated successfully. Feb 8 23:26:24.354350 systemd-logind[1109]: Session 17 logged out. Waiting for processes to exit. Feb 8 23:26:24.355027 systemd-logind[1109]: Removed session 17. Feb 8 23:26:24.350000 audit[4201]: CRED_DISP pid=4201 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:24.357929 kernel: audit: type=1106 audit(1707434784.350:1370): pid=4201 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:24.357973 kernel: audit: type=1104 audit(1707434784.350:1371): pid=4201 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:24.350000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.96:22-10.0.0.1:51130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:27.328000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:27.328000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001969920 a2=fc6 a3=0 items=0 ppid=1704 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 key=(null) Feb 8 23:26:27.328000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:26:27.329000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:27.329000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002034720 a2=fc6 a3=0 items=0 ppid=1704 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 key=(null) Feb 8 23:26:27.329000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:26:27.329000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:27.329000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001969ac0 a2=fc6 a3=0 items=0 ppid=1704 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 key=(null) Feb 8 23:26:27.329000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:26:27.330000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 8 23:26:27.330000 audit[1838]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002385d00 a2=fc6 a3=0 items=0 ppid=1704 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c16,c680 key=(null) Feb 8 23:26:27.330000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 8 23:26:29.354854 systemd[1]: Started sshd@17-10.0.0.96:22-10.0.0.1:49726.service. Feb 8 23:26:29.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.96:22-10.0.0.1:49726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:29.358776 kernel: kauditd_printk_skb: 13 callbacks suppressed Feb 8 23:26:29.358967 kernel: audit: type=1130 audit(1707434789.353:1377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.96:22-10.0.0.1:49726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:29.389000 audit[4223]: USER_ACCT pid=4223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:29.390845 sshd[4223]: Accepted publickey for core from 10.0.0.1 port 49726 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:26:29.392546 sshd[4223]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:29.391000 audit[4223]: CRED_ACQ pid=4223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:29.396859 kernel: audit: type=1101 audit(1707434789.389:1378): pid=4223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:29.396917 kernel: audit: type=1103 audit(1707434789.391:1379): pid=4223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:29.396944 kernel: audit: type=1006 audit(1707434789.391:1380): pid=4223 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Feb 8 23:26:29.397207 systemd-logind[1109]: New session 18 of user core. Feb 8 23:26:29.398216 systemd[1]: Started session-18.scope. Feb 8 23:26:29.391000 audit[4223]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd0f5dbe40 a2=3 a3=0 items=0 ppid=1 pid=4223 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:29.402609 kernel: audit: type=1300 audit(1707434789.391:1380): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd0f5dbe40 a2=3 a3=0 items=0 ppid=1 pid=4223 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:29.402672 kernel: audit: type=1327 audit(1707434789.391:1380): proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:29.391000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:29.401000 audit[4223]: USER_START pid=4223 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:29.406786 kernel: audit: type=1105 audit(1707434789.401:1381): pid=4223 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:29.406841 kernel: audit: type=1103 audit(1707434789.402:1382): pid=4225 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:29.402000 audit[4225]: CRED_ACQ pid=4225 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:29.500102 sshd[4223]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:29.499000 audit[4223]: USER_END pid=4223 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:29.502000 systemd[1]: sshd@17-10.0.0.96:22-10.0.0.1:49726.service: Deactivated successfully. Feb 8 23:26:29.502764 systemd[1]: session-18.scope: Deactivated successfully. Feb 8 23:26:29.503264 systemd-logind[1109]: Session 18 logged out. Waiting for processes to exit. Feb 8 23:26:29.503882 systemd-logind[1109]: Removed session 18. Feb 8 23:26:29.500000 audit[4223]: CRED_DISP pid=4223 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:29.506264 kernel: audit: type=1106 audit(1707434789.499:1383): pid=4223 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:29.506349 kernel: audit: type=1104 audit(1707434789.500:1384): pid=4223 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:29.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.96:22-10.0.0.1:49726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:34.505079 systemd[1]: Started sshd@18-10.0.0.96:22-10.0.0.1:49740.service. Feb 8 23:26:34.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.96:22-10.0.0.1:49740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:34.508788 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 8 23:26:34.508903 kernel: audit: type=1130 audit(1707434794.504:1386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.96:22-10.0.0.1:49740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:34.542000 audit[4238]: USER_ACCT pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.543720 sshd[4238]: Accepted publickey for core from 10.0.0.1 port 49740 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:26:34.545512 sshd[4238]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:34.544000 audit[4238]: CRED_ACQ pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.549692 kernel: audit: type=1101 audit(1707434794.542:1387): pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.549776 kernel: audit: type=1103 audit(1707434794.544:1388): pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.549804 kernel: audit: type=1006 audit(1707434794.544:1389): pid=4238 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Feb 8 23:26:34.549302 systemd-logind[1109]: New session 19 of user core. Feb 8 23:26:34.550162 systemd[1]: Started session-19.scope. Feb 8 23:26:34.544000 audit[4238]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4b673c00 a2=3 a3=0 items=0 ppid=1 pid=4238 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:34.554499 kernel: audit: type=1300 audit(1707434794.544:1389): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4b673c00 a2=3 a3=0 items=0 ppid=1 pid=4238 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:34.544000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:34.556008 kernel: audit: type=1327 audit(1707434794.544:1389): proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:34.556060 kernel: audit: type=1105 audit(1707434794.553:1390): pid=4238 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.553000 audit[4238]: USER_START pid=4238 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.559238 kernel: audit: type=1103 audit(1707434794.555:1391): pid=4240 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.555000 audit[4240]: CRED_ACQ pid=4240 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.661592 sshd[4238]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:34.661000 audit[4238]: USER_END pid=4238 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.664924 systemd[1]: sshd@18-10.0.0.96:22-10.0.0.1:49740.service: Deactivated successfully. Feb 8 23:26:34.665639 systemd[1]: session-19.scope: Deactivated successfully. Feb 8 23:26:34.662000 audit[4238]: CRED_DISP pid=4238 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.667251 systemd[1]: Started sshd@19-10.0.0.96:22-10.0.0.1:49748.service. Feb 8 23:26:34.667884 systemd-logind[1109]: Session 19 logged out. Waiting for processes to exit. Feb 8 23:26:34.668912 kernel: audit: type=1106 audit(1707434794.661:1392): pid=4238 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.669027 kernel: audit: type=1104 audit(1707434794.662:1393): pid=4238 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.664000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.96:22-10.0.0.1:49740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:34.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.96:22-10.0.0.1:49748 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:34.668907 systemd-logind[1109]: Removed session 19. Feb 8 23:26:34.706000 audit[4251]: USER_ACCT pid=4251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.707952 sshd[4251]: Accepted publickey for core from 10.0.0.1 port 49748 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:26:34.708000 audit[4251]: CRED_ACQ pid=4251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.708000 audit[4251]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2202a810 a2=3 a3=0 items=0 ppid=1 pid=4251 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:34.708000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:34.709587 sshd[4251]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:34.713248 systemd-logind[1109]: New session 20 of user core. Feb 8 23:26:34.714304 systemd[1]: Started session-20.scope. Feb 8 23:26:34.717000 audit[4251]: USER_START pid=4251 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.719000 audit[4253]: CRED_ACQ pid=4253 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.886466 sshd[4251]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:34.886000 audit[4251]: USER_END pid=4251 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.886000 audit[4251]: CRED_DISP pid=4251 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.889465 systemd[1]: sshd@19-10.0.0.96:22-10.0.0.1:49748.service: Deactivated successfully. Feb 8 23:26:34.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.96:22-10.0.0.1:49748 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:34.890158 systemd[1]: session-20.scope: Deactivated successfully. Feb 8 23:26:34.890749 systemd-logind[1109]: Session 20 logged out. Waiting for processes to exit. Feb 8 23:26:34.892068 systemd[1]: Started sshd@20-10.0.0.96:22-10.0.0.1:49762.service. Feb 8 23:26:34.891000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.96:22-10.0.0.1:49762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:34.892769 systemd-logind[1109]: Removed session 20. Feb 8 23:26:34.926000 audit[4262]: USER_ACCT pid=4262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.927628 sshd[4262]: Accepted publickey for core from 10.0.0.1 port 49762 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:26:34.926000 audit[4262]: CRED_ACQ pid=4262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.927000 audit[4262]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe51e0b440 a2=3 a3=0 items=0 ppid=1 pid=4262 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:34.927000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:34.928226 sshd[4262]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:34.931883 systemd-logind[1109]: New session 21 of user core. Feb 8 23:26:34.932441 systemd[1]: Started session-21.scope. Feb 8 23:26:34.935000 audit[4262]: USER_START pid=4262 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:34.936000 audit[4264]: CRED_ACQ pid=4264 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:35.845000 audit[4277]: NETFILTER_CFG table=filter:111 family=2 entries=20 op=nft_register_rule pid=4277 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:35.845000 audit[4277]: SYSCALL arch=c000003e syscall=46 success=yes exit=11292 a0=3 a1=7fffd98a1ce0 a2=0 a3=7fffd98a1ccc items=0 ppid=2148 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:35.845000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:35.846000 audit[4277]: NETFILTER_CFG table=nat:112 family=2 entries=20 op=nft_register_rule pid=4277 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:35.846000 audit[4277]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7fffd98a1ce0 a2=0 a3=31030 items=0 ppid=2148 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:35.846000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:35.861491 sshd[4262]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:35.861000 audit[4279]: NETFILTER_CFG table=filter:113 family=2 entries=32 op=nft_register_rule pid=4279 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:35.861000 audit[4279]: SYSCALL arch=c000003e syscall=46 success=yes exit=11292 a0=3 a1=7ffe0f5a2c70 a2=0 a3=7ffe0f5a2c5c items=0 ppid=2148 pid=4279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:35.861000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:35.864000 audit[4262]: USER_END pid=4262 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:35.864000 audit[4262]: CRED_DISP pid=4262 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:35.867337 systemd[1]: Started sshd@21-10.0.0.96:22-10.0.0.1:49768.service. Feb 8 23:26:35.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.96:22-10.0.0.1:49768 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:35.867969 systemd[1]: sshd@20-10.0.0.96:22-10.0.0.1:49762.service: Deactivated successfully. Feb 8 23:26:35.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.96:22-10.0.0.1:49762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:35.868754 systemd[1]: session-21.scope: Deactivated successfully. Feb 8 23:26:35.862000 audit[4279]: NETFILTER_CFG table=nat:114 family=2 entries=20 op=nft_register_rule pid=4279 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:35.862000 audit[4279]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffe0f5a2c70 a2=0 a3=31030 items=0 ppid=2148 pid=4279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:35.870390 systemd-logind[1109]: Session 21 logged out. Waiting for processes to exit. Feb 8 23:26:35.862000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:35.871199 systemd-logind[1109]: Removed session 21. Feb 8 23:26:35.906000 audit[4281]: USER_ACCT pid=4281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:35.907808 sshd[4281]: Accepted publickey for core from 10.0.0.1 port 49768 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:26:35.907000 audit[4281]: CRED_ACQ pid=4281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:35.907000 audit[4281]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe8872efb0 a2=3 a3=0 items=0 ppid=1 pid=4281 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:35.907000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:35.908812 sshd[4281]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:35.912965 systemd-logind[1109]: New session 22 of user core. Feb 8 23:26:35.914057 systemd[1]: Started session-22.scope. Feb 8 23:26:35.917000 audit[4281]: USER_START pid=4281 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:35.918000 audit[4284]: CRED_ACQ pid=4284 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:36.223728 sshd[4281]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:36.223000 audit[4281]: USER_END pid=4281 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:36.224000 audit[4281]: CRED_DISP pid=4281 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:36.226877 systemd[1]: sshd@21-10.0.0.96:22-10.0.0.1:49768.service: Deactivated successfully. Feb 8 23:26:36.226000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.96:22-10.0.0.1:49768 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:36.227515 systemd[1]: session-22.scope: Deactivated successfully. Feb 8 23:26:36.229282 systemd-logind[1109]: Session 22 logged out. Waiting for processes to exit. Feb 8 23:26:36.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.96:22-10.0.0.1:49782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:36.230063 systemd[1]: Started sshd@22-10.0.0.96:22-10.0.0.1:49782.service. Feb 8 23:26:36.230870 systemd-logind[1109]: Removed session 22. Feb 8 23:26:36.264000 audit[4293]: USER_ACCT pid=4293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:36.266152 sshd[4293]: Accepted publickey for core from 10.0.0.1 port 49782 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:26:36.265000 audit[4293]: CRED_ACQ pid=4293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:36.265000 audit[4293]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdc7a5d0b0 a2=3 a3=0 items=0 ppid=1 pid=4293 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:36.265000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:36.267132 sshd[4293]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:36.271033 systemd-logind[1109]: New session 23 of user core. Feb 8 23:26:36.271699 systemd[1]: Started session-23.scope. Feb 8 23:26:36.275000 audit[4293]: USER_START pid=4293 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:36.276000 audit[4295]: CRED_ACQ pid=4295 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:36.395839 sshd[4293]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:36.395000 audit[4293]: USER_END pid=4293 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:36.395000 audit[4293]: CRED_DISP pid=4293 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:36.397954 systemd[1]: sshd@22-10.0.0.96:22-10.0.0.1:49782.service: Deactivated successfully. Feb 8 23:26:36.397000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.96:22-10.0.0.1:49782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:36.398717 systemd[1]: session-23.scope: Deactivated successfully. Feb 8 23:26:36.399187 systemd-logind[1109]: Session 23 logged out. Waiting for processes to exit. Feb 8 23:26:36.399788 systemd-logind[1109]: Removed session 23. Feb 8 23:26:41.340000 audit[4331]: NETFILTER_CFG table=filter:115 family=2 entries=20 op=nft_register_rule pid=4331 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:41.342527 kernel: kauditd_printk_skb: 57 callbacks suppressed Feb 8 23:26:41.342728 kernel: audit: type=1325 audit(1707434801.340:1435): table=filter:115 family=2 entries=20 op=nft_register_rule pid=4331 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:41.340000 audit[4331]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffc278f1b20 a2=0 a3=7ffc278f1b0c items=0 ppid=2148 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:41.347622 kernel: audit: type=1300 audit(1707434801.340:1435): arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffc278f1b20 a2=0 a3=7ffc278f1b0c items=0 ppid=2148 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:41.347776 kernel: audit: type=1327 audit(1707434801.340:1435): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:41.340000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:41.343000 audit[4331]: NETFILTER_CFG table=nat:116 family=2 entries=104 op=nft_register_chain pid=4331 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:41.343000 audit[4331]: SYSCALL arch=c000003e syscall=46 success=yes exit=47436 a0=3 a1=7ffc278f1b20 a2=0 a3=7ffc278f1b0c items=0 ppid=2148 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:41.356590 kernel: audit: type=1325 audit(1707434801.343:1436): table=nat:116 family=2 entries=104 op=nft_register_chain pid=4331 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:41.356673 kernel: audit: type=1300 audit(1707434801.343:1436): arch=c000003e syscall=46 success=yes exit=47436 a0=3 a1=7ffc278f1b20 a2=0 a3=7ffc278f1b0c items=0 ppid=2148 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:41.356701 kernel: audit: type=1327 audit(1707434801.343:1436): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:41.343000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:41.403376 systemd[1]: Started sshd@23-10.0.0.96:22-10.0.0.1:36430.service. Feb 8 23:26:41.402000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.96:22-10.0.0.1:36430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:41.409012 kernel: audit: type=1130 audit(1707434801.402:1437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.96:22-10.0.0.1:36430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:41.441000 audit[4334]: USER_ACCT pid=4334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:41.442700 sshd[4334]: Accepted publickey for core from 10.0.0.1 port 36430 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:26:41.444436 sshd[4334]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:41.443000 audit[4334]: CRED_ACQ pid=4334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:41.448079 kernel: audit: type=1101 audit(1707434801.441:1438): pid=4334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:41.448129 kernel: audit: type=1103 audit(1707434801.443:1439): pid=4334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:41.448148 kernel: audit: type=1006 audit(1707434801.443:1440): pid=4334 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Feb 8 23:26:41.448582 systemd-logind[1109]: New session 24 of user core. Feb 8 23:26:41.449365 systemd[1]: Started session-24.scope. Feb 8 23:26:41.443000 audit[4334]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffffeef0ef0 a2=3 a3=0 items=0 ppid=1 pid=4334 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:41.443000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:41.452000 audit[4334]: USER_START pid=4334 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:41.453000 audit[4336]: CRED_ACQ pid=4336 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:41.524769 kubelet[2001]: E0208 23:26:41.524689 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:26:41.558731 sshd[4334]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:41.558000 audit[4334]: USER_END pid=4334 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:41.558000 audit[4334]: CRED_DISP pid=4334 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:41.560881 systemd[1]: sshd@23-10.0.0.96:22-10.0.0.1:36430.service: Deactivated successfully. Feb 8 23:26:41.560000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.96:22-10.0.0.1:36430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:41.561620 systemd[1]: session-24.scope: Deactivated successfully. Feb 8 23:26:41.562108 systemd-logind[1109]: Session 24 logged out. Waiting for processes to exit. Feb 8 23:26:41.562716 systemd-logind[1109]: Removed session 24. Feb 8 23:26:43.780860 env[1130]: time="2024-02-08T23:26:43.780806032Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:43.782731 env[1130]: time="2024-02-08T23:26:43.782692763Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4e87edec0297dadd6f3bb25b2f540fd40e2abed9fff582c97ff4cd751d3f9803,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:43.784603 env[1130]: time="2024-02-08T23:26:43.784565316Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:43.786498 env[1130]: time="2024-02-08T23:26:43.786454512Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:e264ab1fb2f1ae90dd1d84e226d11d2eb4350e74ac27de4c65f29f5aadba5bb1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:43.787172 env[1130]: time="2024-02-08T23:26:43.787147264Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\" returns image reference \"sha256:4e87edec0297dadd6f3bb25b2f540fd40e2abed9fff582c97ff4cd751d3f9803\"" Feb 8 23:26:43.787724 env[1130]: time="2024-02-08T23:26:43.787701742Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\"" Feb 8 23:26:43.793972 env[1130]: time="2024-02-08T23:26:43.793920772Z" level=info msg="CreateContainer within sandbox \"5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Feb 8 23:26:43.806033 env[1130]: time="2024-02-08T23:26:43.805975249Z" level=info msg="CreateContainer within sandbox \"5078f8d296d35b67f6678252a7bbc1b4b024a04be0ebcfddfd900ec8a84892b8\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"72315dd9234557d12e12b7556aa14217750dedfbe50c3ce348a7b88ba6a361cd\"" Feb 8 23:26:43.806538 env[1130]: time="2024-02-08T23:26:43.806514969Z" level=info msg="StartContainer for \"72315dd9234557d12e12b7556aa14217750dedfbe50c3ce348a7b88ba6a361cd\"" Feb 8 23:26:43.823376 systemd[1]: Started cri-containerd-72315dd9234557d12e12b7556aa14217750dedfbe50c3ce348a7b88ba6a361cd.scope. Feb 8 23:26:43.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.832000 audit: BPF prog-id=170 op=LOAD Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3485 pid=4356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:43.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732333135646439323334353537643132653132623735353661613134 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3485 pid=4356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:43.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732333135646439323334353537643132653132623735353661613134 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit: BPF prog-id=171 op=LOAD Feb 8 23:26:43.833000 audit[4356]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003d4930 items=0 ppid=3485 pid=4356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:43.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732333135646439323334353537643132653132623735353661613134 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit: BPF prog-id=172 op=LOAD Feb 8 23:26:43.833000 audit[4356]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003d4978 items=0 ppid=3485 pid=4356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:43.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732333135646439323334353537643132653132623735353661613134 Feb 8 23:26:43.833000 audit: BPF prog-id=172 op=UNLOAD Feb 8 23:26:43.833000 audit: BPF prog-id=171 op=UNLOAD Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:43.833000 audit: BPF prog-id=173 op=LOAD Feb 8 23:26:43.833000 audit[4356]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003d4d88 items=0 ppid=3485 pid=4356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:43.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732333135646439323334353537643132653132623735353661613134 Feb 8 23:26:43.860240 env[1130]: time="2024-02-08T23:26:43.860193396Z" level=info msg="StartContainer for \"72315dd9234557d12e12b7556aa14217750dedfbe50c3ce348a7b88ba6a361cd\" returns successfully" Feb 8 23:26:44.758798 kubelet[2001]: I0208 23:26:44.758668 2001 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-54ddcc647b-rmzvz" podStartSLOduration=32.145063431 podCreationTimestamp="2024-02-08 23:25:36 +0000 UTC" firstStartedPulling="2024-02-08 23:26:07.173895 +0000 UTC m=+49.734432437" lastFinishedPulling="2024-02-08 23:26:43.787453679 +0000 UTC m=+86.347991126" observedRunningTime="2024-02-08 23:26:44.758101767 +0000 UTC m=+87.318639214" watchObservedRunningTime="2024-02-08 23:26:44.75862212 +0000 UTC m=+87.319159567" Feb 8 23:26:45.707431 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2797820068.mount: Deactivated successfully. Feb 8 23:26:46.392152 env[1130]: time="2024-02-08T23:26:46.392111052Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:46.401590 env[1130]: time="2024-02-08T23:26:46.401539323Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:91c1c91da7602f16686c149419195b486669f3a1828fd320cf332fdc6a25297d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:46.403263 env[1130]: time="2024-02-08T23:26:46.403228863Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:46.405424 env[1130]: time="2024-02-08T23:26:46.405399160Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:2b9021393c17e87ba8a3c89f5b3719941812f4e4751caa0b71eb2233bff48738,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:46.405887 env[1130]: time="2024-02-08T23:26:46.405852043Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\" returns image reference \"sha256:91c1c91da7602f16686c149419195b486669f3a1828fd320cf332fdc6a25297d\"" Feb 8 23:26:46.407572 env[1130]: time="2024-02-08T23:26:46.407536855Z" level=info msg="CreateContainer within sandbox \"02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Feb 8 23:26:46.419674 env[1130]: time="2024-02-08T23:26:46.419621158Z" level=info msg="CreateContainer within sandbox \"02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"5720da39b1996bfa8107498c1a792d6d5d770f6a528388bc562f852da96caf42\"" Feb 8 23:26:46.420301 env[1130]: time="2024-02-08T23:26:46.420273972Z" level=info msg="StartContainer for \"5720da39b1996bfa8107498c1a792d6d5d770f6a528388bc562f852da96caf42\"" Feb 8 23:26:46.439486 systemd[1]: Started cri-containerd-5720da39b1996bfa8107498c1a792d6d5d770f6a528388bc562f852da96caf42.scope. Feb 8 23:26:46.450000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.453838 kernel: kauditd_printk_skb: 64 callbacks suppressed Feb 8 23:26:46.453902 kernel: audit: type=1400 audit(1707434806.450:1464): avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.453927 kernel: audit: type=1300 audit(1707434806.450:1464): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=3555 pid=4421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:46.450000 audit[4421]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=3555 pid=4421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:46.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537323064613339623139393662666138313037343938633161373932 Feb 8 23:26:46.459570 kernel: audit: type=1327 audit(1707434806.450:1464): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537323064613339623139393662666138313037343938633161373932 Feb 8 23:26:46.459613 kernel: audit: type=1400 audit(1707434806.450:1465): avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.450000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.450000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.463792 kernel: audit: type=1400 audit(1707434806.450:1465): avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.463835 kernel: audit: type=1400 audit(1707434806.450:1465): avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.450000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.465873 kernel: audit: type=1400 audit(1707434806.450:1465): avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.450000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.468221 kernel: audit: type=1400 audit(1707434806.450:1465): avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.450000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.450000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.472757 kernel: audit: type=1400 audit(1707434806.450:1465): avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.450000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.475308 kernel: audit: type=1400 audit(1707434806.450:1465): avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.450000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.450000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.450000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.450000 audit: BPF prog-id=174 op=LOAD Feb 8 23:26:46.450000 audit[4421]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c59d8 a2=78 a3=c000237a00 items=0 ppid=3555 pid=4421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:46.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537323064613339623139393662666138313037343938633161373932 Feb 8 23:26:46.455000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.455000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.455000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.455000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.455000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.455000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.455000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.455000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.455000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.455000 audit: BPF prog-id=175 op=LOAD Feb 8 23:26:46.455000 audit[4421]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c5770 a2=78 a3=c000237a48 items=0 ppid=3555 pid=4421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:46.455000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537323064613339623139393662666138313037343938633161373932 Feb 8 23:26:46.460000 audit: BPF prog-id=175 op=UNLOAD Feb 8 23:26:46.460000 audit: BPF prog-id=174 op=UNLOAD Feb 8 23:26:46.460000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.460000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.460000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.460000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.460000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.460000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.460000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.460000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.460000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.460000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:46.460000 audit: BPF prog-id=176 op=LOAD Feb 8 23:26:46.460000 audit[4421]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c5c30 a2=78 a3=c000237ad8 items=0 ppid=3555 pid=4421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:46.460000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537323064613339623139393662666138313037343938633161373932 Feb 8 23:26:46.485606 env[1130]: time="2024-02-08T23:26:46.485558840Z" level=info msg="StartContainer for \"5720da39b1996bfa8107498c1a792d6d5d770f6a528388bc562f852da96caf42\" returns successfully" Feb 8 23:26:46.486633 env[1130]: time="2024-02-08T23:26:46.486614272Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\"" Feb 8 23:26:46.524348 kubelet[2001]: E0208 23:26:46.524323 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:26:46.562819 systemd[1]: Started sshd@24-10.0.0.96:22-10.0.0.1:36440.service. Feb 8 23:26:46.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.96:22-10.0.0.1:36440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:46.601000 audit[4448]: USER_ACCT pid=4448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:46.602763 sshd[4448]: Accepted publickey for core from 10.0.0.1 port 36440 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:26:46.602000 audit[4448]: CRED_ACQ pid=4448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:46.602000 audit[4448]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec6b5e900 a2=3 a3=0 items=0 ppid=1 pid=4448 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:46.602000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:46.603788 sshd[4448]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:46.607537 systemd-logind[1109]: New session 25 of user core. Feb 8 23:26:46.608316 systemd[1]: Started session-25.scope. Feb 8 23:26:46.612000 audit[4448]: USER_START pid=4448 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:46.613000 audit[4450]: CRED_ACQ pid=4450 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:46.647682 kubelet[2001]: I0208 23:26:46.647508 2001 topology_manager.go:212] "Topology Admit Handler" Feb 8 23:26:46.660602 systemd[1]: Created slice kubepods-besteffort-pod1198d4f4_95b5_4372_9be9_ba4276167396.slice. Feb 8 23:26:46.667000 audit[4453]: NETFILTER_CFG table=filter:117 family=2 entries=9 op=nft_register_rule pid=4453 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:46.667000 audit[4453]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffe4d9813d0 a2=0 a3=7ffe4d9813bc items=0 ppid=2148 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:46.667000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:46.669000 audit[4453]: NETFILTER_CFG table=nat:118 family=2 entries=44 op=nft_register_rule pid=4453 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:46.669000 audit[4453]: SYSCALL arch=c000003e syscall=46 success=yes exit=14220 a0=3 a1=7ffe4d9813d0 a2=0 a3=7ffe4d9813bc items=0 ppid=2148 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:46.669000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:46.684092 kubelet[2001]: I0208 23:26:46.684066 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1198d4f4-95b5-4372-9be9-ba4276167396-calico-apiserver-certs\") pod \"calico-apiserver-787f6f9bfd-jxm67\" (UID: \"1198d4f4-95b5-4372-9be9-ba4276167396\") " pod="calico-apiserver/calico-apiserver-787f6f9bfd-jxm67" Feb 8 23:26:46.684185 kubelet[2001]: I0208 23:26:46.684109 2001 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rgj4q\" (UniqueName: \"kubernetes.io/projected/1198d4f4-95b5-4372-9be9-ba4276167396-kube-api-access-rgj4q\") pod \"calico-apiserver-787f6f9bfd-jxm67\" (UID: \"1198d4f4-95b5-4372-9be9-ba4276167396\") " pod="calico-apiserver/calico-apiserver-787f6f9bfd-jxm67" Feb 8 23:26:46.694000 audit[4461]: NETFILTER_CFG table=filter:119 family=2 entries=10 op=nft_register_rule pid=4461 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:46.694000 audit[4461]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffda91bc660 a2=0 a3=7ffda91bc64c items=0 ppid=2148 pid=4461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:46.694000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:46.698000 audit[4461]: NETFILTER_CFG table=nat:120 family=2 entries=44 op=nft_register_rule pid=4461 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:46.698000 audit[4461]: SYSCALL arch=c000003e syscall=46 success=yes exit=14220 a0=3 a1=7ffda91bc660 a2=0 a3=7ffda91bc64c items=0 ppid=2148 pid=4461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:46.698000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:46.717404 sshd[4448]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:46.717000 audit[4448]: USER_END pid=4448 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:46.717000 audit[4448]: CRED_DISP pid=4448 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:46.719645 systemd[1]: sshd@24-10.0.0.96:22-10.0.0.1:36440.service: Deactivated successfully. Feb 8 23:26:46.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.96:22-10.0.0.1:36440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:46.720326 systemd[1]: session-25.scope: Deactivated successfully. Feb 8 23:26:46.720919 systemd-logind[1109]: Session 25 logged out. Waiting for processes to exit. Feb 8 23:26:46.721507 systemd-logind[1109]: Removed session 25. Feb 8 23:26:46.785653 kubelet[2001]: E0208 23:26:46.785563 2001 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: secret "calico-apiserver-certs" not found Feb 8 23:26:46.786450 kubelet[2001]: E0208 23:26:46.786420 2001 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/1198d4f4-95b5-4372-9be9-ba4276167396-calico-apiserver-certs podName:1198d4f4-95b5-4372-9be9-ba4276167396 nodeName:}" failed. No retries permitted until 2024-02-08 23:26:47.285677448 +0000 UTC m=+89.846214895 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/1198d4f4-95b5-4372-9be9-ba4276167396-calico-apiserver-certs") pod "calico-apiserver-787f6f9bfd-jxm67" (UID: "1198d4f4-95b5-4372-9be9-ba4276167396") : secret "calico-apiserver-certs" not found Feb 8 23:26:47.601166 env[1130]: time="2024-02-08T23:26:47.601125094Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-787f6f9bfd-jxm67,Uid:1198d4f4-95b5-4372-9be9-ba4276167396,Namespace:calico-apiserver,Attempt:0,}" Feb 8 23:26:47.774275 systemd-networkd[1022]: caliaa7280a0dc2: Link UP Feb 8 23:26:47.776144 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 8 23:26:47.776197 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliaa7280a0dc2: link becomes ready Feb 8 23:26:47.776004 systemd-networkd[1022]: caliaa7280a0dc2: Gained carrier Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.712 [INFO][4467] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--787f6f9bfd--jxm67-eth0 calico-apiserver-787f6f9bfd- calico-apiserver 1198d4f4-95b5-4372-9be9-ba4276167396 1102 0 2024-02-08 23:26:46 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:787f6f9bfd projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-787f6f9bfd-jxm67 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] caliaa7280a0dc2 [] []}} ContainerID="eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" Namespace="calico-apiserver" Pod="calico-apiserver-787f6f9bfd-jxm67" WorkloadEndpoint="localhost-k8s-calico--apiserver--787f6f9bfd--jxm67-" Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.712 [INFO][4467] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" Namespace="calico-apiserver" Pod="calico-apiserver-787f6f9bfd-jxm67" WorkloadEndpoint="localhost-k8s-calico--apiserver--787f6f9bfd--jxm67-eth0" Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.735 [INFO][4480] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" HandleID="k8s-pod-network.eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" Workload="localhost-k8s-calico--apiserver--787f6f9bfd--jxm67-eth0" Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.744 [INFO][4480] ipam_plugin.go 268: Auto assigning IP ContainerID="eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" HandleID="k8s-pod-network.eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" Workload="localhost-k8s-calico--apiserver--787f6f9bfd--jxm67-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0000cfa10), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-787f6f9bfd-jxm67", "timestamp":"2024-02-08 23:26:47.73535955 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.745 [INFO][4480] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.745 [INFO][4480] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.745 [INFO][4480] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.746 [INFO][4480] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" host="localhost" Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.750 [INFO][4480] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.754 [INFO][4480] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.755 [INFO][4480] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.757 [INFO][4480] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.757 [INFO][4480] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" host="localhost" Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.761 [INFO][4480] ipam.go 1682: Creating new handle: k8s-pod-network.eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.765 [INFO][4480] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" host="localhost" Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.771 [INFO][4480] ipam.go 1216: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" host="localhost" Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.771 [INFO][4480] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" host="localhost" Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.771 [INFO][4480] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 8 23:26:47.786231 env[1130]: 2024-02-08 23:26:47.771 [INFO][4480] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" HandleID="k8s-pod-network.eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" Workload="localhost-k8s-calico--apiserver--787f6f9bfd--jxm67-eth0" Feb 8 23:26:47.787314 env[1130]: 2024-02-08 23:26:47.772 [INFO][4467] k8s.go 385: Populated endpoint ContainerID="eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" Namespace="calico-apiserver" Pod="calico-apiserver-787f6f9bfd-jxm67" WorkloadEndpoint="localhost-k8s-calico--apiserver--787f6f9bfd--jxm67-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--787f6f9bfd--jxm67-eth0", GenerateName:"calico-apiserver-787f6f9bfd-", Namespace:"calico-apiserver", SelfLink:"", UID:"1198d4f4-95b5-4372-9be9-ba4276167396", ResourceVersion:"1102", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 26, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"787f6f9bfd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-787f6f9bfd-jxm67", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaa7280a0dc2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:26:47.787314 env[1130]: 2024-02-08 23:26:47.772 [INFO][4467] k8s.go 386: Calico CNI using IPs: [192.168.88.133/32] ContainerID="eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" Namespace="calico-apiserver" Pod="calico-apiserver-787f6f9bfd-jxm67" WorkloadEndpoint="localhost-k8s-calico--apiserver--787f6f9bfd--jxm67-eth0" Feb 8 23:26:47.787314 env[1130]: 2024-02-08 23:26:47.773 [INFO][4467] dataplane_linux.go 68: Setting the host side veth name to caliaa7280a0dc2 ContainerID="eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" Namespace="calico-apiserver" Pod="calico-apiserver-787f6f9bfd-jxm67" WorkloadEndpoint="localhost-k8s-calico--apiserver--787f6f9bfd--jxm67-eth0" Feb 8 23:26:47.787314 env[1130]: 2024-02-08 23:26:47.776 [INFO][4467] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" Namespace="calico-apiserver" Pod="calico-apiserver-787f6f9bfd-jxm67" WorkloadEndpoint="localhost-k8s-calico--apiserver--787f6f9bfd--jxm67-eth0" Feb 8 23:26:47.787314 env[1130]: 2024-02-08 23:26:47.776 [INFO][4467] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" Namespace="calico-apiserver" Pod="calico-apiserver-787f6f9bfd-jxm67" WorkloadEndpoint="localhost-k8s-calico--apiserver--787f6f9bfd--jxm67-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--787f6f9bfd--jxm67-eth0", GenerateName:"calico-apiserver-787f6f9bfd-", Namespace:"calico-apiserver", SelfLink:"", UID:"1198d4f4-95b5-4372-9be9-ba4276167396", ResourceVersion:"1102", Generation:0, CreationTimestamp:time.Date(2024, time.February, 8, 23, 26, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"787f6f9bfd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b", Pod:"calico-apiserver-787f6f9bfd-jxm67", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaa7280a0dc2", MAC:"ae:2c:a1:9a:0c:87", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 8 23:26:47.787314 env[1130]: 2024-02-08 23:26:47.783 [INFO][4467] k8s.go 491: Wrote updated endpoint to datastore ContainerID="eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b" Namespace="calico-apiserver" Pod="calico-apiserver-787f6f9bfd-jxm67" WorkloadEndpoint="localhost-k8s-calico--apiserver--787f6f9bfd--jxm67-eth0" Feb 8 23:26:47.800674 env[1130]: time="2024-02-08T23:26:47.800464825Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 8 23:26:47.800674 env[1130]: time="2024-02-08T23:26:47.800502677Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 8 23:26:47.800674 env[1130]: time="2024-02-08T23:26:47.800522435Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 8 23:26:47.801026 env[1130]: time="2024-02-08T23:26:47.800992961Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b pid=4514 runtime=io.containerd.runc.v2 Feb 8 23:26:47.810000 audit[4523]: NETFILTER_CFG table=filter:121 family=2 entries=59 op=nft_register_chain pid=4523 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 8 23:26:47.810000 audit[4523]: SYSCALL arch=c000003e syscall=46 success=yes exit=29292 a0=3 a1=7fff37d80500 a2=0 a3=7fff37d804ec items=0 ppid=3142 pid=4523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:47.810000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 8 23:26:47.819032 systemd[1]: run-containerd-runc-k8s.io-eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b-runc.leXuze.mount: Deactivated successfully. Feb 8 23:26:47.820506 systemd[1]: Started cri-containerd-eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b.scope. Feb 8 23:26:47.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit: BPF prog-id=177 op=LOAD Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4514 pid=4522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:47.829000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561626530643238613137646630336531396235636633646637613565 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4514 pid=4522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:47.829000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561626530643238613137646630336531396235636633646637613565 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit: BPF prog-id=178 op=LOAD Feb 8 23:26:47.829000 audit[4522]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000298f00 items=0 ppid=4514 pid=4522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:47.829000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561626530643238613137646630336531396235636633646637613565 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit: BPF prog-id=179 op=LOAD Feb 8 23:26:47.829000 audit[4522]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000298f48 items=0 ppid=4514 pid=4522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:47.829000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561626530643238613137646630336531396235636633646637613565 Feb 8 23:26:47.829000 audit: BPF prog-id=179 op=UNLOAD Feb 8 23:26:47.829000 audit: BPF prog-id=178 op=UNLOAD Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { perfmon } for pid=4522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit[4522]: AVC avc: denied { bpf } for pid=4522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:47.829000 audit: BPF prog-id=180 op=LOAD Feb 8 23:26:47.829000 audit[4522]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000299358 items=0 ppid=4514 pid=4522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:47.829000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561626530643238613137646630336531396235636633646637613565 Feb 8 23:26:47.831388 systemd-resolved[1072]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 8 23:26:47.857099 env[1130]: time="2024-02-08T23:26:47.857052000Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-787f6f9bfd-jxm67,Uid:1198d4f4-95b5-4372-9be9-ba4276167396,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b\"" Feb 8 23:26:48.573197 env[1130]: time="2024-02-08T23:26:48.573140993Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:48.574927 env[1130]: time="2024-02-08T23:26:48.574893780Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d36ef67f7b24c4facd86d0bc06b0cd907431a822dee695eb06b86a905bff85d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:48.576226 env[1130]: time="2024-02-08T23:26:48.576204256Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:48.577486 env[1130]: time="2024-02-08T23:26:48.577451652Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:45a7aba6020a7cf7b866cb8a8d481b30c97e9b3407e1459aaa65a5b4cc06633a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:48.577933 env[1130]: time="2024-02-08T23:26:48.577906559Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\" returns image reference \"sha256:d36ef67f7b24c4facd86d0bc06b0cd907431a822dee695eb06b86a905bff85d4\"" Feb 8 23:26:48.578457 env[1130]: time="2024-02-08T23:26:48.578420918Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\"" Feb 8 23:26:48.579288 env[1130]: time="2024-02-08T23:26:48.579262782Z" level=info msg="CreateContainer within sandbox \"02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Feb 8 23:26:48.592389 env[1130]: time="2024-02-08T23:26:48.592342202Z" level=info msg="CreateContainer within sandbox \"02140008cfd2e3bd83f40a956d6a9b4ca8c4d26fa64881941b3c987d9bda3fec\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"c148c9c567f18d31a4a360f9e8805a49166969d4e004d6d537d558c6db058287\"" Feb 8 23:26:48.592817 env[1130]: time="2024-02-08T23:26:48.592794813Z" level=info msg="StartContainer for \"c148c9c567f18d31a4a360f9e8805a49166969d4e004d6d537d558c6db058287\"" Feb 8 23:26:48.607486 systemd[1]: Started cri-containerd-c148c9c567f18d31a4a360f9e8805a49166969d4e004d6d537d558c6db058287.scope. Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3555 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:48.617000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331343863396335363766313864333161346133363066396538383035 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit: BPF prog-id=181 op=LOAD Feb 8 23:26:48.617000 audit[4555]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000efc70 items=0 ppid=3555 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:48.617000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331343863396335363766313864333161346133363066396538383035 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit: BPF prog-id=182 op=LOAD Feb 8 23:26:48.617000 audit[4555]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000efcb8 items=0 ppid=3555 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:48.617000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331343863396335363766313864333161346133363066396538383035 Feb 8 23:26:48.617000 audit: BPF prog-id=182 op=UNLOAD Feb 8 23:26:48.617000 audit: BPF prog-id=181 op=UNLOAD Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { perfmon } for pid=4555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit[4555]: AVC avc: denied { bpf } for pid=4555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:48.617000 audit: BPF prog-id=183 op=LOAD Feb 8 23:26:48.617000 audit[4555]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000efd48 items=0 ppid=3555 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:48.617000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331343863396335363766313864333161346133363066396538383035 Feb 8 23:26:48.631548 env[1130]: time="2024-02-08T23:26:48.631457349Z" level=info msg="StartContainer for \"c148c9c567f18d31a4a360f9e8805a49166969d4e004d6d537d558c6db058287\" returns successfully" Feb 8 23:26:48.954194 systemd-networkd[1022]: caliaa7280a0dc2: Gained IPv6LL Feb 8 23:26:49.523289 kubelet[2001]: E0208 23:26:49.523254 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:26:49.616883 kubelet[2001]: I0208 23:26:49.616853 2001 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Feb 8 23:26:49.617214 kubelet[2001]: I0208 23:26:49.617199 2001 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Feb 8 23:26:51.523566 kubelet[2001]: E0208 23:26:51.523520 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:26:51.721500 systemd[1]: Started sshd@25-10.0.0.96:22-10.0.0.1:37278.service. Feb 8 23:26:51.720000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.96:22-10.0.0.1:37278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:51.726223 kernel: kauditd_printk_skb: 159 callbacks suppressed Feb 8 23:26:51.726373 kernel: audit: type=1130 audit(1707434811.720:1508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.96:22-10.0.0.1:37278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:51.756000 audit[4589]: USER_ACCT pid=4589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:51.760646 sshd[4589]: Accepted publickey for core from 10.0.0.1 port 37278 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:26:51.759000 audit[4589]: CRED_ACQ pid=4589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:51.761319 sshd[4589]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:51.763710 kernel: audit: type=1101 audit(1707434811.756:1509): pid=4589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:51.763773 kernel: audit: type=1103 audit(1707434811.759:1510): pid=4589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:51.765667 kernel: audit: type=1006 audit(1707434811.760:1511): pid=4589 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Feb 8 23:26:51.765626 systemd[1]: Started session-26.scope. Feb 8 23:26:51.765997 systemd-logind[1109]: New session 26 of user core. Feb 8 23:26:51.760000 audit[4589]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4e2503a0 a2=3 a3=0 items=0 ppid=1 pid=4589 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:51.760000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:51.772508 kernel: audit: type=1300 audit(1707434811.760:1511): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4e2503a0 a2=3 a3=0 items=0 ppid=1 pid=4589 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:51.772565 kernel: audit: type=1327 audit(1707434811.760:1511): proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:51.772000 audit[4589]: USER_START pid=4589 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:51.775000 audit[4591]: CRED_ACQ pid=4591 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:51.779264 kernel: audit: type=1105 audit(1707434811.772:1512): pid=4589 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:51.779363 kernel: audit: type=1103 audit(1707434811.775:1513): pid=4591 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:51.875571 sshd[4589]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:51.881918 kernel: audit: type=1106 audit(1707434811.875:1514): pid=4589 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:51.882029 kernel: audit: type=1104 audit(1707434811.875:1515): pid=4589 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:51.875000 audit[4589]: USER_END pid=4589 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:51.875000 audit[4589]: CRED_DISP pid=4589 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:51.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.96:22-10.0.0.1:37278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:51.878108 systemd[1]: sshd@25-10.0.0.96:22-10.0.0.1:37278.service: Deactivated successfully. Feb 8 23:26:51.878783 systemd[1]: session-26.scope: Deactivated successfully. Feb 8 23:26:51.882974 systemd-logind[1109]: Session 26 logged out. Waiting for processes to exit. Feb 8 23:26:51.883749 systemd-logind[1109]: Removed session 26. Feb 8 23:26:52.521763 env[1130]: time="2024-02-08T23:26:52.521698561Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:52.524083 env[1130]: time="2024-02-08T23:26:52.524024595Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:848c5b919e8d33dbad8c8c64aa6aec07c29cfe6e4f6312ceafc1641ea929f91a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:52.525827 env[1130]: time="2024-02-08T23:26:52.525783239Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:52.527378 env[1130]: time="2024-02-08T23:26:52.527356962Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:5ff0bdc8d0b2e9d7819703b18867f60f9153ed01da81e2bbfa22002abec9dc26,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 8 23:26:52.527976 env[1130]: time="2024-02-08T23:26:52.527952685Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\" returns image reference \"sha256:848c5b919e8d33dbad8c8c64aa6aec07c29cfe6e4f6312ceafc1641ea929f91a\"" Feb 8 23:26:52.529649 env[1130]: time="2024-02-08T23:26:52.529616389Z" level=info msg="CreateContainer within sandbox \"eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Feb 8 23:26:52.539503 env[1130]: time="2024-02-08T23:26:52.539447004Z" level=info msg="CreateContainer within sandbox \"eabe0d28a17df03e19b5cf3df7a5e44c75157f72cb6fd5941a160e2806d3569b\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"905e07a884c7916f18e58c83e8296325f266238edf2cfe7875bfd0aafd88ce56\"" Feb 8 23:26:52.540063 env[1130]: time="2024-02-08T23:26:52.540030173Z" level=info msg="StartContainer for \"905e07a884c7916f18e58c83e8296325f266238edf2cfe7875bfd0aafd88ce56\"" Feb 8 23:26:52.560455 systemd[1]: run-containerd-runc-k8s.io-905e07a884c7916f18e58c83e8296325f266238edf2cfe7875bfd0aafd88ce56-runc.eMXqEp.mount: Deactivated successfully. Feb 8 23:26:52.563108 systemd[1]: Started cri-containerd-905e07a884c7916f18e58c83e8296325f266238edf2cfe7875bfd0aafd88ce56.scope. Feb 8 23:26:52.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.573000 audit: BPF prog-id=184 op=LOAD Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4514 pid=4608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:52.574000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930356530376138383463373931366631386535386338336538323936 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4514 pid=4608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:52.574000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930356530376138383463373931366631386535386338336538323936 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit: BPF prog-id=185 op=LOAD Feb 8 23:26:52.574000 audit[4608]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000297290 items=0 ppid=4514 pid=4608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:52.574000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930356530376138383463373931366631386535386338336538323936 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit: BPF prog-id=186 op=LOAD Feb 8 23:26:52.574000 audit[4608]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002972d8 items=0 ppid=4514 pid=4608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:52.574000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930356530376138383463373931366631386535386338336538323936 Feb 8 23:26:52.574000 audit: BPF prog-id=186 op=UNLOAD Feb 8 23:26:52.574000 audit: BPF prog-id=185 op=UNLOAD Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { perfmon } for pid=4608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit[4608]: AVC avc: denied { bpf } for pid=4608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 8 23:26:52.574000 audit: BPF prog-id=187 op=LOAD Feb 8 23:26:52.574000 audit[4608]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002976e8 items=0 ppid=4514 pid=4608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:52.574000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930356530376138383463373931366631386535386338336538323936 Feb 8 23:26:52.728821 env[1130]: time="2024-02-08T23:26:52.728770222Z" level=info msg="StartContainer for \"905e07a884c7916f18e58c83e8296325f266238edf2cfe7875bfd0aafd88ce56\" returns successfully" Feb 8 23:26:52.786404 kubelet[2001]: I0208 23:26:52.783391 2001 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-7tr8t" podStartSLOduration=35.457316367 podCreationTimestamp="2024-02-08 23:25:36 +0000 UTC" firstStartedPulling="2024-02-08 23:26:07.252134442 +0000 UTC m=+49.812671889" lastFinishedPulling="2024-02-08 23:26:48.578172394 +0000 UTC m=+91.138709841" observedRunningTime="2024-02-08 23:26:48.771442195 +0000 UTC m=+91.331979642" watchObservedRunningTime="2024-02-08 23:26:52.783354319 +0000 UTC m=+95.343891766" Feb 8 23:26:52.786404 kubelet[2001]: I0208 23:26:52.783723 2001 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-787f6f9bfd-jxm67" podStartSLOduration=2.114075042 podCreationTimestamp="2024-02-08 23:26:46 +0000 UTC" firstStartedPulling="2024-02-08 23:26:47.858550275 +0000 UTC m=+90.419087722" lastFinishedPulling="2024-02-08 23:26:52.528182922 +0000 UTC m=+95.088720370" observedRunningTime="2024-02-08 23:26:52.783250932 +0000 UTC m=+95.343788379" watchObservedRunningTime="2024-02-08 23:26:52.78370769 +0000 UTC m=+95.344245138" Feb 8 23:26:52.979000 audit[4664]: NETFILTER_CFG table=filter:122 family=2 entries=10 op=nft_register_rule pid=4664 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:52.979000 audit[4664]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7fff2a71be60 a2=0 a3=7fff2a71be4c items=0 ppid=2148 pid=4664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:52.979000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:52.980000 audit[4664]: NETFILTER_CFG table=nat:123 family=2 entries=44 op=nft_register_rule pid=4664 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:52.980000 audit[4664]: SYSCALL arch=c000003e syscall=46 success=yes exit=14220 a0=3 a1=7fff2a71be60 a2=0 a3=7fff2a71be4c items=0 ppid=2148 pid=4664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:52.980000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:53.111000 audit[4619]: AVC avc: denied { watch } for pid=4619 comm="apiserver" path="/calico-apiserver-certs/..2024_02_08_23_26_47.1126068516/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c342,c890 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c342,c890 tclass=file permissive=0 Feb 8 23:26:53.111000 audit[4619]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00048ae80 a2=fc6 a3=0 items=0 ppid=4514 pid=4619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c342,c890 key=(null) Feb 8 23:26:53.111000 audit: PROCTITLE proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C Feb 8 23:26:53.365000 audit[4666]: NETFILTER_CFG table=filter:124 family=2 entries=10 op=nft_register_rule pid=4666 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:53.365000 audit[4666]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7fffe8c84430 a2=0 a3=7fffe8c8441c items=0 ppid=2148 pid=4666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:53.365000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:53.366000 audit[4666]: NETFILTER_CFG table=nat:125 family=2 entries=44 op=nft_register_rule pid=4666 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 8 23:26:53.366000 audit[4666]: SYSCALL arch=c000003e syscall=46 success=yes exit=14220 a0=3 a1=7fffe8c84430 a2=0 a3=7fffe8c8441c items=0 ppid=2148 pid=4666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:53.366000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 8 23:26:55.523715 kubelet[2001]: E0208 23:26:55.523668 2001 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 8 23:26:56.879650 systemd[1]: Started sshd@26-10.0.0.96:22-10.0.0.1:37284.service. Feb 8 23:26:56.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.96:22-10.0.0.1:37284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:56.880463 kernel: kauditd_printk_skb: 73 callbacks suppressed Feb 8 23:26:56.880516 kernel: audit: type=1130 audit(1707434816.878:1540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.96:22-10.0.0.1:37284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 8 23:26:56.916000 audit[4669]: USER_ACCT pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:56.917346 sshd[4669]: Accepted publickey for core from 10.0.0.1 port 37284 ssh2: RSA SHA256:ZIzHIduQp2k+ZJQKyG+d10ckdlQJVNUpLoHdM3Iys8s Feb 8 23:26:56.918562 sshd[4669]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 8 23:26:56.917000 audit[4669]: CRED_ACQ pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:56.922400 systemd-logind[1109]: New session 27 of user core. Feb 8 23:26:56.923140 systemd[1]: Started session-27.scope. Feb 8 23:26:56.923634 kernel: audit: type=1101 audit(1707434816.916:1541): pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:56.923702 kernel: audit: type=1103 audit(1707434816.917:1542): pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:56.923734 kernel: audit: type=1006 audit(1707434816.917:1543): pid=4669 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Feb 8 23:26:56.917000 audit[4669]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd29679880 a2=3 a3=0 items=0 ppid=1 pid=4669 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:56.929099 kernel: audit: type=1300 audit(1707434816.917:1543): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd29679880 a2=3 a3=0 items=0 ppid=1 pid=4669 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 8 23:26:56.929152 kernel: audit: type=1327 audit(1707434816.917:1543): proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:56.917000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 8 23:26:56.926000 audit[4669]: USER_START pid=4669 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:56.933795 kernel: audit: type=1105 audit(1707434816.926:1544): pid=4669 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:56.933855 kernel: audit: type=1103 audit(1707434816.927:1545): pid=4671 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:56.927000 audit[4671]: CRED_ACQ pid=4671 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:57.022943 sshd[4669]: pam_unix(sshd:session): session closed for user core Feb 8 23:26:57.022000 audit[4669]: USER_END pid=4669 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:57.024916 systemd[1]: sshd@26-10.0.0.96:22-10.0.0.1:37284.service: Deactivated successfully. Feb 8 23:26:57.025641 systemd[1]: session-27.scope: Deactivated successfully. Feb 8 23:26:57.026175 systemd-logind[1109]: Session 27 logged out. Waiting for processes to exit. Feb 8 23:26:57.026797 systemd-logind[1109]: Removed session 27. Feb 8 23:26:57.022000 audit[4669]: CRED_DISP pid=4669 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:57.029186 kernel: audit: type=1106 audit(1707434817.022:1546): pid=4669 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:57.029244 kernel: audit: type=1104 audit(1707434817.022:1547): pid=4669 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 8 23:26:57.024000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.96:22-10.0.0.1:37284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'