Feb 9 19:16:37.956303 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Feb 9 19:16:37.956342 kernel: Linux version 5.15.148-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Feb 9 17:24:35 -00 2024 Feb 9 19:16:37.956365 kernel: efi: EFI v2.70 by EDK II Feb 9 19:16:37.956380 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7ac1aa98 MEMRESERVE=0x71a8cf98 Feb 9 19:16:37.956394 kernel: ACPI: Early table checksum verification disabled Feb 9 19:16:37.956408 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Feb 9 19:16:37.956424 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Feb 9 19:16:37.956438 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Feb 9 19:16:37.956452 kernel: ACPI: DSDT 0x0000000078640000 00154F (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Feb 9 19:16:37.956466 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Feb 9 19:16:37.956484 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Feb 9 19:16:37.956498 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Feb 9 19:16:37.956512 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Feb 9 19:16:37.956526 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Feb 9 19:16:37.956542 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Feb 9 19:16:37.956561 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Feb 9 19:16:37.956576 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Feb 9 19:16:37.956590 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Feb 9 19:16:37.956605 kernel: printk: bootconsole [uart0] enabled Feb 9 19:16:37.956619 kernel: NUMA: Failed to initialise from firmware Feb 9 19:16:37.956633 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Feb 9 19:16:37.956648 kernel: NUMA: NODE_DATA [mem 0x4b5841900-0x4b5846fff] Feb 9 19:16:37.956662 kernel: Zone ranges: Feb 9 19:16:37.956677 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Feb 9 19:16:37.956691 kernel: DMA32 empty Feb 9 19:16:37.956705 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Feb 9 19:16:37.956723 kernel: Movable zone start for each node Feb 9 19:16:37.956738 kernel: Early memory node ranges Feb 9 19:16:37.956752 kernel: node 0: [mem 0x0000000040000000-0x00000000786effff] Feb 9 19:16:37.956766 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Feb 9 19:16:37.956781 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Feb 9 19:16:37.956795 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Feb 9 19:16:37.956809 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Feb 9 19:16:37.956824 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Feb 9 19:16:37.956838 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Feb 9 19:16:37.956853 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Feb 9 19:16:37.956867 kernel: psci: probing for conduit method from ACPI. Feb 9 19:16:37.956881 kernel: psci: PSCIv1.0 detected in firmware. Feb 9 19:16:37.956899 kernel: psci: Using standard PSCI v0.2 function IDs Feb 9 19:16:37.956914 kernel: psci: Trusted OS migration not required Feb 9 19:16:37.956935 kernel: psci: SMC Calling Convention v1.1 Feb 9 19:16:37.956950 kernel: ACPI: SRAT not present Feb 9 19:16:37.956966 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Feb 9 19:16:37.956985 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Feb 9 19:16:37.957000 kernel: pcpu-alloc: [0] 0 [0] 1 Feb 9 19:16:37.957015 kernel: Detected PIPT I-cache on CPU0 Feb 9 19:16:37.957030 kernel: CPU features: detected: GIC system register CPU interface Feb 9 19:16:37.957046 kernel: CPU features: detected: Spectre-v2 Feb 9 19:16:37.957061 kernel: CPU features: detected: Spectre-v3a Feb 9 19:16:37.957076 kernel: CPU features: detected: Spectre-BHB Feb 9 19:16:37.957091 kernel: CPU features: kernel page table isolation forced ON by KASLR Feb 9 19:16:37.957106 kernel: CPU features: detected: Kernel page table isolation (KPTI) Feb 9 19:16:37.957121 kernel: CPU features: detected: ARM erratum 1742098 Feb 9 19:16:37.957136 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Feb 9 19:16:37.957154 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Feb 9 19:16:37.957170 kernel: Policy zone: Normal Feb 9 19:16:37.957187 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=680ffc8c0dfb23738bd19ec96ea37b5bbadfb5cebf23767d1d52c89a6d5c00b4 Feb 9 19:16:37.957204 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Feb 9 19:16:37.957219 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Feb 9 19:16:37.957235 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Feb 9 19:16:37.957250 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Feb 9 19:16:37.957266 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Feb 9 19:16:37.957282 kernel: Memory: 3826316K/4030464K available (9792K kernel code, 2092K rwdata, 7556K rodata, 34688K init, 778K bss, 204148K reserved, 0K cma-reserved) Feb 9 19:16:37.959278 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Feb 9 19:16:37.959322 kernel: trace event string verifier disabled Feb 9 19:16:37.959340 kernel: rcu: Preemptible hierarchical RCU implementation. Feb 9 19:16:37.959357 kernel: rcu: RCU event tracing is enabled. Feb 9 19:16:37.959373 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Feb 9 19:16:37.959389 kernel: Trampoline variant of Tasks RCU enabled. Feb 9 19:16:37.959405 kernel: Tracing variant of Tasks RCU enabled. Feb 9 19:16:37.959420 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Feb 9 19:16:37.959436 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Feb 9 19:16:37.959451 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Feb 9 19:16:37.959467 kernel: GICv3: 96 SPIs implemented Feb 9 19:16:37.959482 kernel: GICv3: 0 Extended SPIs implemented Feb 9 19:16:37.959497 kernel: GICv3: Distributor has no Range Selector support Feb 9 19:16:37.959517 kernel: Root IRQ handler: gic_handle_irq Feb 9 19:16:37.959532 kernel: GICv3: 16 PPIs implemented Feb 9 19:16:37.959547 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Feb 9 19:16:37.959563 kernel: ACPI: SRAT not present Feb 9 19:16:37.959577 kernel: ITS [mem 0x10080000-0x1009ffff] Feb 9 19:16:37.959593 kernel: ITS@0x0000000010080000: allocated 8192 Devices @4000a0000 (indirect, esz 8, psz 64K, shr 1) Feb 9 19:16:37.959608 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000b0000 (flat, esz 8, psz 64K, shr 1) Feb 9 19:16:37.959624 kernel: GICv3: using LPI property table @0x00000004000c0000 Feb 9 19:16:37.959639 kernel: ITS: Using hypervisor restricted LPI range [128] Feb 9 19:16:37.959654 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Feb 9 19:16:37.959670 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Feb 9 19:16:37.959689 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Feb 9 19:16:37.959705 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Feb 9 19:16:37.959721 kernel: Console: colour dummy device 80x25 Feb 9 19:16:37.959736 kernel: printk: console [tty1] enabled Feb 9 19:16:37.959752 kernel: ACPI: Core revision 20210730 Feb 9 19:16:37.959769 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Feb 9 19:16:37.959785 kernel: pid_max: default: 32768 minimum: 301 Feb 9 19:16:37.959801 kernel: LSM: Security Framework initializing Feb 9 19:16:37.959816 kernel: SELinux: Initializing. Feb 9 19:16:37.959832 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Feb 9 19:16:37.959852 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Feb 9 19:16:37.959868 kernel: rcu: Hierarchical SRCU implementation. Feb 9 19:16:37.959883 kernel: Platform MSI: ITS@0x10080000 domain created Feb 9 19:16:37.959899 kernel: PCI/MSI: ITS@0x10080000 domain created Feb 9 19:16:37.959914 kernel: Remapping and enabling EFI services. Feb 9 19:16:37.959930 kernel: smp: Bringing up secondary CPUs ... Feb 9 19:16:37.959946 kernel: Detected PIPT I-cache on CPU1 Feb 9 19:16:37.959962 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Feb 9 19:16:37.959977 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Feb 9 19:16:37.959998 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Feb 9 19:16:37.960014 kernel: smp: Brought up 1 node, 2 CPUs Feb 9 19:16:37.960029 kernel: SMP: Total of 2 processors activated. Feb 9 19:16:37.960045 kernel: CPU features: detected: 32-bit EL0 Support Feb 9 19:16:37.960061 kernel: CPU features: detected: 32-bit EL1 Support Feb 9 19:16:37.960076 kernel: CPU features: detected: CRC32 instructions Feb 9 19:16:37.960092 kernel: CPU: All CPU(s) started at EL1 Feb 9 19:16:37.960107 kernel: alternatives: patching kernel code Feb 9 19:16:37.960123 kernel: devtmpfs: initialized Feb 9 19:16:37.960143 kernel: KASLR disabled due to lack of seed Feb 9 19:16:37.960159 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Feb 9 19:16:37.960175 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Feb 9 19:16:37.960202 kernel: pinctrl core: initialized pinctrl subsystem Feb 9 19:16:37.960222 kernel: SMBIOS 3.0.0 present. Feb 9 19:16:37.960238 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Feb 9 19:16:37.960254 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Feb 9 19:16:37.960271 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Feb 9 19:16:37.960314 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Feb 9 19:16:37.960337 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Feb 9 19:16:37.960354 kernel: audit: initializing netlink subsys (disabled) Feb 9 19:16:37.960371 kernel: audit: type=2000 audit(0.249:1): state=initialized audit_enabled=0 res=1 Feb 9 19:16:37.960394 kernel: thermal_sys: Registered thermal governor 'step_wise' Feb 9 19:16:37.960412 kernel: cpuidle: using governor menu Feb 9 19:16:37.960428 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Feb 9 19:16:37.960445 kernel: ASID allocator initialised with 32768 entries Feb 9 19:16:37.960461 kernel: ACPI: bus type PCI registered Feb 9 19:16:37.960482 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Feb 9 19:16:37.960498 kernel: Serial: AMBA PL011 UART driver Feb 9 19:16:37.960514 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Feb 9 19:16:37.960531 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Feb 9 19:16:37.960547 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Feb 9 19:16:37.960563 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Feb 9 19:16:37.960579 kernel: cryptd: max_cpu_qlen set to 1000 Feb 9 19:16:37.960596 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Feb 9 19:16:37.960612 kernel: ACPI: Added _OSI(Module Device) Feb 9 19:16:37.960632 kernel: ACPI: Added _OSI(Processor Device) Feb 9 19:16:37.960649 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Feb 9 19:16:37.960665 kernel: ACPI: Added _OSI(Processor Aggregator Device) Feb 9 19:16:37.960681 kernel: ACPI: Added _OSI(Linux-Dell-Video) Feb 9 19:16:37.960697 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Feb 9 19:16:37.960714 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Feb 9 19:16:37.960730 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Feb 9 19:16:37.960746 kernel: ACPI: Interpreter enabled Feb 9 19:16:37.960763 kernel: ACPI: Using GIC for interrupt routing Feb 9 19:16:37.960783 kernel: ACPI: MCFG table detected, 1 entries Feb 9 19:16:37.960800 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Feb 9 19:16:37.961093 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Feb 9 19:16:37.963434 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Feb 9 19:16:37.963701 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Feb 9 19:16:37.963903 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Feb 9 19:16:37.964102 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Feb 9 19:16:37.964134 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Feb 9 19:16:37.964153 kernel: acpiphp: Slot [1] registered Feb 9 19:16:37.964169 kernel: acpiphp: Slot [2] registered Feb 9 19:16:37.964186 kernel: acpiphp: Slot [3] registered Feb 9 19:16:37.964202 kernel: acpiphp: Slot [4] registered Feb 9 19:16:37.964218 kernel: acpiphp: Slot [5] registered Feb 9 19:16:37.964235 kernel: acpiphp: Slot [6] registered Feb 9 19:16:37.964251 kernel: acpiphp: Slot [7] registered Feb 9 19:16:37.964267 kernel: acpiphp: Slot [8] registered Feb 9 19:16:37.967359 kernel: acpiphp: Slot [9] registered Feb 9 19:16:37.967395 kernel: acpiphp: Slot [10] registered Feb 9 19:16:37.967413 kernel: acpiphp: Slot [11] registered Feb 9 19:16:37.967430 kernel: acpiphp: Slot [12] registered Feb 9 19:16:37.967446 kernel: acpiphp: Slot [13] registered Feb 9 19:16:37.967463 kernel: acpiphp: Slot [14] registered Feb 9 19:16:37.967479 kernel: acpiphp: Slot [15] registered Feb 9 19:16:37.967495 kernel: acpiphp: Slot [16] registered Feb 9 19:16:37.967511 kernel: acpiphp: Slot [17] registered Feb 9 19:16:37.967528 kernel: acpiphp: Slot [18] registered Feb 9 19:16:37.967553 kernel: acpiphp: Slot [19] registered Feb 9 19:16:37.967569 kernel: acpiphp: Slot [20] registered Feb 9 19:16:37.967585 kernel: acpiphp: Slot [21] registered Feb 9 19:16:37.967601 kernel: acpiphp: Slot [22] registered Feb 9 19:16:37.967617 kernel: acpiphp: Slot [23] registered Feb 9 19:16:37.967634 kernel: acpiphp: Slot [24] registered Feb 9 19:16:37.967650 kernel: acpiphp: Slot [25] registered Feb 9 19:16:37.967666 kernel: acpiphp: Slot [26] registered Feb 9 19:16:37.967682 kernel: acpiphp: Slot [27] registered Feb 9 19:16:37.967702 kernel: acpiphp: Slot [28] registered Feb 9 19:16:37.967719 kernel: acpiphp: Slot [29] registered Feb 9 19:16:37.967735 kernel: acpiphp: Slot [30] registered Feb 9 19:16:37.967751 kernel: acpiphp: Slot [31] registered Feb 9 19:16:37.967767 kernel: PCI host bridge to bus 0000:00 Feb 9 19:16:37.968007 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Feb 9 19:16:37.968190 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Feb 9 19:16:37.968410 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Feb 9 19:16:37.968595 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Feb 9 19:16:37.968815 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Feb 9 19:16:37.969029 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Feb 9 19:16:37.969230 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Feb 9 19:16:37.969467 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Feb 9 19:16:37.969669 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Feb 9 19:16:37.969881 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Feb 9 19:16:37.970109 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Feb 9 19:16:37.970335 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Feb 9 19:16:37.970545 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Feb 9 19:16:37.970774 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Feb 9 19:16:37.970980 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Feb 9 19:16:37.971174 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Feb 9 19:16:37.974464 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Feb 9 19:16:37.974715 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Feb 9 19:16:37.974933 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Feb 9 19:16:37.975150 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Feb 9 19:16:37.975402 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Feb 9 19:16:37.975591 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Feb 9 19:16:37.975769 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Feb 9 19:16:37.975801 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Feb 9 19:16:37.975819 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Feb 9 19:16:37.975836 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Feb 9 19:16:37.975853 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Feb 9 19:16:37.975870 kernel: iommu: Default domain type: Translated Feb 9 19:16:37.975886 kernel: iommu: DMA domain TLB invalidation policy: strict mode Feb 9 19:16:37.975903 kernel: vgaarb: loaded Feb 9 19:16:37.975920 kernel: pps_core: LinuxPPS API ver. 1 registered Feb 9 19:16:37.975936 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Feb 9 19:16:37.975957 kernel: PTP clock support registered Feb 9 19:16:37.975973 kernel: Registered efivars operations Feb 9 19:16:37.975990 kernel: clocksource: Switched to clocksource arch_sys_counter Feb 9 19:16:37.976006 kernel: VFS: Disk quotas dquot_6.6.0 Feb 9 19:16:37.976022 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Feb 9 19:16:37.976039 kernel: pnp: PnP ACPI init Feb 9 19:16:37.976258 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Feb 9 19:16:37.976298 kernel: pnp: PnP ACPI: found 1 devices Feb 9 19:16:37.976320 kernel: NET: Registered PF_INET protocol family Feb 9 19:16:37.976343 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Feb 9 19:16:37.976360 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Feb 9 19:16:37.976377 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Feb 9 19:16:37.976393 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Feb 9 19:16:37.976410 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Feb 9 19:16:37.976426 kernel: TCP: Hash tables configured (established 32768 bind 32768) Feb 9 19:16:37.976443 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Feb 9 19:16:37.976460 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Feb 9 19:16:37.976476 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Feb 9 19:16:37.976497 kernel: PCI: CLS 0 bytes, default 64 Feb 9 19:16:37.976513 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Feb 9 19:16:37.976529 kernel: kvm [1]: HYP mode not available Feb 9 19:16:37.976545 kernel: Initialise system trusted keyrings Feb 9 19:16:37.976562 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Feb 9 19:16:37.976579 kernel: Key type asymmetric registered Feb 9 19:16:37.976595 kernel: Asymmetric key parser 'x509' registered Feb 9 19:16:37.976611 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Feb 9 19:16:37.976627 kernel: io scheduler mq-deadline registered Feb 9 19:16:37.976648 kernel: io scheduler kyber registered Feb 9 19:16:37.976664 kernel: io scheduler bfq registered Feb 9 19:16:37.976875 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Feb 9 19:16:37.976900 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Feb 9 19:16:37.976917 kernel: ACPI: button: Power Button [PWRB] Feb 9 19:16:37.976934 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Feb 9 19:16:37.976951 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Feb 9 19:16:37.977151 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Feb 9 19:16:37.977178 kernel: printk: console [ttyS0] disabled Feb 9 19:16:37.977195 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Feb 9 19:16:37.977212 kernel: printk: console [ttyS0] enabled Feb 9 19:16:37.977228 kernel: printk: bootconsole [uart0] disabled Feb 9 19:16:37.977244 kernel: thunder_xcv, ver 1.0 Feb 9 19:16:37.977261 kernel: thunder_bgx, ver 1.0 Feb 9 19:16:37.977277 kernel: nicpf, ver 1.0 Feb 9 19:16:37.977311 kernel: nicvf, ver 1.0 Feb 9 19:16:37.977528 kernel: rtc-efi rtc-efi.0: registered as rtc0 Feb 9 19:16:37.977727 kernel: rtc-efi rtc-efi.0: setting system clock to 2024-02-09T19:16:37 UTC (1707506197) Feb 9 19:16:37.977750 kernel: hid: raw HID events driver (C) Jiri Kosina Feb 9 19:16:37.977767 kernel: NET: Registered PF_INET6 protocol family Feb 9 19:16:37.977783 kernel: Segment Routing with IPv6 Feb 9 19:16:37.977799 kernel: In-situ OAM (IOAM) with IPv6 Feb 9 19:16:37.977815 kernel: NET: Registered PF_PACKET protocol family Feb 9 19:16:37.977832 kernel: Key type dns_resolver registered Feb 9 19:16:37.977848 kernel: registered taskstats version 1 Feb 9 19:16:37.977868 kernel: Loading compiled-in X.509 certificates Feb 9 19:16:37.977885 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.148-flatcar: 947a80114e81e2815f6db72a0d388260762488f9' Feb 9 19:16:37.977902 kernel: Key type .fscrypt registered Feb 9 19:16:37.977918 kernel: Key type fscrypt-provisioning registered Feb 9 19:16:37.977934 kernel: ima: No TPM chip found, activating TPM-bypass! Feb 9 19:16:37.977951 kernel: ima: Allocated hash algorithm: sha1 Feb 9 19:16:37.977967 kernel: ima: No architecture policies found Feb 9 19:16:37.977983 kernel: Freeing unused kernel memory: 34688K Feb 9 19:16:37.977999 kernel: Run /init as init process Feb 9 19:16:37.978019 kernel: with arguments: Feb 9 19:16:37.978036 kernel: /init Feb 9 19:16:37.978052 kernel: with environment: Feb 9 19:16:37.978068 kernel: HOME=/ Feb 9 19:16:37.978084 kernel: TERM=linux Feb 9 19:16:37.978100 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Feb 9 19:16:37.978122 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 9 19:16:37.978142 systemd[1]: Detected virtualization amazon. Feb 9 19:16:37.978164 systemd[1]: Detected architecture arm64. Feb 9 19:16:37.978182 systemd[1]: Running in initrd. Feb 9 19:16:37.978200 systemd[1]: No hostname configured, using default hostname. Feb 9 19:16:37.978217 systemd[1]: Hostname set to . Feb 9 19:16:37.978235 systemd[1]: Initializing machine ID from VM UUID. Feb 9 19:16:37.978253 systemd[1]: Queued start job for default target initrd.target. Feb 9 19:16:37.978271 systemd[1]: Started systemd-ask-password-console.path. Feb 9 19:16:37.978305 systemd[1]: Reached target cryptsetup.target. Feb 9 19:16:37.978331 systemd[1]: Reached target paths.target. Feb 9 19:16:37.978349 systemd[1]: Reached target slices.target. Feb 9 19:16:37.978367 systemd[1]: Reached target swap.target. Feb 9 19:16:37.978384 systemd[1]: Reached target timers.target. Feb 9 19:16:37.978403 systemd[1]: Listening on iscsid.socket. Feb 9 19:16:37.978421 systemd[1]: Listening on iscsiuio.socket. Feb 9 19:16:37.978438 systemd[1]: Listening on systemd-journald-audit.socket. Feb 9 19:16:37.978456 systemd[1]: Listening on systemd-journald-dev-log.socket. Feb 9 19:16:37.978478 systemd[1]: Listening on systemd-journald.socket. Feb 9 19:16:37.978496 systemd[1]: Listening on systemd-networkd.socket. Feb 9 19:16:37.978514 systemd[1]: Listening on systemd-udevd-control.socket. Feb 9 19:16:37.978531 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 9 19:16:37.978549 systemd[1]: Reached target sockets.target. Feb 9 19:16:37.978566 systemd[1]: Starting kmod-static-nodes.service... Feb 9 19:16:37.978584 systemd[1]: Finished network-cleanup.service. Feb 9 19:16:37.978601 systemd[1]: Starting systemd-fsck-usr.service... Feb 9 19:16:37.978619 systemd[1]: Starting systemd-journald.service... Feb 9 19:16:37.978641 systemd[1]: Starting systemd-modules-load.service... Feb 9 19:16:37.978670 systemd[1]: Starting systemd-resolved.service... Feb 9 19:16:37.978695 systemd[1]: Starting systemd-vconsole-setup.service... Feb 9 19:16:37.978713 systemd[1]: Finished kmod-static-nodes.service. Feb 9 19:16:37.978734 systemd-journald[308]: Journal started Feb 9 19:16:37.978824 systemd-journald[308]: Runtime Journal (/run/log/journal/ec249113ba0fc270e98124898d9e57b7) is 8.0M, max 75.4M, 67.4M free. Feb 9 19:16:37.957414 systemd-modules-load[309]: Inserted module 'overlay' Feb 9 19:16:37.995446 kernel: audit: type=1130 audit(1707506197.977:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:37.995483 systemd[1]: Started systemd-journald.service. Feb 9 19:16:37.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:38.002716 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Feb 9 19:16:38.007970 systemd-modules-load[309]: Inserted module 'br_netfilter' Feb 9 19:16:38.011898 kernel: Bridge firewalling registered Feb 9 19:16:38.010000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:38.012623 systemd[1]: Finished systemd-fsck-usr.service. Feb 9 19:16:38.026190 kernel: audit: type=1130 audit(1707506198.010:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:38.025000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:38.026512 systemd[1]: Finished systemd-vconsole-setup.service. Feb 9 19:16:38.040000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:38.048603 kernel: audit: type=1130 audit(1707506198.025:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:38.048657 kernel: audit: type=1130 audit(1707506198.040:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:38.056315 kernel: SCSI subsystem initialized Feb 9 19:16:38.057623 systemd[1]: Starting dracut-cmdline-ask.service... Feb 9 19:16:38.065902 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 9 19:16:38.094106 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Feb 9 19:16:38.094167 kernel: device-mapper: uevent: version 1.0.3 Feb 9 19:16:38.097742 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Feb 9 19:16:38.098837 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 9 19:16:38.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:38.113703 kernel: audit: type=1130 audit(1707506198.102:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:38.114428 systemd-resolved[310]: Positive Trust Anchors: Feb 9 19:16:38.114454 systemd-resolved[310]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 9 19:16:38.114510 systemd-resolved[310]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 9 19:16:38.149198 systemd-modules-load[309]: Inserted module 'dm_multipath' Feb 9 19:16:38.173667 kernel: audit: type=1130 audit(1707506198.156:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:38.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:38.149232 systemd[1]: Finished dracut-cmdline-ask.service. Feb 9 19:16:38.202994 kernel: audit: type=1130 audit(1707506198.173:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:38.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:38.157637 systemd[1]: Finished systemd-modules-load.service. Feb 9 19:16:38.181839 systemd[1]: Starting dracut-cmdline.service... Feb 9 19:16:38.196968 systemd[1]: Starting systemd-sysctl.service... Feb 9 19:16:38.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:38.232742 systemd[1]: Finished systemd-sysctl.service. Feb 9 19:16:38.246062 kernel: audit: type=1130 audit(1707506198.235:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:38.246809 dracut-cmdline[329]: dracut-dracut-053 Feb 9 19:16:38.253149 dracut-cmdline[329]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=680ffc8c0dfb23738bd19ec96ea37b5bbadfb5cebf23767d1d52c89a6d5c00b4 Feb 9 19:16:38.375313 kernel: Loading iSCSI transport class v2.0-870. Feb 9 19:16:38.386318 kernel: iscsi: registered transport (tcp) Feb 9 19:16:38.411596 kernel: iscsi: registered transport (qla4xxx) Feb 9 19:16:38.411670 kernel: QLogic iSCSI HBA Driver Feb 9 19:16:38.635821 systemd-resolved[310]: Defaulting to hostname 'linux'. Feb 9 19:16:38.639307 kernel: random: crng init done Feb 9 19:16:38.639455 systemd[1]: Started systemd-resolved.service. Feb 9 19:16:38.653172 kernel: audit: type=1130 audit(1707506198.640:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:38.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:38.641683 systemd[1]: Reached target nss-lookup.target. Feb 9 19:16:38.665398 systemd[1]: Finished dracut-cmdline.service. Feb 9 19:16:38.668000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:38.670832 systemd[1]: Starting dracut-pre-udev.service... Feb 9 19:16:38.738321 kernel: raid6: neonx8 gen() 6410 MB/s Feb 9 19:16:38.754311 kernel: raid6: neonx8 xor() 4585 MB/s Feb 9 19:16:38.772317 kernel: raid6: neonx4 gen() 6561 MB/s Feb 9 19:16:38.790316 kernel: raid6: neonx4 xor() 4684 MB/s Feb 9 19:16:38.808316 kernel: raid6: neonx2 gen() 5772 MB/s Feb 9 19:16:38.826316 kernel: raid6: neonx2 xor() 4379 MB/s Feb 9 19:16:38.844317 kernel: raid6: neonx1 gen() 4491 MB/s Feb 9 19:16:38.862315 kernel: raid6: neonx1 xor() 3587 MB/s Feb 9 19:16:38.880316 kernel: raid6: int64x8 gen() 3449 MB/s Feb 9 19:16:38.898316 kernel: raid6: int64x8 xor() 2055 MB/s Feb 9 19:16:38.916317 kernel: raid6: int64x4 gen() 3843 MB/s Feb 9 19:16:38.934316 kernel: raid6: int64x4 xor() 2170 MB/s Feb 9 19:16:38.952316 kernel: raid6: int64x2 gen() 3613 MB/s Feb 9 19:16:38.970316 kernel: raid6: int64x2 xor() 1928 MB/s Feb 9 19:16:38.988316 kernel: raid6: int64x1 gen() 2761 MB/s Feb 9 19:16:39.007800 kernel: raid6: int64x1 xor() 1406 MB/s Feb 9 19:16:39.007831 kernel: raid6: using algorithm neonx4 gen() 6561 MB/s Feb 9 19:16:39.007854 kernel: raid6: .... xor() 4684 MB/s, rmw enabled Feb 9 19:16:39.009569 kernel: raid6: using neon recovery algorithm Feb 9 19:16:39.028324 kernel: xor: measuring software checksum speed Feb 9 19:16:39.030316 kernel: 8regs : 9333 MB/sec Feb 9 19:16:39.033316 kernel: 32regs : 11107 MB/sec Feb 9 19:16:39.037114 kernel: arm64_neon : 9661 MB/sec Feb 9 19:16:39.037146 kernel: xor: using function: 32regs (11107 MB/sec) Feb 9 19:16:39.127348 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Feb 9 19:16:39.144219 systemd[1]: Finished dracut-pre-udev.service. Feb 9 19:16:39.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:39.149000 audit: BPF prog-id=7 op=LOAD Feb 9 19:16:39.149000 audit: BPF prog-id=8 op=LOAD Feb 9 19:16:39.151895 systemd[1]: Starting systemd-udevd.service... Feb 9 19:16:39.180779 systemd-udevd[508]: Using default interface naming scheme 'v252'. Feb 9 19:16:39.189957 systemd[1]: Started systemd-udevd.service. Feb 9 19:16:39.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:39.207077 systemd[1]: Starting dracut-pre-trigger.service... Feb 9 19:16:39.230555 dracut-pre-trigger[530]: rd.md=0: removing MD RAID activation Feb 9 19:16:39.289051 systemd[1]: Finished dracut-pre-trigger.service. Feb 9 19:16:39.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:39.294542 systemd[1]: Starting systemd-udev-trigger.service... Feb 9 19:16:39.400803 systemd[1]: Finished systemd-udev-trigger.service. Feb 9 19:16:39.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:39.519612 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Feb 9 19:16:39.519676 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Feb 9 19:16:39.534591 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Feb 9 19:16:39.534682 kernel: ena 0000:00:05.0: ENA device version: 0.10 Feb 9 19:16:39.537728 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Feb 9 19:16:39.537958 kernel: nvme nvme0: pci function 0000:00:04.0 Feb 9 19:16:39.546307 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:7e:eb:2c:cf:97 Feb 9 19:16:39.552334 kernel: nvme nvme0: 2/0/0 default/read/poll queues Feb 9 19:16:39.557833 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Feb 9 19:16:39.557868 kernel: GPT:9289727 != 16777215 Feb 9 19:16:39.560059 kernel: GPT:Alternate GPT header not at the end of the disk. Feb 9 19:16:39.561385 kernel: GPT:9289727 != 16777215 Feb 9 19:16:39.563263 kernel: GPT: Use GNU Parted to correct GPT errors. Feb 9 19:16:39.564813 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Feb 9 19:16:39.568826 (udev-worker)[576]: Network interface NamePolicy= disabled on kernel command line. Feb 9 19:16:39.658342 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (563) Feb 9 19:16:39.680723 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Feb 9 19:16:39.754069 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 9 19:16:39.783263 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Feb 9 19:16:39.804523 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Feb 9 19:16:39.804668 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Feb 9 19:16:39.816709 systemd[1]: Starting disk-uuid.service... Feb 9 19:16:39.840811 disk-uuid[674]: Primary Header is updated. Feb 9 19:16:39.840811 disk-uuid[674]: Secondary Entries is updated. Feb 9 19:16:39.840811 disk-uuid[674]: Secondary Header is updated. Feb 9 19:16:39.852335 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Feb 9 19:16:39.862330 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Feb 9 19:16:40.869316 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Feb 9 19:16:40.869651 disk-uuid[675]: The operation has completed successfully. Feb 9 19:16:41.022408 systemd[1]: disk-uuid.service: Deactivated successfully. Feb 9 19:16:41.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:41.027000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:41.022606 systemd[1]: Finished disk-uuid.service. Feb 9 19:16:41.060742 systemd[1]: Starting verity-setup.service... Feb 9 19:16:41.098316 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Feb 9 19:16:41.177920 systemd[1]: Found device dev-mapper-usr.device. Feb 9 19:16:41.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:41.181389 systemd[1]: Finished verity-setup.service. Feb 9 19:16:41.187737 systemd[1]: Mounting sysusr-usr.mount... Feb 9 19:16:41.270332 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Feb 9 19:16:41.271483 systemd[1]: Mounted sysusr-usr.mount. Feb 9 19:16:41.274906 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Feb 9 19:16:41.276105 systemd[1]: Starting ignition-setup.service... Feb 9 19:16:41.287051 systemd[1]: Starting parse-ip-for-networkd.service... Feb 9 19:16:41.310828 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Feb 9 19:16:41.310895 kernel: BTRFS info (device nvme0n1p6): using free space tree Feb 9 19:16:41.310927 kernel: BTRFS info (device nvme0n1p6): has skinny extents Feb 9 19:16:41.321515 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Feb 9 19:16:41.339742 systemd[1]: mnt-oem.mount: Deactivated successfully. Feb 9 19:16:41.365469 systemd[1]: Finished ignition-setup.service. Feb 9 19:16:41.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:41.383469 systemd[1]: Starting ignition-fetch-offline.service... Feb 9 19:16:41.458958 systemd[1]: Finished parse-ip-for-networkd.service. Feb 9 19:16:41.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:41.464000 audit: BPF prog-id=9 op=LOAD Feb 9 19:16:41.466775 systemd[1]: Starting systemd-networkd.service... Feb 9 19:16:41.516841 systemd-networkd[1104]: lo: Link UP Feb 9 19:16:41.516863 systemd-networkd[1104]: lo: Gained carrier Feb 9 19:16:41.521521 systemd-networkd[1104]: Enumeration completed Feb 9 19:16:41.521684 systemd[1]: Started systemd-networkd.service. Feb 9 19:16:41.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:41.525667 systemd-networkd[1104]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 9 19:16:41.528564 systemd[1]: Reached target network.target. Feb 9 19:16:41.536717 systemd-networkd[1104]: eth0: Link UP Feb 9 19:16:41.536733 systemd-networkd[1104]: eth0: Gained carrier Feb 9 19:16:41.536868 systemd[1]: Starting iscsiuio.service... Feb 9 19:16:41.551478 systemd-networkd[1104]: eth0: DHCPv4 address 172.31.25.191/20, gateway 172.31.16.1 acquired from 172.31.16.1 Feb 9 19:16:41.558000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:41.553580 systemd[1]: Started iscsiuio.service. Feb 9 19:16:41.572983 systemd[1]: Starting iscsid.service... Feb 9 19:16:41.582018 iscsid[1109]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Feb 9 19:16:41.582018 iscsid[1109]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Feb 9 19:16:41.582018 iscsid[1109]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Feb 9 19:16:41.582018 iscsid[1109]: If using hardware iscsi like qla4xxx this message can be ignored. Feb 9 19:16:41.582018 iscsid[1109]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Feb 9 19:16:41.606457 iscsid[1109]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Feb 9 19:16:41.612774 systemd[1]: Started iscsid.service. Feb 9 19:16:41.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:41.628076 systemd[1]: Starting dracut-initqueue.service... Feb 9 19:16:41.652682 systemd[1]: Finished dracut-initqueue.service. Feb 9 19:16:41.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:41.656868 systemd[1]: Reached target remote-fs-pre.target. Feb 9 19:16:41.660814 systemd[1]: Reached target remote-cryptsetup.target. Feb 9 19:16:41.664460 systemd[1]: Reached target remote-fs.target. Feb 9 19:16:41.669675 systemd[1]: Starting dracut-pre-mount.service... Feb 9 19:16:41.693614 systemd[1]: Finished dracut-pre-mount.service. Feb 9 19:16:41.696000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:41.921475 ignition[1038]: Ignition 2.14.0 Feb 9 19:16:41.921976 ignition[1038]: Stage: fetch-offline Feb 9 19:16:41.922325 ignition[1038]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 19:16:41.922388 ignition[1038]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 9 19:16:41.946194 ignition[1038]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 9 19:16:41.949281 ignition[1038]: Ignition finished successfully Feb 9 19:16:41.952907 systemd[1]: Finished ignition-fetch-offline.service. Feb 9 19:16:41.963795 kernel: kauditd_printk_skb: 18 callbacks suppressed Feb 9 19:16:41.963865 kernel: audit: type=1130 audit(1707506201.956:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:41.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:41.958577 systemd[1]: Starting ignition-fetch.service... Feb 9 19:16:41.977587 ignition[1128]: Ignition 2.14.0 Feb 9 19:16:41.977617 ignition[1128]: Stage: fetch Feb 9 19:16:41.977942 ignition[1128]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 19:16:41.978001 ignition[1128]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 9 19:16:41.991579 ignition[1128]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 9 19:16:41.994631 ignition[1128]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 9 19:16:42.003501 ignition[1128]: INFO : PUT result: OK Feb 9 19:16:42.006341 ignition[1128]: DEBUG : parsed url from cmdline: "" Feb 9 19:16:42.006341 ignition[1128]: INFO : no config URL provided Feb 9 19:16:42.006341 ignition[1128]: INFO : reading system config file "/usr/lib/ignition/user.ign" Feb 9 19:16:42.026786 ignition[1128]: INFO : no config at "/usr/lib/ignition/user.ign" Feb 9 19:16:42.026786 ignition[1128]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 9 19:16:42.026786 ignition[1128]: INFO : PUT result: OK Feb 9 19:16:42.026786 ignition[1128]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Feb 9 19:16:42.038177 ignition[1128]: INFO : GET result: OK Feb 9 19:16:42.038177 ignition[1128]: DEBUG : parsing config with SHA512: f7448774349b2ac5eb740b3992a21dca75d683999a97615c39e4eefa0be82fd7716ec27387e1ea1e1a7f321f81dac971949881b207b47ed2f3c88a72cfbf9b92 Feb 9 19:16:42.098471 unknown[1128]: fetched base config from "system" Feb 9 19:16:42.098499 unknown[1128]: fetched base config from "system" Feb 9 19:16:42.098515 unknown[1128]: fetched user config from "aws" Feb 9 19:16:42.105709 ignition[1128]: fetch: fetch complete Feb 9 19:16:42.105734 ignition[1128]: fetch: fetch passed Feb 9 19:16:42.105840 ignition[1128]: Ignition finished successfully Feb 9 19:16:42.113396 systemd[1]: Finished ignition-fetch.service. Feb 9 19:16:42.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:42.124342 kernel: audit: type=1130 audit(1707506202.114:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:42.125643 systemd[1]: Starting ignition-kargs.service... Feb 9 19:16:42.144191 ignition[1135]: Ignition 2.14.0 Feb 9 19:16:42.144217 ignition[1135]: Stage: kargs Feb 9 19:16:42.144568 ignition[1135]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 19:16:42.144628 ignition[1135]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 9 19:16:42.161184 ignition[1135]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 9 19:16:42.164544 ignition[1135]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 9 19:16:42.167905 ignition[1135]: INFO : PUT result: OK Feb 9 19:16:42.174579 ignition[1135]: kargs: kargs passed Feb 9 19:16:42.174897 ignition[1135]: Ignition finished successfully Feb 9 19:16:42.179843 systemd[1]: Finished ignition-kargs.service. Feb 9 19:16:42.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:42.192370 systemd[1]: Starting ignition-disks.service... Feb 9 19:16:42.197239 kernel: audit: type=1130 audit(1707506202.182:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:42.207005 ignition[1141]: Ignition 2.14.0 Feb 9 19:16:42.207031 ignition[1141]: Stage: disks Feb 9 19:16:42.207351 ignition[1141]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 19:16:42.207416 ignition[1141]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 9 19:16:42.223637 ignition[1141]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 9 19:16:42.226589 ignition[1141]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 9 19:16:42.229952 ignition[1141]: INFO : PUT result: OK Feb 9 19:16:42.235435 ignition[1141]: disks: disks passed Feb 9 19:16:42.235543 ignition[1141]: Ignition finished successfully Feb 9 19:16:42.240585 systemd[1]: Finished ignition-disks.service. Feb 9 19:16:42.244545 systemd[1]: Reached target initrd-root-device.target. Feb 9 19:16:42.243000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:42.255557 systemd[1]: Reached target local-fs-pre.target. Feb 9 19:16:42.257760 systemd[1]: Reached target local-fs.target. Feb 9 19:16:42.259723 systemd[1]: Reached target sysinit.target. Feb 9 19:16:42.261647 systemd[1]: Reached target basic.target. Feb 9 19:16:42.276353 kernel: audit: type=1130 audit(1707506202.243:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:42.264884 systemd[1]: Starting systemd-fsck-root.service... Feb 9 19:16:42.313270 systemd-fsck[1149]: ROOT: clean, 602/553520 files, 56013/553472 blocks Feb 9 19:16:42.320972 systemd[1]: Finished systemd-fsck-root.service. Feb 9 19:16:42.325000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:42.328114 systemd[1]: Mounting sysroot.mount... Feb 9 19:16:42.338325 kernel: audit: type=1130 audit(1707506202.325:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:42.353331 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Feb 9 19:16:42.355498 systemd[1]: Mounted sysroot.mount. Feb 9 19:16:42.358853 systemd[1]: Reached target initrd-root-fs.target. Feb 9 19:16:42.382217 systemd[1]: Mounting sysroot-usr.mount... Feb 9 19:16:42.390256 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Feb 9 19:16:42.390377 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Feb 9 19:16:42.390671 systemd[1]: Reached target ignition-diskful.target. Feb 9 19:16:42.397545 systemd[1]: Mounted sysroot-usr.mount. Feb 9 19:16:42.414816 systemd[1]: Mounting sysroot-usr-share-oem.mount... Feb 9 19:16:42.421761 systemd[1]: Starting initrd-setup-root.service... Feb 9 19:16:42.440914 initrd-setup-root[1171]: cut: /sysroot/etc/passwd: No such file or directory Feb 9 19:16:42.444315 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1166) Feb 9 19:16:42.450969 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Feb 9 19:16:42.451035 kernel: BTRFS info (device nvme0n1p6): using free space tree Feb 9 19:16:42.453137 kernel: BTRFS info (device nvme0n1p6): has skinny extents Feb 9 19:16:42.460884 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Feb 9 19:16:42.461531 initrd-setup-root[1197]: cut: /sysroot/etc/group: No such file or directory Feb 9 19:16:42.469604 systemd[1]: Mounted sysroot-usr-share-oem.mount. Feb 9 19:16:42.478724 initrd-setup-root[1205]: cut: /sysroot/etc/shadow: No such file or directory Feb 9 19:16:42.486620 initrd-setup-root[1213]: cut: /sysroot/etc/gshadow: No such file or directory Feb 9 19:16:42.691207 systemd[1]: Finished initrd-setup-root.service. Feb 9 19:16:42.714503 kernel: audit: type=1130 audit(1707506202.692:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:42.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:42.696227 systemd[1]: Starting ignition-mount.service... Feb 9 19:16:42.699562 systemd-networkd[1104]: eth0: Gained IPv6LL Feb 9 19:16:42.720930 systemd[1]: Starting sysroot-boot.service... Feb 9 19:16:42.732897 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Feb 9 19:16:42.734867 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Feb 9 19:16:42.752771 ignition[1231]: INFO : Ignition 2.14.0 Feb 9 19:16:42.752771 ignition[1231]: INFO : Stage: mount Feb 9 19:16:42.756891 ignition[1231]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 19:16:42.756891 ignition[1231]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 9 19:16:42.774489 ignition[1231]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 9 19:16:42.779694 ignition[1231]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 9 19:16:42.783888 ignition[1231]: INFO : PUT result: OK Feb 9 19:16:42.791324 ignition[1231]: INFO : mount: mount passed Feb 9 19:16:42.793464 ignition[1231]: INFO : Ignition finished successfully Feb 9 19:16:42.807148 systemd[1]: Finished ignition-mount.service. Feb 9 19:16:42.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:42.829897 systemd[1]: Starting ignition-files.service... Feb 9 19:16:42.835327 kernel: audit: type=1130 audit(1707506202.821:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:42.846941 systemd[1]: Mounting sysroot-usr-share-oem.mount... Feb 9 19:16:42.857266 systemd[1]: Finished sysroot-boot.service. Feb 9 19:16:42.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:42.869322 kernel: audit: type=1130 audit(1707506202.860:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:42.880195 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1241) Feb 9 19:16:42.880253 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Feb 9 19:16:42.880277 kernel: BTRFS info (device nvme0n1p6): using free space tree Feb 9 19:16:42.884480 kernel: BTRFS info (device nvme0n1p6): has skinny extents Feb 9 19:16:42.891321 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Feb 9 19:16:42.896053 systemd[1]: Mounted sysroot-usr-share-oem.mount. Feb 9 19:16:42.916741 ignition[1260]: INFO : Ignition 2.14.0 Feb 9 19:16:42.920357 ignition[1260]: INFO : Stage: files Feb 9 19:16:42.920357 ignition[1260]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 19:16:42.920357 ignition[1260]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 9 19:16:42.939377 ignition[1260]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 9 19:16:42.942813 ignition[1260]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 9 19:16:42.945931 ignition[1260]: INFO : PUT result: OK Feb 9 19:16:42.951921 ignition[1260]: DEBUG : files: compiled without relabeling support, skipping Feb 9 19:16:42.956524 ignition[1260]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Feb 9 19:16:42.959859 ignition[1260]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Feb 9 19:16:42.972274 ignition[1260]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Feb 9 19:16:42.976015 ignition[1260]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Feb 9 19:16:42.980308 unknown[1260]: wrote ssh authorized keys file for user: core Feb 9 19:16:42.983092 ignition[1260]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Feb 9 19:16:42.987433 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Feb 9 19:16:42.992170 ignition[1260]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Feb 9 19:16:43.332535 ignition[1260]: INFO : GET result: OK Feb 9 19:16:43.921054 ignition[1260]: DEBUG : file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Feb 9 19:16:43.926916 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Feb 9 19:16:43.926916 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Feb 9 19:16:43.936198 ignition[1260]: INFO : GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Feb 9 19:16:43.982473 ignition[1260]: INFO : GET result: OK Feb 9 19:16:44.113749 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Feb 9 19:16:44.118615 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Feb 9 19:16:44.118615 ignition[1260]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Feb 9 19:16:44.390333 ignition[1260]: INFO : GET result: OK Feb 9 19:16:44.680175 ignition[1260]: DEBUG : file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Feb 9 19:16:44.685915 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Feb 9 19:16:44.690679 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubectl" Feb 9 19:16:44.694749 ignition[1260]: INFO : GET https://dl.k8s.io/release/v1.27.2/bin/linux/arm64/kubectl: attempt #1 Feb 9 19:16:44.815429 ignition[1260]: INFO : GET result: OK Feb 9 19:16:45.415143 ignition[1260]: DEBUG : file matches expected sum of: 14be61ec35669a27acf2df0380afb85b9b42311d50ca1165718421c5f605df1119ec9ae314696a674051712e80deeaa65e62d2d62ed4d107fe99d0aaf419dafc Feb 9 19:16:45.424803 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubectl" Feb 9 19:16:45.424803 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Feb 9 19:16:45.424803 ignition[1260]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Feb 9 19:16:45.444951 ignition[1260]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem443666273" Feb 9 19:16:45.453646 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1265) Feb 9 19:16:45.453681 ignition[1260]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem443666273": device or resource busy Feb 9 19:16:45.453681 ignition[1260]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem443666273", trying btrfs: device or resource busy Feb 9 19:16:45.453681 ignition[1260]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem443666273" Feb 9 19:16:45.465067 ignition[1260]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem443666273" Feb 9 19:16:45.467893 ignition[1260]: INFO : op(3): [started] unmounting "/mnt/oem443666273" Feb 9 19:16:45.470736 ignition[1260]: INFO : op(3): [finished] unmounting "/mnt/oem443666273" Feb 9 19:16:45.474127 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Feb 9 19:16:45.474127 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubeadm" Feb 9 19:16:45.474127 ignition[1260]: INFO : GET https://dl.k8s.io/release/v1.27.2/bin/linux/arm64/kubeadm: attempt #1 Feb 9 19:16:45.539695 ignition[1260]: INFO : GET result: OK Feb 9 19:16:46.067771 ignition[1260]: DEBUG : file matches expected sum of: 45b3100984c979ba0f1c0df8f4211474c2d75ebe916e677dff5fc8e3b3697cf7a953da94e356f39684cc860dff6878b772b7514c55651c2f866d9efeef23f970 Feb 9 19:16:46.075301 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubeadm" Feb 9 19:16:46.075301 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubelet" Feb 9 19:16:46.075301 ignition[1260]: INFO : GET https://dl.k8s.io/release/v1.27.2/bin/linux/arm64/kubelet: attempt #1 Feb 9 19:16:46.130873 ignition[1260]: INFO : GET result: OK Feb 9 19:16:47.450341 ignition[1260]: DEBUG : file matches expected sum of: 71857ff499ae135fa478e1827a0ed8865e578a8d2b1e25876e914fd0beba03733801c0654bcd4c0567bafeb16887dafb2dbbe8d1116e6ea28dcd8366c142d348 Feb 9 19:16:47.456412 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubelet" Feb 9 19:16:47.456412 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/docker/daemon.json" Feb 9 19:16:47.456412 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/docker/daemon.json" Feb 9 19:16:47.468928 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Feb 9 19:16:47.473580 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Feb 9 19:16:47.477825 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Feb 9 19:16:47.488797 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Feb 9 19:16:47.493219 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 9 19:16:47.493219 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 9 19:16:47.501464 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 9 19:16:47.506067 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 9 19:16:47.510554 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/flatcar/update.conf" Feb 9 19:16:47.515008 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/flatcar/update.conf" Feb 9 19:16:47.519486 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Feb 9 19:16:47.524093 ignition[1260]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Feb 9 19:16:47.538802 ignition[1260]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1255079595" Feb 9 19:16:47.542353 ignition[1260]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1255079595": device or resource busy Feb 9 19:16:47.542353 ignition[1260]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1255079595", trying btrfs: device or resource busy Feb 9 19:16:47.542353 ignition[1260]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1255079595" Feb 9 19:16:47.566250 ignition[1260]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1255079595" Feb 9 19:16:47.566250 ignition[1260]: INFO : op(6): [started] unmounting "/mnt/oem1255079595" Feb 9 19:16:47.573119 ignition[1260]: INFO : op(6): [finished] unmounting "/mnt/oem1255079595" Feb 9 19:16:47.573119 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Feb 9 19:16:47.573119 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(11): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Feb 9 19:16:47.573119 ignition[1260]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Feb 9 19:16:47.599830 ignition[1260]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem202933941" Feb 9 19:16:47.606411 ignition[1260]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem202933941": device or resource busy Feb 9 19:16:47.606411 ignition[1260]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem202933941", trying btrfs: device or resource busy Feb 9 19:16:47.606411 ignition[1260]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem202933941" Feb 9 19:16:47.606411 ignition[1260]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem202933941" Feb 9 19:16:47.606411 ignition[1260]: INFO : op(9): [started] unmounting "/mnt/oem202933941" Feb 9 19:16:47.606411 ignition[1260]: INFO : op(9): [finished] unmounting "/mnt/oem202933941" Feb 9 19:16:47.606411 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(11): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Feb 9 19:16:47.606411 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(12): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Feb 9 19:16:47.606411 ignition[1260]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Feb 9 19:16:47.617686 systemd[1]: mnt-oem202933941.mount: Deactivated successfully. Feb 9 19:16:47.685766 ignition[1260]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem113729454" Feb 9 19:16:47.689305 ignition[1260]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem113729454": device or resource busy Feb 9 19:16:47.693299 ignition[1260]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem113729454", trying btrfs: device or resource busy Feb 9 19:16:47.697695 ignition[1260]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem113729454" Feb 9 19:16:47.710727 ignition[1260]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem113729454" Feb 9 19:16:47.714327 ignition[1260]: INFO : op(c): [started] unmounting "/mnt/oem113729454" Feb 9 19:16:47.714327 ignition[1260]: INFO : op(c): [finished] unmounting "/mnt/oem113729454" Feb 9 19:16:47.719021 ignition[1260]: INFO : files: createFilesystemsFiles: createFiles: op(12): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Feb 9 19:16:47.732933 ignition[1260]: INFO : files: op(13): [started] processing unit "coreos-metadata-sshkeys@.service" Feb 9 19:16:47.732933 ignition[1260]: INFO : files: op(13): [finished] processing unit "coreos-metadata-sshkeys@.service" Feb 9 19:16:47.732933 ignition[1260]: INFO : files: op(14): [started] processing unit "amazon-ssm-agent.service" Feb 9 19:16:47.742988 ignition[1260]: INFO : files: op(14): op(15): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Feb 9 19:16:47.742988 ignition[1260]: INFO : files: op(14): op(15): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Feb 9 19:16:47.742988 ignition[1260]: INFO : files: op(14): [finished] processing unit "amazon-ssm-agent.service" Feb 9 19:16:47.742988 ignition[1260]: INFO : files: op(16): [started] processing unit "nvidia.service" Feb 9 19:16:47.742988 ignition[1260]: INFO : files: op(16): [finished] processing unit "nvidia.service" Feb 9 19:16:47.742988 ignition[1260]: INFO : files: op(17): [started] processing unit "prepare-cni-plugins.service" Feb 9 19:16:47.742988 ignition[1260]: INFO : files: op(17): op(18): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 9 19:16:47.769465 ignition[1260]: INFO : files: op(17): op(18): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 9 19:16:47.769465 ignition[1260]: INFO : files: op(17): [finished] processing unit "prepare-cni-plugins.service" Feb 9 19:16:47.769465 ignition[1260]: INFO : files: op(19): [started] processing unit "prepare-critools.service" Feb 9 19:16:47.780850 ignition[1260]: INFO : files: op(19): op(1a): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 9 19:16:47.785931 ignition[1260]: INFO : files: op(19): op(1a): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 9 19:16:47.785931 ignition[1260]: INFO : files: op(19): [finished] processing unit "prepare-critools.service" Feb 9 19:16:47.793819 ignition[1260]: INFO : files: op(1b): [started] processing unit "prepare-helm.service" Feb 9 19:16:47.793819 ignition[1260]: INFO : files: op(1b): op(1c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 9 19:16:47.801556 ignition[1260]: INFO : files: op(1b): op(1c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 9 19:16:47.801556 ignition[1260]: INFO : files: op(1b): [finished] processing unit "prepare-helm.service" Feb 9 19:16:47.809187 ignition[1260]: INFO : files: op(1d): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Feb 9 19:16:47.813175 ignition[1260]: INFO : files: op(1d): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Feb 9 19:16:47.813175 ignition[1260]: INFO : files: op(1e): [started] setting preset to enabled for "amazon-ssm-agent.service" Feb 9 19:16:47.820013 ignition[1260]: INFO : files: op(1e): [finished] setting preset to enabled for "amazon-ssm-agent.service" Feb 9 19:16:47.820013 ignition[1260]: INFO : files: op(1f): [started] setting preset to enabled for "nvidia.service" Feb 9 19:16:47.826888 ignition[1260]: INFO : files: op(1f): [finished] setting preset to enabled for "nvidia.service" Feb 9 19:16:47.826888 ignition[1260]: INFO : files: op(20): [started] setting preset to enabled for "prepare-cni-plugins.service" Feb 9 19:16:47.833827 ignition[1260]: INFO : files: op(20): [finished] setting preset to enabled for "prepare-cni-plugins.service" Feb 9 19:16:47.833827 ignition[1260]: INFO : files: op(21): [started] setting preset to enabled for "prepare-critools.service" Feb 9 19:16:47.841055 ignition[1260]: INFO : files: op(21): [finished] setting preset to enabled for "prepare-critools.service" Feb 9 19:16:47.841055 ignition[1260]: INFO : files: op(22): [started] setting preset to enabled for "prepare-helm.service" Feb 9 19:16:47.847972 ignition[1260]: INFO : files: op(22): [finished] setting preset to enabled for "prepare-helm.service" Feb 9 19:16:47.858617 ignition[1260]: INFO : files: createResultFile: createFiles: op(23): [started] writing file "/sysroot/etc/.ignition-result.json" Feb 9 19:16:47.858617 ignition[1260]: INFO : files: createResultFile: createFiles: op(23): [finished] writing file "/sysroot/etc/.ignition-result.json" Feb 9 19:16:47.858617 ignition[1260]: INFO : files: files passed Feb 9 19:16:47.858617 ignition[1260]: INFO : Ignition finished successfully Feb 9 19:16:47.873021 systemd[1]: Finished ignition-files.service. Feb 9 19:16:47.885834 systemd[1]: Starting initrd-setup-root-after-ignition.service... Feb 9 19:16:47.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:47.899954 initrd-setup-root-after-ignition[1283]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Feb 9 19:16:47.911323 kernel: audit: type=1130 audit(1707506207.874:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:47.900617 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Feb 9 19:16:47.907991 systemd[1]: Starting ignition-quench.service... Feb 9 19:16:47.912162 systemd[1]: Finished initrd-setup-root-after-ignition.service. Feb 9 19:16:47.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:47.926561 systemd[1]: ignition-quench.service: Deactivated successfully. Feb 9 19:16:47.963786 kernel: audit: type=1130 audit(1707506207.924:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:47.963832 kernel: audit: type=1130 audit(1707506207.934:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:47.963859 kernel: audit: type=1131 audit(1707506207.934:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:47.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:47.934000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:47.926760 systemd[1]: Finished ignition-quench.service. Feb 9 19:16:47.936379 systemd[1]: Reached target ignition-complete.target. Feb 9 19:16:47.953386 systemd[1]: Starting initrd-parse-etc.service... Feb 9 19:16:47.987264 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Feb 9 19:16:47.989831 systemd[1]: Finished initrd-parse-etc.service. Feb 9 19:16:48.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.004908 systemd[1]: Reached target initrd-fs.target. Feb 9 19:16:48.020523 kernel: audit: type=1130 audit(1707506208.003:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.020564 kernel: audit: type=1131 audit(1707506208.003:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.003000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.022676 systemd[1]: Reached target initrd.target. Feb 9 19:16:48.026381 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Feb 9 19:16:48.030906 systemd[1]: Starting dracut-pre-pivot.service... Feb 9 19:16:48.051781 systemd[1]: Finished dracut-pre-pivot.service. Feb 9 19:16:48.054000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.063105 systemd[1]: Starting initrd-cleanup.service... Feb 9 19:16:48.068326 kernel: audit: type=1130 audit(1707506208.054:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.084874 systemd[1]: Stopped target nss-lookup.target. Feb 9 19:16:48.089090 systemd[1]: Stopped target remote-cryptsetup.target. Feb 9 19:16:48.093579 systemd[1]: Stopped target timers.target. Feb 9 19:16:48.097411 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Feb 9 19:16:48.099999 systemd[1]: Stopped dracut-pre-pivot.service. Feb 9 19:16:48.102000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.111440 systemd[1]: Stopped target initrd.target. Feb 9 19:16:48.115009 kernel: audit: type=1131 audit(1707506208.102:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.115266 systemd[1]: Stopped target basic.target. Feb 9 19:16:48.118955 systemd[1]: Stopped target ignition-complete.target. Feb 9 19:16:48.123245 systemd[1]: Stopped target ignition-diskful.target. Feb 9 19:16:48.127516 systemd[1]: Stopped target initrd-root-device.target. Feb 9 19:16:48.131898 systemd[1]: Stopped target remote-fs.target. Feb 9 19:16:48.135760 systemd[1]: Stopped target remote-fs-pre.target. Feb 9 19:16:48.139897 systemd[1]: Stopped target sysinit.target. Feb 9 19:16:48.143668 systemd[1]: Stopped target local-fs.target. Feb 9 19:16:48.147533 systemd[1]: Stopped target local-fs-pre.target. Feb 9 19:16:48.151561 systemd[1]: Stopped target swap.target. Feb 9 19:16:48.155108 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Feb 9 19:16:48.157684 systemd[1]: Stopped dracut-pre-mount.service. Feb 9 19:16:48.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.161849 systemd[1]: Stopped target cryptsetup.target. Feb 9 19:16:48.172701 kernel: audit: type=1131 audit(1707506208.160:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.172940 systemd[1]: dracut-initqueue.service: Deactivated successfully. Feb 9 19:16:48.175280 systemd[1]: Stopped dracut-initqueue.service. Feb 9 19:16:48.182000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.183641 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Feb 9 19:16:48.211737 kernel: audit: type=1131 audit(1707506208.182:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.194000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.194000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.183862 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Feb 9 19:16:48.195942 systemd[1]: ignition-files.service: Deactivated successfully. Feb 9 19:16:48.220075 iscsid[1109]: iscsid shutting down. Feb 9 19:16:48.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.224000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.196137 systemd[1]: Stopped ignition-files.service. Feb 9 19:16:48.199911 systemd[1]: Stopping ignition-mount.service... Feb 9 19:16:48.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.205883 systemd[1]: Stopping iscsid.service... Feb 9 19:16:48.210008 systemd[1]: Stopping sysroot-boot.service... Feb 9 19:16:48.211764 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Feb 9 19:16:48.214404 systemd[1]: Stopped systemd-udev-trigger.service. Feb 9 19:16:48.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.272738 ignition[1298]: INFO : Ignition 2.14.0 Feb 9 19:16:48.272738 ignition[1298]: INFO : Stage: umount Feb 9 19:16:48.272738 ignition[1298]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 19:16:48.272738 ignition[1298]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 9 19:16:48.271000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.223101 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Feb 9 19:16:48.304429 ignition[1298]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 9 19:16:48.304429 ignition[1298]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 9 19:16:48.304429 ignition[1298]: INFO : PUT result: OK Feb 9 19:16:48.223434 systemd[1]: Stopped dracut-pre-trigger.service. Feb 9 19:16:48.235382 systemd[1]: iscsid.service: Deactivated successfully. Feb 9 19:16:48.322777 ignition[1298]: INFO : umount: umount passed Feb 9 19:16:48.322777 ignition[1298]: INFO : Ignition finished successfully Feb 9 19:16:48.321000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.321000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.327000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.327000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.332000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.361000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.237378 systemd[1]: Stopped iscsid.service. Feb 9 19:16:48.248632 systemd[1]: Stopping iscsiuio.service... Feb 9 19:16:48.255064 systemd[1]: initrd-cleanup.service: Deactivated successfully. Feb 9 19:16:48.255263 systemd[1]: Finished initrd-cleanup.service. Feb 9 19:16:48.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.384000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.395000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.395000 audit: BPF prog-id=6 op=UNLOAD Feb 9 19:16:48.270545 systemd[1]: iscsiuio.service: Deactivated successfully. Feb 9 19:16:48.395000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.270932 systemd[1]: Stopped iscsiuio.service. Feb 9 19:16:48.399000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.283071 systemd[1]: sysroot-boot.service: Deactivated successfully. Feb 9 19:16:48.283252 systemd[1]: Stopped sysroot-boot.service. Feb 9 19:16:48.320185 systemd[1]: ignition-mount.service: Deactivated successfully. Feb 9 19:16:48.417000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.320395 systemd[1]: Stopped ignition-mount.service. Feb 9 19:16:48.324894 systemd[1]: ignition-disks.service: Deactivated successfully. Feb 9 19:16:48.324982 systemd[1]: Stopped ignition-disks.service. Feb 9 19:16:48.326955 systemd[1]: ignition-kargs.service: Deactivated successfully. Feb 9 19:16:48.327031 systemd[1]: Stopped ignition-kargs.service. Feb 9 19:16:48.329036 systemd[1]: ignition-fetch.service: Deactivated successfully. Feb 9 19:16:48.329111 systemd[1]: Stopped ignition-fetch.service. Feb 9 19:16:48.331152 systemd[1]: Stopped target network.target. Feb 9 19:16:48.333094 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Feb 9 19:16:48.333171 systemd[1]: Stopped ignition-fetch-offline.service. Feb 9 19:16:48.335394 systemd[1]: Stopped target paths.target. Feb 9 19:16:48.337112 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Feb 9 19:16:48.340340 systemd[1]: Stopped systemd-ask-password-console.path. Feb 9 19:16:48.356999 systemd[1]: Stopped target slices.target. Feb 9 19:16:48.358875 systemd[1]: Stopped target sockets.target. Feb 9 19:16:48.360846 systemd[1]: iscsid.socket: Deactivated successfully. Feb 9 19:16:48.360917 systemd[1]: Closed iscsid.socket. Feb 9 19:16:48.362634 systemd[1]: iscsiuio.socket: Deactivated successfully. Feb 9 19:16:48.362712 systemd[1]: Closed iscsiuio.socket. Feb 9 19:16:48.364449 systemd[1]: ignition-setup.service: Deactivated successfully. Feb 9 19:16:48.364531 systemd[1]: Stopped ignition-setup.service. Feb 9 19:16:48.366568 systemd[1]: initrd-setup-root.service: Deactivated successfully. Feb 9 19:16:48.366658 systemd[1]: Stopped initrd-setup-root.service. Feb 9 19:16:48.369099 systemd[1]: Stopping systemd-networkd.service... Feb 9 19:16:48.371106 systemd[1]: Stopping systemd-resolved.service... Feb 9 19:16:48.377515 systemd[1]: systemd-resolved.service: Deactivated successfully. Feb 9 19:16:48.377724 systemd[1]: Stopped systemd-resolved.service. Feb 9 19:16:48.380427 systemd-networkd[1104]: eth0: DHCPv6 lease lost Feb 9 19:16:48.472000 audit: BPF prog-id=9 op=UNLOAD Feb 9 19:16:48.383184 systemd[1]: systemd-networkd.service: Deactivated successfully. Feb 9 19:16:48.383572 systemd[1]: Stopped systemd-networkd.service. Feb 9 19:16:48.387782 systemd[1]: systemd-networkd.socket: Deactivated successfully. Feb 9 19:16:48.387864 systemd[1]: Closed systemd-networkd.socket. Feb 9 19:16:48.390942 systemd[1]: Stopping network-cleanup.service... Feb 9 19:16:48.394108 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Feb 9 19:16:48.394223 systemd[1]: Stopped parse-ip-for-networkd.service. Feb 9 19:16:48.396642 systemd[1]: systemd-sysctl.service: Deactivated successfully. Feb 9 19:16:48.396756 systemd[1]: Stopped systemd-sysctl.service. Feb 9 19:16:48.400939 systemd[1]: systemd-modules-load.service: Deactivated successfully. Feb 9 19:16:48.401022 systemd[1]: Stopped systemd-modules-load.service. Feb 9 19:16:48.404917 systemd[1]: Stopping systemd-udevd.service... Feb 9 19:16:48.413644 systemd[1]: systemd-udevd.service: Deactivated successfully. Feb 9 19:16:48.414734 systemd[1]: Stopped systemd-udevd.service. Feb 9 19:16:48.505236 systemd[1]: network-cleanup.service: Deactivated successfully. Feb 9 19:16:48.507716 systemd[1]: Stopped network-cleanup.service. Feb 9 19:16:48.510000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.511739 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Feb 9 19:16:48.511849 systemd[1]: Closed systemd-udevd-control.socket. Feb 9 19:16:48.518468 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Feb 9 19:16:48.518560 systemd[1]: Closed systemd-udevd-kernel.socket. Feb 9 19:16:48.524961 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Feb 9 19:16:48.525058 systemd[1]: Stopped dracut-pre-udev.service. Feb 9 19:16:48.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.531340 systemd[1]: dracut-cmdline.service: Deactivated successfully. Feb 9 19:16:48.531448 systemd[1]: Stopped dracut-cmdline.service. Feb 9 19:16:48.536000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.537438 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Feb 9 19:16:48.537530 systemd[1]: Stopped dracut-cmdline-ask.service. Feb 9 19:16:48.542000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.545257 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Feb 9 19:16:48.564000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.564000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.564000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.574000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.574000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:48.562805 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Feb 9 19:16:48.562931 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Feb 9 19:16:48.565463 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Feb 9 19:16:48.565546 systemd[1]: Stopped kmod-static-nodes.service. Feb 9 19:16:48.567624 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Feb 9 19:16:48.567702 systemd[1]: Stopped systemd-vconsole-setup.service. Feb 9 19:16:48.571523 systemd[1]: mnt-oem113729454.mount: Deactivated successfully. Feb 9 19:16:48.571670 systemd[1]: sysroot-boot.mount: Deactivated successfully. Feb 9 19:16:48.571786 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Feb 9 19:16:48.571894 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Feb 9 19:16:48.573196 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Feb 9 19:16:48.639981 systemd-journald[308]: Received SIGTERM from PID 1 (n/a). Feb 9 19:16:48.573424 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Feb 9 19:16:48.578202 systemd[1]: Reached target initrd-switch-root.target. Feb 9 19:16:48.581785 systemd[1]: Starting initrd-switch-root.service... Feb 9 19:16:48.598568 systemd[1]: Switching root. Feb 9 19:16:48.658995 systemd-journald[308]: Journal stopped Feb 9 19:16:54.098042 kernel: SELinux: Class mctp_socket not defined in policy. Feb 9 19:16:54.098147 kernel: SELinux: Class anon_inode not defined in policy. Feb 9 19:16:54.098180 kernel: SELinux: the above unknown classes and permissions will be allowed Feb 9 19:16:54.098211 kernel: SELinux: policy capability network_peer_controls=1 Feb 9 19:16:54.098242 kernel: SELinux: policy capability open_perms=1 Feb 9 19:16:54.098276 kernel: SELinux: policy capability extended_socket_class=1 Feb 9 19:16:54.107420 kernel: SELinux: policy capability always_check_network=0 Feb 9 19:16:54.107459 kernel: SELinux: policy capability cgroup_seclabel=1 Feb 9 19:16:54.107507 kernel: SELinux: policy capability nnp_nosuid_transition=1 Feb 9 19:16:54.107537 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Feb 9 19:16:54.107567 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Feb 9 19:16:54.107601 systemd[1]: Successfully loaded SELinux policy in 117.552ms. Feb 9 19:16:54.107656 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 19.603ms. Feb 9 19:16:54.107690 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 9 19:16:54.107723 systemd[1]: Detected virtualization amazon. Feb 9 19:16:54.107754 systemd[1]: Detected architecture arm64. Feb 9 19:16:54.107787 systemd[1]: Detected first boot. Feb 9 19:16:54.107822 systemd[1]: Initializing machine ID from VM UUID. Feb 9 19:16:54.107862 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Feb 9 19:16:54.107895 systemd[1]: Populated /etc with preset unit settings. Feb 9 19:16:54.107925 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 19:16:54.107960 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 19:16:54.107996 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 19:16:54.108035 kernel: kauditd_printk_skb: 49 callbacks suppressed Feb 9 19:16:54.108065 kernel: audit: type=1334 audit(1707506213.603:89): prog-id=12 op=LOAD Feb 9 19:16:54.108093 kernel: audit: type=1334 audit(1707506213.605:90): prog-id=3 op=UNLOAD Feb 9 19:16:54.108123 kernel: audit: type=1334 audit(1707506213.608:91): prog-id=13 op=LOAD Feb 9 19:16:54.108157 kernel: audit: type=1334 audit(1707506213.608:92): prog-id=14 op=LOAD Feb 9 19:16:54.108189 kernel: audit: type=1334 audit(1707506213.608:93): prog-id=4 op=UNLOAD Feb 9 19:16:54.108221 systemd[1]: initrd-switch-root.service: Deactivated successfully. Feb 9 19:16:54.108252 kernel: audit: type=1334 audit(1707506213.608:94): prog-id=5 op=UNLOAD Feb 9 19:16:54.108280 systemd[1]: Stopped initrd-switch-root.service. Feb 9 19:16:54.108375 kernel: audit: type=1334 audit(1707506213.610:95): prog-id=15 op=LOAD Feb 9 19:16:54.108407 kernel: audit: type=1334 audit(1707506213.610:96): prog-id=12 op=UNLOAD Feb 9 19:16:54.108435 kernel: audit: type=1334 audit(1707506213.613:97): prog-id=16 op=LOAD Feb 9 19:16:54.108466 kernel: audit: type=1334 audit(1707506213.615:98): prog-id=17 op=LOAD Feb 9 19:16:54.108498 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Feb 9 19:16:54.108532 systemd[1]: Created slice system-addon\x2dconfig.slice. Feb 9 19:16:54.108565 systemd[1]: Created slice system-addon\x2drun.slice. Feb 9 19:16:54.108597 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Feb 9 19:16:54.108627 systemd[1]: Created slice system-getty.slice. Feb 9 19:16:54.108663 systemd[1]: Created slice system-modprobe.slice. Feb 9 19:16:54.108694 systemd[1]: Created slice system-serial\x2dgetty.slice. Feb 9 19:16:54.108725 systemd[1]: Created slice system-system\x2dcloudinit.slice. Feb 9 19:16:54.108759 systemd[1]: Created slice system-systemd\x2dfsck.slice. Feb 9 19:16:54.108791 systemd[1]: Created slice user.slice. Feb 9 19:16:54.108822 systemd[1]: Started systemd-ask-password-console.path. Feb 9 19:16:54.108852 systemd[1]: Started systemd-ask-password-wall.path. Feb 9 19:16:54.108893 systemd[1]: Set up automount boot.automount. Feb 9 19:16:54.108929 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Feb 9 19:16:54.108959 systemd[1]: Stopped target initrd-switch-root.target. Feb 9 19:16:54.108991 systemd[1]: Stopped target initrd-fs.target. Feb 9 19:16:54.109020 systemd[1]: Stopped target initrd-root-fs.target. Feb 9 19:16:54.109049 systemd[1]: Reached target integritysetup.target. Feb 9 19:16:54.109080 systemd[1]: Reached target remote-cryptsetup.target. Feb 9 19:16:54.109110 systemd[1]: Reached target remote-fs.target. Feb 9 19:16:54.109141 systemd[1]: Reached target slices.target. Feb 9 19:16:54.109173 systemd[1]: Reached target swap.target. Feb 9 19:16:54.109207 systemd[1]: Reached target torcx.target. Feb 9 19:16:54.109238 systemd[1]: Reached target veritysetup.target. Feb 9 19:16:54.109270 systemd[1]: Listening on systemd-coredump.socket. Feb 9 19:16:54.109327 systemd[1]: Listening on systemd-initctl.socket. Feb 9 19:16:54.109361 systemd[1]: Listening on systemd-networkd.socket. Feb 9 19:16:54.109393 systemd[1]: Listening on systemd-udevd-control.socket. Feb 9 19:16:54.109425 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 9 19:16:54.109454 systemd[1]: Listening on systemd-userdbd.socket. Feb 9 19:16:54.109485 systemd[1]: Mounting dev-hugepages.mount... Feb 9 19:16:54.109521 systemd[1]: Mounting dev-mqueue.mount... Feb 9 19:16:54.109551 systemd[1]: Mounting media.mount... Feb 9 19:16:54.109581 systemd[1]: Mounting sys-kernel-debug.mount... Feb 9 19:16:54.109610 systemd[1]: Mounting sys-kernel-tracing.mount... Feb 9 19:16:54.109640 systemd[1]: Mounting tmp.mount... Feb 9 19:16:54.109671 systemd[1]: Starting flatcar-tmpfiles.service... Feb 9 19:16:54.109703 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Feb 9 19:16:54.109735 systemd[1]: Starting kmod-static-nodes.service... Feb 9 19:16:54.109775 systemd[1]: Starting modprobe@configfs.service... Feb 9 19:16:54.109806 systemd[1]: Starting modprobe@dm_mod.service... Feb 9 19:16:54.109842 systemd[1]: Starting modprobe@drm.service... Feb 9 19:16:54.109871 systemd[1]: Starting modprobe@efi_pstore.service... Feb 9 19:16:54.109900 systemd[1]: Starting modprobe@fuse.service... Feb 9 19:16:54.109929 systemd[1]: Starting modprobe@loop.service... Feb 9 19:16:54.109962 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Feb 9 19:16:54.109992 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Feb 9 19:16:54.110023 systemd[1]: Stopped systemd-fsck-root.service. Feb 9 19:16:54.110057 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Feb 9 19:16:54.110091 systemd[1]: Stopped systemd-fsck-usr.service. Feb 9 19:16:54.110125 systemd[1]: Stopped systemd-journald.service. Feb 9 19:16:54.110163 systemd[1]: Starting systemd-journald.service... Feb 9 19:16:54.110192 systemd[1]: Starting systemd-modules-load.service... Feb 9 19:16:54.110223 systemd[1]: Starting systemd-network-generator.service... Feb 9 19:16:54.110253 systemd[1]: Starting systemd-remount-fs.service... Feb 9 19:16:54.110295 systemd[1]: Starting systemd-udev-trigger.service... Feb 9 19:16:54.110334 systemd[1]: verity-setup.service: Deactivated successfully. Feb 9 19:16:54.110364 systemd[1]: Stopped verity-setup.service. Feb 9 19:16:54.110393 systemd[1]: Mounted dev-hugepages.mount. Feb 9 19:16:54.110427 systemd[1]: Mounted dev-mqueue.mount. Feb 9 19:16:54.110456 systemd[1]: Mounted media.mount. Feb 9 19:16:54.110485 systemd[1]: Mounted sys-kernel-debug.mount. Feb 9 19:16:54.110516 systemd[1]: Mounted sys-kernel-tracing.mount. Feb 9 19:16:54.110556 kernel: fuse: init (API version 7.34) Feb 9 19:16:54.110590 systemd[1]: Mounted tmp.mount. Feb 9 19:16:54.110639 systemd[1]: Finished kmod-static-nodes.service. Feb 9 19:16:54.110671 systemd[1]: modprobe@configfs.service: Deactivated successfully. Feb 9 19:16:54.110701 systemd[1]: Finished modprobe@configfs.service. Feb 9 19:16:54.110730 kernel: loop: module loaded Feb 9 19:16:54.110759 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Feb 9 19:16:54.110789 systemd[1]: Finished modprobe@dm_mod.service. Feb 9 19:16:54.110820 systemd[1]: modprobe@drm.service: Deactivated successfully. Feb 9 19:16:54.110850 systemd[1]: Finished modprobe@drm.service. Feb 9 19:16:54.110886 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Feb 9 19:16:54.110916 systemd[1]: Finished modprobe@efi_pstore.service. Feb 9 19:16:54.110947 systemd[1]: modprobe@fuse.service: Deactivated successfully. Feb 9 19:16:54.110976 systemd[1]: Finished modprobe@fuse.service. Feb 9 19:16:54.111009 systemd[1]: modprobe@loop.service: Deactivated successfully. Feb 9 19:16:54.111038 systemd[1]: Finished modprobe@loop.service. Feb 9 19:16:54.111067 systemd[1]: Finished systemd-modules-load.service. Feb 9 19:16:54.111098 systemd[1]: Finished systemd-network-generator.service. Feb 9 19:16:54.119384 systemd[1]: Finished systemd-remount-fs.service. Feb 9 19:16:54.119452 systemd[1]: Reached target network-pre.target. Feb 9 19:16:54.119493 systemd[1]: Mounting sys-fs-fuse-connections.mount... Feb 9 19:16:54.119526 systemd[1]: Mounting sys-kernel-config.mount... Feb 9 19:16:54.119557 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Feb 9 19:16:54.119590 systemd[1]: Starting systemd-hwdb-update.service... Feb 9 19:16:54.119621 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Feb 9 19:16:54.119655 systemd-journald[1412]: Journal started Feb 9 19:16:54.119754 systemd-journald[1412]: Runtime Journal (/run/log/journal/ec249113ba0fc270e98124898d9e57b7) is 8.0M, max 75.4M, 67.4M free. Feb 9 19:16:49.372000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Feb 9 19:16:49.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 9 19:16:49.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 9 19:16:49.570000 audit: BPF prog-id=10 op=LOAD Feb 9 19:16:49.570000 audit: BPF prog-id=10 op=UNLOAD Feb 9 19:16:49.570000 audit: BPF prog-id=11 op=LOAD Feb 9 19:16:49.570000 audit: BPF prog-id=11 op=UNLOAD Feb 9 19:16:49.741000 audit[1333]: AVC avc: denied { associate } for pid=1333 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Feb 9 19:16:49.741000 audit[1333]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001458d4 a1=40000c6de0 a2=40000cd0c0 a3=32 items=0 ppid=1316 pid=1333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:16:49.741000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 9 19:16:49.745000 audit[1333]: AVC avc: denied { associate } for pid=1333 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Feb 9 19:16:49.745000 audit[1333]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001459b9 a2=1ed a3=0 items=2 ppid=1316 pid=1333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:16:49.745000 audit: CWD cwd="/" Feb 9 19:16:49.745000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 19:16:49.745000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 19:16:49.745000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 9 19:16:53.603000 audit: BPF prog-id=12 op=LOAD Feb 9 19:16:53.605000 audit: BPF prog-id=3 op=UNLOAD Feb 9 19:16:53.608000 audit: BPF prog-id=13 op=LOAD Feb 9 19:16:53.608000 audit: BPF prog-id=14 op=LOAD Feb 9 19:16:53.608000 audit: BPF prog-id=4 op=UNLOAD Feb 9 19:16:53.608000 audit: BPF prog-id=5 op=UNLOAD Feb 9 19:16:53.610000 audit: BPF prog-id=15 op=LOAD Feb 9 19:16:53.610000 audit: BPF prog-id=12 op=UNLOAD Feb 9 19:16:53.613000 audit: BPF prog-id=16 op=LOAD Feb 9 19:16:53.615000 audit: BPF prog-id=17 op=LOAD Feb 9 19:16:53.615000 audit: BPF prog-id=13 op=UNLOAD Feb 9 19:16:53.615000 audit: BPF prog-id=14 op=UNLOAD Feb 9 19:16:53.615000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:53.629000 audit: BPF prog-id=15 op=UNLOAD Feb 9 19:16:53.636000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:53.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:53.887000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:53.894000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:53.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:53.899000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:53.900000 audit: BPF prog-id=18 op=LOAD Feb 9 19:16:53.900000 audit: BPF prog-id=19 op=LOAD Feb 9 19:16:53.901000 audit: BPF prog-id=20 op=LOAD Feb 9 19:16:53.901000 audit: BPF prog-id=16 op=UNLOAD Feb 9 19:16:53.901000 audit: BPF prog-id=17 op=UNLOAD Feb 9 19:16:53.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:53.988000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:53.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:53.999000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.023000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.033000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.042000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.053000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.093000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Feb 9 19:16:54.157647 systemd[1]: Starting systemd-random-seed.service... Feb 9 19:16:54.157717 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Feb 9 19:16:54.158118 systemd[1]: Starting systemd-sysctl.service... Feb 9 19:16:54.158172 systemd[1]: Started systemd-journald.service. Feb 9 19:16:54.093000 audit[1412]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=ffffef8e7df0 a2=4000 a3=1 items=0 ppid=1 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:16:54.093000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Feb 9 19:16:54.148000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:49.719159 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:49Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 19:16:53.600664 systemd[1]: Queued start job for default target multi-user.target. Feb 9 19:16:49.739932 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:49Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 9 19:16:53.617657 systemd[1]: systemd-journald.service: Deactivated successfully. Feb 9 19:16:49.739985 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:49Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 9 19:16:54.149896 systemd[1]: Mounted sys-fs-fuse-connections.mount. Feb 9 19:16:49.740057 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:49Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Feb 9 19:16:49.740083 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:49Z" level=debug msg="skipped missing lower profile" missing profile=oem Feb 9 19:16:49.740156 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:49Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Feb 9 19:16:49.740188 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:49Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Feb 9 19:16:49.740666 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:49Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Feb 9 19:16:49.740756 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:49Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 9 19:16:49.740793 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:49Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 9 19:16:49.741749 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:49Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Feb 9 19:16:49.741833 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:49Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Feb 9 19:16:49.741878 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:49Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.2: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.2 Feb 9 19:16:54.163864 systemd[1]: Mounted sys-kernel-config.mount. Feb 9 19:16:54.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:49.741919 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:49Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Feb 9 19:16:54.169026 systemd[1]: Starting systemd-journal-flush.service... Feb 9 19:16:49.741966 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:49Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.2: no such file or directory" path=/var/lib/torcx/store/3510.3.2 Feb 9 19:16:54.176349 systemd[1]: Finished systemd-random-seed.service. Feb 9 19:16:49.742004 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:49Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Feb 9 19:16:54.179152 systemd[1]: Reached target first-boot-complete.target. Feb 9 19:16:52.732609 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:52Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 19:16:52.733140 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:52Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 19:16:52.733415 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:52Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 19:16:52.733861 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:52Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 19:16:52.733966 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:52Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Feb 9 19:16:52.734099 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2024-02-09T19:16:52Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Feb 9 19:16:54.195091 systemd[1]: Finished systemd-sysctl.service. Feb 9 19:16:54.196000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.208179 systemd[1]: Finished flatcar-tmpfiles.service. Feb 9 19:16:54.209000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.212763 systemd[1]: Starting systemd-sysusers.service... Feb 9 19:16:54.216074 systemd-journald[1412]: Time spent on flushing to /var/log/journal/ec249113ba0fc270e98124898d9e57b7 is 35.994ms for 1182 entries. Feb 9 19:16:54.216074 systemd-journald[1412]: System Journal (/var/log/journal/ec249113ba0fc270e98124898d9e57b7) is 8.0M, max 195.6M, 187.6M free. Feb 9 19:16:54.277058 systemd-journald[1412]: Received client request to flush runtime journal. Feb 9 19:16:54.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.279048 systemd[1]: Finished systemd-journal-flush.service. Feb 9 19:16:54.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.300505 systemd[1]: Finished systemd-udev-trigger.service. Feb 9 19:16:54.306941 systemd[1]: Starting systemd-udev-settle.service... Feb 9 19:16:54.321703 udevadm[1453]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Feb 9 19:16:54.387036 systemd[1]: Finished systemd-sysusers.service. Feb 9 19:16:54.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:54.391531 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 9 19:16:54.442139 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 9 19:16:54.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:55.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:55.070000 audit: BPF prog-id=21 op=LOAD Feb 9 19:16:55.070000 audit: BPF prog-id=22 op=LOAD Feb 9 19:16:55.070000 audit: BPF prog-id=7 op=UNLOAD Feb 9 19:16:55.070000 audit: BPF prog-id=8 op=UNLOAD Feb 9 19:16:55.068889 systemd[1]: Finished systemd-hwdb-update.service. Feb 9 19:16:55.073401 systemd[1]: Starting systemd-udevd.service... Feb 9 19:16:55.108889 systemd-udevd[1456]: Using default interface naming scheme 'v252'. Feb 9 19:16:55.159001 systemd[1]: Started systemd-udevd.service. Feb 9 19:16:55.165000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:55.189000 audit: BPF prog-id=23 op=LOAD Feb 9 19:16:55.191994 systemd[1]: Starting systemd-networkd.service... Feb 9 19:16:55.201000 audit: BPF prog-id=24 op=LOAD Feb 9 19:16:55.202000 audit: BPF prog-id=25 op=LOAD Feb 9 19:16:55.202000 audit: BPF prog-id=26 op=LOAD Feb 9 19:16:55.204690 systemd[1]: Starting systemd-userdbd.service... Feb 9 19:16:55.284046 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Feb 9 19:16:55.291751 (udev-worker)[1457]: Network interface NamePolicy= disabled on kernel command line. Feb 9 19:16:55.308261 systemd[1]: Started systemd-userdbd.service. Feb 9 19:16:55.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:55.449862 systemd-networkd[1477]: lo: Link UP Feb 9 19:16:55.449886 systemd-networkd[1477]: lo: Gained carrier Feb 9 19:16:55.450873 systemd-networkd[1477]: Enumeration completed Feb 9 19:16:55.451034 systemd[1]: Started systemd-networkd.service. Feb 9 19:16:55.453000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:55.457272 systemd[1]: Starting systemd-networkd-wait-online.service... Feb 9 19:16:55.462957 systemd-networkd[1477]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 9 19:16:55.468332 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 19:16:55.468455 systemd-networkd[1477]: eth0: Link UP Feb 9 19:16:55.468748 systemd-networkd[1477]: eth0: Gained carrier Feb 9 19:16:55.482621 systemd-networkd[1477]: eth0: DHCPv4 address 172.31.25.191/20, gateway 172.31.16.1 acquired from 172.31.16.1 Feb 9 19:16:55.559375 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1473) Feb 9 19:16:55.656539 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 9 19:16:55.665014 systemd[1]: Finished systemd-udev-settle.service. Feb 9 19:16:55.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:55.669759 systemd[1]: Starting lvm2-activation-early.service... Feb 9 19:16:55.713972 lvm[1575]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 9 19:16:55.750885 systemd[1]: Finished lvm2-activation-early.service. Feb 9 19:16:55.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:55.753839 systemd[1]: Reached target cryptsetup.target. Feb 9 19:16:55.758729 systemd[1]: Starting lvm2-activation.service... Feb 9 19:16:55.768467 lvm[1576]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 9 19:16:55.803903 systemd[1]: Finished lvm2-activation.service. Feb 9 19:16:55.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:55.806270 systemd[1]: Reached target local-fs-pre.target. Feb 9 19:16:55.808473 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Feb 9 19:16:55.808519 systemd[1]: Reached target local-fs.target. Feb 9 19:16:55.810525 systemd[1]: Reached target machines.target. Feb 9 19:16:55.814638 systemd[1]: Starting ldconfig.service... Feb 9 19:16:55.817441 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Feb 9 19:16:55.817571 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 9 19:16:55.821740 systemd[1]: Starting systemd-boot-update.service... Feb 9 19:16:55.826067 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Feb 9 19:16:55.831265 systemd[1]: Starting systemd-machine-id-commit.service... Feb 9 19:16:55.834200 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Feb 9 19:16:55.834375 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Feb 9 19:16:55.836808 systemd[1]: Starting systemd-tmpfiles-setup.service... Feb 9 19:16:55.851884 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1578 (bootctl) Feb 9 19:16:55.854201 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Feb 9 19:16:55.881621 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Feb 9 19:16:55.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:55.885636 systemd-tmpfiles[1581]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Feb 9 19:16:55.899109 systemd-tmpfiles[1581]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Feb 9 19:16:55.902203 systemd-tmpfiles[1581]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Feb 9 19:16:55.983459 systemd-fsck[1586]: fsck.fat 4.2 (2021-01-31) Feb 9 19:16:55.983459 systemd-fsck[1586]: /dev/nvme0n1p1: 236 files, 113719/258078 clusters Feb 9 19:16:55.986066 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Feb 9 19:16:55.987000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:55.993712 systemd[1]: Mounting boot.mount... Feb 9 19:16:56.013025 systemd[1]: Mounted boot.mount. Feb 9 19:16:56.036541 systemd[1]: Finished systemd-boot-update.service. Feb 9 19:16:56.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:56.239708 systemd[1]: Finished systemd-tmpfiles-setup.service. Feb 9 19:16:56.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:56.245252 systemd[1]: Starting audit-rules.service... Feb 9 19:16:56.250506 systemd[1]: Starting clean-ca-certificates.service... Feb 9 19:16:56.256465 systemd[1]: Starting systemd-journal-catalog-update.service... Feb 9 19:16:56.260000 audit: BPF prog-id=27 op=LOAD Feb 9 19:16:56.263879 systemd[1]: Starting systemd-resolved.service... Feb 9 19:16:56.267000 audit: BPF prog-id=28 op=LOAD Feb 9 19:16:56.270702 systemd[1]: Starting systemd-timesyncd.service... Feb 9 19:16:56.276557 systemd[1]: Starting systemd-update-utmp.service... Feb 9 19:16:56.287014 systemd[1]: Finished clean-ca-certificates.service. Feb 9 19:16:56.289000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:56.291373 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Feb 9 19:16:56.315000 audit[1605]: SYSTEM_BOOT pid=1605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Feb 9 19:16:56.323689 systemd[1]: Finished systemd-update-utmp.service. Feb 9 19:16:56.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:56.358096 systemd[1]: Finished systemd-journal-catalog-update.service. Feb 9 19:16:56.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:16:56.415000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Feb 9 19:16:56.415000 audit[1620]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe308d110 a2=420 a3=0 items=0 ppid=1600 pid=1620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:16:56.415000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Feb 9 19:16:56.416849 augenrules[1620]: No rules Feb 9 19:16:56.418537 systemd[1]: Finished audit-rules.service. Feb 9 19:16:56.437801 systemd[1]: Started systemd-timesyncd.service. Feb 9 19:16:56.441446 systemd[1]: Reached target time-set.target. Feb 9 19:16:56.463603 systemd-resolved[1603]: Positive Trust Anchors: Feb 9 19:16:56.463632 systemd-resolved[1603]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 9 19:16:56.463685 systemd-resolved[1603]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 9 19:16:56.499712 systemd-resolved[1603]: Defaulting to hostname 'linux'. Feb 9 19:16:56.505234 systemd[1]: Started systemd-resolved.service. Feb 9 19:16:56.507571 systemd[1]: Reached target network.target. Feb 9 19:16:56.509639 systemd[1]: Reached target nss-lookup.target. Feb 9 19:16:56.533759 systemd-timesyncd[1604]: Contacted time server 216.31.16.12:123 (0.flatcar.pool.ntp.org). Feb 9 19:16:56.534265 systemd-timesyncd[1604]: Initial clock synchronization to Fri 2024-02-09 19:16:56.218608 UTC. Feb 9 19:16:57.219139 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Feb 9 19:16:57.220200 systemd[1]: Finished systemd-machine-id-commit.service. Feb 9 19:16:57.310804 ldconfig[1577]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Feb 9 19:16:57.325112 systemd[1]: Finished ldconfig.service. Feb 9 19:16:57.329641 systemd[1]: Starting systemd-update-done.service... Feb 9 19:16:57.343920 systemd[1]: Finished systemd-update-done.service. Feb 9 19:16:57.346177 systemd[1]: Reached target sysinit.target. Feb 9 19:16:57.351610 systemd[1]: Started motdgen.path. Feb 9 19:16:57.353427 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Feb 9 19:16:57.356353 systemd[1]: Started logrotate.timer. Feb 9 19:16:57.358339 systemd[1]: Started mdadm.timer. Feb 9 19:16:57.359930 systemd[1]: Started systemd-tmpfiles-clean.timer. Feb 9 19:16:57.361958 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Feb 9 19:16:57.362014 systemd[1]: Reached target paths.target. Feb 9 19:16:57.363762 systemd[1]: Reached target timers.target. Feb 9 19:16:57.366023 systemd[1]: Listening on dbus.socket. Feb 9 19:16:57.369656 systemd[1]: Starting docker.socket... Feb 9 19:16:57.375952 systemd[1]: Listening on sshd.socket. Feb 9 19:16:57.378435 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 9 19:16:57.379434 systemd[1]: Listening on docker.socket. Feb 9 19:16:57.381619 systemd[1]: Reached target sockets.target. Feb 9 19:16:57.383784 systemd[1]: Reached target basic.target. Feb 9 19:16:57.385751 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 9 19:16:57.385917 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 9 19:16:57.398595 systemd[1]: Starting containerd.service... Feb 9 19:16:57.402966 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Feb 9 19:16:57.407924 systemd[1]: Starting dbus.service... Feb 9 19:16:57.414357 systemd[1]: Starting enable-oem-cloudinit.service... Feb 9 19:16:57.418607 systemd[1]: Starting extend-filesystems.service... Feb 9 19:16:57.420675 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Feb 9 19:16:57.444274 jq[1635]: false Feb 9 19:16:57.423755 systemd[1]: Starting motdgen.service... Feb 9 19:16:57.429638 systemd[1]: Starting prepare-cni-plugins.service... Feb 9 19:16:57.433963 systemd[1]: Starting prepare-critools.service... Feb 9 19:16:57.439926 systemd[1]: Starting prepare-helm.service... Feb 9 19:16:57.445362 systemd[1]: Starting ssh-key-proc-cmdline.service... Feb 9 19:16:57.450257 systemd[1]: Starting sshd-keygen.service... Feb 9 19:16:57.458761 systemd[1]: Starting systemd-logind.service... Feb 9 19:16:57.461008 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 9 19:16:57.461299 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Feb 9 19:16:57.462339 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Feb 9 19:16:57.464366 systemd[1]: Starting update-engine.service... Feb 9 19:16:57.471362 systemd[1]: Starting update-ssh-keys-after-ignition.service... Feb 9 19:16:57.480525 systemd-networkd[1477]: eth0: Gained IPv6LL Feb 9 19:16:57.487524 systemd[1]: Finished systemd-networkd-wait-online.service. Feb 9 19:16:57.490666 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Feb 9 19:16:57.491008 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Feb 9 19:16:57.491531 jq[1649]: true Feb 9 19:16:57.494264 systemd[1]: Reached target network-online.target. Feb 9 19:16:57.500257 systemd[1]: Started amazon-ssm-agent.service. Feb 9 19:16:57.504883 systemd[1]: Started nvidia.service. Feb 9 19:16:57.553394 tar[1653]: ./ Feb 9 19:16:57.553394 tar[1653]: ./loopback Feb 9 19:16:57.560427 jq[1654]: true Feb 9 19:16:57.585730 tar[1658]: linux-arm64/helm Feb 9 19:16:57.615894 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Feb 9 19:16:57.616253 systemd[1]: Finished ssh-key-proc-cmdline.service. Feb 9 19:16:57.620738 extend-filesystems[1636]: Found nvme0n1 Feb 9 19:16:57.625737 tar[1660]: crictl Feb 9 19:16:57.628552 extend-filesystems[1636]: Found nvme0n1p1 Feb 9 19:16:57.634946 extend-filesystems[1636]: Found nvme0n1p2 Feb 9 19:16:57.652527 extend-filesystems[1636]: Found nvme0n1p3 Feb 9 19:16:57.660313 extend-filesystems[1636]: Found usr Feb 9 19:16:57.679150 extend-filesystems[1636]: Found nvme0n1p4 Feb 9 19:16:57.682849 extend-filesystems[1636]: Found nvme0n1p6 Feb 9 19:16:57.687268 extend-filesystems[1636]: Found nvme0n1p7 Feb 9 19:16:57.692963 extend-filesystems[1636]: Found nvme0n1p9 Feb 9 19:16:57.699459 extend-filesystems[1636]: Checking size of /dev/nvme0n1p9 Feb 9 19:16:57.719725 systemd[1]: motdgen.service: Deactivated successfully. Feb 9 19:16:57.720055 systemd[1]: Finished motdgen.service. Feb 9 19:16:57.727041 dbus-daemon[1634]: [system] SELinux support is enabled Feb 9 19:16:57.727395 systemd[1]: Started dbus.service. Feb 9 19:16:57.733695 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Feb 9 19:16:57.733753 systemd[1]: Reached target system-config.target. Feb 9 19:16:57.745553 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Feb 9 19:16:57.745605 systemd[1]: Reached target user-config.target. Feb 9 19:16:57.773842 extend-filesystems[1636]: Resized partition /dev/nvme0n1p9 Feb 9 19:16:57.788036 extend-filesystems[1695]: resize2fs 1.46.5 (30-Dec-2021) Feb 9 19:16:57.801014 dbus-daemon[1634]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.2' (uid=244 pid=1477 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Feb 9 19:16:57.806565 systemd[1]: Starting systemd-hostnamed.service... Feb 9 19:16:57.822313 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Feb 9 19:16:57.918331 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Feb 9 19:16:57.942430 update_engine[1648]: I0209 19:16:57.941962 1648 main.cc:92] Flatcar Update Engine starting Feb 9 19:16:57.946341 extend-filesystems[1695]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Feb 9 19:16:57.946341 extend-filesystems[1695]: old_desc_blocks = 1, new_desc_blocks = 1 Feb 9 19:16:57.946341 extend-filesystems[1695]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Feb 9 19:16:57.946903 systemd[1]: Started update-engine.service. Feb 9 19:16:57.978319 bash[1701]: Updated "/home/core/.ssh/authorized_keys" Feb 9 19:16:57.978494 extend-filesystems[1636]: Resized filesystem in /dev/nvme0n1p9 Feb 9 19:16:57.984705 update_engine[1648]: I0209 19:16:57.952121 1648 update_check_scheduler.cc:74] Next update check in 9m5s Feb 9 19:16:57.958500 systemd[1]: Finished update-ssh-keys-after-ignition.service. Feb 9 19:16:57.964949 systemd[1]: extend-filesystems.service: Deactivated successfully. Feb 9 19:16:57.965240 systemd[1]: Finished extend-filesystems.service. Feb 9 19:16:57.983666 systemd[1]: Started locksmithd.service. Feb 9 19:16:58.033142 amazon-ssm-agent[1655]: 2024/02/09 19:16:58 Failed to load instance info from vault. RegistrationKey does not exist. Feb 9 19:16:58.057875 amazon-ssm-agent[1655]: Initializing new seelog logger Feb 9 19:16:58.058272 amazon-ssm-agent[1655]: New Seelog Logger Creation Complete Feb 9 19:16:58.061581 amazon-ssm-agent[1655]: 2024/02/09 19:16:58 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Feb 9 19:16:58.061773 amazon-ssm-agent[1655]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Feb 9 19:16:58.062170 amazon-ssm-agent[1655]: 2024/02/09 19:16:58 processing appconfig overrides Feb 9 19:16:58.063343 env[1657]: time="2024-02-09T19:16:58.063196984Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Feb 9 19:16:58.110364 tar[1653]: ./bandwidth Feb 9 19:16:58.173498 systemd-logind[1646]: Watching system buttons on /dev/input/event0 (Power Button) Feb 9 19:16:58.178563 systemd-logind[1646]: New seat seat0. Feb 9 19:16:58.186381 systemd[1]: Started systemd-logind.service. Feb 9 19:16:58.219913 systemd[1]: nvidia.service: Deactivated successfully. Feb 9 19:16:58.296979 env[1657]: time="2024-02-09T19:16:58.296822818Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Feb 9 19:16:58.298050 env[1657]: time="2024-02-09T19:16:58.297799171Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Feb 9 19:16:58.308408 env[1657]: time="2024-02-09T19:16:58.307686104Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.148-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Feb 9 19:16:58.308598 env[1657]: time="2024-02-09T19:16:58.308563876Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Feb 9 19:16:58.311080 env[1657]: time="2024-02-09T19:16:58.311024886Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 9 19:16:58.311511 env[1657]: time="2024-02-09T19:16:58.311475510Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Feb 9 19:16:58.312061 env[1657]: time="2024-02-09T19:16:58.312017948Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Feb 9 19:16:58.312232 env[1657]: time="2024-02-09T19:16:58.312200753Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Feb 9 19:16:58.314948 env[1657]: time="2024-02-09T19:16:58.314893221Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Feb 9 19:16:58.321477 dbus-daemon[1634]: [system] Successfully activated service 'org.freedesktop.hostname1' Feb 9 19:16:58.321724 systemd[1]: Started systemd-hostnamed.service. Feb 9 19:16:58.326223 dbus-daemon[1634]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1699 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Feb 9 19:16:58.331017 systemd[1]: Starting polkit.service... Feb 9 19:16:58.336044 env[1657]: time="2024-02-09T19:16:58.335995020Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Feb 9 19:16:58.336821 env[1657]: time="2024-02-09T19:16:58.336763992Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 9 19:16:58.336972 env[1657]: time="2024-02-09T19:16:58.336942801Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Feb 9 19:16:58.337336 env[1657]: time="2024-02-09T19:16:58.337258229Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Feb 9 19:16:58.337512 env[1657]: time="2024-02-09T19:16:58.337482075Z" level=info msg="metadata content store policy set" policy=shared Feb 9 19:16:58.344453 env[1657]: time="2024-02-09T19:16:58.344373915Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Feb 9 19:16:58.344709 env[1657]: time="2024-02-09T19:16:58.344667073Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Feb 9 19:16:58.344840 env[1657]: time="2024-02-09T19:16:58.344812430Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Feb 9 19:16:58.345133 env[1657]: time="2024-02-09T19:16:58.345079750Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Feb 9 19:16:58.345328 env[1657]: time="2024-02-09T19:16:58.345266519Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Feb 9 19:16:58.345506 env[1657]: time="2024-02-09T19:16:58.345476750Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Feb 9 19:16:58.345642 env[1657]: time="2024-02-09T19:16:58.345614541Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Feb 9 19:16:58.346342 env[1657]: time="2024-02-09T19:16:58.346272581Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Feb 9 19:16:58.349414 env[1657]: time="2024-02-09T19:16:58.349358793Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Feb 9 19:16:58.349918 env[1657]: time="2024-02-09T19:16:58.349861175Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Feb 9 19:16:58.350078 env[1657]: time="2024-02-09T19:16:58.350045869Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Feb 9 19:16:58.350574 env[1657]: time="2024-02-09T19:16:58.350534081Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Feb 9 19:16:58.351018 env[1657]: time="2024-02-09T19:16:58.350982086Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Feb 9 19:16:58.353618 env[1657]: time="2024-02-09T19:16:58.353569496Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Feb 9 19:16:58.359952 env[1657]: time="2024-02-09T19:16:58.359898018Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Feb 9 19:16:58.360160 env[1657]: time="2024-02-09T19:16:58.360130543Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Feb 9 19:16:58.360342 env[1657]: time="2024-02-09T19:16:58.360310521Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Feb 9 19:16:58.360541 env[1657]: time="2024-02-09T19:16:58.360511878Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Feb 9 19:16:58.360678 env[1657]: time="2024-02-09T19:16:58.360649240Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Feb 9 19:16:58.360796 env[1657]: time="2024-02-09T19:16:58.360767912Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Feb 9 19:16:58.360931 env[1657]: time="2024-02-09T19:16:58.360901844Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Feb 9 19:16:58.361055 env[1657]: time="2024-02-09T19:16:58.361028280Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Feb 9 19:16:58.361189 env[1657]: time="2024-02-09T19:16:58.361160822Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Feb 9 19:16:58.361333 env[1657]: time="2024-02-09T19:16:58.361304892Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Feb 9 19:16:58.361450 env[1657]: time="2024-02-09T19:16:58.361423124Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Feb 9 19:16:58.361595 env[1657]: time="2024-02-09T19:16:58.361567566Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Feb 9 19:16:58.361970 env[1657]: time="2024-02-09T19:16:58.361938217Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Feb 9 19:16:58.362101 env[1657]: time="2024-02-09T19:16:58.362070597Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Feb 9 19:16:58.362230 env[1657]: time="2024-02-09T19:16:58.362201887Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Feb 9 19:16:58.362400 env[1657]: time="2024-02-09T19:16:58.362372272Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Feb 9 19:16:58.362535 env[1657]: time="2024-02-09T19:16:58.362501314Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Feb 9 19:16:58.364657 env[1657]: time="2024-02-09T19:16:58.364621717Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Feb 9 19:16:58.364821 env[1657]: time="2024-02-09T19:16:58.364791187Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Feb 9 19:16:58.366440 env[1657]: time="2024-02-09T19:16:58.366390923Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Feb 9 19:16:58.366988 env[1657]: time="2024-02-09T19:16:58.366895101Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Feb 9 19:16:58.367919 env[1657]: time="2024-02-09T19:16:58.367437632Z" level=info msg="Connect containerd service" Feb 9 19:16:58.367919 env[1657]: time="2024-02-09T19:16:58.367510142Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Feb 9 19:16:58.370352 env[1657]: time="2024-02-09T19:16:58.370281587Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 9 19:16:58.372527 polkitd[1742]: Started polkitd version 121 Feb 9 19:16:58.375011 env[1657]: time="2024-02-09T19:16:58.374963457Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Feb 9 19:16:58.376982 env[1657]: time="2024-02-09T19:16:58.376939245Z" level=info msg=serving... address=/run/containerd/containerd.sock Feb 9 19:16:58.377488 env[1657]: time="2024-02-09T19:16:58.377457269Z" level=info msg="containerd successfully booted in 0.331472s" Feb 9 19:16:58.377586 systemd[1]: Started containerd.service. Feb 9 19:16:58.392865 env[1657]: time="2024-02-09T19:16:58.392786436Z" level=info msg="Start subscribing containerd event" Feb 9 19:16:58.393239 env[1657]: time="2024-02-09T19:16:58.393208625Z" level=info msg="Start recovering state" Feb 9 19:16:58.393810 env[1657]: time="2024-02-09T19:16:58.393778257Z" level=info msg="Start event monitor" Feb 9 19:16:58.397583 env[1657]: time="2024-02-09T19:16:58.397529149Z" level=info msg="Start snapshots syncer" Feb 9 19:16:58.398274 env[1657]: time="2024-02-09T19:16:58.398226920Z" level=info msg="Start cni network conf syncer for default" Feb 9 19:16:58.400709 env[1657]: time="2024-02-09T19:16:58.400660144Z" level=info msg="Start streaming server" Feb 9 19:16:58.422380 polkitd[1742]: Loading rules from directory /etc/polkit-1/rules.d Feb 9 19:16:58.422492 polkitd[1742]: Loading rules from directory /usr/share/polkit-1/rules.d Feb 9 19:16:58.432432 polkitd[1742]: Finished loading, compiling and executing 2 rules Feb 9 19:16:58.433214 dbus-daemon[1634]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Feb 9 19:16:58.433754 systemd[1]: Started polkit.service. Feb 9 19:16:58.434539 polkitd[1742]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Feb 9 19:16:58.446719 tar[1653]: ./ptp Feb 9 19:16:58.477943 systemd-resolved[1603]: System hostname changed to 'ip-172-31-25-191'. Feb 9 19:16:58.477948 systemd-hostnamed[1699]: Hostname set to (transient) Feb 9 19:16:58.630013 coreos-metadata[1633]: Feb 09 19:16:58.629 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Feb 9 19:16:58.631585 coreos-metadata[1633]: Feb 09 19:16:58.631 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Feb 9 19:16:58.632534 coreos-metadata[1633]: Feb 09 19:16:58.632 INFO Fetch successful Feb 9 19:16:58.632534 coreos-metadata[1633]: Feb 09 19:16:58.632 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Feb 9 19:16:58.633487 coreos-metadata[1633]: Feb 09 19:16:58.633 INFO Fetch successful Feb 9 19:16:58.637202 unknown[1633]: wrote ssh authorized keys file for user: core Feb 9 19:16:58.666984 tar[1653]: ./vlan Feb 9 19:16:58.703362 update-ssh-keys[1803]: Updated "/home/core/.ssh/authorized_keys" Feb 9 19:16:58.704331 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Feb 9 19:16:58.937224 tar[1653]: ./host-device Feb 9 19:16:59.014819 amazon-ssm-agent[1655]: 2024-02-09 19:16:58 INFO Create new startup processor Feb 9 19:16:59.036892 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [LongRunningPluginsManager] registered plugins: {} Feb 9 19:16:59.037553 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO Initializing bookkeeping folders Feb 9 19:16:59.037672 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO removing the completed state files Feb 9 19:16:59.037821 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO Initializing bookkeeping folders for long running plugins Feb 9 19:16:59.037951 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Feb 9 19:16:59.038101 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO Initializing healthcheck folders for long running plugins Feb 9 19:16:59.038230 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO Initializing locations for inventory plugin Feb 9 19:16:59.038409 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO Initializing default location for custom inventory Feb 9 19:16:59.038529 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO Initializing default location for file inventory Feb 9 19:16:59.038710 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO Initializing default location for role inventory Feb 9 19:16:59.038842 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO Init the cloudwatchlogs publisher Feb 9 19:16:59.038979 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [instanceID=i-0e192687a3a2c426a] Successfully loaded platform independent plugin aws:runPowerShellScript Feb 9 19:16:59.039123 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [instanceID=i-0e192687a3a2c426a] Successfully loaded platform independent plugin aws:refreshAssociation Feb 9 19:16:59.039261 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [instanceID=i-0e192687a3a2c426a] Successfully loaded platform independent plugin aws:downloadContent Feb 9 19:16:59.039418 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [instanceID=i-0e192687a3a2c426a] Successfully loaded platform independent plugin aws:runDocument Feb 9 19:16:59.039554 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [instanceID=i-0e192687a3a2c426a] Successfully loaded platform independent plugin aws:softwareInventory Feb 9 19:16:59.039718 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [instanceID=i-0e192687a3a2c426a] Successfully loaded platform independent plugin aws:updateSsmAgent Feb 9 19:16:59.039854 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [instanceID=i-0e192687a3a2c426a] Successfully loaded platform independent plugin aws:configureDocker Feb 9 19:16:59.039995 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [instanceID=i-0e192687a3a2c426a] Successfully loaded platform independent plugin aws:runDockerAction Feb 9 19:16:59.040126 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [instanceID=i-0e192687a3a2c426a] Successfully loaded platform independent plugin aws:configurePackage Feb 9 19:16:59.040265 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [instanceID=i-0e192687a3a2c426a] Successfully loaded platform dependent plugin aws:runShellScript Feb 9 19:16:59.040425 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Feb 9 19:16:59.040565 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO OS: linux, Arch: arm64 Feb 9 19:16:59.042833 amazon-ssm-agent[1655]: datastore file /var/lib/amazon/ssm/i-0e192687a3a2c426a/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Feb 9 19:16:59.132824 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessagingDeliveryService] Starting document processing engine... Feb 9 19:16:59.153889 tar[1653]: ./tuning Feb 9 19:16:59.227774 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessagingDeliveryService] [EngineProcessor] Starting Feb 9 19:16:59.273904 tar[1653]: ./vrf Feb 9 19:16:59.322007 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Feb 9 19:16:59.398010 tar[1653]: ./sbr Feb 9 19:16:59.416511 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessagingDeliveryService] Starting message polling Feb 9 19:16:59.497319 tar[1653]: ./tap Feb 9 19:16:59.511277 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessagingDeliveryService] Starting send replies to MDS Feb 9 19:16:59.606180 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [instanceID=i-0e192687a3a2c426a] Starting association polling Feb 9 19:16:59.618213 tar[1653]: ./dhcp Feb 9 19:16:59.701256 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Feb 9 19:16:59.759703 tar[1658]: linux-arm64/LICENSE Feb 9 19:16:59.760207 tar[1658]: linux-arm64/README.md Feb 9 19:16:59.769236 systemd[1]: Finished prepare-helm.service. Feb 9 19:16:59.796654 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessagingDeliveryService] [Association] Launching response handler Feb 9 19:16:59.879440 tar[1653]: ./static Feb 9 19:16:59.892123 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Feb 9 19:16:59.955263 tar[1653]: ./firewall Feb 9 19:16:59.965395 systemd[1]: Finished prepare-critools.service. Feb 9 19:16:59.987796 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessageGatewayService] Starting session document processing engine... Feb 9 19:17:00.026069 tar[1653]: ./macvlan Feb 9 19:17:00.083684 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessageGatewayService] [EngineProcessor] Starting Feb 9 19:17:00.088104 tar[1653]: ./dummy Feb 9 19:17:00.149641 tar[1653]: ./bridge Feb 9 19:17:00.179757 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Feb 9 19:17:00.215996 tar[1653]: ./ipvlan Feb 9 19:17:00.276040 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-0e192687a3a2c426a, requestId: 44afb06f-ae6f-444d-b365-5c7fc7f28703 Feb 9 19:17:00.276414 tar[1653]: ./portmap Feb 9 19:17:00.334943 tar[1653]: ./host-local Feb 9 19:17:00.372519 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [OfflineService] Starting document processing engine... Feb 9 19:17:00.409355 systemd[1]: Finished prepare-cni-plugins.service. Feb 9 19:17:00.469158 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [OfflineService] [EngineProcessor] Starting Feb 9 19:17:00.500333 locksmithd[1712]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Feb 9 19:17:00.566145 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [OfflineService] [EngineProcessor] Initial processing Feb 9 19:17:00.663089 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [OfflineService] Starting message polling Feb 9 19:17:00.760278 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [OfflineService] Starting send replies to MDS Feb 9 19:17:00.857767 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [LongRunningPluginsManager] starting long running plugin manager Feb 9 19:17:00.955364 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [HealthCheck] HealthCheck reporting agent health. Feb 9 19:17:01.053162 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessageGatewayService] listening reply. Feb 9 19:17:01.151230 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Feb 9 19:17:01.249382 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Feb 9 19:17:01.347802 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [StartupProcessor] Executing startup processor tasks Feb 9 19:17:01.446465 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Feb 9 19:17:01.545179 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Feb 9 19:17:01.644127 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.2 Feb 9 19:17:01.743356 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Feb 9 19:17:01.842690 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Feb 9 19:17:01.942271 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0e192687a3a2c426a?role=subscribe&stream=input Feb 9 19:17:02.042061 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0e192687a3a2c426a?role=subscribe&stream=input Feb 9 19:17:02.142024 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessageGatewayService] Starting receiving message from control channel Feb 9 19:17:02.242187 amazon-ssm-agent[1655]: 2024-02-09 19:16:59 INFO [MessageGatewayService] [EngineProcessor] Initial processing Feb 9 19:17:02.356179 sshd_keygen[1661]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Feb 9 19:17:02.391139 systemd[1]: Finished sshd-keygen.service. Feb 9 19:17:02.396221 systemd[1]: Starting issuegen.service... Feb 9 19:17:02.406491 systemd[1]: issuegen.service: Deactivated successfully. Feb 9 19:17:02.406834 systemd[1]: Finished issuegen.service. Feb 9 19:17:02.411954 systemd[1]: Starting systemd-user-sessions.service... Feb 9 19:17:02.425992 systemd[1]: Finished systemd-user-sessions.service. Feb 9 19:17:02.431196 systemd[1]: Started getty@tty1.service. Feb 9 19:17:02.436229 systemd[1]: Started serial-getty@ttyS0.service. Feb 9 19:17:02.438993 systemd[1]: Reached target getty.target. Feb 9 19:17:02.441340 systemd[1]: Reached target multi-user.target. Feb 9 19:17:02.446082 systemd[1]: Starting systemd-update-utmp-runlevel.service... Feb 9 19:17:02.462335 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Feb 9 19:17:02.462681 systemd[1]: Finished systemd-update-utmp-runlevel.service. Feb 9 19:17:02.465803 systemd[1]: Startup finished in 1.134s (kernel) + 11.631s (initrd) + 13.242s (userspace) = 26.007s. Feb 9 19:17:06.168396 systemd[1]: Created slice system-sshd.slice. Feb 9 19:17:06.170684 systemd[1]: Started sshd@0-172.31.25.191:22-147.75.109.163:47928.service. Feb 9 19:17:06.373866 sshd[1850]: Accepted publickey for core from 147.75.109.163 port 47928 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:17:06.377865 sshd[1850]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:17:06.394603 systemd[1]: Created slice user-500.slice. Feb 9 19:17:06.397646 systemd[1]: Starting user-runtime-dir@500.service... Feb 9 19:17:06.404080 systemd-logind[1646]: New session 1 of user core. Feb 9 19:17:06.414067 systemd[1]: Finished user-runtime-dir@500.service. Feb 9 19:17:06.418038 systemd[1]: Starting user@500.service... Feb 9 19:17:06.425083 (systemd)[1853]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:17:06.596625 systemd[1853]: Queued start job for default target default.target. Feb 9 19:17:06.598079 systemd[1853]: Reached target paths.target. Feb 9 19:17:06.598351 systemd[1853]: Reached target sockets.target. Feb 9 19:17:06.598517 systemd[1853]: Reached target timers.target. Feb 9 19:17:06.598777 systemd[1853]: Reached target basic.target. Feb 9 19:17:06.599078 systemd[1]: Started user@500.service. Feb 9 19:17:06.600923 systemd[1]: Started session-1.scope. Feb 9 19:17:06.601797 systemd[1853]: Reached target default.target. Feb 9 19:17:06.602100 systemd[1853]: Startup finished in 165ms. Feb 9 19:17:06.745682 systemd[1]: Started sshd@1-172.31.25.191:22-147.75.109.163:47940.service. Feb 9 19:17:06.923427 sshd[1862]: Accepted publickey for core from 147.75.109.163 port 47940 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:17:06.925876 sshd[1862]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:17:06.932975 systemd-logind[1646]: New session 2 of user core. Feb 9 19:17:06.934871 systemd[1]: Started session-2.scope. Feb 9 19:17:07.066635 sshd[1862]: pam_unix(sshd:session): session closed for user core Feb 9 19:17:07.071442 systemd-logind[1646]: Session 2 logged out. Waiting for processes to exit. Feb 9 19:17:07.072013 systemd[1]: sshd@1-172.31.25.191:22-147.75.109.163:47940.service: Deactivated successfully. Feb 9 19:17:07.073243 systemd[1]: session-2.scope: Deactivated successfully. Feb 9 19:17:07.074748 systemd-logind[1646]: Removed session 2. Feb 9 19:17:07.095915 systemd[1]: Started sshd@2-172.31.25.191:22-147.75.109.163:47952.service. Feb 9 19:17:07.267451 sshd[1868]: Accepted publickey for core from 147.75.109.163 port 47952 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:17:07.270266 sshd[1868]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:17:07.278414 systemd[1]: Started session-3.scope. Feb 9 19:17:07.279664 systemd-logind[1646]: New session 3 of user core. Feb 9 19:17:07.400207 sshd[1868]: pam_unix(sshd:session): session closed for user core Feb 9 19:17:07.405607 systemd[1]: sshd@2-172.31.25.191:22-147.75.109.163:47952.service: Deactivated successfully. Feb 9 19:17:07.406007 systemd-logind[1646]: Session 3 logged out. Waiting for processes to exit. Feb 9 19:17:07.406755 systemd[1]: session-3.scope: Deactivated successfully. Feb 9 19:17:07.408685 systemd-logind[1646]: Removed session 3. Feb 9 19:17:07.427986 systemd[1]: Started sshd@3-172.31.25.191:22-147.75.109.163:47960.service. Feb 9 19:17:07.599107 sshd[1874]: Accepted publickey for core from 147.75.109.163 port 47960 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:17:07.602021 sshd[1874]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:17:07.609457 systemd-logind[1646]: New session 4 of user core. Feb 9 19:17:07.610437 systemd[1]: Started session-4.scope. Feb 9 19:17:07.737542 sshd[1874]: pam_unix(sshd:session): session closed for user core Feb 9 19:17:07.742922 systemd[1]: sshd@3-172.31.25.191:22-147.75.109.163:47960.service: Deactivated successfully. Feb 9 19:17:07.744138 systemd[1]: session-4.scope: Deactivated successfully. Feb 9 19:17:07.745383 systemd-logind[1646]: Session 4 logged out. Waiting for processes to exit. Feb 9 19:17:07.747172 systemd-logind[1646]: Removed session 4. Feb 9 19:17:07.766533 systemd[1]: Started sshd@4-172.31.25.191:22-147.75.109.163:47972.service. Feb 9 19:17:07.938839 sshd[1880]: Accepted publickey for core from 147.75.109.163 port 47972 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:17:07.941208 sshd[1880]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:17:07.950421 systemd[1]: Started session-5.scope. Feb 9 19:17:07.951597 systemd-logind[1646]: New session 5 of user core. Feb 9 19:17:08.079384 sudo[1883]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Feb 9 19:17:08.080430 sudo[1883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 19:17:08.097515 dbus-daemon[1634]: avc: received setenforce notice (enforcing=1) Feb 9 19:17:08.099207 sudo[1883]: pam_unix(sudo:session): session closed for user root Feb 9 19:17:08.122768 sshd[1880]: pam_unix(sshd:session): session closed for user core Feb 9 19:17:08.128373 systemd-logind[1646]: Session 5 logged out. Waiting for processes to exit. Feb 9 19:17:08.129568 systemd[1]: sshd@4-172.31.25.191:22-147.75.109.163:47972.service: Deactivated successfully. Feb 9 19:17:08.130827 systemd[1]: session-5.scope: Deactivated successfully. Feb 9 19:17:08.132333 systemd-logind[1646]: Removed session 5. Feb 9 19:17:08.150915 systemd[1]: Started sshd@5-172.31.25.191:22-147.75.109.163:47986.service. Feb 9 19:17:08.323981 sshd[1887]: Accepted publickey for core from 147.75.109.163 port 47986 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:17:08.326974 sshd[1887]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:17:08.335094 systemd[1]: Started session-6.scope. Feb 9 19:17:08.337387 systemd-logind[1646]: New session 6 of user core. Feb 9 19:17:08.441937 sudo[1891]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Feb 9 19:17:08.442447 sudo[1891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 19:17:08.447509 sudo[1891]: pam_unix(sudo:session): session closed for user root Feb 9 19:17:08.456364 sudo[1890]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Feb 9 19:17:08.456859 sudo[1890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 19:17:08.473238 systemd[1]: Stopping audit-rules.service... Feb 9 19:17:08.473000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 9 19:17:08.477262 kernel: kauditd_printk_skb: 71 callbacks suppressed Feb 9 19:17:08.477400 kernel: audit: type=1305 audit(1707506228.473:166): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 9 19:17:08.473000 audit[1894]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc2717660 a2=420 a3=0 items=0 ppid=1 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:08.482746 auditctl[1894]: No rules Feb 9 19:17:08.493073 kernel: audit: type=1300 audit(1707506228.473:166): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc2717660 a2=420 a3=0 items=0 ppid=1 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:08.493701 systemd[1]: audit-rules.service: Deactivated successfully. Feb 9 19:17:08.473000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Feb 9 19:17:08.497379 kernel: audit: type=1327 audit(1707506228.473:166): proctitle=2F7362696E2F617564697463746C002D44 Feb 9 19:17:08.494062 systemd[1]: Stopped audit-rules.service. Feb 9 19:17:08.492000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:08.506443 kernel: audit: type=1131 audit(1707506228.492:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:08.501457 systemd[1]: Starting audit-rules.service... Feb 9 19:17:08.530626 augenrules[1911]: No rules Feb 9 19:17:08.532356 systemd[1]: Finished audit-rules.service. Feb 9 19:17:08.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:08.535024 sudo[1890]: pam_unix(sudo:session): session closed for user root Feb 9 19:17:08.534000 audit[1890]: USER_END pid=1890 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 19:17:08.550204 kernel: audit: type=1130 audit(1707506228.532:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:08.550442 kernel: audit: type=1106 audit(1707506228.534:169): pid=1890 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 19:17:08.550495 kernel: audit: type=1104 audit(1707506228.534:170): pid=1890 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 19:17:08.534000 audit[1890]: CRED_DISP pid=1890 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 19:17:08.562960 sshd[1887]: pam_unix(sshd:session): session closed for user core Feb 9 19:17:08.563000 audit[1887]: USER_END pid=1887 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:17:08.566963 systemd[1]: session-6.scope: Deactivated successfully. Feb 9 19:17:08.568028 systemd[1]: sshd@5-172.31.25.191:22-147.75.109.163:47986.service: Deactivated successfully. Feb 9 19:17:08.571263 systemd-logind[1646]: Session 6 logged out. Waiting for processes to exit. Feb 9 19:17:08.573090 systemd-logind[1646]: Removed session 6. Feb 9 19:17:08.563000 audit[1887]: CRED_DISP pid=1887 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:17:08.589825 kernel: audit: type=1106 audit(1707506228.563:171): pid=1887 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:17:08.589989 kernel: audit: type=1104 audit(1707506228.563:172): pid=1887 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:17:08.590068 kernel: audit: type=1131 audit(1707506228.563:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.25.191:22-147.75.109.163:47986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:08.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.25.191:22-147.75.109.163:47986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:08.593933 systemd[1]: Started sshd@6-172.31.25.191:22-147.75.109.163:48000.service. Feb 9 19:17:08.592000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.191:22-147.75.109.163:48000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:08.767000 audit[1917]: USER_ACCT pid=1917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:17:08.768785 sshd[1917]: Accepted publickey for core from 147.75.109.163 port 48000 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:17:08.769000 audit[1917]: CRED_ACQ pid=1917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:17:08.769000 audit[1917]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4327250 a2=3 a3=1 items=0 ppid=1 pid=1917 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:08.769000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:17:08.771606 sshd[1917]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:17:08.779933 systemd[1]: Started session-7.scope. Feb 9 19:17:08.780858 systemd-logind[1646]: New session 7 of user core. Feb 9 19:17:08.788000 audit[1917]: USER_START pid=1917 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:17:08.791000 audit[1919]: CRED_ACQ pid=1919 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:17:08.884000 audit[1920]: USER_ACCT pid=1920 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 19:17:08.886083 sudo[1920]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Feb 9 19:17:08.885000 audit[1920]: CRED_REFR pid=1920 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 19:17:08.887228 sudo[1920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 19:17:08.889000 audit[1920]: USER_START pid=1920 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 19:17:09.557244 systemd[1]: Starting docker.service... Feb 9 19:17:09.633163 env[1935]: time="2024-02-09T19:17:09.633059130Z" level=info msg="Starting up" Feb 9 19:17:09.637650 env[1935]: time="2024-02-09T19:17:09.637242164Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 9 19:17:09.637650 env[1935]: time="2024-02-09T19:17:09.637309891Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 9 19:17:09.637650 env[1935]: time="2024-02-09T19:17:09.637349415Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 9 19:17:09.637650 env[1935]: time="2024-02-09T19:17:09.637374237Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 9 19:17:09.640864 env[1935]: time="2024-02-09T19:17:09.640799894Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 9 19:17:09.640864 env[1935]: time="2024-02-09T19:17:09.640844597Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 9 19:17:09.641088 env[1935]: time="2024-02-09T19:17:09.640878692Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 9 19:17:09.641088 env[1935]: time="2024-02-09T19:17:09.640899966Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 9 19:17:09.649337 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport1015384895-merged.mount: Deactivated successfully. Feb 9 19:17:09.693129 env[1935]: time="2024-02-09T19:17:09.693082592Z" level=info msg="Loading containers: start." Feb 9 19:17:09.769000 audit[1965]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1965 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.769000 audit[1965]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffe9e68f70 a2=0 a3=1 items=0 ppid=1935 pid=1965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.769000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Feb 9 19:17:09.772000 audit[1967]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1967 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.772000 audit[1967]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffff9daa0e0 a2=0 a3=1 items=0 ppid=1935 pid=1967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.772000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Feb 9 19:17:09.776000 audit[1969]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1969 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.776000 audit[1969]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe2072e60 a2=0 a3=1 items=0 ppid=1935 pid=1969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.776000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 9 19:17:09.781000 audit[1971]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1971 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.781000 audit[1971]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc120df80 a2=0 a3=1 items=0 ppid=1935 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.781000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 9 19:17:09.785000 audit[1973]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1973 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.785000 audit[1973]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe82a44c0 a2=0 a3=1 items=0 ppid=1935 pid=1973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.785000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Feb 9 19:17:09.814000 audit[1978]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1978 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.814000 audit[1978]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffce28dde0 a2=0 a3=1 items=0 ppid=1935 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.814000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Feb 9 19:17:09.826000 audit[1980]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1980 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.826000 audit[1980]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffcc759ff0 a2=0 a3=1 items=0 ppid=1935 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.826000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Feb 9 19:17:09.830000 audit[1982]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1982 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.830000 audit[1982]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffeb184e50 a2=0 a3=1 items=0 ppid=1935 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.830000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Feb 9 19:17:09.834000 audit[1984]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1984 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.834000 audit[1984]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffe74fd1e0 a2=0 a3=1 items=0 ppid=1935 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.834000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 9 19:17:09.848000 audit[1988]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1988 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.848000 audit[1988]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe63119f0 a2=0 a3=1 items=0 ppid=1935 pid=1988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.848000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 9 19:17:09.850000 audit[1989]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1989 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.850000 audit[1989]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffdae674c0 a2=0 a3=1 items=0 ppid=1935 pid=1989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.850000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 9 19:17:09.862336 kernel: Initializing XFRM netlink socket Feb 9 19:17:09.912069 env[1935]: time="2024-02-09T19:17:09.912023412Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Feb 9 19:17:09.913882 (udev-worker)[1945]: Network interface NamePolicy= disabled on kernel command line. Feb 9 19:17:09.942000 audit[1997]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1997 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.942000 audit[1997]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffc6a10180 a2=0 a3=1 items=0 ppid=1935 pid=1997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.942000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Feb 9 19:17:09.955000 audit[2000]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2000 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.955000 audit[2000]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=fffff3047f90 a2=0 a3=1 items=0 ppid=1935 pid=2000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.955000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Feb 9 19:17:09.961000 audit[2003]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2003 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.961000 audit[2003]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffef969a60 a2=0 a3=1 items=0 ppid=1935 pid=2003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.961000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Feb 9 19:17:09.966000 audit[2005]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2005 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.966000 audit[2005]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffe87bc4c0 a2=0 a3=1 items=0 ppid=1935 pid=2005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.966000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Feb 9 19:17:09.970000 audit[2007]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2007 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.970000 audit[2007]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffde9cf520 a2=0 a3=1 items=0 ppid=1935 pid=2007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.970000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Feb 9 19:17:09.975000 audit[2009]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2009 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.975000 audit[2009]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffd1a20250 a2=0 a3=1 items=0 ppid=1935 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.975000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Feb 9 19:17:09.978000 audit[2011]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2011 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.978000 audit[2011]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffcd82ba90 a2=0 a3=1 items=0 ppid=1935 pid=2011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.978000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Feb 9 19:17:09.990000 audit[2014]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2014 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.990000 audit[2014]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffe3d6ea00 a2=0 a3=1 items=0 ppid=1935 pid=2014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.990000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Feb 9 19:17:09.995000 audit[2016]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2016 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.995000 audit[2016]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffc8adcf00 a2=0 a3=1 items=0 ppid=1935 pid=2016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.995000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 9 19:17:09.999000 audit[2018]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2018 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:09.999000 audit[2018]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffea156d30 a2=0 a3=1 items=0 ppid=1935 pid=2018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:09.999000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 9 19:17:10.003000 audit[2020]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2020 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:10.003000 audit[2020]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffff146910 a2=0 a3=1 items=0 ppid=1935 pid=2020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:10.003000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Feb 9 19:17:10.006377 systemd-networkd[1477]: docker0: Link UP Feb 9 19:17:10.020000 audit[2024]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2024 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:10.020000 audit[2024]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffee72b0b0 a2=0 a3=1 items=0 ppid=1935 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:10.020000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 9 19:17:10.023000 audit[2025]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2025 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:10.023000 audit[2025]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd1df5d30 a2=0 a3=1 items=0 ppid=1935 pid=2025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:10.023000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 9 19:17:10.025576 env[1935]: time="2024-02-09T19:17:10.025513123Z" level=info msg="Loading containers: done." Feb 9 19:17:10.044837 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1695993547-merged.mount: Deactivated successfully. Feb 9 19:17:10.068984 env[1935]: time="2024-02-09T19:17:10.068850777Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Feb 9 19:17:10.069627 env[1935]: time="2024-02-09T19:17:10.069594325Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Feb 9 19:17:10.070000 env[1935]: time="2024-02-09T19:17:10.069962601Z" level=info msg="Daemon has completed initialization" Feb 9 19:17:10.095505 systemd[1]: Started docker.service. Feb 9 19:17:10.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:10.104400 env[1935]: time="2024-02-09T19:17:10.104332829Z" level=info msg="API listen on /run/docker.sock" Feb 9 19:17:10.139432 systemd[1]: Reloading. Feb 9 19:17:10.268250 /usr/lib/systemd/system-generators/torcx-generator[2075]: time="2024-02-09T19:17:10Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 19:17:10.278476 /usr/lib/systemd/system-generators/torcx-generator[2075]: time="2024-02-09T19:17:10Z" level=info msg="torcx already run" Feb 9 19:17:10.427635 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 19:17:10.427947 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 19:17:10.470658 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 19:17:10.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.620000 audit: BPF prog-id=37 op=LOAD Feb 9 19:17:10.621000 audit: BPF prog-id=29 op=UNLOAD Feb 9 19:17:10.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.622000 audit: BPF prog-id=38 op=LOAD Feb 9 19:17:10.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.623000 audit: BPF prog-id=39 op=LOAD Feb 9 19:17:10.623000 audit: BPF prog-id=30 op=UNLOAD Feb 9 19:17:10.623000 audit: BPF prog-id=31 op=UNLOAD Feb 9 19:17:10.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.626000 audit: BPF prog-id=40 op=LOAD Feb 9 19:17:10.626000 audit: BPF prog-id=35 op=UNLOAD Feb 9 19:17:10.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.629000 audit: BPF prog-id=41 op=LOAD Feb 9 19:17:10.629000 audit: BPF prog-id=24 op=UNLOAD Feb 9 19:17:10.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.630000 audit: BPF prog-id=42 op=LOAD Feb 9 19:17:10.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.630000 audit: BPF prog-id=43 op=LOAD Feb 9 19:17:10.630000 audit: BPF prog-id=25 op=UNLOAD Feb 9 19:17:10.630000 audit: BPF prog-id=26 op=UNLOAD Feb 9 19:17:10.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.633000 audit: BPF prog-id=44 op=LOAD Feb 9 19:17:10.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.633000 audit: BPF prog-id=45 op=LOAD Feb 9 19:17:10.633000 audit: BPF prog-id=21 op=UNLOAD Feb 9 19:17:10.633000 audit: BPF prog-id=22 op=UNLOAD Feb 9 19:17:10.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit: BPF prog-id=46 op=LOAD Feb 9 19:17:10.635000 audit: BPF prog-id=18 op=UNLOAD Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit: BPF prog-id=47 op=LOAD Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.635000 audit: BPF prog-id=48 op=LOAD Feb 9 19:17:10.635000 audit: BPF prog-id=19 op=UNLOAD Feb 9 19:17:10.635000 audit: BPF prog-id=20 op=UNLOAD Feb 9 19:17:10.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.637000 audit: BPF prog-id=49 op=LOAD Feb 9 19:17:10.637000 audit: BPF prog-id=27 op=UNLOAD Feb 9 19:17:10.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.641000 audit: BPF prog-id=50 op=LOAD Feb 9 19:17:10.641000 audit: BPF prog-id=28 op=UNLOAD Feb 9 19:17:10.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.644000 audit: BPF prog-id=51 op=LOAD Feb 9 19:17:10.644000 audit: BPF prog-id=23 op=UNLOAD Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit: BPF prog-id=52 op=LOAD Feb 9 19:17:10.648000 audit: BPF prog-id=32 op=UNLOAD Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit: BPF prog-id=53 op=LOAD Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:10.650000 audit: BPF prog-id=54 op=LOAD Feb 9 19:17:10.650000 audit: BPF prog-id=33 op=UNLOAD Feb 9 19:17:10.650000 audit: BPF prog-id=34 op=UNLOAD Feb 9 19:17:10.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:10.691075 systemd[1]: Started kubelet.service. Feb 9 19:17:10.829718 kubelet[2127]: E0209 19:17:10.829631 2127 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Feb 9 19:17:10.833000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 19:17:10.833855 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 9 19:17:10.834161 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 9 19:17:11.262396 env[1657]: time="2024-02-09T19:17:11.262336188Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.10\"" Feb 9 19:17:11.881421 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount826315139.mount: Deactivated successfully. Feb 9 19:17:13.000882 amazon-ssm-agent[1655]: 2024-02-09 19:17:13 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Feb 9 19:17:14.990063 env[1657]: time="2024-02-09T19:17:14.989984212Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:14.993258 env[1657]: time="2024-02-09T19:17:14.993198995Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d19178cf7413f0942a116deaaea447983d297afb5dc7f62456c43839e7aaecfa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:14.996867 env[1657]: time="2024-02-09T19:17:14.996814717Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:15.001092 env[1657]: time="2024-02-09T19:17:15.001028430Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:cfcebda74d6e665b68931d3589ee69fde81cd503ff3169888e4502af65579d98,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:15.002912 env[1657]: time="2024-02-09T19:17:15.002854844Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.10\" returns image reference \"sha256:d19178cf7413f0942a116deaaea447983d297afb5dc7f62456c43839e7aaecfa\"" Feb 9 19:17:15.021398 env[1657]: time="2024-02-09T19:17:15.021341454Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.10\"" Feb 9 19:17:18.302297 env[1657]: time="2024-02-09T19:17:18.302213661Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:18.305184 env[1657]: time="2024-02-09T19:17:18.305124640Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6b9759f115be4c68b4a500b8c1d7bbeaf16e8e887b01eaf79c135b7b267baf95,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:18.308408 env[1657]: time="2024-02-09T19:17:18.308357542Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:18.311409 env[1657]: time="2024-02-09T19:17:18.311364639Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:fa168ebca1f6dbfe86ef0a690e007531c1f53569274fc7dc2774fe228b6ce8c2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:18.312949 env[1657]: time="2024-02-09T19:17:18.312907849Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.10\" returns image reference \"sha256:6b9759f115be4c68b4a500b8c1d7bbeaf16e8e887b01eaf79c135b7b267baf95\"" Feb 9 19:17:18.331595 env[1657]: time="2024-02-09T19:17:18.331536290Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.10\"" Feb 9 19:17:20.294443 env[1657]: time="2024-02-09T19:17:20.294384793Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:20.297869 env[1657]: time="2024-02-09T19:17:20.297821611Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:745369ed75bfc0dd1319e4c64383b4ef2cb163cec6630fa288ad3fb6bf6624eb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:20.301415 env[1657]: time="2024-02-09T19:17:20.301356794Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:20.306181 env[1657]: time="2024-02-09T19:17:20.306136418Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:09294de61e63987f181077cbc2f5c82463878af9cd8ecc6110c54150c9ae3143,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:20.308114 env[1657]: time="2024-02-09T19:17:20.308060761Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.10\" returns image reference \"sha256:745369ed75bfc0dd1319e4c64383b4ef2cb163cec6630fa288ad3fb6bf6624eb\"" Feb 9 19:17:20.325138 env[1657]: time="2024-02-09T19:17:20.325088719Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.10\"" Feb 9 19:17:20.984561 kernel: kauditd_printk_skb: 292 callbacks suppressed Feb 9 19:17:20.984716 kernel: audit: type=1130 audit(1707506240.981:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:20.981000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:20.982147 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Feb 9 19:17:20.982482 systemd[1]: Stopped kubelet.service. Feb 9 19:17:20.985928 systemd[1]: Started kubelet.service. Feb 9 19:17:20.981000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:21.001824 kernel: audit: type=1131 audit(1707506240.981:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:20.984000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:21.013797 kernel: audit: type=1130 audit(1707506240.984:418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:21.106852 kubelet[2161]: E0209 19:17:21.106792 2161 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Feb 9 19:17:21.114000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 19:17:21.115443 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 9 19:17:21.115762 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 9 19:17:21.126537 kernel: audit: type=1131 audit(1707506241.114:419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 19:17:21.694212 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1424173339.mount: Deactivated successfully. Feb 9 19:17:22.464908 env[1657]: time="2024-02-09T19:17:22.464794745Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:22.468729 env[1657]: time="2024-02-09T19:17:22.468666218Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f17f9528c5073692925255c3de3f310109480873912e8b5ddc171ae1e64324ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:22.472196 env[1657]: time="2024-02-09T19:17:22.472153556Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:22.476014 env[1657]: time="2024-02-09T19:17:22.475957168Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d084b53c772f62ec38fddb2348a82d4234016daf6cd43fedbf0b3281f3790f88,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:22.477381 env[1657]: time="2024-02-09T19:17:22.477319890Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.10\" returns image reference \"sha256:f17f9528c5073692925255c3de3f310109480873912e8b5ddc171ae1e64324ef\"" Feb 9 19:17:22.493595 env[1657]: time="2024-02-09T19:17:22.493476794Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Feb 9 19:17:22.975673 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1936104131.mount: Deactivated successfully. Feb 9 19:17:22.989167 env[1657]: time="2024-02-09T19:17:22.989094349Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:22.994139 env[1657]: time="2024-02-09T19:17:22.994087896Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:22.998164 env[1657]: time="2024-02-09T19:17:22.998121406Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:23.002830 env[1657]: time="2024-02-09T19:17:23.002786934Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:23.004306 env[1657]: time="2024-02-09T19:17:23.004253100Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Feb 9 19:17:23.026257 env[1657]: time="2024-02-09T19:17:23.026195489Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Feb 9 19:17:24.100190 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4251868985.mount: Deactivated successfully. Feb 9 19:17:28.046530 env[1657]: time="2024-02-09T19:17:28.046469968Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:28.060443 env[1657]: time="2024-02-09T19:17:28.060389864Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:28.063178 env[1657]: time="2024-02-09T19:17:28.063131884Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:28.066611 env[1657]: time="2024-02-09T19:17:28.066566110Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:28.068650 env[1657]: time="2024-02-09T19:17:28.068587706Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737\"" Feb 9 19:17:28.086020 env[1657]: time="2024-02-09T19:17:28.085971906Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Feb 9 19:17:28.486501 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Feb 9 19:17:28.485000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:28.495327 kernel: audit: type=1131 audit(1707506248.485:420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:28.508000 audit: BPF prog-id=54 op=UNLOAD Feb 9 19:17:28.508000 audit: BPF prog-id=53 op=UNLOAD Feb 9 19:17:28.514677 kernel: audit: type=1334 audit(1707506248.508:421): prog-id=54 op=UNLOAD Feb 9 19:17:28.514782 kernel: audit: type=1334 audit(1707506248.508:422): prog-id=53 op=UNLOAD Feb 9 19:17:28.514845 kernel: audit: type=1334 audit(1707506248.508:423): prog-id=52 op=UNLOAD Feb 9 19:17:28.508000 audit: BPF prog-id=52 op=UNLOAD Feb 9 19:17:28.613978 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1921015691.mount: Deactivated successfully. Feb 9 19:17:29.465577 env[1657]: time="2024-02-09T19:17:29.465494449Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:29.468422 env[1657]: time="2024-02-09T19:17:29.468373801Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:29.471525 env[1657]: time="2024-02-09T19:17:29.471460522Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:29.474205 env[1657]: time="2024-02-09T19:17:29.474150905Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:29.475952 env[1657]: time="2024-02-09T19:17:29.475889374Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Feb 9 19:17:31.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:31.281513 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Feb 9 19:17:31.281900 systemd[1]: Stopped kubelet.service. Feb 9 19:17:31.288750 systemd[1]: Started kubelet.service. Feb 9 19:17:31.281000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:31.299877 kernel: audit: type=1130 audit(1707506251.281:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:31.300040 kernel: audit: type=1131 audit(1707506251.281:425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:31.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:31.316342 kernel: audit: type=1130 audit(1707506251.287:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:31.411689 kubelet[2246]: E0209 19:17:31.411628 2246 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Feb 9 19:17:31.416356 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 9 19:17:31.416683 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 9 19:17:31.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 19:17:31.426334 kernel: audit: type=1131 audit(1707506251.416:427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 19:17:35.931403 systemd[1]: Stopped kubelet.service. Feb 9 19:17:35.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:35.931000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:35.947825 kernel: audit: type=1130 audit(1707506255.931:428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:35.947921 kernel: audit: type=1131 audit(1707506255.931:429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:35.974839 systemd[1]: Reloading. Feb 9 19:17:36.095898 /usr/lib/systemd/system-generators/torcx-generator[2276]: time="2024-02-09T19:17:36Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 19:17:36.096677 /usr/lib/systemd/system-generators/torcx-generator[2276]: time="2024-02-09T19:17:36Z" level=info msg="torcx already run" Feb 9 19:17:36.254351 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 19:17:36.254654 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 19:17:36.297740 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 19:17:36.442000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.459479 kernel: audit: type=1400 audit(1707506256.442:430): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.459596 kernel: audit: type=1400 audit(1707506256.449:431): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.466951 kernel: audit: type=1400 audit(1707506256.449:432): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.474411 kernel: audit: type=1400 audit(1707506256.449:433): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.474482 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Feb 9 19:17:36.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.483829 kernel: audit: type=1400 audit(1707506256.449:434): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.483886 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Feb 9 19:17:36.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.493495 kernel: audit: type=1400 audit(1707506256.449:435): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit: BPF prog-id=55 op=LOAD Feb 9 19:17:36.450000 audit: BPF prog-id=37 op=UNLOAD Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit: BPF prog-id=56 op=LOAD Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.450000 audit: BPF prog-id=57 op=LOAD Feb 9 19:17:36.450000 audit: BPF prog-id=38 op=UNLOAD Feb 9 19:17:36.450000 audit: BPF prog-id=39 op=UNLOAD Feb 9 19:17:36.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.459000 audit: BPF prog-id=58 op=LOAD Feb 9 19:17:36.459000 audit: BPF prog-id=40 op=UNLOAD Feb 9 19:17:36.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.466000 audit: BPF prog-id=59 op=LOAD Feb 9 19:17:36.466000 audit: BPF prog-id=41 op=UNLOAD Feb 9 19:17:36.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.474000 audit: BPF prog-id=60 op=LOAD Feb 9 19:17:36.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.493000 audit: BPF prog-id=42 op=UNLOAD Feb 9 19:17:36.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.496000 audit: BPF prog-id=62 op=LOAD Feb 9 19:17:36.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.496000 audit: BPF prog-id=63 op=LOAD Feb 9 19:17:36.496000 audit: BPF prog-id=44 op=UNLOAD Feb 9 19:17:36.496000 audit: BPF prog-id=45 op=UNLOAD Feb 9 19:17:36.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.497000 audit: BPF prog-id=64 op=LOAD Feb 9 19:17:36.497000 audit: BPF prog-id=46 op=UNLOAD Feb 9 19:17:36.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.498000 audit: BPF prog-id=65 op=LOAD Feb 9 19:17:36.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.498000 audit: BPF prog-id=66 op=LOAD Feb 9 19:17:36.498000 audit: BPF prog-id=47 op=UNLOAD Feb 9 19:17:36.498000 audit: BPF prog-id=48 op=UNLOAD Feb 9 19:17:36.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.499000 audit: BPF prog-id=67 op=LOAD Feb 9 19:17:36.499000 audit: BPF prog-id=49 op=UNLOAD Feb 9 19:17:36.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.504000 audit: BPF prog-id=68 op=LOAD Feb 9 19:17:36.504000 audit: BPF prog-id=50 op=UNLOAD Feb 9 19:17:36.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:36.507000 audit: BPF prog-id=69 op=LOAD Feb 9 19:17:36.507000 audit: BPF prog-id=51 op=UNLOAD Feb 9 19:17:36.540000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:36.538962 systemd[1]: Started kubelet.service. Feb 9 19:17:36.629471 kubelet[2332]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 19:17:36.630015 kubelet[2332]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Feb 9 19:17:36.630111 kubelet[2332]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 19:17:36.630375 kubelet[2332]: I0209 19:17:36.630323 2332 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 9 19:17:38.960604 kubelet[2332]: I0209 19:17:38.960564 2332 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Feb 9 19:17:38.961362 kubelet[2332]: I0209 19:17:38.961338 2332 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 9 19:17:38.961846 kubelet[2332]: I0209 19:17:38.961823 2332 server.go:837] "Client rotation is on, will bootstrap in background" Feb 9 19:17:38.969567 kubelet[2332]: E0209 19:17:38.969510 2332 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.25.191:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.25.191:6443: connect: connection refused Feb 9 19:17:38.969732 kubelet[2332]: I0209 19:17:38.969615 2332 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 9 19:17:38.972401 kubelet[2332]: W0209 19:17:38.972372 2332 machine.go:65] Cannot read vendor id correctly, set empty. Feb 9 19:17:38.973786 kubelet[2332]: I0209 19:17:38.973737 2332 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 9 19:17:38.974441 kubelet[2332]: I0209 19:17:38.974418 2332 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 9 19:17:38.974667 kubelet[2332]: I0209 19:17:38.974644 2332 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Feb 9 19:17:38.974897 kubelet[2332]: I0209 19:17:38.974872 2332 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Feb 9 19:17:38.975028 kubelet[2332]: I0209 19:17:38.975007 2332 container_manager_linux.go:302] "Creating device plugin manager" Feb 9 19:17:38.975282 kubelet[2332]: I0209 19:17:38.975262 2332 state_mem.go:36] "Initialized new in-memory state store" Feb 9 19:17:38.981012 kubelet[2332]: I0209 19:17:38.980949 2332 kubelet.go:405] "Attempting to sync node with API server" Feb 9 19:17:38.981012 kubelet[2332]: I0209 19:17:38.981003 2332 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 9 19:17:38.981280 kubelet[2332]: I0209 19:17:38.981050 2332 kubelet.go:309] "Adding apiserver pod source" Feb 9 19:17:38.981280 kubelet[2332]: I0209 19:17:38.981080 2332 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 9 19:17:38.982906 kubelet[2332]: W0209 19:17:38.982828 2332 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.25.191:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-191&limit=500&resourceVersion=0": dial tcp 172.31.25.191:6443: connect: connection refused Feb 9 19:17:38.983604 kubelet[2332]: E0209 19:17:38.983557 2332 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.25.191:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-191&limit=500&resourceVersion=0": dial tcp 172.31.25.191:6443: connect: connection refused Feb 9 19:17:38.990335 kubelet[2332]: I0209 19:17:38.984404 2332 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 9 19:17:38.991034 kubelet[2332]: W0209 19:17:38.985208 2332 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.25.191:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.25.191:6443: connect: connection refused Feb 9 19:17:38.991164 kubelet[2332]: E0209 19:17:38.991073 2332 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.25.191:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.25.191:6443: connect: connection refused Feb 9 19:17:38.992127 kubelet[2332]: W0209 19:17:38.992079 2332 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Feb 9 19:17:38.993757 kubelet[2332]: I0209 19:17:38.993712 2332 server.go:1168] "Started kubelet" Feb 9 19:17:38.997539 kubelet[2332]: E0209 19:17:38.997502 2332 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 9 19:17:38.999024 kubelet[2332]: E0209 19:17:38.998978 2332 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 9 19:17:38.999024 kubelet[2332]: E0209 19:17:38.998730 2332 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-25-191.17b247e5531292a4", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-25-191", UID:"ip-172-31-25-191", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-25-191"}, FirstTimestamp:time.Date(2024, time.February, 9, 19, 17, 38, 993648292, time.Local), LastTimestamp:time.Date(2024, time.February, 9, 19, 17, 38, 993648292, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.25.191:6443/api/v1/namespaces/default/events": dial tcp 172.31.25.191:6443: connect: connection refused'(may retry after sleeping) Feb 9 19:17:38.999386 kubelet[2332]: I0209 19:17:38.999150 2332 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Feb 9 19:17:39.000400 kubelet[2332]: I0209 19:17:39.000352 2332 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Feb 9 19:17:39.002000 audit[2332]: AVC avc: denied { mac_admin } for pid=2332 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:39.002000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 19:17:39.002000 audit[2332]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c41410 a1=4000c3eb28 a2=4000c413e0 a3=25 items=0 ppid=1 pid=2332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:39.002000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 19:17:39.006035 kubelet[2332]: I0209 19:17:39.004057 2332 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 9 19:17:39.004000 audit[2332]: AVC avc: denied { mac_admin } for pid=2332 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:39.004000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 19:17:39.004000 audit[2332]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000de88e0 a1=4000c3eb40 a2=4000c414a0 a3=25 items=0 ppid=1 pid=2332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:39.004000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 19:17:39.006818 kubelet[2332]: I0209 19:17:39.006792 2332 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 9 19:17:39.007137 kubelet[2332]: I0209 19:17:39.007099 2332 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 9 19:17:39.007772 kubelet[2332]: I0209 19:17:39.007745 2332 server.go:461] "Adding debug handlers to kubelet server" Feb 9 19:17:39.012973 kubelet[2332]: I0209 19:17:39.012943 2332 volume_manager.go:284] "Starting Kubelet Volume Manager" Feb 9 19:17:39.013346 kubelet[2332]: I0209 19:17:39.013320 2332 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Feb 9 19:17:39.014058 kubelet[2332]: W0209 19:17:39.013999 2332 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.25.191:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.191:6443: connect: connection refused Feb 9 19:17:39.014261 kubelet[2332]: E0209 19:17:39.014238 2332 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.25.191:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.191:6443: connect: connection refused Feb 9 19:17:39.015403 kubelet[2332]: E0209 19:17:39.015370 2332 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.191:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-191?timeout=10s\": dial tcp 172.31.25.191:6443: connect: connection refused" interval="200ms" Feb 9 19:17:39.030000 audit[2343]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2343 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:39.030000 audit[2343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdf4a9070 a2=0 a3=1 items=0 ppid=2332 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:39.030000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 9 19:17:39.041000 audit[2346]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2346 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:39.041000 audit[2346]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffca54f0e0 a2=0 a3=1 items=0 ppid=2332 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:39.041000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 9 19:17:39.054000 audit[2348]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:39.054000 audit[2348]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffeff327c0 a2=0 a3=1 items=0 ppid=2332 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:39.054000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 19:17:39.059000 audit[2350]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2350 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:39.059000 audit[2350]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffddc936b0 a2=0 a3=1 items=0 ppid=2332 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:39.059000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 19:17:39.065082 kubelet[2332]: I0209 19:17:39.065045 2332 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 9 19:17:39.065379 kubelet[2332]: I0209 19:17:39.065356 2332 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 9 19:17:39.065533 kubelet[2332]: I0209 19:17:39.065510 2332 state_mem.go:36] "Initialized new in-memory state store" Feb 9 19:17:39.068356 kubelet[2332]: I0209 19:17:39.068316 2332 policy_none.go:49] "None policy: Start" Feb 9 19:17:39.072000 audit[2353]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2353 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:39.072000 audit[2353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffd4ba3ae0 a2=0 a3=1 items=0 ppid=2332 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:39.072000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Feb 9 19:17:39.073954 kubelet[2332]: I0209 19:17:39.073909 2332 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Feb 9 19:17:39.075000 audit[2354]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2354 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:17:39.075000 audit[2354]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe01b7940 a2=0 a3=1 items=0 ppid=2332 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:39.075000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 9 19:17:39.077890 kubelet[2332]: I0209 19:17:39.077834 2332 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Feb 9 19:17:39.077890 kubelet[2332]: I0209 19:17:39.077889 2332 status_manager.go:207] "Starting to sync pod status with apiserver" Feb 9 19:17:39.078061 kubelet[2332]: I0209 19:17:39.077922 2332 kubelet.go:2257] "Starting kubelet main sync loop" Feb 9 19:17:39.078061 kubelet[2332]: E0209 19:17:39.078000 2332 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Feb 9 19:17:39.078000 audit[2356]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2356 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:39.078000 audit[2356]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffca61cd0 a2=0 a3=1 items=0 ppid=2332 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:39.078000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 9 19:17:39.079000 audit[2357]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=2357 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:17:39.079000 audit[2357]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc6828c10 a2=0 a3=1 items=0 ppid=2332 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:39.079000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 9 19:17:39.080000 audit[2358]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2358 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:39.080000 audit[2358]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff57a6eb0 a2=0 a3=1 items=0 ppid=2332 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:39.080000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 9 19:17:39.082000 audit[2359]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=2359 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:17:39.082000 audit[2359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffc7b9d580 a2=0 a3=1 items=0 ppid=2332 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:39.082000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 9 19:17:39.083000 audit[2360]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:17:39.083000 audit[2360]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd6ddb3d0 a2=0 a3=1 items=0 ppid=2332 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:39.083000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 9 19:17:39.085541 kubelet[2332]: I0209 19:17:39.085495 2332 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 9 19:17:39.085686 kubelet[2332]: I0209 19:17:39.085550 2332 state_mem.go:35] "Initializing new in-memory state store" Feb 9 19:17:39.085000 audit[2361]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2361 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:17:39.085000 audit[2361]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc511ac10 a2=0 a3=1 items=0 ppid=2332 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:39.085000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 9 19:17:39.088176 kubelet[2332]: W0209 19:17:39.088093 2332 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.25.191:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.191:6443: connect: connection refused Feb 9 19:17:39.088531 kubelet[2332]: E0209 19:17:39.088181 2332 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.25.191:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.191:6443: connect: connection refused Feb 9 19:17:39.095792 systemd[1]: Created slice kubepods.slice. Feb 9 19:17:39.105277 systemd[1]: Created slice kubepods-burstable.slice. Feb 9 19:17:39.111680 systemd[1]: Created slice kubepods-besteffort.slice. Feb 9 19:17:39.117662 kubelet[2332]: I0209 19:17:39.117629 2332 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-191" Feb 9 19:17:39.118457 kubelet[2332]: E0209 19:17:39.118431 2332 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.25.191:6443/api/v1/nodes\": dial tcp 172.31.25.191:6443: connect: connection refused" node="ip-172-31-25-191" Feb 9 19:17:39.121998 kubelet[2332]: I0209 19:17:39.121968 2332 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 9 19:17:39.120000 audit[2332]: AVC avc: denied { mac_admin } for pid=2332 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:39.120000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 19:17:39.120000 audit[2332]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400053def0 a1=4000ad9668 a2=400053dec0 a3=25 items=0 ppid=1 pid=2332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:39.120000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 19:17:39.122699 kubelet[2332]: I0209 19:17:39.122674 2332 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 9 19:17:39.127346 kubelet[2332]: I0209 19:17:39.126404 2332 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 9 19:17:39.128333 kubelet[2332]: E0209 19:17:39.127092 2332 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-25-191\" not found" Feb 9 19:17:39.178414 kubelet[2332]: I0209 19:17:39.178367 2332 topology_manager.go:212] "Topology Admit Handler" Feb 9 19:17:39.180256 kubelet[2332]: I0209 19:17:39.180205 2332 topology_manager.go:212] "Topology Admit Handler" Feb 9 19:17:39.183767 kubelet[2332]: I0209 19:17:39.183721 2332 topology_manager.go:212] "Topology Admit Handler" Feb 9 19:17:39.191781 systemd[1]: Created slice kubepods-burstable-pod05502a3d39621ecde8093546b9c4e23d.slice. Feb 9 19:17:39.216390 kubelet[2332]: I0209 19:17:39.216256 2332 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/05502a3d39621ecde8093546b9c4e23d-ca-certs\") pod \"kube-apiserver-ip-172-31-25-191\" (UID: \"05502a3d39621ecde8093546b9c4e23d\") " pod="kube-system/kube-apiserver-ip-172-31-25-191" Feb 9 19:17:39.216615 kubelet[2332]: I0209 19:17:39.216590 2332 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/05502a3d39621ecde8093546b9c4e23d-k8s-certs\") pod \"kube-apiserver-ip-172-31-25-191\" (UID: \"05502a3d39621ecde8093546b9c4e23d\") " pod="kube-system/kube-apiserver-ip-172-31-25-191" Feb 9 19:17:39.217959 kubelet[2332]: E0209 19:17:39.217928 2332 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.191:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-191?timeout=10s\": dial tcp 172.31.25.191:6443: connect: connection refused" interval="400ms" Feb 9 19:17:39.222916 systemd[1]: Created slice kubepods-burstable-pod4f0fc70628dd95c226159baa16b7d8d4.slice. Feb 9 19:17:39.232746 systemd[1]: Created slice kubepods-burstable-pod5a6639665696f0a7bb7c023ea03cafd5.slice. Feb 9 19:17:39.317591 kubelet[2332]: I0209 19:17:39.317539 2332 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/05502a3d39621ecde8093546b9c4e23d-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-25-191\" (UID: \"05502a3d39621ecde8093546b9c4e23d\") " pod="kube-system/kube-apiserver-ip-172-31-25-191" Feb 9 19:17:39.317774 kubelet[2332]: I0209 19:17:39.317614 2332 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4f0fc70628dd95c226159baa16b7d8d4-ca-certs\") pod \"kube-controller-manager-ip-172-31-25-191\" (UID: \"4f0fc70628dd95c226159baa16b7d8d4\") " pod="kube-system/kube-controller-manager-ip-172-31-25-191" Feb 9 19:17:39.317774 kubelet[2332]: I0209 19:17:39.317662 2332 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4f0fc70628dd95c226159baa16b7d8d4-k8s-certs\") pod \"kube-controller-manager-ip-172-31-25-191\" (UID: \"4f0fc70628dd95c226159baa16b7d8d4\") " pod="kube-system/kube-controller-manager-ip-172-31-25-191" Feb 9 19:17:39.317774 kubelet[2332]: I0209 19:17:39.317715 2332 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4f0fc70628dd95c226159baa16b7d8d4-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-25-191\" (UID: \"4f0fc70628dd95c226159baa16b7d8d4\") " pod="kube-system/kube-controller-manager-ip-172-31-25-191" Feb 9 19:17:39.317774 kubelet[2332]: I0209 19:17:39.317758 2332 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5a6639665696f0a7bb7c023ea03cafd5-kubeconfig\") pod \"kube-scheduler-ip-172-31-25-191\" (UID: \"5a6639665696f0a7bb7c023ea03cafd5\") " pod="kube-system/kube-scheduler-ip-172-31-25-191" Feb 9 19:17:39.318030 kubelet[2332]: I0209 19:17:39.317822 2332 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/4f0fc70628dd95c226159baa16b7d8d4-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-25-191\" (UID: \"4f0fc70628dd95c226159baa16b7d8d4\") " pod="kube-system/kube-controller-manager-ip-172-31-25-191" Feb 9 19:17:39.318030 kubelet[2332]: I0209 19:17:39.317865 2332 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4f0fc70628dd95c226159baa16b7d8d4-kubeconfig\") pod \"kube-controller-manager-ip-172-31-25-191\" (UID: \"4f0fc70628dd95c226159baa16b7d8d4\") " pod="kube-system/kube-controller-manager-ip-172-31-25-191" Feb 9 19:17:39.321379 kubelet[2332]: I0209 19:17:39.321345 2332 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-191" Feb 9 19:17:39.322154 kubelet[2332]: E0209 19:17:39.322130 2332 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.25.191:6443/api/v1/nodes\": dial tcp 172.31.25.191:6443: connect: connection refused" node="ip-172-31-25-191" Feb 9 19:17:39.521077 env[1657]: time="2024-02-09T19:17:39.520026007Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-25-191,Uid:05502a3d39621ecde8093546b9c4e23d,Namespace:kube-system,Attempt:0,}" Feb 9 19:17:39.530697 env[1657]: time="2024-02-09T19:17:39.530625323Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-25-191,Uid:4f0fc70628dd95c226159baa16b7d8d4,Namespace:kube-system,Attempt:0,}" Feb 9 19:17:39.537571 env[1657]: time="2024-02-09T19:17:39.537499059Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-25-191,Uid:5a6639665696f0a7bb7c023ea03cafd5,Namespace:kube-system,Attempt:0,}" Feb 9 19:17:39.619351 kubelet[2332]: E0209 19:17:39.619217 2332 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.191:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-191?timeout=10s\": dial tcp 172.31.25.191:6443: connect: connection refused" interval="800ms" Feb 9 19:17:39.725243 kubelet[2332]: I0209 19:17:39.724704 2332 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-191" Feb 9 19:17:39.725243 kubelet[2332]: E0209 19:17:39.725166 2332 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.25.191:6443/api/v1/nodes\": dial tcp 172.31.25.191:6443: connect: connection refused" node="ip-172-31-25-191" Feb 9 19:17:40.021556 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2034365887.mount: Deactivated successfully. Feb 9 19:17:40.032782 env[1657]: time="2024-02-09T19:17:40.032726884Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:40.034580 env[1657]: time="2024-02-09T19:17:40.034537782Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:40.038872 env[1657]: time="2024-02-09T19:17:40.038823925Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:40.041046 env[1657]: time="2024-02-09T19:17:40.041003027Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:40.043233 env[1657]: time="2024-02-09T19:17:40.043187925Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:40.047115 env[1657]: time="2024-02-09T19:17:40.047068023Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:40.050382 env[1657]: time="2024-02-09T19:17:40.050301881Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:40.064280 env[1657]: time="2024-02-09T19:17:40.064224132Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:40.066811 env[1657]: time="2024-02-09T19:17:40.066766397Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:40.073792 env[1657]: time="2024-02-09T19:17:40.073738275Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:40.075422 env[1657]: time="2024-02-09T19:17:40.075375350Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:40.077217 env[1657]: time="2024-02-09T19:17:40.077161403Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:17:40.134859 env[1657]: time="2024-02-09T19:17:40.134515190Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 19:17:40.134859 env[1657]: time="2024-02-09T19:17:40.134592506Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 19:17:40.134859 env[1657]: time="2024-02-09T19:17:40.134617638Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 19:17:40.136529 env[1657]: time="2024-02-09T19:17:40.136400307Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/00bd928c4063b6acdd3be8d34245bafea5ed4200fc8db0ce3bbc280764e7256f pid=2375 runtime=io.containerd.runc.v2 Feb 9 19:17:40.138067 env[1657]: time="2024-02-09T19:17:40.136801936Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 19:17:40.138067 env[1657]: time="2024-02-09T19:17:40.136871943Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 19:17:40.138067 env[1657]: time="2024-02-09T19:17:40.136898683Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 19:17:40.138067 env[1657]: time="2024-02-09T19:17:40.137116108Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2219212f6a758124cb2cf11ba595df2e5048ce98612d43afcf9e134a42263fea pid=2382 runtime=io.containerd.runc.v2 Feb 9 19:17:40.143044 env[1657]: time="2024-02-09T19:17:40.142904402Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 19:17:40.143385 env[1657]: time="2024-02-09T19:17:40.143279819Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 19:17:40.143595 env[1657]: time="2024-02-09T19:17:40.143547376Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 19:17:40.144160 env[1657]: time="2024-02-09T19:17:40.144065507Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/22df3f4bcc0a3d8a22bfbde599695fd5f5d59586e598c6a4da08e2aa1128f994 pid=2390 runtime=io.containerd.runc.v2 Feb 9 19:17:40.166797 systemd[1]: Started cri-containerd-2219212f6a758124cb2cf11ba595df2e5048ce98612d43afcf9e134a42263fea.scope. Feb 9 19:17:40.193606 systemd[1]: Started cri-containerd-00bd928c4063b6acdd3be8d34245bafea5ed4200fc8db0ce3bbc280764e7256f.scope. Feb 9 19:17:40.200195 kubelet[2332]: W0209 19:17:40.200135 2332 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.25.191:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.25.191:6443: connect: connection refused Feb 9 19:17:40.210005 kubelet[2332]: E0209 19:17:40.200211 2332 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.25.191:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.25.191:6443: connect: connection refused Feb 9 19:17:40.235000 systemd[1]: Started cri-containerd-22df3f4bcc0a3d8a22bfbde599695fd5f5d59586e598c6a4da08e2aa1128f994.scope. Feb 9 19:17:40.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.241000 audit: BPF prog-id=70 op=LOAD Feb 9 19:17:40.243000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.243000 audit[2406]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2375 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030626439323863343036336236616364643362653864333432343562 Feb 9 19:17:40.243000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.243000 audit[2406]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2375 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030626439323863343036336236616364643362653864333432343562 Feb 9 19:17:40.243000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.243000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.243000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.243000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.244000 audit: BPF prog-id=71 op=LOAD Feb 9 19:17:40.247000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.247000 audit[2407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2382 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232313932313266366137353831323463623263663131626135393564 Feb 9 19:17:40.243000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.243000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.243000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.243000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.243000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.248000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.243000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.243000 audit: BPF prog-id=72 op=LOAD Feb 9 19:17:40.248000 audit[2407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2382 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232313932313266366137353831323463623263663131626135393564 Feb 9 19:17:40.249000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.249000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.243000 audit[2406]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2375 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030626439323863343036336236616364643362653864333432343562 Feb 9 19:17:40.249000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.249000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.249000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.249000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.250000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.249000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.249000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.249000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.249000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.249000 audit: BPF prog-id=73 op=LOAD Feb 9 19:17:40.250000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.250000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.250000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.250000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.250000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.250000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.250000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.250000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.250000 audit: BPF prog-id=74 op=LOAD Feb 9 19:17:40.249000 audit[2407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2382 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232313932313266366137353831323463623263663131626135393564 Feb 9 19:17:40.252000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.250000 audit[2406]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2375 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030626439323863343036336236616364643362653864333432343562 Feb 9 19:17:40.252000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.252000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.252000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.252000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.252000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.252000 audit: BPF prog-id=74 op=UNLOAD Feb 9 19:17:40.253000 audit: BPF prog-id=72 op=UNLOAD Feb 9 19:17:40.252000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.252000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.252000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.252000 audit: BPF prog-id=75 op=LOAD Feb 9 19:17:40.254000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.252000 audit[2407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2382 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232313932313266366137353831323463623263663131626135393564 Feb 9 19:17:40.254000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.254000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.254000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.254000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.254000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.254000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.254000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.254000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.257000 audit: BPF prog-id=75 op=UNLOAD Feb 9 19:17:40.254000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.254000 audit: BPF prog-id=76 op=LOAD Feb 9 19:17:40.258000 audit: BPF prog-id=73 op=UNLOAD Feb 9 19:17:40.259000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.259000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.259000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.259000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.259000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.259000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.259000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.259000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.259000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.259000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.259000 audit: BPF prog-id=77 op=LOAD Feb 9 19:17:40.254000 audit[2406]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2375 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.254000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030626439323863343036336236616364643362653864333432343562 Feb 9 19:17:40.259000 audit[2407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2382 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232313932313266366137353831323463623263663131626135393564 Feb 9 19:17:40.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.291000 audit: BPF prog-id=78 op=LOAD Feb 9 19:17:40.293000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.293000 audit[2423]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2390 pid=2423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232646633663462636330613364386132326266626465353939363935 Feb 9 19:17:40.293000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.293000 audit[2423]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2390 pid=2423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232646633663462636330613364386132326266626465353939363935 Feb 9 19:17:40.293000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.293000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.293000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.293000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.293000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.293000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.293000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.293000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.293000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.293000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.293000 audit: BPF prog-id=79 op=LOAD Feb 9 19:17:40.293000 audit[2423]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2390 pid=2423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232646633663462636330613364386132326266626465353939363935 Feb 9 19:17:40.295000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.295000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.295000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.295000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.295000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.295000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.295000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.295000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.295000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.295000 audit: BPF prog-id=80 op=LOAD Feb 9 19:17:40.295000 audit[2423]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2390 pid=2423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232646633663462636330613364386132326266626465353939363935 Feb 9 19:17:40.297000 audit: BPF prog-id=80 op=UNLOAD Feb 9 19:17:40.297000 audit: BPF prog-id=79 op=UNLOAD Feb 9 19:17:40.297000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.297000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.297000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.297000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.297000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.297000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.297000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.297000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.297000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.297000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.297000 audit: BPF prog-id=81 op=LOAD Feb 9 19:17:40.297000 audit[2423]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2390 pid=2423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232646633663462636330613364386132326266626465353939363935 Feb 9 19:17:40.340072 env[1657]: time="2024-02-09T19:17:40.339991116Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-25-191,Uid:5a6639665696f0a7bb7c023ea03cafd5,Namespace:kube-system,Attempt:0,} returns sandbox id \"2219212f6a758124cb2cf11ba595df2e5048ce98612d43afcf9e134a42263fea\"" Feb 9 19:17:40.341111 kubelet[2332]: W0209 19:17:40.341022 2332 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.25.191:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-191&limit=500&resourceVersion=0": dial tcp 172.31.25.191:6443: connect: connection refused Feb 9 19:17:40.341252 kubelet[2332]: E0209 19:17:40.341137 2332 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.25.191:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-191&limit=500&resourceVersion=0": dial tcp 172.31.25.191:6443: connect: connection refused Feb 9 19:17:40.348553 env[1657]: time="2024-02-09T19:17:40.348485296Z" level=info msg="CreateContainer within sandbox \"2219212f6a758124cb2cf11ba595df2e5048ce98612d43afcf9e134a42263fea\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Feb 9 19:17:40.364199 env[1657]: time="2024-02-09T19:17:40.364121360Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-25-191,Uid:4f0fc70628dd95c226159baa16b7d8d4,Namespace:kube-system,Attempt:0,} returns sandbox id \"00bd928c4063b6acdd3be8d34245bafea5ed4200fc8db0ce3bbc280764e7256f\"" Feb 9 19:17:40.370533 env[1657]: time="2024-02-09T19:17:40.370478829Z" level=info msg="CreateContainer within sandbox \"00bd928c4063b6acdd3be8d34245bafea5ed4200fc8db0ce3bbc280764e7256f\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Feb 9 19:17:40.382956 env[1657]: time="2024-02-09T19:17:40.382901006Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-25-191,Uid:05502a3d39621ecde8093546b9c4e23d,Namespace:kube-system,Attempt:0,} returns sandbox id \"22df3f4bcc0a3d8a22bfbde599695fd5f5d59586e598c6a4da08e2aa1128f994\"" Feb 9 19:17:40.387959 env[1657]: time="2024-02-09T19:17:40.387896362Z" level=info msg="CreateContainer within sandbox \"2219212f6a758124cb2cf11ba595df2e5048ce98612d43afcf9e134a42263fea\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"728453a0ca2c392ed49207008653eb9d9b559be9444266f8184a6e2a02549de5\"" Feb 9 19:17:40.389030 env[1657]: time="2024-02-09T19:17:40.388961213Z" level=info msg="CreateContainer within sandbox \"22df3f4bcc0a3d8a22bfbde599695fd5f5d59586e598c6a4da08e2aa1128f994\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Feb 9 19:17:40.389634 env[1657]: time="2024-02-09T19:17:40.389465182Z" level=info msg="StartContainer for \"728453a0ca2c392ed49207008653eb9d9b559be9444266f8184a6e2a02549de5\"" Feb 9 19:17:40.412537 env[1657]: time="2024-02-09T19:17:40.412458672Z" level=info msg="CreateContainer within sandbox \"00bd928c4063b6acdd3be8d34245bafea5ed4200fc8db0ce3bbc280764e7256f\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"c825b98bfddad1c9190fc83cc76af6aa531256a2451271a92aaacf797dfaef99\"" Feb 9 19:17:40.415603 env[1657]: time="2024-02-09T19:17:40.415531298Z" level=info msg="StartContainer for \"c825b98bfddad1c9190fc83cc76af6aa531256a2451271a92aaacf797dfaef99\"" Feb 9 19:17:40.420784 kubelet[2332]: E0209 19:17:40.420698 2332 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.191:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-191?timeout=10s\": dial tcp 172.31.25.191:6443: connect: connection refused" interval="1.6s" Feb 9 19:17:40.425477 env[1657]: time="2024-02-09T19:17:40.425412902Z" level=info msg="CreateContainer within sandbox \"22df3f4bcc0a3d8a22bfbde599695fd5f5d59586e598c6a4da08e2aa1128f994\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"ae3dd549120d1d3e1616cc5f5f0db97320c56b3ebce78989808082c05271b068\"" Feb 9 19:17:40.426901 env[1657]: time="2024-02-09T19:17:40.426851322Z" level=info msg="StartContainer for \"ae3dd549120d1d3e1616cc5f5f0db97320c56b3ebce78989808082c05271b068\"" Feb 9 19:17:40.436627 systemd[1]: Started cri-containerd-728453a0ca2c392ed49207008653eb9d9b559be9444266f8184a6e2a02549de5.scope. Feb 9 19:17:40.490371 systemd[1]: Started cri-containerd-c825b98bfddad1c9190fc83cc76af6aa531256a2451271a92aaacf797dfaef99.scope. Feb 9 19:17:40.506950 systemd[1]: Started cri-containerd-ae3dd549120d1d3e1616cc5f5f0db97320c56b3ebce78989808082c05271b068.scope. Feb 9 19:17:40.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.511000 audit: BPF prog-id=82 op=LOAD Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2382 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732383435336130636132633339326564343932303730303836353365 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2382 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732383435336130636132633339326564343932303730303836353365 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit: BPF prog-id=83 op=LOAD Feb 9 19:17:40.516000 audit[2496]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2382 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732383435336130636132633339326564343932303730303836353365 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit: BPF prog-id=84 op=LOAD Feb 9 19:17:40.516000 audit[2496]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2382 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732383435336130636132633339326564343932303730303836353365 Feb 9 19:17:40.516000 audit: BPF prog-id=84 op=UNLOAD Feb 9 19:17:40.516000 audit: BPF prog-id=83 op=UNLOAD Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.516000 audit: BPF prog-id=85 op=LOAD Feb 9 19:17:40.516000 audit[2496]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2382 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732383435336130636132633339326564343932303730303836353365 Feb 9 19:17:40.523425 kubelet[2332]: W0209 19:17:40.523207 2332 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.25.191:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.191:6443: connect: connection refused Feb 9 19:17:40.523425 kubelet[2332]: E0209 19:17:40.523366 2332 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.25.191:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.191:6443: connect: connection refused Feb 9 19:17:40.531594 kubelet[2332]: I0209 19:17:40.531035 2332 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-191" Feb 9 19:17:40.531594 kubelet[2332]: W0209 19:17:40.531416 2332 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.25.191:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.191:6443: connect: connection refused Feb 9 19:17:40.531594 kubelet[2332]: E0209 19:17:40.531472 2332 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.25.191:6443/api/v1/nodes\": dial tcp 172.31.25.191:6443: connect: connection refused" node="ip-172-31-25-191" Feb 9 19:17:40.531594 kubelet[2332]: E0209 19:17:40.531497 2332 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.25.191:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.191:6443: connect: connection refused Feb 9 19:17:40.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.556000 audit: BPF prog-id=86 op=LOAD Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2375 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.558000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338323562393862666464616431633931393066633833636337366166 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2375 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.558000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338323562393862666464616431633931393066633833636337366166 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit: BPF prog-id=87 op=LOAD Feb 9 19:17:40.558000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2375 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.558000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338323562393862666464616431633931393066633833636337366166 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit: BPF prog-id=88 op=LOAD Feb 9 19:17:40.558000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2375 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.558000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338323562393862666464616431633931393066633833636337366166 Feb 9 19:17:40.558000 audit: BPF prog-id=88 op=UNLOAD Feb 9 19:17:40.558000 audit: BPF prog-id=87 op=UNLOAD Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.558000 audit: BPF prog-id=89 op=LOAD Feb 9 19:17:40.558000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2375 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.558000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338323562393862666464616431633931393066633833636337366166 Feb 9 19:17:40.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.586000 audit: BPF prog-id=90 op=LOAD Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { bpf } for pid=2523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2390 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165336464353439313230643164336531363136636335663566306462 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { perfmon } for pid=2523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2390 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165336464353439313230643164336531363136636335663566306462 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { bpf } for pid=2523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { bpf } for pid=2523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { bpf } for pid=2523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { perfmon } for pid=2523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { perfmon } for pid=2523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { perfmon } for pid=2523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { perfmon } for pid=2523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { perfmon } for pid=2523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { bpf } for pid=2523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { bpf } for pid=2523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit: BPF prog-id=91 op=LOAD Feb 9 19:17:40.588000 audit[2523]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2390 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165336464353439313230643164336531363136636335663566306462 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { bpf } for pid=2523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { bpf } for pid=2523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { perfmon } for pid=2523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { perfmon } for pid=2523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { perfmon } for pid=2523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { perfmon } for pid=2523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { perfmon } for pid=2523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { bpf } for pid=2523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit[2523]: AVC avc: denied { bpf } for pid=2523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.588000 audit: BPF prog-id=92 op=LOAD Feb 9 19:17:40.588000 audit[2523]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2390 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165336464353439313230643164336531363136636335663566306462 Feb 9 19:17:40.589000 audit: BPF prog-id=92 op=UNLOAD Feb 9 19:17:40.589000 audit: BPF prog-id=91 op=UNLOAD Feb 9 19:17:40.589000 audit[2523]: AVC avc: denied { bpf } for pid=2523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.589000 audit[2523]: AVC avc: denied { bpf } for pid=2523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.589000 audit[2523]: AVC avc: denied { bpf } for pid=2523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.589000 audit[2523]: AVC avc: denied { perfmon } for pid=2523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.589000 audit[2523]: AVC avc: denied { perfmon } for pid=2523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.589000 audit[2523]: AVC avc: denied { perfmon } for pid=2523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.589000 audit[2523]: AVC avc: denied { perfmon } for pid=2523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.589000 audit[2523]: AVC avc: denied { perfmon } for pid=2523 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.589000 audit[2523]: AVC avc: denied { bpf } for pid=2523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.589000 audit[2523]: AVC avc: denied { bpf } for pid=2523 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:40.589000 audit: BPF prog-id=93 op=LOAD Feb 9 19:17:40.589000 audit[2523]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2390 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:40.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165336464353439313230643164336531363136636335663566306462 Feb 9 19:17:40.624048 env[1657]: time="2024-02-09T19:17:40.623983632Z" level=info msg="StartContainer for \"728453a0ca2c392ed49207008653eb9d9b559be9444266f8184a6e2a02549de5\" returns successfully" Feb 9 19:17:40.646348 env[1657]: time="2024-02-09T19:17:40.644642069Z" level=info msg="StartContainer for \"ae3dd549120d1d3e1616cc5f5f0db97320c56b3ebce78989808082c05271b068\" returns successfully" Feb 9 19:17:40.674742 env[1657]: time="2024-02-09T19:17:40.674661902Z" level=info msg="StartContainer for \"c825b98bfddad1c9190fc83cc76af6aa531256a2451271a92aaacf797dfaef99\" returns successfully" Feb 9 19:17:42.134021 kubelet[2332]: I0209 19:17:42.133988 2332 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-191" Feb 9 19:17:43.025160 amazon-ssm-agent[1655]: 2024-02-09 19:17:43 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Feb 9 19:17:43.460425 update_engine[1648]: I0209 19:17:43.460358 1648 update_attempter.cc:509] Updating boot flags... Feb 9 19:17:44.541956 kernel: kauditd_printk_skb: 571 callbacks suppressed Feb 9 19:17:44.542139 kernel: audit: type=1400 audit(1707506264.529:718): avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:17:44.529000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:17:44.529000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001048000 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:17:44.557731 kernel: audit: type=1300 audit(1707506264.529:718): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001048000 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:17:44.529000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:17:44.574452 kernel: audit: type=1327 audit(1707506264.529:718): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:17:44.541000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:17:44.588577 kernel: audit: type=1400 audit(1707506264.541:719): avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:17:44.541000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000339480 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:17:44.605411 kernel: audit: type=1300 audit(1707506264.541:719): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000339480 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:17:44.541000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:17:44.617509 kernel: audit: type=1327 audit(1707506264.541:719): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:17:45.380000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:17:45.380000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=400baa3650 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:17:45.405687 kernel: audit: type=1400 audit(1707506265.380:720): avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:17:45.405834 kernel: audit: type=1300 audit(1707506265.380:720): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=400baa3650 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:17:45.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:17:45.419379 kernel: audit: type=1327 audit(1707506265.380:720): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:17:45.380000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:17:45.430450 kernel: audit: type=1400 audit(1707506265.380:721): avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:17:45.380000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40064b8180 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:17:45.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:17:45.380000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520992 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:17:45.380000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=400baa3770 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:17:45.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:17:45.385000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520998 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:17:45.385000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4003eeec00 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:17:45.385000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:17:45.385000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:17:45.385000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40064b9e40 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:17:45.385000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:17:45.385000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:17:45.385000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=4003eefb60 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:17:45.385000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:17:45.764687 kubelet[2332]: I0209 19:17:45.764550 2332 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-25-191" Feb 9 19:17:45.806956 kubelet[2332]: E0209 19:17:45.806784 2332 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-25-191.17b247e5531292a4", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-25-191", UID:"ip-172-31-25-191", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-25-191"}, FirstTimestamp:time.Date(2024, time.February, 9, 19, 17, 38, 993648292, time.Local), LastTimestamp:time.Date(2024, time.February, 9, 19, 17, 38, 993648292, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Feb 9 19:17:45.852436 kubelet[2332]: E0209 19:17:45.852385 2332 controller.go:146] "Failed to ensure lease exists, will retry" err="namespaces \"kube-node-lease\" not found" interval="3.2s" Feb 9 19:17:45.870150 kubelet[2332]: E0209 19:17:45.870025 2332 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-25-191.17b247e55363a21e", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-25-191", UID:"ip-172-31-25-191", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-25-191"}, FirstTimestamp:time.Date(2024, time.February, 9, 19, 17, 38, 998960670, time.Local), LastTimestamp:time.Date(2024, time.February, 9, 19, 17, 38, 998960670, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Feb 9 19:17:45.990670 kubelet[2332]: I0209 19:17:45.990611 2332 apiserver.go:52] "Watching apiserver" Feb 9 19:17:46.013808 kubelet[2332]: I0209 19:17:46.013737 2332 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Feb 9 19:17:46.065136 kubelet[2332]: I0209 19:17:46.065094 2332 reconciler.go:41] "Reconciler: start to sync state" Feb 9 19:17:48.697257 systemd[1]: Reloading. Feb 9 19:17:48.859466 /usr/lib/systemd/system-generators/torcx-generator[2802]: time="2024-02-09T19:17:48Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 19:17:48.864428 /usr/lib/systemd/system-generators/torcx-generator[2802]: time="2024-02-09T19:17:48Z" level=info msg="torcx already run" Feb 9 19:17:49.019734 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 19:17:49.020263 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 19:17:49.067677 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 19:17:49.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.280000 audit: BPF prog-id=94 op=LOAD Feb 9 19:17:49.281000 audit: BPF prog-id=78 op=UNLOAD Feb 9 19:17:49.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.283000 audit: BPF prog-id=95 op=LOAD Feb 9 19:17:49.283000 audit: BPF prog-id=55 op=UNLOAD Feb 9 19:17:49.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.284000 audit: BPF prog-id=96 op=LOAD Feb 9 19:17:49.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.284000 audit: BPF prog-id=97 op=LOAD Feb 9 19:17:49.284000 audit: BPF prog-id=56 op=UNLOAD Feb 9 19:17:49.284000 audit: BPF prog-id=57 op=UNLOAD Feb 9 19:17:49.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.285000 audit: BPF prog-id=98 op=LOAD Feb 9 19:17:49.285000 audit: BPF prog-id=58 op=UNLOAD Feb 9 19:17:49.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit: BPF prog-id=99 op=LOAD Feb 9 19:17:49.288000 audit: BPF prog-id=59 op=UNLOAD Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit: BPF prog-id=100 op=LOAD Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.288000 audit: BPF prog-id=101 op=LOAD Feb 9 19:17:49.288000 audit: BPF prog-id=60 op=UNLOAD Feb 9 19:17:49.288000 audit: BPF prog-id=61 op=UNLOAD Feb 9 19:17:49.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.291000 audit: BPF prog-id=102 op=LOAD Feb 9 19:17:49.291000 audit: BPF prog-id=86 op=UNLOAD Feb 9 19:17:49.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.294000 audit: BPF prog-id=103 op=LOAD Feb 9 19:17:49.294000 audit: BPF prog-id=71 op=UNLOAD Feb 9 19:17:49.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.295000 audit: BPF prog-id=104 op=LOAD Feb 9 19:17:49.295000 audit: BPF prog-id=70 op=UNLOAD Feb 9 19:17:49.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.296000 audit: BPF prog-id=105 op=LOAD Feb 9 19:17:49.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.296000 audit: BPF prog-id=106 op=LOAD Feb 9 19:17:49.296000 audit: BPF prog-id=62 op=UNLOAD Feb 9 19:17:49.296000 audit: BPF prog-id=63 op=UNLOAD Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit: BPF prog-id=107 op=LOAD Feb 9 19:17:49.298000 audit: BPF prog-id=64 op=UNLOAD Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit: BPF prog-id=108 op=LOAD Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.298000 audit: BPF prog-id=109 op=LOAD Feb 9 19:17:49.299000 audit: BPF prog-id=65 op=UNLOAD Feb 9 19:17:49.299000 audit: BPF prog-id=66 op=UNLOAD Feb 9 19:17:49.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.300000 audit: BPF prog-id=110 op=LOAD Feb 9 19:17:49.300000 audit: BPF prog-id=82 op=UNLOAD Feb 9 19:17:49.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.301000 audit: BPF prog-id=111 op=LOAD Feb 9 19:17:49.301000 audit: BPF prog-id=67 op=UNLOAD Feb 9 19:17:49.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.307000 audit: BPF prog-id=112 op=LOAD Feb 9 19:17:49.307000 audit: BPF prog-id=68 op=UNLOAD Feb 9 19:17:49.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.315000 audit: BPF prog-id=113 op=LOAD Feb 9 19:17:49.315000 audit: BPF prog-id=90 op=UNLOAD Feb 9 19:17:49.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.318000 audit: BPF prog-id=114 op=LOAD Feb 9 19:17:49.318000 audit: BPF prog-id=69 op=UNLOAD Feb 9 19:17:49.353264 systemd[1]: Stopping kubelet.service... Feb 9 19:17:49.377883 systemd[1]: kubelet.service: Deactivated successfully. Feb 9 19:17:49.378331 systemd[1]: Stopped kubelet.service. Feb 9 19:17:49.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:49.378431 systemd[1]: kubelet.service: Consumed 3.045s CPU time. Feb 9 19:17:49.383085 systemd[1]: Started kubelet.service. Feb 9 19:17:49.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:49.517969 kubelet[2857]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 19:17:49.517969 kubelet[2857]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Feb 9 19:17:49.518529 kubelet[2857]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 19:17:49.518529 kubelet[2857]: I0209 19:17:49.518136 2857 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 9 19:17:49.527234 kubelet[2857]: I0209 19:17:49.527177 2857 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Feb 9 19:17:49.527234 kubelet[2857]: I0209 19:17:49.527224 2857 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 9 19:17:49.527648 kubelet[2857]: I0209 19:17:49.527610 2857 server.go:837] "Client rotation is on, will bootstrap in background" Feb 9 19:17:49.530832 kubelet[2857]: I0209 19:17:49.530780 2857 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Feb 9 19:17:49.532766 kubelet[2857]: I0209 19:17:49.532619 2857 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 9 19:17:49.541047 kubelet[2857]: W0209 19:17:49.541001 2857 machine.go:65] Cannot read vendor id correctly, set empty. Feb 9 19:17:49.542524 kubelet[2857]: I0209 19:17:49.542474 2857 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 9 19:17:49.542998 kubelet[2857]: I0209 19:17:49.542965 2857 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 9 19:17:49.543129 kubelet[2857]: I0209 19:17:49.543095 2857 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Feb 9 19:17:49.543304 kubelet[2857]: I0209 19:17:49.543150 2857 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Feb 9 19:17:49.543304 kubelet[2857]: I0209 19:17:49.543174 2857 container_manager_linux.go:302] "Creating device plugin manager" Feb 9 19:17:49.543304 kubelet[2857]: I0209 19:17:49.543236 2857 state_mem.go:36] "Initialized new in-memory state store" Feb 9 19:17:49.549275 kubelet[2857]: I0209 19:17:49.549226 2857 kubelet.go:405] "Attempting to sync node with API server" Feb 9 19:17:49.549275 kubelet[2857]: I0209 19:17:49.549275 2857 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 9 19:17:49.549534 kubelet[2857]: I0209 19:17:49.549343 2857 kubelet.go:309] "Adding apiserver pod source" Feb 9 19:17:49.549534 kubelet[2857]: I0209 19:17:49.549374 2857 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 9 19:17:49.555421 kubelet[2857]: I0209 19:17:49.555370 2857 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 9 19:17:49.556217 kubelet[2857]: I0209 19:17:49.556162 2857 server.go:1168] "Started kubelet" Feb 9 19:17:49.582160 kubelet[2857]: I0209 19:17:49.581121 2857 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Feb 9 19:17:49.582700 kubelet[2857]: I0209 19:17:49.582473 2857 server.go:461] "Adding debug handlers to kubelet server" Feb 9 19:17:49.585336 kubelet[2857]: I0209 19:17:49.584917 2857 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Feb 9 19:17:49.609336 kernel: kauditd_printk_skb: 260 callbacks suppressed Feb 9 19:17:49.609462 kernel: audit: type=1400 audit(1707506269.592:972): avc: denied { mac_admin } for pid=2857 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.592000 audit[2857]: AVC avc: denied { mac_admin } for pid=2857 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.609623 kubelet[2857]: E0209 19:17:49.602606 2857 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 9 19:17:49.609623 kubelet[2857]: E0209 19:17:49.602651 2857 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 9 19:17:49.613322 kubelet[2857]: I0209 19:17:49.611736 2857 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 9 19:17:49.613322 kubelet[2857]: I0209 19:17:49.611850 2857 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 9 19:17:49.613322 kubelet[2857]: I0209 19:17:49.611894 2857 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 9 19:17:49.592000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 19:17:49.618338 kernel: audit: type=1401 audit(1707506269.592:972): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 19:17:49.592000 audit[2857]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000eca300 a1=4000e8ea98 a2=4000eca2d0 a3=25 items=0 ppid=1 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:49.632333 kernel: audit: type=1300 audit(1707506269.592:972): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000eca300 a1=4000e8ea98 a2=4000eca2d0 a3=25 items=0 ppid=1 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:49.634877 kubelet[2857]: I0209 19:17:49.633365 2857 volume_manager.go:284] "Starting Kubelet Volume Manager" Feb 9 19:17:49.634877 kubelet[2857]: I0209 19:17:49.634003 2857 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Feb 9 19:17:49.592000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 19:17:49.649404 kernel: audit: type=1327 audit(1707506269.592:972): proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 19:17:49.610000 audit[2857]: AVC avc: denied { mac_admin } for pid=2857 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.667988 kernel: audit: type=1400 audit(1707506269.610:973): avc: denied { mac_admin } for pid=2857 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.678380 kernel: audit: type=1401 audit(1707506269.610:973): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 19:17:49.610000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 19:17:49.610000 audit[2857]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e5d6c0 a1=4000e8eab0 a2=4000eca390 a3=25 items=0 ppid=1 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:49.698324 kernel: audit: type=1300 audit(1707506269.610:973): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e5d6c0 a1=4000e8eab0 a2=4000eca390 a3=25 items=0 ppid=1 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:49.698458 kernel: audit: type=1327 audit(1707506269.610:973): proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 19:17:49.610000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 19:17:49.767598 kubelet[2857]: I0209 19:17:49.766659 2857 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-191" Feb 9 19:17:49.776458 kubelet[2857]: I0209 19:17:49.776420 2857 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Feb 9 19:17:49.785572 kubelet[2857]: I0209 19:17:49.785452 2857 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Feb 9 19:17:49.785810 kubelet[2857]: I0209 19:17:49.785788 2857 status_manager.go:207] "Starting to sync pod status with apiserver" Feb 9 19:17:49.785934 kubelet[2857]: I0209 19:17:49.785914 2857 kubelet.go:2257] "Starting kubelet main sync loop" Feb 9 19:17:49.788360 kubelet[2857]: E0209 19:17:49.786087 2857 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Feb 9 19:17:49.836052 kubelet[2857]: I0209 19:17:49.835990 2857 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-25-191" Feb 9 19:17:49.836206 kubelet[2857]: I0209 19:17:49.836168 2857 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-25-191" Feb 9 19:17:49.896692 kubelet[2857]: E0209 19:17:49.896622 2857 kubelet.go:2281] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Feb 9 19:17:49.947715 kubelet[2857]: I0209 19:17:49.947666 2857 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 9 19:17:49.947715 kubelet[2857]: I0209 19:17:49.947708 2857 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 9 19:17:49.947938 kubelet[2857]: I0209 19:17:49.947743 2857 state_mem.go:36] "Initialized new in-memory state store" Feb 9 19:17:49.948044 kubelet[2857]: I0209 19:17:49.948010 2857 state_mem.go:88] "Updated default CPUSet" cpuSet="" Feb 9 19:17:49.948115 kubelet[2857]: I0209 19:17:49.948046 2857 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Feb 9 19:17:49.948115 kubelet[2857]: I0209 19:17:49.948064 2857 policy_none.go:49] "None policy: Start" Feb 9 19:17:49.949255 kubelet[2857]: I0209 19:17:49.949201 2857 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 9 19:17:49.949255 kubelet[2857]: I0209 19:17:49.949260 2857 state_mem.go:35] "Initializing new in-memory state store" Feb 9 19:17:49.949656 kubelet[2857]: I0209 19:17:49.949615 2857 state_mem.go:75] "Updated machine memory state" Feb 9 19:17:49.968424 kubelet[2857]: I0209 19:17:49.968359 2857 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 9 19:17:49.967000 audit[2857]: AVC avc: denied { mac_admin } for pid=2857 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.977018 kubelet[2857]: I0209 19:17:49.976937 2857 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 9 19:17:49.967000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 19:17:49.984184 kernel: audit: type=1400 audit(1707506269.967:974): avc: denied { mac_admin } for pid=2857 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:17:49.984319 kernel: audit: type=1401 audit(1707506269.967:974): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 19:17:49.967000 audit[2857]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000eca060 a1=4000e8f4b8 a2=4000eca030 a3=25 items=0 ppid=1 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:17:49.967000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 19:17:49.986273 kubelet[2857]: I0209 19:17:49.986230 2857 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 9 19:17:50.097852 kubelet[2857]: I0209 19:17:50.097704 2857 topology_manager.go:212] "Topology Admit Handler" Feb 9 19:17:50.097852 kubelet[2857]: I0209 19:17:50.097839 2857 topology_manager.go:212] "Topology Admit Handler" Feb 9 19:17:50.098050 kubelet[2857]: I0209 19:17:50.097906 2857 topology_manager.go:212] "Topology Admit Handler" Feb 9 19:17:50.111378 kubelet[2857]: E0209 19:17:50.111323 2857 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-25-191\" already exists" pod="kube-system/kube-scheduler-ip-172-31-25-191" Feb 9 19:17:50.144313 kubelet[2857]: I0209 19:17:50.144223 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5a6639665696f0a7bb7c023ea03cafd5-kubeconfig\") pod \"kube-scheduler-ip-172-31-25-191\" (UID: \"5a6639665696f0a7bb7c023ea03cafd5\") " pod="kube-system/kube-scheduler-ip-172-31-25-191" Feb 9 19:17:50.144504 kubelet[2857]: I0209 19:17:50.144342 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/05502a3d39621ecde8093546b9c4e23d-k8s-certs\") pod \"kube-apiserver-ip-172-31-25-191\" (UID: \"05502a3d39621ecde8093546b9c4e23d\") " pod="kube-system/kube-apiserver-ip-172-31-25-191" Feb 9 19:17:50.144504 kubelet[2857]: I0209 19:17:50.144417 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4f0fc70628dd95c226159baa16b7d8d4-ca-certs\") pod \"kube-controller-manager-ip-172-31-25-191\" (UID: \"4f0fc70628dd95c226159baa16b7d8d4\") " pod="kube-system/kube-controller-manager-ip-172-31-25-191" Feb 9 19:17:50.144504 kubelet[2857]: I0209 19:17:50.144487 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4f0fc70628dd95c226159baa16b7d8d4-k8s-certs\") pod \"kube-controller-manager-ip-172-31-25-191\" (UID: \"4f0fc70628dd95c226159baa16b7d8d4\") " pod="kube-system/kube-controller-manager-ip-172-31-25-191" Feb 9 19:17:50.144674 kubelet[2857]: I0209 19:17:50.144563 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4f0fc70628dd95c226159baa16b7d8d4-kubeconfig\") pod \"kube-controller-manager-ip-172-31-25-191\" (UID: \"4f0fc70628dd95c226159baa16b7d8d4\") " pod="kube-system/kube-controller-manager-ip-172-31-25-191" Feb 9 19:17:50.144674 kubelet[2857]: I0209 19:17:50.144642 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/05502a3d39621ecde8093546b9c4e23d-ca-certs\") pod \"kube-apiserver-ip-172-31-25-191\" (UID: \"05502a3d39621ecde8093546b9c4e23d\") " pod="kube-system/kube-apiserver-ip-172-31-25-191" Feb 9 19:17:50.144829 kubelet[2857]: I0209 19:17:50.144730 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/05502a3d39621ecde8093546b9c4e23d-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-25-191\" (UID: \"05502a3d39621ecde8093546b9c4e23d\") " pod="kube-system/kube-apiserver-ip-172-31-25-191" Feb 9 19:17:50.144829 kubelet[2857]: I0209 19:17:50.144780 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/4f0fc70628dd95c226159baa16b7d8d4-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-25-191\" (UID: \"4f0fc70628dd95c226159baa16b7d8d4\") " pod="kube-system/kube-controller-manager-ip-172-31-25-191" Feb 9 19:17:50.144946 kubelet[2857]: I0209 19:17:50.144854 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4f0fc70628dd95c226159baa16b7d8d4-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-25-191\" (UID: \"4f0fc70628dd95c226159baa16b7d8d4\") " pod="kube-system/kube-controller-manager-ip-172-31-25-191" Feb 9 19:17:50.189000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:17:50.189000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000e18380 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:17:50.189000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:17:50.196000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:17:50.196000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000e18560 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:17:50.196000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:17:50.202000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:17:50.202000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e187e0 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:17:50.202000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:17:50.206000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:17:50.206000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000ef53c0 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:17:50.206000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:17:50.570350 kubelet[2857]: I0209 19:17:50.570299 2857 apiserver.go:52] "Watching apiserver" Feb 9 19:17:50.634578 kubelet[2857]: I0209 19:17:50.634519 2857 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Feb 9 19:17:50.649151 kubelet[2857]: I0209 19:17:50.649076 2857 reconciler.go:41] "Reconciler: start to sync state" Feb 9 19:17:50.853452 kubelet[2857]: I0209 19:17:50.853324 2857 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-25-191" podStartSLOduration=0.853250757 podCreationTimestamp="2024-02-09 19:17:50 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 19:17:50.852451577 +0000 UTC m=+1.457655519" watchObservedRunningTime="2024-02-09 19:17:50.853250757 +0000 UTC m=+1.458454723" Feb 9 19:17:50.895393 kubelet[2857]: I0209 19:17:50.895336 2857 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-25-191" podStartSLOduration=0.895221612 podCreationTimestamp="2024-02-09 19:17:50 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 19:17:50.869324016 +0000 UTC m=+1.474527970" watchObservedRunningTime="2024-02-09 19:17:50.895221612 +0000 UTC m=+1.500425578" Feb 9 19:17:56.488027 sudo[1920]: pam_unix(sudo:session): session closed for user root Feb 9 19:17:56.486000 audit[1920]: USER_END pid=1920 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 19:17:56.490108 kernel: kauditd_printk_skb: 14 callbacks suppressed Feb 9 19:17:56.490229 kernel: audit: type=1106 audit(1707506276.486:979): pid=1920 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 19:17:56.488000 audit[1920]: CRED_DISP pid=1920 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 19:17:56.507133 kernel: audit: type=1104 audit(1707506276.488:980): pid=1920 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 19:17:56.513032 sshd[1917]: pam_unix(sshd:session): session closed for user core Feb 9 19:17:56.513000 audit[1917]: USER_END pid=1917 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:17:56.513000 audit[1917]: CRED_DISP pid=1917 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:17:56.529546 systemd-logind[1646]: Session 7 logged out. Waiting for processes to exit. Feb 9 19:17:56.530903 systemd[1]: sshd@6-172.31.25.191:22-147.75.109.163:48000.service: Deactivated successfully. Feb 9 19:17:56.532106 systemd[1]: session-7.scope: Deactivated successfully. Feb 9 19:17:56.532435 systemd[1]: session-7.scope: Consumed 9.497s CPU time. Feb 9 19:17:56.534097 systemd-logind[1646]: Removed session 7. Feb 9 19:17:56.538617 kernel: audit: type=1106 audit(1707506276.513:981): pid=1917 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:17:56.538706 kernel: audit: type=1104 audit(1707506276.513:982): pid=1917 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:17:56.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.191:22-147.75.109.163:48000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:17:56.547909 kernel: audit: type=1131 audit(1707506276.530:983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.191:22-147.75.109.163:48000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:18:00.042279 amazon-ssm-agent[1655]: 2024-02-09 19:18:00 INFO [HealthCheck] HealthCheck reporting agent health. Feb 9 19:18:02.795000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521023 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Feb 9 19:18:02.795000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40011eb6c0 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:18:02.819116 kernel: audit: type=1400 audit(1707506282.795:984): avc: denied { watch } for pid=2549 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521023 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Feb 9 19:18:02.819326 kernel: audit: type=1300 audit(1707506282.795:984): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40011eb6c0 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:18:02.819389 kernel: audit: type=1327 audit(1707506282.795:984): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:18:02.795000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:18:03.146938 kubelet[2857]: I0209 19:18:03.146796 2857 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Feb 9 19:18:03.147608 env[1657]: time="2024-02-09T19:18:03.147367562Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Feb 9 19:18:03.148052 kubelet[2857]: I0209 19:18:03.147676 2857 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Feb 9 19:18:03.231874 kubelet[2857]: I0209 19:18:03.230638 2857 topology_manager.go:212] "Topology Admit Handler" Feb 9 19:18:03.241836 systemd[1]: Created slice kubepods-besteffort-podd447e57d_1f72_48fa_a75f_8d2576b2cac0.slice. Feb 9 19:18:03.318561 kubelet[2857]: I0209 19:18:03.318514 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d447e57d-1f72-48fa-a75f-8d2576b2cac0-xtables-lock\") pod \"kube-proxy-2dts7\" (UID: \"d447e57d-1f72-48fa-a75f-8d2576b2cac0\") " pod="kube-system/kube-proxy-2dts7" Feb 9 19:18:03.318760 kubelet[2857]: I0209 19:18:03.318588 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d447e57d-1f72-48fa-a75f-8d2576b2cac0-lib-modules\") pod \"kube-proxy-2dts7\" (UID: \"d447e57d-1f72-48fa-a75f-8d2576b2cac0\") " pod="kube-system/kube-proxy-2dts7" Feb 9 19:18:03.318760 kubelet[2857]: I0209 19:18:03.318635 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wtcbq\" (UniqueName: \"kubernetes.io/projected/d447e57d-1f72-48fa-a75f-8d2576b2cac0-kube-api-access-wtcbq\") pod \"kube-proxy-2dts7\" (UID: \"d447e57d-1f72-48fa-a75f-8d2576b2cac0\") " pod="kube-system/kube-proxy-2dts7" Feb 9 19:18:03.318760 kubelet[2857]: I0209 19:18:03.318686 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/d447e57d-1f72-48fa-a75f-8d2576b2cac0-kube-proxy\") pod \"kube-proxy-2dts7\" (UID: \"d447e57d-1f72-48fa-a75f-8d2576b2cac0\") " pod="kube-system/kube-proxy-2dts7" Feb 9 19:18:03.552186 env[1657]: time="2024-02-09T19:18:03.552119233Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-2dts7,Uid:d447e57d-1f72-48fa-a75f-8d2576b2cac0,Namespace:kube-system,Attempt:0,}" Feb 9 19:18:03.587015 env[1657]: time="2024-02-09T19:18:03.586894885Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 19:18:03.587202 env[1657]: time="2024-02-09T19:18:03.587052298Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 19:18:03.587202 env[1657]: time="2024-02-09T19:18:03.587115878Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 19:18:03.587599 env[1657]: time="2024-02-09T19:18:03.587527610Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0c3de67ec00330eadd2adac82e66912c826e6bfdd56dc2ec4fdc210e24b581f0 pid=2941 runtime=io.containerd.runc.v2 Feb 9 19:18:03.620648 systemd[1]: Started cri-containerd-0c3de67ec00330eadd2adac82e66912c826e6bfdd56dc2ec4fdc210e24b581f0.scope. Feb 9 19:18:03.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.672135 kernel: audit: type=1400 audit(1707506283.655:985): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.672246 kernel: audit: type=1400 audit(1707506283.655:986): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.674640 kernel: audit: type=1400 audit(1707506283.655:987): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.690393 kernel: audit: type=1400 audit(1707506283.655:988): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.690607 kernel: audit: type=1400 audit(1707506283.655:989): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.708788 kernel: audit: type=1400 audit(1707506283.655:990): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.728396 kernel: audit: type=1400 audit(1707506283.655:991): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.655000 audit: BPF prog-id=115 op=LOAD Feb 9 19:18:03.656000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.656000 audit[2951]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2941 pid=2951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:03.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063336465363765633030333330656164643261646163383265363639 Feb 9 19:18:03.656000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.656000 audit[2951]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2941 pid=2951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:03.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063336465363765633030333330656164643261646163383265363639 Feb 9 19:18:03.656000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.656000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.656000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.656000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.656000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.656000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.656000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.656000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.656000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.656000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.656000 audit: BPF prog-id=116 op=LOAD Feb 9 19:18:03.656000 audit[2951]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2941 pid=2951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:03.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063336465363765633030333330656164643261646163383265363639 Feb 9 19:18:03.667000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.667000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.667000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.667000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.667000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.667000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.667000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.667000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.667000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.667000 audit: BPF prog-id=117 op=LOAD Feb 9 19:18:03.667000 audit[2951]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2941 pid=2951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:03.667000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063336465363765633030333330656164643261646163383265363639 Feb 9 19:18:03.674000 audit: BPF prog-id=117 op=UNLOAD Feb 9 19:18:03.674000 audit: BPF prog-id=116 op=UNLOAD Feb 9 19:18:03.674000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.674000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.674000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.674000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.674000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.674000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.674000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.674000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.674000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.674000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.674000 audit: BPF prog-id=118 op=LOAD Feb 9 19:18:03.674000 audit[2951]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2941 pid=2951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:03.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063336465363765633030333330656164643261646163383265363639 Feb 9 19:18:03.778529 env[1657]: time="2024-02-09T19:18:03.778458596Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-2dts7,Uid:d447e57d-1f72-48fa-a75f-8d2576b2cac0,Namespace:kube-system,Attempt:0,} returns sandbox id \"0c3de67ec00330eadd2adac82e66912c826e6bfdd56dc2ec4fdc210e24b581f0\"" Feb 9 19:18:03.784451 env[1657]: time="2024-02-09T19:18:03.784374463Z" level=info msg="CreateContainer within sandbox \"0c3de67ec00330eadd2adac82e66912c826e6bfdd56dc2ec4fdc210e24b581f0\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Feb 9 19:18:03.810056 kubelet[2857]: I0209 19:18:03.807697 2857 topology_manager.go:212] "Topology Admit Handler" Feb 9 19:18:03.826020 kubelet[2857]: I0209 19:18:03.825959 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/3fb8493a-c2f3-4d56-8e51-ab3cdbfc235d-var-lib-calico\") pod \"tigera-operator-7ff8dc855-p8x4w\" (UID: \"3fb8493a-c2f3-4d56-8e51-ab3cdbfc235d\") " pod="tigera-operator/tigera-operator-7ff8dc855-p8x4w" Feb 9 19:18:03.826159 kubelet[2857]: I0209 19:18:03.826045 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-j478c\" (UniqueName: \"kubernetes.io/projected/3fb8493a-c2f3-4d56-8e51-ab3cdbfc235d-kube-api-access-j478c\") pod \"tigera-operator-7ff8dc855-p8x4w\" (UID: \"3fb8493a-c2f3-4d56-8e51-ab3cdbfc235d\") " pod="tigera-operator/tigera-operator-7ff8dc855-p8x4w" Feb 9 19:18:03.829160 systemd[1]: Created slice kubepods-besteffort-pod3fb8493a_c2f3_4d56_8e51_ab3cdbfc235d.slice. Feb 9 19:18:03.837877 env[1657]: time="2024-02-09T19:18:03.837783981Z" level=info msg="CreateContainer within sandbox \"0c3de67ec00330eadd2adac82e66912c826e6bfdd56dc2ec4fdc210e24b581f0\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"676a455c20e545e9650bfbcb31a3e8eac1ebb02f51074be14163eb3824ab2f91\"" Feb 9 19:18:03.838951 env[1657]: time="2024-02-09T19:18:03.838868556Z" level=info msg="StartContainer for \"676a455c20e545e9650bfbcb31a3e8eac1ebb02f51074be14163eb3824ab2f91\"" Feb 9 19:18:03.914453 systemd[1]: Started cri-containerd-676a455c20e545e9650bfbcb31a3e8eac1ebb02f51074be14163eb3824ab2f91.scope. Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2941 pid=2980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:03.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637366134353563323065353435653936353062666263623331613365 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit: BPF prog-id=119 op=LOAD Feb 9 19:18:03.965000 audit[2980]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2941 pid=2980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:03.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637366134353563323065353435653936353062666263623331613365 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit: BPF prog-id=120 op=LOAD Feb 9 19:18:03.965000 audit[2980]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2941 pid=2980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:03.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637366134353563323065353435653936353062666263623331613365 Feb 9 19:18:03.965000 audit: BPF prog-id=120 op=UNLOAD Feb 9 19:18:03.965000 audit: BPF prog-id=119 op=UNLOAD Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:03.965000 audit: BPF prog-id=121 op=LOAD Feb 9 19:18:03.965000 audit[2980]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2941 pid=2980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:03.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637366134353563323065353435653936353062666263623331613365 Feb 9 19:18:03.998760 env[1657]: time="2024-02-09T19:18:03.998691857Z" level=info msg="StartContainer for \"676a455c20e545e9650bfbcb31a3e8eac1ebb02f51074be14163eb3824ab2f91\" returns successfully" Feb 9 19:18:04.125000 audit[3030]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=3030 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.125000 audit[3030]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffea1a3ee0 a2=0 a3=ffffb60c56c0 items=0 ppid=2989 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.125000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 9 19:18:04.132000 audit[3031]: NETFILTER_CFG table=nat:39 family=10 entries=1 op=nft_register_chain pid=3031 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.132000 audit[3031]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd6bad6f0 a2=0 a3=ffff906726c0 items=0 ppid=2989 pid=3031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.136944 env[1657]: time="2024-02-09T19:18:04.136887771Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7ff8dc855-p8x4w,Uid:3fb8493a-c2f3-4d56-8e51-ab3cdbfc235d,Namespace:tigera-operator,Attempt:0,}" Feb 9 19:18:04.135000 audit[3029]: NETFILTER_CFG table=mangle:40 family=2 entries=1 op=nft_register_chain pid=3029 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.135000 audit[3029]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffdda5d00 a2=0 a3=ffff9eed86c0 items=0 ppid=2989 pid=3029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.135000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 9 19:18:04.132000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 9 19:18:04.139000 audit[3032]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=3032 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.139000 audit[3032]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd7404b00 a2=0 a3=ffff8e8226c0 items=0 ppid=2989 pid=3032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.139000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 9 19:18:04.142000 audit[3033]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=3033 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.142000 audit[3033]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe72c7d90 a2=0 a3=ffff8ee906c0 items=0 ppid=2989 pid=3033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.142000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 9 19:18:04.144000 audit[3034]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=3034 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.144000 audit[3034]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe87feaf0 a2=0 a3=ffff89e556c0 items=0 ppid=2989 pid=3034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.144000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 9 19:18:04.167915 env[1657]: time="2024-02-09T19:18:04.167777266Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 19:18:04.168591 env[1657]: time="2024-02-09T19:18:04.167872227Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 19:18:04.168591 env[1657]: time="2024-02-09T19:18:04.167921994Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 19:18:04.168973 env[1657]: time="2024-02-09T19:18:04.168900349Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b142c6b4926bb6a46b7dca0c117d73929147310251e9e54c4f9f328d68804c3c pid=3043 runtime=io.containerd.runc.v2 Feb 9 19:18:04.191583 systemd[1]: Started cri-containerd-b142c6b4926bb6a46b7dca0c117d73929147310251e9e54c4f9f328d68804c3c.scope. Feb 9 19:18:04.223000 audit[3069]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3069 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.223000 audit[3069]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffdc80dfb0 a2=0 a3=ffffa0b906c0 items=0 ppid=2989 pid=3069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.223000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 9 19:18:04.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.230000 audit: BPF prog-id=122 op=LOAD Feb 9 19:18:04.231000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.231000 audit[3052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400019db38 a2=10 a3=0 items=0 ppid=3043 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231343263366234393236626236613436623764636130633131376437 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400019d5a0 a2=3c a3=0 items=0 ppid=3043 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.232000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231343263366234393236626236613436623764636130633131376437 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit: BPF prog-id=123 op=LOAD Feb 9 19:18:04.232000 audit[3052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400019d8e0 a2=78 a3=0 items=0 ppid=3043 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.232000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231343263366234393236626236613436623764636130633131376437 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit: BPF prog-id=124 op=LOAD Feb 9 19:18:04.232000 audit[3052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400019d670 a2=78 a3=0 items=0 ppid=3043 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.232000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231343263366234393236626236613436623764636130633131376437 Feb 9 19:18:04.232000 audit: BPF prog-id=124 op=UNLOAD Feb 9 19:18:04.232000 audit: BPF prog-id=123 op=UNLOAD Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:04.232000 audit: BPF prog-id=125 op=LOAD Feb 9 19:18:04.232000 audit[3052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400019db40 a2=78 a3=0 items=0 ppid=3043 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.232000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231343263366234393236626236613436623764636130633131376437 Feb 9 19:18:04.240000 audit[3071]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3071 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.240000 audit[3071]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffca321a0 a2=0 a3=ffffa2ff06c0 items=0 ppid=2989 pid=3071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.240000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Feb 9 19:18:04.248000 audit[3074]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3074 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.248000 audit[3074]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffff70f0e0 a2=0 a3=ffff8193e6c0 items=0 ppid=2989 pid=3074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.248000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Feb 9 19:18:04.252000 audit[3075]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3075 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.252000 audit[3075]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff2229c20 a2=0 a3=ffff9941e6c0 items=0 ppid=2989 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.252000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 9 19:18:04.267000 audit[3077]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3077 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.267000 audit[3077]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc5639b50 a2=0 a3=ffffb9c596c0 items=0 ppid=2989 pid=3077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.267000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 9 19:18:04.269000 audit[3080]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3080 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.269000 audit[3080]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffec5d1d40 a2=0 a3=ffffa93fd6c0 items=0 ppid=2989 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.269000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 9 19:18:04.278000 audit[3087]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3087 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.278000 audit[3087]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe4e8a9d0 a2=0 a3=ffffb77fe6c0 items=0 ppid=2989 pid=3087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.278000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 9 19:18:04.287531 env[1657]: time="2024-02-09T19:18:04.287462673Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7ff8dc855-p8x4w,Uid:3fb8493a-c2f3-4d56-8e51-ab3cdbfc235d,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"b142c6b4926bb6a46b7dca0c117d73929147310251e9e54c4f9f328d68804c3c\"" Feb 9 19:18:04.291772 env[1657]: time="2024-02-09T19:18:04.291700138Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\"" Feb 9 19:18:04.291000 audit[3090]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3090 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.291000 audit[3090]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff5275e30 a2=0 a3=ffffb411d6c0 items=0 ppid=2989 pid=3090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.291000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Feb 9 19:18:04.297000 audit[3093]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3093 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.297000 audit[3093]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc568d100 a2=0 a3=ffffadffe6c0 items=0 ppid=2989 pid=3093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.297000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 9 19:18:04.302000 audit[3095]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3095 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.302000 audit[3095]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdfc5e700 a2=0 a3=ffff97e026c0 items=0 ppid=2989 pid=3095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.302000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 9 19:18:04.304000 audit[3096]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3096 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.304000 audit[3096]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc3078510 a2=0 a3=ffff8157a6c0 items=0 ppid=2989 pid=3096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.304000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 9 19:18:04.312000 audit[3098]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3098 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.312000 audit[3098]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe9142150 a2=0 a3=ffff8c9576c0 items=0 ppid=2989 pid=3098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.312000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 9 19:18:04.319000 audit[3101]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3101 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.319000 audit[3101]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdfe39760 a2=0 a3=ffffad4626c0 items=0 ppid=2989 pid=3101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.319000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 9 19:18:04.327000 audit[3104]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3104 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.327000 audit[3104]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe5dad030 a2=0 a3=ffffb3a286c0 items=0 ppid=2989 pid=3104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.327000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 9 19:18:04.330000 audit[3105]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3105 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.330000 audit[3105]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc714e390 a2=0 a3=ffffab9766c0 items=0 ppid=2989 pid=3105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.330000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 9 19:18:04.335000 audit[3107]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3107 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.335000 audit[3107]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffe173d760 a2=0 a3=ffff8023b6c0 items=0 ppid=2989 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.335000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 19:18:04.343000 audit[3110]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3110 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.343000 audit[3110]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffbace7a0 a2=0 a3=ffffa9a616c0 items=0 ppid=2989 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.343000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 19:18:04.354000 audit[3115]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3115 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.354000 audit[3115]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff9e0ccd0 a2=0 a3=ffffae46c6c0 items=0 ppid=2989 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.354000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 9 19:18:04.361000 audit[3117]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3117 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 19:18:04.361000 audit[3117]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=fffff106ff90 a2=0 a3=ffff8eac66c0 items=0 ppid=2989 pid=3117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.361000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 9 19:18:04.384000 audit[3119]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3119 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:04.384000 audit[3119]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=fffff92d05c0 a2=0 a3=ffffa744f6c0 items=0 ppid=2989 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.384000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:04.398000 audit[3119]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3119 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:04.398000 audit[3119]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=fffff92d05c0 a2=0 a3=ffffa744f6c0 items=0 ppid=2989 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.398000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:04.400000 audit[3125]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3125 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.400000 audit[3125]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffdafacb00 a2=0 a3=ffff97e936c0 items=0 ppid=2989 pid=3125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.400000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 9 19:18:04.406000 audit[3127]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3127 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.406000 audit[3127]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe3785f30 a2=0 a3=ffffb37386c0 items=0 ppid=2989 pid=3127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.406000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Feb 9 19:18:04.418000 audit[3130]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3130 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.418000 audit[3130]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff3a19f20 a2=0 a3=ffffa0aad6c0 items=0 ppid=2989 pid=3130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.418000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Feb 9 19:18:04.423000 audit[3131]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3131 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.423000 audit[3131]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe7dacfb0 a2=0 a3=ffffa010d6c0 items=0 ppid=2989 pid=3131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.423000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 9 19:18:04.429000 audit[3133]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3133 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.429000 audit[3133]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdade6c20 a2=0 a3=ffffb5ce86c0 items=0 ppid=2989 pid=3133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.429000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 9 19:18:04.432000 audit[3134]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3134 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.432000 audit[3134]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe5333a00 a2=0 a3=ffffa80db6c0 items=0 ppid=2989 pid=3134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.432000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 9 19:18:04.440000 audit[3136]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3136 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.440000 audit[3136]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffffc6e92d0 a2=0 a3=ffff882116c0 items=0 ppid=2989 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.440000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Feb 9 19:18:04.451896 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3820109278.mount: Deactivated successfully. Feb 9 19:18:04.458000 audit[3139]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3139 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.458000 audit[3139]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffdb0d89b0 a2=0 a3=ffffa4b2f6c0 items=0 ppid=2989 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.458000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 9 19:18:04.460000 audit[3140]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3140 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.460000 audit[3140]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffef768210 a2=0 a3=ffff7fb5e6c0 items=0 ppid=2989 pid=3140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.460000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 9 19:18:04.465000 audit[3142]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3142 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.465000 audit[3142]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe7d767b0 a2=0 a3=ffffa2dc86c0 items=0 ppid=2989 pid=3142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.465000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 9 19:18:04.467000 audit[3143]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3143 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.467000 audit[3143]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd9259340 a2=0 a3=ffffb34416c0 items=0 ppid=2989 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.467000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 9 19:18:04.472000 audit[3145]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3145 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.472000 audit[3145]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd5d4f920 a2=0 a3=ffff9ac746c0 items=0 ppid=2989 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.472000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 9 19:18:04.479000 audit[3148]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3148 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.479000 audit[3148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd1b9ea00 a2=0 a3=ffffad9376c0 items=0 ppid=2989 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.479000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 9 19:18:04.487000 audit[3151]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3151 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.487000 audit[3151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe44e8040 a2=0 a3=ffff8f66c6c0 items=0 ppid=2989 pid=3151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.487000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Feb 9 19:18:04.489000 audit[3152]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3152 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.489000 audit[3152]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdc85ee70 a2=0 a3=ffff8acb16c0 items=0 ppid=2989 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.489000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 9 19:18:04.494000 audit[3154]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3154 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.494000 audit[3154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff77b1f90 a2=0 a3=ffffb40af6c0 items=0 ppid=2989 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.494000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 19:18:04.501000 audit[3157]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3157 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.501000 audit[3157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffcd7fd010 a2=0 a3=ffff866386c0 items=0 ppid=2989 pid=3157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.501000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 19:18:04.504000 audit[3158]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=3158 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.504000 audit[3158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe61f6dd0 a2=0 a3=ffff931c76c0 items=0 ppid=2989 pid=3158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.504000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 9 19:18:04.510000 audit[3160]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=3160 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.510000 audit[3160]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc16cb370 a2=0 a3=ffffb7ab86c0 items=0 ppid=2989 pid=3160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.510000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 19:18:04.521000 audit[3163]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=3163 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.521000 audit[3163]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffedf3b6b0 a2=0 a3=ffffa8f236c0 items=0 ppid=2989 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.521000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 19:18:04.523000 audit[3164]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=3164 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.523000 audit[3164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd4485820 a2=0 a3=ffff922366c0 items=0 ppid=2989 pid=3164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.523000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 9 19:18:04.528000 audit[3166]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=3166 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 19:18:04.528000 audit[3166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffe02ffda0 a2=0 a3=ffff9e5366c0 items=0 ppid=2989 pid=3166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.528000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 9 19:18:04.534000 audit[3168]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3168 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 9 19:18:04.534000 audit[3168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=fffffdbf0ec0 a2=0 a3=ffff8e53f6c0 items=0 ppid=2989 pid=3168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.534000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:04.536000 audit[3168]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3168 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 9 19:18:04.536000 audit[3168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=fffffdbf0ec0 a2=0 a3=ffff8e53f6c0 items=0 ppid=2989 pid=3168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:04.536000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:05.727857 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3147120971.mount: Deactivated successfully. Feb 9 19:18:06.774942 env[1657]: time="2024-02-09T19:18:06.774859818Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:06.778217 env[1657]: time="2024-02-09T19:18:06.778155796Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7a10ec867a90652f951a6ba5a12efb94165e0a1c9b72167810d1065e57d768f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:06.781321 env[1657]: time="2024-02-09T19:18:06.781245578Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:06.784599 env[1657]: time="2024-02-09T19:18:06.784551564Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:715ac9a30f8a9579e44258af20de354715429e11836b493918e9e1a696e9b028,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:06.785853 env[1657]: time="2024-02-09T19:18:06.785795923Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\" returns image reference \"sha256:c7a10ec867a90652f951a6ba5a12efb94165e0a1c9b72167810d1065e57d768f\"" Feb 9 19:18:06.791855 env[1657]: time="2024-02-09T19:18:06.791779265Z" level=info msg="CreateContainer within sandbox \"b142c6b4926bb6a46b7dca0c117d73929147310251e9e54c4f9f328d68804c3c\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Feb 9 19:18:06.818231 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3478153338.mount: Deactivated successfully. Feb 9 19:18:06.828166 env[1657]: time="2024-02-09T19:18:06.828103839Z" level=info msg="CreateContainer within sandbox \"b142c6b4926bb6a46b7dca0c117d73929147310251e9e54c4f9f328d68804c3c\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"811f9e0eb34618fc70c994820e15c4eb7a10e030d594d08715b84d332367f673\"" Feb 9 19:18:06.831411 env[1657]: time="2024-02-09T19:18:06.830147309Z" level=info msg="StartContainer for \"811f9e0eb34618fc70c994820e15c4eb7a10e030d594d08715b84d332367f673\"" Feb 9 19:18:06.868897 systemd[1]: Started cri-containerd-811f9e0eb34618fc70c994820e15c4eb7a10e030d594d08715b84d332367f673.scope. Feb 9 19:18:06.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.914000 audit: BPF prog-id=126 op=LOAD Feb 9 19:18:06.915000 audit[3176]: AVC avc: denied { bpf } for pid=3176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.915000 audit[3176]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3043 pid=3176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:06.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831316639653065623334363138666337306339393438323065313563 Feb 9 19:18:06.916000 audit[3176]: AVC avc: denied { perfmon } for pid=3176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.916000 audit[3176]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3043 pid=3176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:06.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831316639653065623334363138666337306339393438323065313563 Feb 9 19:18:06.916000 audit[3176]: AVC avc: denied { bpf } for pid=3176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.916000 audit[3176]: AVC avc: denied { bpf } for pid=3176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.916000 audit[3176]: AVC avc: denied { bpf } for pid=3176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.916000 audit[3176]: AVC avc: denied { perfmon } for pid=3176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.916000 audit[3176]: AVC avc: denied { perfmon } for pid=3176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.916000 audit[3176]: AVC avc: denied { perfmon } for pid=3176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.916000 audit[3176]: AVC avc: denied { perfmon } for pid=3176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.916000 audit[3176]: AVC avc: denied { perfmon } for pid=3176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.916000 audit[3176]: AVC avc: denied { bpf } for pid=3176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.916000 audit[3176]: AVC avc: denied { bpf } for pid=3176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.916000 audit: BPF prog-id=127 op=LOAD Feb 9 19:18:06.916000 audit[3176]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3043 pid=3176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:06.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831316639653065623334363138666337306339393438323065313563 Feb 9 19:18:06.918000 audit[3176]: AVC avc: denied { bpf } for pid=3176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.918000 audit[3176]: AVC avc: denied { bpf } for pid=3176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.918000 audit[3176]: AVC avc: denied { perfmon } for pid=3176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.918000 audit[3176]: AVC avc: denied { perfmon } for pid=3176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.918000 audit[3176]: AVC avc: denied { perfmon } for pid=3176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.918000 audit[3176]: AVC avc: denied { perfmon } for pid=3176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.918000 audit[3176]: AVC avc: denied { perfmon } for pid=3176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.918000 audit[3176]: AVC avc: denied { bpf } for pid=3176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.918000 audit[3176]: AVC avc: denied { bpf } for pid=3176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.918000 audit: BPF prog-id=128 op=LOAD Feb 9 19:18:06.918000 audit[3176]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3043 pid=3176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:06.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831316639653065623334363138666337306339393438323065313563 Feb 9 19:18:06.919000 audit: BPF prog-id=128 op=UNLOAD Feb 9 19:18:06.920000 audit: BPF prog-id=127 op=UNLOAD Feb 9 19:18:06.920000 audit[3176]: AVC avc: denied { bpf } for pid=3176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.920000 audit[3176]: AVC avc: denied { bpf } for pid=3176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.920000 audit[3176]: AVC avc: denied { bpf } for pid=3176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.920000 audit[3176]: AVC avc: denied { perfmon } for pid=3176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.920000 audit[3176]: AVC avc: denied { perfmon } for pid=3176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.920000 audit[3176]: AVC avc: denied { perfmon } for pid=3176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.920000 audit[3176]: AVC avc: denied { perfmon } for pid=3176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.920000 audit[3176]: AVC avc: denied { perfmon } for pid=3176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.920000 audit[3176]: AVC avc: denied { bpf } for pid=3176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.920000 audit[3176]: AVC avc: denied { bpf } for pid=3176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:06.920000 audit: BPF prog-id=129 op=LOAD Feb 9 19:18:06.920000 audit[3176]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3043 pid=3176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:06.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831316639653065623334363138666337306339393438323065313563 Feb 9 19:18:06.953772 env[1657]: time="2024-02-09T19:18:06.953658266Z" level=info msg="StartContainer for \"811f9e0eb34618fc70c994820e15c4eb7a10e030d594d08715b84d332367f673\" returns successfully" Feb 9 19:18:07.813115 systemd[1]: run-containerd-runc-k8s.io-811f9e0eb34618fc70c994820e15c4eb7a10e030d594d08715b84d332367f673-runc.C8cjMh.mount: Deactivated successfully. Feb 9 19:18:07.924183 kubelet[2857]: I0209 19:18:07.924142 2857 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-2dts7" podStartSLOduration=4.924089751 podCreationTimestamp="2024-02-09 19:18:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 19:18:04.902734479 +0000 UTC m=+15.507938421" watchObservedRunningTime="2024-02-09 19:18:07.924089751 +0000 UTC m=+18.529293705" Feb 9 19:18:07.925027 kubelet[2857]: I0209 19:18:07.924997 2857 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7ff8dc855-p8x4w" podStartSLOduration=2.429018981 podCreationTimestamp="2024-02-09 19:18:03 +0000 UTC" firstStartedPulling="2024-02-09 19:18:04.290554697 +0000 UTC m=+14.895758639" lastFinishedPulling="2024-02-09 19:18:06.786489704 +0000 UTC m=+17.391693646" observedRunningTime="2024-02-09 19:18:07.923714323 +0000 UTC m=+18.528918277" watchObservedRunningTime="2024-02-09 19:18:07.924953988 +0000 UTC m=+18.530157966" Feb 9 19:18:10.742793 kernel: kauditd_printk_skb: 360 callbacks suppressed Feb 9 19:18:10.742980 kernel: audit: type=1325 audit(1707506290.738:1096): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3211 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:10.738000 audit[3211]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=3211 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:10.738000 audit[3211]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffc4e80790 a2=0 a3=ffffb23c96c0 items=0 ppid=2989 pid=3211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:10.738000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:10.765396 kernel: audit: type=1300 audit(1707506290.738:1096): arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffc4e80790 a2=0 a3=ffffb23c96c0 items=0 ppid=2989 pid=3211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:10.765492 kernel: audit: type=1327 audit(1707506290.738:1096): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:10.747000 audit[3211]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3211 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:10.771257 kernel: audit: type=1325 audit(1707506290.747:1097): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3211 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:10.771387 kernel: audit: type=1300 audit(1707506290.747:1097): arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffc4e80790 a2=0 a3=ffffb23c96c0 items=0 ppid=2989 pid=3211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:10.747000 audit[3211]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffc4e80790 a2=0 a3=ffffb23c96c0 items=0 ppid=2989 pid=3211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:10.747000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:10.788239 kernel: audit: type=1327 audit(1707506290.747:1097): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:10.798000 audit[3213]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=3213 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:10.798000 audit[3213]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=fffffba08a10 a2=0 a3=ffff85b8a6c0 items=0 ppid=2989 pid=3213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:10.816069 kernel: audit: type=1325 audit(1707506290.798:1098): table=filter:91 family=2 entries=16 op=nft_register_rule pid=3213 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:10.816161 kernel: audit: type=1300 audit(1707506290.798:1098): arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=fffffba08a10 a2=0 a3=ffff85b8a6c0 items=0 ppid=2989 pid=3213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:10.816220 kernel: audit: type=1327 audit(1707506290.798:1098): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:10.798000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:10.799000 audit[3213]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3213 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:10.827481 kernel: audit: type=1325 audit(1707506290.799:1099): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3213 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:10.799000 audit[3213]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=fffffba08a10 a2=0 a3=ffff85b8a6c0 items=0 ppid=2989 pid=3213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:10.799000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:10.905190 kubelet[2857]: I0209 19:18:10.905133 2857 topology_manager.go:212] "Topology Admit Handler" Feb 9 19:18:10.917129 systemd[1]: Created slice kubepods-besteffort-pod46d0c08f_86c3_40e8_ab9e_b0328ee5deea.slice. Feb 9 19:18:10.973761 kubelet[2857]: I0209 19:18:10.973702 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/46d0c08f-86c3-40e8-ab9e-b0328ee5deea-tigera-ca-bundle\") pod \"calico-typha-6864fcb4c7-zh4f5\" (UID: \"46d0c08f-86c3-40e8-ab9e-b0328ee5deea\") " pod="calico-system/calico-typha-6864fcb4c7-zh4f5" Feb 9 19:18:10.973936 kubelet[2857]: I0209 19:18:10.973784 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/46d0c08f-86c3-40e8-ab9e-b0328ee5deea-typha-certs\") pod \"calico-typha-6864fcb4c7-zh4f5\" (UID: \"46d0c08f-86c3-40e8-ab9e-b0328ee5deea\") " pod="calico-system/calico-typha-6864fcb4c7-zh4f5" Feb 9 19:18:10.973936 kubelet[2857]: I0209 19:18:10.973836 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nxzsz\" (UniqueName: \"kubernetes.io/projected/46d0c08f-86c3-40e8-ab9e-b0328ee5deea-kube-api-access-nxzsz\") pod \"calico-typha-6864fcb4c7-zh4f5\" (UID: \"46d0c08f-86c3-40e8-ab9e-b0328ee5deea\") " pod="calico-system/calico-typha-6864fcb4c7-zh4f5" Feb 9 19:18:11.050558 kubelet[2857]: I0209 19:18:11.050511 2857 topology_manager.go:212] "Topology Admit Handler" Feb 9 19:18:11.061055 systemd[1]: Created slice kubepods-besteffort-pod4560689a_3147_4860_9c98_a42b7095def1.slice. Feb 9 19:18:11.074595 kubelet[2857]: I0209 19:18:11.074553 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/4560689a-3147-4860-9c98-a42b7095def1-var-run-calico\") pod \"calico-node-qdhxc\" (UID: \"4560689a-3147-4860-9c98-a42b7095def1\") " pod="calico-system/calico-node-qdhxc" Feb 9 19:18:11.074934 kubelet[2857]: I0209 19:18:11.074907 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/4560689a-3147-4860-9c98-a42b7095def1-cni-log-dir\") pod \"calico-node-qdhxc\" (UID: \"4560689a-3147-4860-9c98-a42b7095def1\") " pod="calico-system/calico-node-qdhxc" Feb 9 19:18:11.075125 kubelet[2857]: I0209 19:18:11.075103 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/4560689a-3147-4860-9c98-a42b7095def1-flexvol-driver-host\") pod \"calico-node-qdhxc\" (UID: \"4560689a-3147-4860-9c98-a42b7095def1\") " pod="calico-system/calico-node-qdhxc" Feb 9 19:18:11.075422 kubelet[2857]: I0209 19:18:11.075397 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/4560689a-3147-4860-9c98-a42b7095def1-var-lib-calico\") pod \"calico-node-qdhxc\" (UID: \"4560689a-3147-4860-9c98-a42b7095def1\") " pod="calico-system/calico-node-qdhxc" Feb 9 19:18:11.075620 kubelet[2857]: I0209 19:18:11.075595 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dmsjz\" (UniqueName: \"kubernetes.io/projected/4560689a-3147-4860-9c98-a42b7095def1-kube-api-access-dmsjz\") pod \"calico-node-qdhxc\" (UID: \"4560689a-3147-4860-9c98-a42b7095def1\") " pod="calico-system/calico-node-qdhxc" Feb 9 19:18:11.075804 kubelet[2857]: I0209 19:18:11.075781 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4560689a-3147-4860-9c98-a42b7095def1-lib-modules\") pod \"calico-node-qdhxc\" (UID: \"4560689a-3147-4860-9c98-a42b7095def1\") " pod="calico-system/calico-node-qdhxc" Feb 9 19:18:11.075982 kubelet[2857]: I0209 19:18:11.075952 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4560689a-3147-4860-9c98-a42b7095def1-xtables-lock\") pod \"calico-node-qdhxc\" (UID: \"4560689a-3147-4860-9c98-a42b7095def1\") " pod="calico-system/calico-node-qdhxc" Feb 9 19:18:11.076131 kubelet[2857]: I0209 19:18:11.076109 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/4560689a-3147-4860-9c98-a42b7095def1-node-certs\") pod \"calico-node-qdhxc\" (UID: \"4560689a-3147-4860-9c98-a42b7095def1\") " pod="calico-system/calico-node-qdhxc" Feb 9 19:18:11.076360 kubelet[2857]: I0209 19:18:11.076266 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/4560689a-3147-4860-9c98-a42b7095def1-cni-net-dir\") pod \"calico-node-qdhxc\" (UID: \"4560689a-3147-4860-9c98-a42b7095def1\") " pod="calico-system/calico-node-qdhxc" Feb 9 19:18:11.076578 kubelet[2857]: I0209 19:18:11.076547 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/4560689a-3147-4860-9c98-a42b7095def1-tigera-ca-bundle\") pod \"calico-node-qdhxc\" (UID: \"4560689a-3147-4860-9c98-a42b7095def1\") " pod="calico-system/calico-node-qdhxc" Feb 9 19:18:11.076734 kubelet[2857]: I0209 19:18:11.076712 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/4560689a-3147-4860-9c98-a42b7095def1-cni-bin-dir\") pod \"calico-node-qdhxc\" (UID: \"4560689a-3147-4860-9c98-a42b7095def1\") " pod="calico-system/calico-node-qdhxc" Feb 9 19:18:11.076890 kubelet[2857]: I0209 19:18:11.076870 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/4560689a-3147-4860-9c98-a42b7095def1-policysync\") pod \"calico-node-qdhxc\" (UID: \"4560689a-3147-4860-9c98-a42b7095def1\") " pod="calico-system/calico-node-qdhxc" Feb 9 19:18:11.175262 kubelet[2857]: I0209 19:18:11.175191 2857 topology_manager.go:212] "Topology Admit Handler" Feb 9 19:18:11.175840 kubelet[2857]: E0209 19:18:11.175766 2857 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-g4vzb" podUID=3c8095c3-e7b4-4e87-97f5-d754ac025e71 Feb 9 19:18:11.182062 kubelet[2857]: E0209 19:18:11.182011 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.182316 kubelet[2857]: W0209 19:18:11.182266 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.182454 kubelet[2857]: E0209 19:18:11.182429 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.201581 kubelet[2857]: E0209 19:18:11.201530 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.201581 kubelet[2857]: W0209 19:18:11.201568 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.201907 kubelet[2857]: E0209 19:18:11.201611 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.229584 env[1657]: time="2024-02-09T19:18:11.229515033Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6864fcb4c7-zh4f5,Uid:46d0c08f-86c3-40e8-ab9e-b0328ee5deea,Namespace:calico-system,Attempt:0,}" Feb 9 19:18:11.240706 kubelet[2857]: E0209 19:18:11.240672 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.241043 kubelet[2857]: W0209 19:18:11.240853 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.241043 kubelet[2857]: E0209 19:18:11.240895 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.262169 kubelet[2857]: E0209 19:18:11.262133 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.262410 kubelet[2857]: W0209 19:18:11.262381 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.262555 kubelet[2857]: E0209 19:18:11.262533 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.266954 kubelet[2857]: E0209 19:18:11.266917 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.267150 kubelet[2857]: W0209 19:18:11.267121 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.267316 kubelet[2857]: E0209 19:18:11.267274 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.267832 kubelet[2857]: E0209 19:18:11.267804 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.268004 kubelet[2857]: W0209 19:18:11.267975 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.268173 kubelet[2857]: E0209 19:18:11.268150 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.268971 kubelet[2857]: E0209 19:18:11.268879 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.269194 kubelet[2857]: W0209 19:18:11.269163 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.269393 kubelet[2857]: E0209 19:18:11.269369 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.270448 kubelet[2857]: E0209 19:18:11.270414 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.270658 kubelet[2857]: W0209 19:18:11.270629 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.270785 kubelet[2857]: E0209 19:18:11.270763 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.274531 kubelet[2857]: E0209 19:18:11.274494 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.275280 kubelet[2857]: W0209 19:18:11.275237 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.275514 kubelet[2857]: E0209 19:18:11.275489 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.287199 kubelet[2857]: E0209 19:18:11.286921 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.287199 kubelet[2857]: W0209 19:18:11.286955 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.287199 kubelet[2857]: E0209 19:18:11.286992 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.287675 kubelet[2857]: E0209 19:18:11.287648 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.287808 kubelet[2857]: W0209 19:18:11.287782 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.287930 kubelet[2857]: E0209 19:18:11.287909 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.288737 env[1657]: time="2024-02-09T19:18:11.288602313Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 19:18:11.289052 kubelet[2857]: E0209 19:18:11.289024 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.289189 kubelet[2857]: W0209 19:18:11.289162 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.289343 kubelet[2857]: E0209 19:18:11.289319 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.289896 env[1657]: time="2024-02-09T19:18:11.288679345Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 19:18:11.289896 env[1657]: time="2024-02-09T19:18:11.289745488Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 19:18:11.290277 kubelet[2857]: E0209 19:18:11.290250 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.290455 kubelet[2857]: W0209 19:18:11.290429 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.290591 kubelet[2857]: E0209 19:18:11.290569 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.291314 env[1657]: time="2024-02-09T19:18:11.291130245Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/185e14bdb42ffa128cba3443ce6f061b001f2081d3348f8790b1996e66456958 pid=3230 runtime=io.containerd.runc.v2 Feb 9 19:18:11.291692 kubelet[2857]: E0209 19:18:11.291664 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.291848 kubelet[2857]: W0209 19:18:11.291819 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.291994 kubelet[2857]: E0209 19:18:11.291972 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.295842 kubelet[2857]: E0209 19:18:11.295806 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.296084 kubelet[2857]: W0209 19:18:11.296054 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.296230 kubelet[2857]: E0209 19:18:11.296207 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.296984 kubelet[2857]: E0209 19:18:11.296950 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.297178 kubelet[2857]: W0209 19:18:11.297148 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.297380 kubelet[2857]: E0209 19:18:11.297357 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.301699 kubelet[2857]: E0209 19:18:11.301545 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.301890 kubelet[2857]: W0209 19:18:11.301860 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.302765 kubelet[2857]: E0209 19:18:11.302740 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.303882 kubelet[2857]: E0209 19:18:11.303857 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.304214 kubelet[2857]: W0209 19:18:11.304188 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.304537 kubelet[2857]: E0209 19:18:11.304514 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.306692 kubelet[2857]: E0209 19:18:11.306654 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.306933 kubelet[2857]: W0209 19:18:11.306904 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.307068 kubelet[2857]: E0209 19:18:11.307044 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.307256 kubelet[2857]: I0209 19:18:11.307229 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/3c8095c3-e7b4-4e87-97f5-d754ac025e71-varrun\") pod \"csi-node-driver-g4vzb\" (UID: \"3c8095c3-e7b4-4e87-97f5-d754ac025e71\") " pod="calico-system/csi-node-driver-g4vzb" Feb 9 19:18:11.307919 kubelet[2857]: E0209 19:18:11.307704 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.307919 kubelet[2857]: W0209 19:18:11.307739 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.307919 kubelet[2857]: E0209 19:18:11.307773 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.310508 kubelet[2857]: E0209 19:18:11.310445 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.310508 kubelet[2857]: W0209 19:18:11.310490 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.310764 kubelet[2857]: E0209 19:18:11.310531 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.311018 kubelet[2857]: E0209 19:18:11.310983 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.311018 kubelet[2857]: W0209 19:18:11.311012 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.311211 kubelet[2857]: E0209 19:18:11.311042 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.311211 kubelet[2857]: I0209 19:18:11.311092 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/3c8095c3-e7b4-4e87-97f5-d754ac025e71-registration-dir\") pod \"csi-node-driver-g4vzb\" (UID: \"3c8095c3-e7b4-4e87-97f5-d754ac025e71\") " pod="calico-system/csi-node-driver-g4vzb" Feb 9 19:18:11.313500 kubelet[2857]: E0209 19:18:11.313448 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.313500 kubelet[2857]: W0209 19:18:11.313488 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.313775 kubelet[2857]: E0209 19:18:11.313537 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.313775 kubelet[2857]: I0209 19:18:11.313585 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/3c8095c3-e7b4-4e87-97f5-d754ac025e71-kubelet-dir\") pod \"csi-node-driver-g4vzb\" (UID: \"3c8095c3-e7b4-4e87-97f5-d754ac025e71\") " pod="calico-system/csi-node-driver-g4vzb" Feb 9 19:18:11.315509 kubelet[2857]: E0209 19:18:11.315449 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.315509 kubelet[2857]: W0209 19:18:11.315488 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.315790 kubelet[2857]: E0209 19:18:11.315529 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.315945 kubelet[2857]: E0209 19:18:11.315908 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.315945 kubelet[2857]: W0209 19:18:11.315936 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.316129 kubelet[2857]: E0209 19:18:11.315965 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.316425 kubelet[2857]: E0209 19:18:11.316386 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.316660 kubelet[2857]: W0209 19:18:11.316423 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.316660 kubelet[2857]: E0209 19:18:11.316463 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.316660 kubelet[2857]: I0209 19:18:11.316504 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/3c8095c3-e7b4-4e87-97f5-d754ac025e71-socket-dir\") pod \"csi-node-driver-g4vzb\" (UID: \"3c8095c3-e7b4-4e87-97f5-d754ac025e71\") " pod="calico-system/csi-node-driver-g4vzb" Feb 9 19:18:11.316844 kubelet[2857]: E0209 19:18:11.316830 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.316917 kubelet[2857]: W0209 19:18:11.316848 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.316917 kubelet[2857]: E0209 19:18:11.316877 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.317181 kubelet[2857]: E0209 19:18:11.317149 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.317181 kubelet[2857]: W0209 19:18:11.317174 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.317357 kubelet[2857]: E0209 19:18:11.317204 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.317758 kubelet[2857]: E0209 19:18:11.317567 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.317758 kubelet[2857]: W0209 19:18:11.317592 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.317758 kubelet[2857]: E0209 19:18:11.317619 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.319511 kubelet[2857]: E0209 19:18:11.319462 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.319511 kubelet[2857]: W0209 19:18:11.319500 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.319778 kubelet[2857]: E0209 19:18:11.319536 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.320023 kubelet[2857]: E0209 19:18:11.319988 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.320023 kubelet[2857]: W0209 19:18:11.320017 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.320279 kubelet[2857]: E0209 19:18:11.320046 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.320279 kubelet[2857]: I0209 19:18:11.320093 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nfl5s\" (UniqueName: \"kubernetes.io/projected/3c8095c3-e7b4-4e87-97f5-d754ac025e71-kube-api-access-nfl5s\") pod \"csi-node-driver-g4vzb\" (UID: \"3c8095c3-e7b4-4e87-97f5-d754ac025e71\") " pod="calico-system/csi-node-driver-g4vzb" Feb 9 19:18:11.320588 kubelet[2857]: E0209 19:18:11.320541 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.320588 kubelet[2857]: W0209 19:18:11.320572 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.320735 kubelet[2857]: E0209 19:18:11.320604 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.320919 kubelet[2857]: E0209 19:18:11.320885 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.320919 kubelet[2857]: W0209 19:18:11.320911 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.321053 kubelet[2857]: E0209 19:18:11.320939 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.344869 systemd[1]: Started cri-containerd-185e14bdb42ffa128cba3443ce6f061b001f2081d3348f8790b1996e66456958.scope. Feb 9 19:18:11.366583 env[1657]: time="2024-02-09T19:18:11.366520504Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-qdhxc,Uid:4560689a-3147-4860-9c98-a42b7095def1,Namespace:calico-system,Attempt:0,}" Feb 9 19:18:11.401791 env[1657]: time="2024-02-09T19:18:11.401666922Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 19:18:11.401939 env[1657]: time="2024-02-09T19:18:11.401860659Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 19:18:11.402003 env[1657]: time="2024-02-09T19:18:11.401923962Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 19:18:11.402374 env[1657]: time="2024-02-09T19:18:11.402259138Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ff787fd335393c6b3605a5d0bc0aabf099486a0a5f76046f8ed7317ea638a349 pid=3283 runtime=io.containerd.runc.v2 Feb 9 19:18:11.421358 kubelet[2857]: E0209 19:18:11.421067 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.421358 kubelet[2857]: W0209 19:18:11.421098 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.421358 kubelet[2857]: E0209 19:18:11.421131 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.424251 kubelet[2857]: E0209 19:18:11.423943 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.424251 kubelet[2857]: W0209 19:18:11.423978 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.424251 kubelet[2857]: E0209 19:18:11.424021 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.424934 kubelet[2857]: E0209 19:18:11.424683 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.424934 kubelet[2857]: W0209 19:18:11.424716 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.424934 kubelet[2857]: E0209 19:18:11.424790 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.425546 kubelet[2857]: E0209 19:18:11.425355 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.425546 kubelet[2857]: W0209 19:18:11.425382 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.425546 kubelet[2857]: E0209 19:18:11.425445 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.428665 kubelet[2857]: E0209 19:18:11.428417 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.428665 kubelet[2857]: W0209 19:18:11.428455 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.428665 kubelet[2857]: E0209 19:18:11.428527 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.429464 kubelet[2857]: E0209 19:18:11.429091 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.429464 kubelet[2857]: W0209 19:18:11.429117 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.429464 kubelet[2857]: E0209 19:18:11.429188 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.429956 kubelet[2857]: E0209 19:18:11.429756 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.429956 kubelet[2857]: W0209 19:18:11.429783 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.430170 kubelet[2857]: E0209 19:18:11.429960 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.432777 kubelet[2857]: E0209 19:18:11.432533 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.432777 kubelet[2857]: W0209 19:18:11.432569 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.432777 kubelet[2857]: E0209 19:18:11.432699 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.433421 kubelet[2857]: E0209 19:18:11.433276 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.433569 kubelet[2857]: W0209 19:18:11.433542 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.434062 kubelet[2857]: E0209 19:18:11.434005 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.436216 kubelet[2857]: E0209 19:18:11.436181 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.436439 kubelet[2857]: W0209 19:18:11.436409 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.436638 kubelet[2857]: E0209 19:18:11.436589 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.437274 kubelet[2857]: E0209 19:18:11.437245 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.437590 kubelet[2857]: W0209 19:18:11.437561 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.442413 kubelet[2857]: E0209 19:18:11.439161 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.441863 systemd[1]: Started cri-containerd-ff787fd335393c6b3605a5d0bc0aabf099486a0a5f76046f8ed7317ea638a349.scope. Feb 9 19:18:11.446497 kubelet[2857]: E0209 19:18:11.446460 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.446721 kubelet[2857]: W0209 19:18:11.446693 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.447212 kubelet[2857]: E0209 19:18:11.447188 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.447412 kubelet[2857]: W0209 19:18:11.447384 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.447959 kubelet[2857]: E0209 19:18:11.447928 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.448186 kubelet[2857]: W0209 19:18:11.448153 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.448691 kubelet[2857]: E0209 19:18:11.448664 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.448883 kubelet[2857]: W0209 19:18:11.448855 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.449370 kubelet[2857]: E0209 19:18:11.449342 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.449565 kubelet[2857]: W0209 19:18:11.449539 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.449705 kubelet[2857]: E0209 19:18:11.449682 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.452957 kubelet[2857]: E0209 19:18:11.450395 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.452957 kubelet[2857]: E0209 19:18:11.450454 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.452957 kubelet[2857]: E0209 19:18:11.450493 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.452957 kubelet[2857]: E0209 19:18:11.450535 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.453730 kubelet[2857]: E0209 19:18:11.453684 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.453943 kubelet[2857]: W0209 19:18:11.453913 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.454176 kubelet[2857]: E0209 19:18:11.454152 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.454864 kubelet[2857]: E0209 19:18:11.454819 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.454864 kubelet[2857]: W0209 19:18:11.454854 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.455509 kubelet[2857]: E0209 19:18:11.454900 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.455509 kubelet[2857]: E0209 19:18:11.455370 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.455509 kubelet[2857]: W0209 19:18:11.455404 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.455509 kubelet[2857]: E0209 19:18:11.455432 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.455832 kubelet[2857]: E0209 19:18:11.455816 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.455904 kubelet[2857]: W0209 19:18:11.455834 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.455904 kubelet[2857]: E0209 19:18:11.455859 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.456467 kubelet[2857]: E0209 19:18:11.456436 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.456639 kubelet[2857]: W0209 19:18:11.456610 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.456786 kubelet[2857]: E0209 19:18:11.456763 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.459576 kubelet[2857]: E0209 19:18:11.459540 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.462551 kubelet[2857]: W0209 19:18:11.462472 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.462551 kubelet[2857]: E0209 19:18:11.462543 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.460000 audit: BPF prog-id=130 op=LOAD Feb 9 19:18:11.462000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.464161 kubelet[2857]: E0209 19:18:11.464120 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.464161 kubelet[2857]: W0209 19:18:11.464155 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.462000 audit[3247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=3230 pid=3247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:11.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138356531346264623432666661313238636261333434336365366630 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit[3247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=3230 pid=3247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:11.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138356531346264623432666661313238636261333434336365366630 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit: BPF prog-id=131 op=LOAD Feb 9 19:18:11.463000 audit[3247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=3230 pid=3247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:11.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138356531346264623432666661313238636261333434336365366630 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.463000 audit: BPF prog-id=132 op=LOAD Feb 9 19:18:11.463000 audit[3247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=3230 pid=3247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:11.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138356531346264623432666661313238636261333434336365366630 Feb 9 19:18:11.464000 audit: BPF prog-id=132 op=UNLOAD Feb 9 19:18:11.465000 audit: BPF prog-id=131 op=UNLOAD Feb 9 19:18:11.465000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.465000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.465000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.465000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.465000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.465000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.465000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.465000 audit[3247]: AVC avc: denied { perfmon } for pid=3247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.465000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.465000 audit[3247]: AVC avc: denied { bpf } for pid=3247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.465000 audit: BPF prog-id=133 op=LOAD Feb 9 19:18:11.465000 audit[3247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=3230 pid=3247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:11.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138356531346264623432666661313238636261333434336365366630 Feb 9 19:18:11.468690 kubelet[2857]: E0209 19:18:11.468344 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.470474 kubelet[2857]: E0209 19:18:11.470434 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.470474 kubelet[2857]: W0209 19:18:11.470470 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.470744 kubelet[2857]: E0209 19:18:11.470518 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.471037 kubelet[2857]: E0209 19:18:11.471008 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.471139 kubelet[2857]: W0209 19:18:11.471036 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.471139 kubelet[2857]: E0209 19:18:11.471064 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.498176 kubelet[2857]: E0209 19:18:11.498042 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:11.501214 kubelet[2857]: W0209 19:18:11.501143 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:11.501214 kubelet[2857]: E0209 19:18:11.501205 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:11.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.561000 audit: BPF prog-id=134 op=LOAD Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { bpf } for pid=3296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3283 pid=3296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:11.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666373837666433333533393363366233363035613564306263306161 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { perfmon } for pid=3296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3283 pid=3296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:11.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666373837666433333533393363366233363035613564306263306161 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { bpf } for pid=3296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { bpf } for pid=3296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { bpf } for pid=3296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { perfmon } for pid=3296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { perfmon } for pid=3296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { perfmon } for pid=3296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { perfmon } for pid=3296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { perfmon } for pid=3296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { bpf } for pid=3296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { bpf } for pid=3296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit: BPF prog-id=135 op=LOAD Feb 9 19:18:11.562000 audit[3296]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3283 pid=3296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:11.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666373837666433333533393363366233363035613564306263306161 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { bpf } for pid=3296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { bpf } for pid=3296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { perfmon } for pid=3296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { perfmon } for pid=3296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { perfmon } for pid=3296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { perfmon } for pid=3296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { perfmon } for pid=3296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { bpf } for pid=3296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit[3296]: AVC avc: denied { bpf } for pid=3296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.562000 audit: BPF prog-id=136 op=LOAD Feb 9 19:18:11.562000 audit[3296]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3283 pid=3296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:11.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666373837666433333533393363366233363035613564306263306161 Feb 9 19:18:11.563000 audit: BPF prog-id=136 op=UNLOAD Feb 9 19:18:11.563000 audit: BPF prog-id=135 op=UNLOAD Feb 9 19:18:11.563000 audit[3296]: AVC avc: denied { bpf } for pid=3296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.563000 audit[3296]: AVC avc: denied { bpf } for pid=3296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.563000 audit[3296]: AVC avc: denied { bpf } for pid=3296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.563000 audit[3296]: AVC avc: denied { perfmon } for pid=3296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.563000 audit[3296]: AVC avc: denied { perfmon } for pid=3296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.563000 audit[3296]: AVC avc: denied { perfmon } for pid=3296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.563000 audit[3296]: AVC avc: denied { perfmon } for pid=3296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.563000 audit[3296]: AVC avc: denied { perfmon } for pid=3296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.563000 audit[3296]: AVC avc: denied { bpf } for pid=3296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.563000 audit[3296]: AVC avc: denied { bpf } for pid=3296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:11.563000 audit: BPF prog-id=137 op=LOAD Feb 9 19:18:11.563000 audit[3296]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3283 pid=3296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:11.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666373837666433333533393363366233363035613564306263306161 Feb 9 19:18:11.576847 env[1657]: time="2024-02-09T19:18:11.576777203Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6864fcb4c7-zh4f5,Uid:46d0c08f-86c3-40e8-ab9e-b0328ee5deea,Namespace:calico-system,Attempt:0,} returns sandbox id \"185e14bdb42ffa128cba3443ce6f061b001f2081d3348f8790b1996e66456958\"" Feb 9 19:18:11.582037 env[1657]: time="2024-02-09T19:18:11.581969034Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\"" Feb 9 19:18:11.625236 env[1657]: time="2024-02-09T19:18:11.625163851Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-qdhxc,Uid:4560689a-3147-4860-9c98-a42b7095def1,Namespace:calico-system,Attempt:0,} returns sandbox id \"ff787fd335393c6b3605a5d0bc0aabf099486a0a5f76046f8ed7317ea638a349\"" Feb 9 19:18:11.836000 audit[3359]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=3359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:11.836000 audit[3359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffd9853120 a2=0 a3=ffff87a9b6c0 items=0 ppid=2989 pid=3359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:11.836000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:11.839000 audit[3359]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:11.839000 audit[3359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffd9853120 a2=0 a3=ffff87a9b6c0 items=0 ppid=2989 pid=3359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:11.839000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:12.786941 kubelet[2857]: E0209 19:18:12.786895 2857 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-g4vzb" podUID=3c8095c3-e7b4-4e87-97f5-d754ac025e71 Feb 9 19:18:13.000140 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3503188706.mount: Deactivated successfully. Feb 9 19:18:14.086875 env[1657]: time="2024-02-09T19:18:14.086797745Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:14.090733 env[1657]: time="2024-02-09T19:18:14.090662661Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fba96c9caf161e105c76b559b06b4b2337b89b54833d69984209161d93145969,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:14.094541 env[1657]: time="2024-02-09T19:18:14.094484340Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:14.113488 env[1657]: time="2024-02-09T19:18:14.113420741Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:5f2d3b8c354a4eb6de46e786889913916e620c6c256982fb8d0f1a1d36a282bc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:14.115674 env[1657]: time="2024-02-09T19:18:14.115614031Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\" returns image reference \"sha256:fba96c9caf161e105c76b559b06b4b2337b89b54833d69984209161d93145969\"" Feb 9 19:18:14.119414 env[1657]: time="2024-02-09T19:18:14.119333932Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\"" Feb 9 19:18:14.154584 env[1657]: time="2024-02-09T19:18:14.154525611Z" level=info msg="CreateContainer within sandbox \"185e14bdb42ffa128cba3443ce6f061b001f2081d3348f8790b1996e66456958\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Feb 9 19:18:14.187421 env[1657]: time="2024-02-09T19:18:14.186525050Z" level=info msg="CreateContainer within sandbox \"185e14bdb42ffa128cba3443ce6f061b001f2081d3348f8790b1996e66456958\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"c9ac4ad7a570576183349effc614129d5cd80034a96778cf8bb322d5b7257eea\"" Feb 9 19:18:14.188611 env[1657]: time="2024-02-09T19:18:14.188560065Z" level=info msg="StartContainer for \"c9ac4ad7a570576183349effc614129d5cd80034a96778cf8bb322d5b7257eea\"" Feb 9 19:18:14.243924 systemd[1]: Started cri-containerd-c9ac4ad7a570576183349effc614129d5cd80034a96778cf8bb322d5b7257eea.scope. Feb 9 19:18:14.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.303000 audit: BPF prog-id=138 op=LOAD Feb 9 19:18:14.303000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.303000 audit[3369]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3230 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:14.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339616334616437613537303537363138333334396566666336313431 Feb 9 19:18:14.303000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.303000 audit[3369]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3230 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:14.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339616334616437613537303537363138333334396566666336313431 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit: BPF prog-id=139 op=LOAD Feb 9 19:18:14.304000 audit[3369]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3230 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:14.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339616334616437613537303537363138333334396566666336313431 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit: BPF prog-id=140 op=LOAD Feb 9 19:18:14.304000 audit[3369]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3230 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:14.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339616334616437613537303537363138333334396566666336313431 Feb 9 19:18:14.304000 audit: BPF prog-id=140 op=UNLOAD Feb 9 19:18:14.304000 audit: BPF prog-id=139 op=UNLOAD Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:14.304000 audit: BPF prog-id=141 op=LOAD Feb 9 19:18:14.304000 audit[3369]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3230 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:14.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339616334616437613537303537363138333334396566666336313431 Feb 9 19:18:14.369900 env[1657]: time="2024-02-09T19:18:14.369769410Z" level=info msg="StartContainer for \"c9ac4ad7a570576183349effc614129d5cd80034a96778cf8bb322d5b7257eea\" returns successfully" Feb 9 19:18:14.786778 kubelet[2857]: E0209 19:18:14.786722 2857 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-g4vzb" podUID=3c8095c3-e7b4-4e87-97f5-d754ac025e71 Feb 9 19:18:14.944105 kubelet[2857]: E0209 19:18:14.944052 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.944105 kubelet[2857]: W0209 19:18:14.944091 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.944399 kubelet[2857]: E0209 19:18:14.944126 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.945085 kubelet[2857]: E0209 19:18:14.945000 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.945085 kubelet[2857]: W0209 19:18:14.945035 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.945085 kubelet[2857]: E0209 19:18:14.945083 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.945504 kubelet[2857]: E0209 19:18:14.945465 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.945504 kubelet[2857]: W0209 19:18:14.945492 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.945671 kubelet[2857]: E0209 19:18:14.945522 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.946000 kubelet[2857]: E0209 19:18:14.945952 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.946000 kubelet[2857]: W0209 19:18:14.945981 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.946153 kubelet[2857]: E0209 19:18:14.946011 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.946665 kubelet[2857]: E0209 19:18:14.946343 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.946665 kubelet[2857]: W0209 19:18:14.946369 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.946665 kubelet[2857]: E0209 19:18:14.946395 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.946886 kubelet[2857]: E0209 19:18:14.946688 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.946886 kubelet[2857]: W0209 19:18:14.946704 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.946886 kubelet[2857]: E0209 19:18:14.946728 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.947084 kubelet[2857]: E0209 19:18:14.947073 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.947151 kubelet[2857]: W0209 19:18:14.947089 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.947151 kubelet[2857]: E0209 19:18:14.947113 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.948523 kubelet[2857]: E0209 19:18:14.948478 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.948523 kubelet[2857]: W0209 19:18:14.948514 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.948890 kubelet[2857]: E0209 19:18:14.948550 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.949913 kubelet[2857]: E0209 19:18:14.949850 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.949913 kubelet[2857]: W0209 19:18:14.949890 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.950249 kubelet[2857]: E0209 19:18:14.949927 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.950990 kubelet[2857]: E0209 19:18:14.950950 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.951129 kubelet[2857]: W0209 19:18:14.951010 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.951129 kubelet[2857]: E0209 19:18:14.951044 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.952446 kubelet[2857]: E0209 19:18:14.952404 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.953558 kubelet[2857]: W0209 19:18:14.953504 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.953665 kubelet[2857]: E0209 19:18:14.953594 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.955913 kubelet[2857]: E0209 19:18:14.955869 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.956073 kubelet[2857]: W0209 19:18:14.955926 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.956073 kubelet[2857]: E0209 19:18:14.955960 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.963485 kubelet[2857]: E0209 19:18:14.963435 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.963485 kubelet[2857]: W0209 19:18:14.963475 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.963732 kubelet[2857]: E0209 19:18:14.963512 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.965337 kubelet[2857]: E0209 19:18:14.965256 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.965337 kubelet[2857]: W0209 19:18:14.965308 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.966034 kubelet[2857]: E0209 19:18:14.965379 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.966034 kubelet[2857]: E0209 19:18:14.965886 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.966034 kubelet[2857]: W0209 19:18:14.965906 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.966633 kubelet[2857]: E0209 19:18:14.966252 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.967495 kubelet[2857]: E0209 19:18:14.967450 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.967495 kubelet[2857]: W0209 19:18:14.967485 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.967800 kubelet[2857]: E0209 19:18:14.967699 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.968140 kubelet[2857]: E0209 19:18:14.968103 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.968140 kubelet[2857]: W0209 19:18:14.968132 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.968603 kubelet[2857]: E0209 19:18:14.968385 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.969205 kubelet[2857]: E0209 19:18:14.969163 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.969205 kubelet[2857]: W0209 19:18:14.969196 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.969465 kubelet[2857]: E0209 19:18:14.969347 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.969794 kubelet[2857]: E0209 19:18:14.969758 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.969794 kubelet[2857]: W0209 19:18:14.969787 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.969949 kubelet[2857]: E0209 19:18:14.969938 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.971008 kubelet[2857]: E0209 19:18:14.970959 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.971008 kubelet[2857]: W0209 19:18:14.970993 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.971373 kubelet[2857]: E0209 19:18:14.971208 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.972472 kubelet[2857]: E0209 19:18:14.972420 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.972472 kubelet[2857]: W0209 19:18:14.972456 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.972729 kubelet[2857]: E0209 19:18:14.972671 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.973161 kubelet[2857]: E0209 19:18:14.973114 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.973161 kubelet[2857]: W0209 19:18:14.973143 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.973527 kubelet[2857]: E0209 19:18:14.973356 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.975758 kubelet[2857]: E0209 19:18:14.975683 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.975758 kubelet[2857]: W0209 19:18:14.975720 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.976352 kubelet[2857]: E0209 19:18:14.976043 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.976464 kubelet[2857]: E0209 19:18:14.976421 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.976464 kubelet[2857]: W0209 19:18:14.976441 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.976606 kubelet[2857]: E0209 19:18:14.976555 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.976921 kubelet[2857]: E0209 19:18:14.976885 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.976921 kubelet[2857]: W0209 19:18:14.976913 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.977091 kubelet[2857]: E0209 19:18:14.977027 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.978122 kubelet[2857]: E0209 19:18:14.978074 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.978122 kubelet[2857]: W0209 19:18:14.978109 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.978430 kubelet[2857]: E0209 19:18:14.978154 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.980208 kubelet[2857]: E0209 19:18:14.979447 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.980208 kubelet[2857]: W0209 19:18:14.979484 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.980208 kubelet[2857]: E0209 19:18:14.979522 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.980208 kubelet[2857]: E0209 19:18:14.979958 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.980208 kubelet[2857]: W0209 19:18:14.979993 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.980208 kubelet[2857]: E0209 19:18:14.980031 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.982137 kubelet[2857]: E0209 19:18:14.981676 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.982137 kubelet[2857]: W0209 19:18:14.981707 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.982137 kubelet[2857]: E0209 19:18:14.981752 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:14.982825 kubelet[2857]: E0209 19:18:14.982669 2857 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 19:18:14.982825 kubelet[2857]: W0209 19:18:14.982699 2857 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 19:18:14.982825 kubelet[2857]: E0209 19:18:14.982754 2857 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 19:18:15.576721 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3236084135.mount: Deactivated successfully. Feb 9 19:18:15.739510 env[1657]: time="2024-02-09T19:18:15.739139114Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:15.743569 env[1657]: time="2024-02-09T19:18:15.743515921Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cbddd33ed55a4a5c129e8f09945d426860425b9778d9402efe7bcefea7990a57,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:15.746447 env[1657]: time="2024-02-09T19:18:15.746387071Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:15.750546 env[1657]: time="2024-02-09T19:18:15.750492403Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:b05edbd1f80db4ada229e6001a666a7dd36bb6ab617143684fb3d28abfc4b71e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:15.753009 env[1657]: time="2024-02-09T19:18:15.751962347Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\" returns image reference \"sha256:cbddd33ed55a4a5c129e8f09945d426860425b9778d9402efe7bcefea7990a57\"" Feb 9 19:18:15.756133 env[1657]: time="2024-02-09T19:18:15.756077675Z" level=info msg="CreateContainer within sandbox \"ff787fd335393c6b3605a5d0bc0aabf099486a0a5f76046f8ed7317ea638a349\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Feb 9 19:18:15.794820 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount337784122.mount: Deactivated successfully. Feb 9 19:18:15.802117 env[1657]: time="2024-02-09T19:18:15.802055203Z" level=info msg="CreateContainer within sandbox \"ff787fd335393c6b3605a5d0bc0aabf099486a0a5f76046f8ed7317ea638a349\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"da6a2a207589c8d0fa7710020a9ce28e7dd3c26462d8d50f7c831fa938a971b6\"" Feb 9 19:18:15.803337 env[1657]: time="2024-02-09T19:18:15.803243735Z" level=info msg="StartContainer for \"da6a2a207589c8d0fa7710020a9ce28e7dd3c26462d8d50f7c831fa938a971b6\"" Feb 9 19:18:15.858401 systemd[1]: Started cri-containerd-da6a2a207589c8d0fa7710020a9ce28e7dd3c26462d8d50f7c831fa938a971b6.scope. Feb 9 19:18:15.915000 audit[3436]: AVC avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.918722 kernel: kauditd_printk_skb: 179 callbacks suppressed Feb 9 19:18:15.918810 kernel: audit: type=1400 audit(1707506295.915:1156): avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.915000 audit[3436]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3283 pid=3436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:15.939543 kernel: audit: type=1300 audit(1707506295.915:1156): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3283 pid=3436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:15.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461366132613230373538396338643066613737313030323061396365 Feb 9 19:18:15.951675 kernel: audit: type=1327 audit(1707506295.915:1156): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461366132613230373538396338643066613737313030323061396365 Feb 9 19:18:15.915000 audit[3436]: AVC avc: denied { bpf } for pid=3436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.961642 kernel: audit: type=1400 audit(1707506295.915:1157): avc: denied { bpf } for pid=3436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.915000 audit[3436]: AVC avc: denied { bpf } for pid=3436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.970047 kernel: audit: type=1400 audit(1707506295.915:1157): avc: denied { bpf } for pid=3436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.915000 audit[3436]: AVC avc: denied { bpf } for pid=3436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.980926 kernel: audit: type=1400 audit(1707506295.915:1157): avc: denied { bpf } for pid=3436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.915000 audit[3436]: AVC avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.991312 kernel: audit: type=1400 audit(1707506295.915:1157): avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.993688 kubelet[2857]: I0209 19:18:15.992900 2857 prober_manager.go:287] "Failed to trigger a manual run" probe="Readiness" Feb 9 19:18:15.915000 audit[3436]: AVC avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:16.002746 kernel: audit: type=1400 audit(1707506295.915:1157): avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.915000 audit[3436]: AVC avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:16.010334 kernel: audit: type=1400 audit(1707506295.915:1157): avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.915000 audit[3436]: AVC avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:16.017970 kernel: audit: type=1400 audit(1707506295.915:1157): avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:16.018583 env[1657]: time="2024-02-09T19:18:16.018522403Z" level=info msg="StartContainer for \"da6a2a207589c8d0fa7710020a9ce28e7dd3c26462d8d50f7c831fa938a971b6\" returns successfully" Feb 9 19:18:15.915000 audit[3436]: AVC avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.915000 audit[3436]: AVC avc: denied { bpf } for pid=3436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.915000 audit[3436]: AVC avc: denied { bpf } for pid=3436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.915000 audit: BPF prog-id=142 op=LOAD Feb 9 19:18:15.915000 audit[3436]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=3283 pid=3436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:15.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461366132613230373538396338643066613737313030323061396365 Feb 9 19:18:15.917000 audit[3436]: AVC avc: denied { bpf } for pid=3436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.917000 audit[3436]: AVC avc: denied { bpf } for pid=3436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.917000 audit[3436]: AVC avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.917000 audit[3436]: AVC avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.917000 audit[3436]: AVC avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.917000 audit[3436]: AVC avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.917000 audit[3436]: AVC avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.917000 audit[3436]: AVC avc: denied { bpf } for pid=3436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.917000 audit[3436]: AVC avc: denied { bpf } for pid=3436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.917000 audit: BPF prog-id=143 op=LOAD Feb 9 19:18:15.917000 audit[3436]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=3283 pid=3436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:15.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461366132613230373538396338643066613737313030323061396365 Feb 9 19:18:15.924000 audit: BPF prog-id=143 op=UNLOAD Feb 9 19:18:15.925000 audit: BPF prog-id=142 op=UNLOAD Feb 9 19:18:15.925000 audit[3436]: AVC avc: denied { bpf } for pid=3436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.925000 audit[3436]: AVC avc: denied { bpf } for pid=3436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.925000 audit[3436]: AVC avc: denied { bpf } for pid=3436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.925000 audit[3436]: AVC avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.925000 audit[3436]: AVC avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.925000 audit[3436]: AVC avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.925000 audit[3436]: AVC avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.925000 audit[3436]: AVC avc: denied { perfmon } for pid=3436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.925000 audit[3436]: AVC avc: denied { bpf } for pid=3436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.925000 audit[3436]: AVC avc: denied { bpf } for pid=3436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:15.925000 audit: BPF prog-id=144 op=LOAD Feb 9 19:18:15.925000 audit[3436]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=3283 pid=3436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:15.925000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461366132613230373538396338643066613737313030323061396365 Feb 9 19:18:16.046094 systemd[1]: cri-containerd-da6a2a207589c8d0fa7710020a9ce28e7dd3c26462d8d50f7c831fa938a971b6.scope: Deactivated successfully. Feb 9 19:18:16.049000 audit: BPF prog-id=144 op=UNLOAD Feb 9 19:18:16.385724 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-da6a2a207589c8d0fa7710020a9ce28e7dd3c26462d8d50f7c831fa938a971b6-rootfs.mount: Deactivated successfully. Feb 9 19:18:16.408980 env[1657]: time="2024-02-09T19:18:16.408915162Z" level=info msg="shim disconnected" id=da6a2a207589c8d0fa7710020a9ce28e7dd3c26462d8d50f7c831fa938a971b6 Feb 9 19:18:16.409246 env[1657]: time="2024-02-09T19:18:16.409214311Z" level=warning msg="cleaning up after shim disconnected" id=da6a2a207589c8d0fa7710020a9ce28e7dd3c26462d8d50f7c831fa938a971b6 namespace=k8s.io Feb 9 19:18:16.409446 env[1657]: time="2024-02-09T19:18:16.409416496Z" level=info msg="cleaning up dead shim" Feb 9 19:18:16.429078 env[1657]: time="2024-02-09T19:18:16.429020082Z" level=warning msg="cleanup warnings time=\"2024-02-09T19:18:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3482 runtime=io.containerd.runc.v2\n" Feb 9 19:18:16.786591 kubelet[2857]: E0209 19:18:16.786547 2857 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-g4vzb" podUID=3c8095c3-e7b4-4e87-97f5-d754ac025e71 Feb 9 19:18:17.000443 env[1657]: time="2024-02-09T19:18:17.000320699Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\"" Feb 9 19:18:17.024973 kubelet[2857]: I0209 19:18:17.024927 2857 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-6864fcb4c7-zh4f5" podStartSLOduration=4.487938322 podCreationTimestamp="2024-02-09 19:18:10 +0000 UTC" firstStartedPulling="2024-02-09 19:18:11.581133074 +0000 UTC m=+22.186337016" lastFinishedPulling="2024-02-09 19:18:14.118055863 +0000 UTC m=+24.723259817" observedRunningTime="2024-02-09 19:18:14.990484155 +0000 UTC m=+25.595688121" watchObservedRunningTime="2024-02-09 19:18:17.024861123 +0000 UTC m=+27.630065101" Feb 9 19:18:18.215211 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount68259085.mount: Deactivated successfully. Feb 9 19:18:18.787154 kubelet[2857]: E0209 19:18:18.787079 2857 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-g4vzb" podUID=3c8095c3-e7b4-4e87-97f5-d754ac025e71 Feb 9 19:18:20.788880 kubelet[2857]: E0209 19:18:20.787140 2857 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-g4vzb" podUID=3c8095c3-e7b4-4e87-97f5-d754ac025e71 Feb 9 19:18:21.797738 env[1657]: time="2024-02-09T19:18:21.797684910Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:21.801595 env[1657]: time="2024-02-09T19:18:21.801539943Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9c9318f5fbf505fc3d84676966009a3887e58ea1e3eac10039e5a96dfceb254b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:21.804434 env[1657]: time="2024-02-09T19:18:21.804385184Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:21.806497 env[1657]: time="2024-02-09T19:18:21.806431397Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:d943b4c23e82a39b0186a1a3b2fe8f728e543d503df72d7be521501a82b7e7b4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:21.808594 env[1657]: time="2024-02-09T19:18:21.808546049Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\" returns image reference \"sha256:9c9318f5fbf505fc3d84676966009a3887e58ea1e3eac10039e5a96dfceb254b\"" Feb 9 19:18:21.815012 env[1657]: time="2024-02-09T19:18:21.814946179Z" level=info msg="CreateContainer within sandbox \"ff787fd335393c6b3605a5d0bc0aabf099486a0a5f76046f8ed7317ea638a349\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Feb 9 19:18:21.839111 env[1657]: time="2024-02-09T19:18:21.839028662Z" level=info msg="CreateContainer within sandbox \"ff787fd335393c6b3605a5d0bc0aabf099486a0a5f76046f8ed7317ea638a349\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"405c8303d6892f7e4a11889cbb8b0b0db4f2f71c5ceab77724037357d7b8e423\"" Feb 9 19:18:21.842147 env[1657]: time="2024-02-09T19:18:21.840539726Z" level=info msg="StartContainer for \"405c8303d6892f7e4a11889cbb8b0b0db4f2f71c5ceab77724037357d7b8e423\"" Feb 9 19:18:21.886097 systemd[1]: Started cri-containerd-405c8303d6892f7e4a11889cbb8b0b0db4f2f71c5ceab77724037357d7b8e423.scope. Feb 9 19:18:21.943000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.946771 kernel: kauditd_printk_skb: 34 callbacks suppressed Feb 9 19:18:21.946872 kernel: audit: type=1400 audit(1707506301.943:1163): avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.943000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3283 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:21.965353 kernel: audit: type=1300 audit(1707506301.943:1163): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3283 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:21.965482 kernel: audit: type=1327 audit(1707506301.943:1163): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430356338333033643638393266376534613131383839636262386230 Feb 9 19:18:21.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430356338333033643638393266376534613131383839636262386230 Feb 9 19:18:21.943000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.982998 kernel: audit: type=1400 audit(1707506301.943:1164): avc: denied { bpf } for pid=3505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.943000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.992202 kernel: audit: type=1400 audit(1707506301.943:1164): avc: denied { bpf } for pid=3505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.943000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:22.004574 kernel: audit: type=1400 audit(1707506301.943:1164): avc: denied { bpf } for pid=3505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.943000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:22.013353 kernel: audit: type=1400 audit(1707506301.943:1164): avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.943000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:22.023443 kernel: audit: type=1400 audit(1707506301.943:1164): avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.943000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:22.035308 kernel: audit: type=1400 audit(1707506301.943:1164): avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.943000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:22.047508 kernel: audit: type=1400 audit(1707506301.943:1164): avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.943000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.943000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.943000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.943000 audit: BPF prog-id=145 op=LOAD Feb 9 19:18:21.943000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3283 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:21.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430356338333033643638393266376534613131383839636262386230 Feb 9 19:18:21.945000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.945000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.945000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.945000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.945000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.945000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.945000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.945000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.945000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.945000 audit: BPF prog-id=146 op=LOAD Feb 9 19:18:21.945000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3283 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:21.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430356338333033643638393266376534613131383839636262386230 Feb 9 19:18:21.952000 audit: BPF prog-id=146 op=UNLOAD Feb 9 19:18:21.952000 audit: BPF prog-id=145 op=UNLOAD Feb 9 19:18:21.953000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.953000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.953000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.953000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.953000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.953000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.953000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.953000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.953000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.953000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:21.953000 audit: BPF prog-id=147 op=LOAD Feb 9 19:18:21.953000 audit[3505]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3283 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:21.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430356338333033643638393266376534613131383839636262386230 Feb 9 19:18:22.058587 env[1657]: time="2024-02-09T19:18:22.058374762Z" level=info msg="StartContainer for \"405c8303d6892f7e4a11889cbb8b0b0db4f2f71c5ceab77724037357d7b8e423\" returns successfully" Feb 9 19:18:22.787221 kubelet[2857]: E0209 19:18:22.787153 2857 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-g4vzb" podUID=3c8095c3-e7b4-4e87-97f5-d754ac025e71 Feb 9 19:18:23.006184 env[1657]: time="2024-02-09T19:18:23.006083610Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 9 19:18:23.012602 systemd[1]: cri-containerd-405c8303d6892f7e4a11889cbb8b0b0db4f2f71c5ceab77724037357d7b8e423.scope: Deactivated successfully. Feb 9 19:18:23.015000 audit: BPF prog-id=147 op=UNLOAD Feb 9 19:18:23.064810 kubelet[2857]: I0209 19:18:23.064655 2857 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Feb 9 19:18:23.085815 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-405c8303d6892f7e4a11889cbb8b0b0db4f2f71c5ceab77724037357d7b8e423-rootfs.mount: Deactivated successfully. Feb 9 19:18:23.136515 kubelet[2857]: I0209 19:18:23.136443 2857 topology_manager.go:212] "Topology Admit Handler" Feb 9 19:18:23.142536 kubelet[2857]: I0209 19:18:23.142448 2857 topology_manager.go:212] "Topology Admit Handler" Feb 9 19:18:23.154109 systemd[1]: Created slice kubepods-burstable-pod636b8ad3_442b_47df_a6ee_c31121f98b5d.slice. Feb 9 19:18:23.161997 kubelet[2857]: I0209 19:18:23.161935 2857 topology_manager.go:212] "Topology Admit Handler" Feb 9 19:18:23.172636 systemd[1]: Created slice kubepods-burstable-pod856efc3e_393c_43c0_ad49_acab9a81d056.slice. Feb 9 19:18:23.191853 systemd[1]: Created slice kubepods-besteffort-pod955fa3c8_c5dc_4f6b_80bf_2d701f924585.slice. Feb 9 19:18:23.231272 kubelet[2857]: I0209 19:18:23.231229 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cxsjl\" (UniqueName: \"kubernetes.io/projected/955fa3c8-c5dc-4f6b-80bf-2d701f924585-kube-api-access-cxsjl\") pod \"calico-kube-controllers-865956f94-mwj8g\" (UID: \"955fa3c8-c5dc-4f6b-80bf-2d701f924585\") " pod="calico-system/calico-kube-controllers-865956f94-mwj8g" Feb 9 19:18:23.232466 kubelet[2857]: I0209 19:18:23.231643 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/636b8ad3-442b-47df-a6ee-c31121f98b5d-config-volume\") pod \"coredns-5d78c9869d-s4ckl\" (UID: \"636b8ad3-442b-47df-a6ee-c31121f98b5d\") " pod="kube-system/coredns-5d78c9869d-s4ckl" Feb 9 19:18:23.232466 kubelet[2857]: I0209 19:18:23.231696 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/856efc3e-393c-43c0-ad49-acab9a81d056-config-volume\") pod \"coredns-5d78c9869d-mjt4d\" (UID: \"856efc3e-393c-43c0-ad49-acab9a81d056\") " pod="kube-system/coredns-5d78c9869d-mjt4d" Feb 9 19:18:23.232466 kubelet[2857]: I0209 19:18:23.231742 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5pfr6\" (UniqueName: \"kubernetes.io/projected/856efc3e-393c-43c0-ad49-acab9a81d056-kube-api-access-5pfr6\") pod \"coredns-5d78c9869d-mjt4d\" (UID: \"856efc3e-393c-43c0-ad49-acab9a81d056\") " pod="kube-system/coredns-5d78c9869d-mjt4d" Feb 9 19:18:23.232466 kubelet[2857]: I0209 19:18:23.231794 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qvjxn\" (UniqueName: \"kubernetes.io/projected/636b8ad3-442b-47df-a6ee-c31121f98b5d-kube-api-access-qvjxn\") pod \"coredns-5d78c9869d-s4ckl\" (UID: \"636b8ad3-442b-47df-a6ee-c31121f98b5d\") " pod="kube-system/coredns-5d78c9869d-s4ckl" Feb 9 19:18:23.232466 kubelet[2857]: I0209 19:18:23.231843 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/955fa3c8-c5dc-4f6b-80bf-2d701f924585-tigera-ca-bundle\") pod \"calico-kube-controllers-865956f94-mwj8g\" (UID: \"955fa3c8-c5dc-4f6b-80bf-2d701f924585\") " pod="calico-system/calico-kube-controllers-865956f94-mwj8g" Feb 9 19:18:23.467181 env[1657]: time="2024-02-09T19:18:23.466903690Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-s4ckl,Uid:636b8ad3-442b-47df-a6ee-c31121f98b5d,Namespace:kube-system,Attempt:0,}" Feb 9 19:18:23.486117 env[1657]: time="2024-02-09T19:18:23.486063810Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-mjt4d,Uid:856efc3e-393c-43c0-ad49-acab9a81d056,Namespace:kube-system,Attempt:0,}" Feb 9 19:18:23.499637 env[1657]: time="2024-02-09T19:18:23.499558367Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-865956f94-mwj8g,Uid:955fa3c8-c5dc-4f6b-80bf-2d701f924585,Namespace:calico-system,Attempt:0,}" Feb 9 19:18:24.286464 env[1657]: time="2024-02-09T19:18:24.285839402Z" level=info msg="shim disconnected" id=405c8303d6892f7e4a11889cbb8b0b0db4f2f71c5ceab77724037357d7b8e423 Feb 9 19:18:24.286464 env[1657]: time="2024-02-09T19:18:24.286210529Z" level=warning msg="cleaning up after shim disconnected" id=405c8303d6892f7e4a11889cbb8b0b0db4f2f71c5ceab77724037357d7b8e423 namespace=k8s.io Feb 9 19:18:24.286464 env[1657]: time="2024-02-09T19:18:24.286233786Z" level=info msg="cleaning up dead shim" Feb 9 19:18:24.343112 env[1657]: time="2024-02-09T19:18:24.343029672Z" level=warning msg="cleanup warnings time=\"2024-02-09T19:18:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3555 runtime=io.containerd.runc.v2\n" Feb 9 19:18:24.478529 env[1657]: time="2024-02-09T19:18:24.478433250Z" level=error msg="Failed to destroy network for sandbox \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:24.479511 env[1657]: time="2024-02-09T19:18:24.479442633Z" level=error msg="encountered an error cleaning up failed sandbox \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:24.479757 env[1657]: time="2024-02-09T19:18:24.479705899Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-865956f94-mwj8g,Uid:955fa3c8-c5dc-4f6b-80bf-2d701f924585,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:24.480959 kubelet[2857]: E0209 19:18:24.480410 2857 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:24.480959 kubelet[2857]: E0209 19:18:24.480491 2857 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-865956f94-mwj8g" Feb 9 19:18:24.480959 kubelet[2857]: E0209 19:18:24.480528 2857 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-865956f94-mwj8g" Feb 9 19:18:24.481885 kubelet[2857]: E0209 19:18:24.480638 2857 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-865956f94-mwj8g_calico-system(955fa3c8-c5dc-4f6b-80bf-2d701f924585)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-865956f94-mwj8g_calico-system(955fa3c8-c5dc-4f6b-80bf-2d701f924585)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-865956f94-mwj8g" podUID=955fa3c8-c5dc-4f6b-80bf-2d701f924585 Feb 9 19:18:24.491593 env[1657]: time="2024-02-09T19:18:24.491521753Z" level=error msg="Failed to destroy network for sandbox \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:24.493146 env[1657]: time="2024-02-09T19:18:24.493027739Z" level=error msg="encountered an error cleaning up failed sandbox \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:24.493556 env[1657]: time="2024-02-09T19:18:24.493469968Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-mjt4d,Uid:856efc3e-393c-43c0-ad49-acab9a81d056,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:24.495104 kubelet[2857]: E0209 19:18:24.494331 2857 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:24.495104 kubelet[2857]: E0209 19:18:24.494464 2857 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-mjt4d" Feb 9 19:18:24.495104 kubelet[2857]: E0209 19:18:24.494528 2857 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-mjt4d" Feb 9 19:18:24.495470 kubelet[2857]: E0209 19:18:24.494650 2857 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5d78c9869d-mjt4d_kube-system(856efc3e-393c-43c0-ad49-acab9a81d056)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5d78c9869d-mjt4d_kube-system(856efc3e-393c-43c0-ad49-acab9a81d056)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-mjt4d" podUID=856efc3e-393c-43c0-ad49-acab9a81d056 Feb 9 19:18:24.521119 env[1657]: time="2024-02-09T19:18:24.521015915Z" level=error msg="Failed to destroy network for sandbox \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:24.522577 env[1657]: time="2024-02-09T19:18:24.522482263Z" level=error msg="encountered an error cleaning up failed sandbox \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:24.522834 env[1657]: time="2024-02-09T19:18:24.522773646Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-s4ckl,Uid:636b8ad3-442b-47df-a6ee-c31121f98b5d,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:24.523324 kubelet[2857]: E0209 19:18:24.523263 2857 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:24.523457 kubelet[2857]: E0209 19:18:24.523387 2857 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-s4ckl" Feb 9 19:18:24.523457 kubelet[2857]: E0209 19:18:24.523441 2857 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-s4ckl" Feb 9 19:18:24.523601 kubelet[2857]: E0209 19:18:24.523525 2857 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5d78c9869d-s4ckl_kube-system(636b8ad3-442b-47df-a6ee-c31121f98b5d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5d78c9869d-s4ckl_kube-system(636b8ad3-442b-47df-a6ee-c31121f98b5d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-s4ckl" podUID=636b8ad3-442b-47df-a6ee-c31121f98b5d Feb 9 19:18:24.795564 systemd[1]: Created slice kubepods-besteffort-pod3c8095c3_e7b4_4e87_97f5_d754ac025e71.slice. Feb 9 19:18:24.802193 env[1657]: time="2024-02-09T19:18:24.802134284Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-g4vzb,Uid:3c8095c3-e7b4-4e87-97f5-d754ac025e71,Namespace:calico-system,Attempt:0,}" Feb 9 19:18:24.899805 env[1657]: time="2024-02-09T19:18:24.899731427Z" level=error msg="Failed to destroy network for sandbox \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:24.900750 env[1657]: time="2024-02-09T19:18:24.900695400Z" level=error msg="encountered an error cleaning up failed sandbox \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:24.900985 env[1657]: time="2024-02-09T19:18:24.900923732Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-g4vzb,Uid:3c8095c3-e7b4-4e87-97f5-d754ac025e71,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:24.901791 kubelet[2857]: E0209 19:18:24.901462 2857 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:24.901791 kubelet[2857]: E0209 19:18:24.901554 2857 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-g4vzb" Feb 9 19:18:24.901791 kubelet[2857]: E0209 19:18:24.901614 2857 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-g4vzb" Feb 9 19:18:24.904692 kubelet[2857]: E0209 19:18:24.901726 2857 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-g4vzb_calico-system(3c8095c3-e7b4-4e87-97f5-d754ac025e71)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-g4vzb_calico-system(3c8095c3-e7b4-4e87-97f5-d754ac025e71)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-g4vzb" podUID=3c8095c3-e7b4-4e87-97f5-d754ac025e71 Feb 9 19:18:25.048585 kubelet[2857]: I0209 19:18:25.048455 2857 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Feb 9 19:18:25.050679 env[1657]: time="2024-02-09T19:18:25.050624539Z" level=info msg="StopPodSandbox for \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\"" Feb 9 19:18:25.073454 env[1657]: time="2024-02-09T19:18:25.073406570Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\"" Feb 9 19:18:25.074381 kubelet[2857]: I0209 19:18:25.074330 2857 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Feb 9 19:18:25.076346 env[1657]: time="2024-02-09T19:18:25.076271678Z" level=info msg="StopPodSandbox for \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\"" Feb 9 19:18:25.078121 kubelet[2857]: I0209 19:18:25.077436 2857 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Feb 9 19:18:25.082916 env[1657]: time="2024-02-09T19:18:25.081238653Z" level=info msg="StopPodSandbox for \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\"" Feb 9 19:18:25.085359 kubelet[2857]: I0209 19:18:25.084350 2857 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Feb 9 19:18:25.085864 env[1657]: time="2024-02-09T19:18:25.085816957Z" level=info msg="StopPodSandbox for \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\"" Feb 9 19:18:25.205747 env[1657]: time="2024-02-09T19:18:25.205668056Z" level=error msg="StopPodSandbox for \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\" failed" error="failed to destroy network for sandbox \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:25.206488 kubelet[2857]: E0209 19:18:25.206440 2857 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Feb 9 19:18:25.206728 kubelet[2857]: E0209 19:18:25.206546 2857 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a} Feb 9 19:18:25.206815 kubelet[2857]: E0209 19:18:25.206766 2857 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"856efc3e-393c-43c0-ad49-acab9a81d056\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 19:18:25.206933 kubelet[2857]: E0209 19:18:25.206842 2857 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"856efc3e-393c-43c0-ad49-acab9a81d056\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-mjt4d" podUID=856efc3e-393c-43c0-ad49-acab9a81d056 Feb 9 19:18:25.219137 env[1657]: time="2024-02-09T19:18:25.219063178Z" level=error msg="StopPodSandbox for \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\" failed" error="failed to destroy network for sandbox \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:25.219885 kubelet[2857]: E0209 19:18:25.219669 2857 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Feb 9 19:18:25.219885 kubelet[2857]: E0209 19:18:25.219727 2857 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4} Feb 9 19:18:25.219885 kubelet[2857]: E0209 19:18:25.219795 2857 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"955fa3c8-c5dc-4f6b-80bf-2d701f924585\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 19:18:25.219885 kubelet[2857]: E0209 19:18:25.219850 2857 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"955fa3c8-c5dc-4f6b-80bf-2d701f924585\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-865956f94-mwj8g" podUID=955fa3c8-c5dc-4f6b-80bf-2d701f924585 Feb 9 19:18:25.222188 env[1657]: time="2024-02-09T19:18:25.222088744Z" level=error msg="StopPodSandbox for \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\" failed" error="failed to destroy network for sandbox \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:25.222823 kubelet[2857]: E0209 19:18:25.222618 2857 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Feb 9 19:18:25.222823 kubelet[2857]: E0209 19:18:25.222679 2857 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2} Feb 9 19:18:25.222823 kubelet[2857]: E0209 19:18:25.222743 2857 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"636b8ad3-442b-47df-a6ee-c31121f98b5d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 19:18:25.222823 kubelet[2857]: E0209 19:18:25.222792 2857 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"636b8ad3-442b-47df-a6ee-c31121f98b5d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-s4ckl" podUID=636b8ad3-442b-47df-a6ee-c31121f98b5d Feb 9 19:18:25.230648 env[1657]: time="2024-02-09T19:18:25.230555735Z" level=error msg="StopPodSandbox for \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\" failed" error="failed to destroy network for sandbox \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 19:18:25.231252 kubelet[2857]: E0209 19:18:25.231215 2857 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Feb 9 19:18:25.231415 kubelet[2857]: E0209 19:18:25.231333 2857 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62} Feb 9 19:18:25.231488 kubelet[2857]: E0209 19:18:25.231420 2857 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3c8095c3-e7b4-4e87-97f5-d754ac025e71\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 19:18:25.231603 kubelet[2857]: E0209 19:18:25.231501 2857 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3c8095c3-e7b4-4e87-97f5-d754ac025e71\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-g4vzb" podUID=3c8095c3-e7b4-4e87-97f5-d754ac025e71 Feb 9 19:18:25.267112 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4-shm.mount: Deactivated successfully. Feb 9 19:18:25.267280 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2-shm.mount: Deactivated successfully. Feb 9 19:18:25.267462 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a-shm.mount: Deactivated successfully. Feb 9 19:18:27.014351 kubelet[2857]: I0209 19:18:27.014172 2857 prober_manager.go:287] "Failed to trigger a manual run" probe="Readiness" Feb 9 19:18:27.127597 kernel: kauditd_printk_skb: 34 callbacks suppressed Feb 9 19:18:27.127781 kernel: audit: type=1325 audit(1707506307.118:1170): table=filter:95 family=2 entries=15 op=nft_register_rule pid=3766 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:27.118000 audit[3766]: NETFILTER_CFG table=filter:95 family=2 entries=15 op=nft_register_rule pid=3766 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:27.118000 audit[3766]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffec893da0 a2=0 a3=ffffa3dab6c0 items=0 ppid=2989 pid=3766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:27.141730 kernel: audit: type=1300 audit(1707506307.118:1170): arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffec893da0 a2=0 a3=ffffa3dab6c0 items=0 ppid=2989 pid=3766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:27.118000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:27.155501 kernel: audit: type=1327 audit(1707506307.118:1170): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:27.147000 audit[3766]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=3766 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:27.147000 audit[3766]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6068 a0=3 a1=ffffec893da0 a2=0 a3=ffffa3dab6c0 items=0 ppid=2989 pid=3766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:27.163322 kernel: audit: type=1325 audit(1707506307.147:1171): table=nat:96 family=2 entries=19 op=nft_register_chain pid=3766 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:27.163442 kernel: audit: type=1300 audit(1707506307.147:1171): arch=c00000b7 syscall=211 success=yes exit=6068 a0=3 a1=ffffec893da0 a2=0 a3=ffffa3dab6c0 items=0 ppid=2989 pid=3766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:27.147000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:27.181901 kernel: audit: type=1327 audit(1707506307.147:1171): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:33.566158 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2177830502.mount: Deactivated successfully. Feb 9 19:18:33.662624 env[1657]: time="2024-02-09T19:18:33.662544725Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:33.666326 env[1657]: time="2024-02-09T19:18:33.666239940Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c445639cb28807ced09724016dc3b273b170b14d3b3d0c39b1affa1cc6b68774,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:33.676660 env[1657]: time="2024-02-09T19:18:33.676600923Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:33.677978 env[1657]: time="2024-02-09T19:18:33.677935092Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:a45dffb21a0e9ca8962f36359a2ab776beeecd93843543c2fa1745d7bbb0f754,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:33.680352 env[1657]: time="2024-02-09T19:18:33.680252421Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\" returns image reference \"sha256:c445639cb28807ced09724016dc3b273b170b14d3b3d0c39b1affa1cc6b68774\"" Feb 9 19:18:33.711244 env[1657]: time="2024-02-09T19:18:33.711168375Z" level=info msg="CreateContainer within sandbox \"ff787fd335393c6b3605a5d0bc0aabf099486a0a5f76046f8ed7317ea638a349\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Feb 9 19:18:33.739708 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2512512419.mount: Deactivated successfully. Feb 9 19:18:33.749712 env[1657]: time="2024-02-09T19:18:33.749641730Z" level=info msg="CreateContainer within sandbox \"ff787fd335393c6b3605a5d0bc0aabf099486a0a5f76046f8ed7317ea638a349\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"771b56e0adaa36bedb6ad6478c9106d7a95f55277d01aba82eb5a646f12ec278\"" Feb 9 19:18:33.750769 env[1657]: time="2024-02-09T19:18:33.750681280Z" level=info msg="StartContainer for \"771b56e0adaa36bedb6ad6478c9106d7a95f55277d01aba82eb5a646f12ec278\"" Feb 9 19:18:33.785170 systemd[1]: Started cri-containerd-771b56e0adaa36bedb6ad6478c9106d7a95f55277d01aba82eb5a646f12ec278.scope. Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit[3779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3283 pid=3779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:33.858674 kernel: audit: type=1400 audit(1707506313.836:1172): avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.858797 kernel: audit: type=1300 audit(1707506313.836:1172): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3283 pid=3779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:33.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737316235366530616461613336626564623661643634373863393130 Feb 9 19:18:33.869918 kernel: audit: type=1327 audit(1707506313.836:1172): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737316235366530616461613336626564623661643634373863393130 Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { bpf } for pid=3779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.878545 kernel: audit: type=1400 audit(1707506313.836:1173): avc: denied { bpf } for pid=3779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { bpf } for pid=3779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.889787 kernel: audit: type=1400 audit(1707506313.836:1173): avc: denied { bpf } for pid=3779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { bpf } for pid=3779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.897452 kernel: audit: type=1400 audit(1707506313.836:1173): avc: denied { bpf } for pid=3779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.905091 kernel: audit: type=1400 audit(1707506313.836:1173): avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.912983 kernel: audit: type=1400 audit(1707506313.836:1173): avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.920789 kernel: audit: type=1400 audit(1707506313.836:1173): avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.930429 env[1657]: time="2024-02-09T19:18:33.925206127Z" level=info msg="StartContainer for \"771b56e0adaa36bedb6ad6478c9106d7a95f55277d01aba82eb5a646f12ec278\" returns successfully" Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { bpf } for pid=3779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { bpf } for pid=3779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit: BPF prog-id=148 op=LOAD Feb 9 19:18:33.836000 audit[3779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3283 pid=3779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:33.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737316235366530616461613336626564623661643634373863393130 Feb 9 19:18:33.933344 kernel: audit: type=1400 audit(1707506313.836:1173): avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { bpf } for pid=3779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { bpf } for pid=3779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { bpf } for pid=3779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit[3779]: AVC avc: denied { bpf } for pid=3779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.836000 audit: BPF prog-id=149 op=LOAD Feb 9 19:18:33.836000 audit[3779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3283 pid=3779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:33.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737316235366530616461613336626564623661643634373863393130 Feb 9 19:18:33.837000 audit: BPF prog-id=149 op=UNLOAD Feb 9 19:18:33.837000 audit: BPF prog-id=148 op=UNLOAD Feb 9 19:18:33.837000 audit[3779]: AVC avc: denied { bpf } for pid=3779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.837000 audit[3779]: AVC avc: denied { bpf } for pid=3779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.837000 audit[3779]: AVC avc: denied { bpf } for pid=3779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.837000 audit[3779]: AVC avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.837000 audit[3779]: AVC avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.837000 audit[3779]: AVC avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.837000 audit[3779]: AVC avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.837000 audit[3779]: AVC avc: denied { perfmon } for pid=3779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.837000 audit[3779]: AVC avc: denied { bpf } for pid=3779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.837000 audit[3779]: AVC avc: denied { bpf } for pid=3779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:33.837000 audit: BPF prog-id=150 op=LOAD Feb 9 19:18:33.837000 audit[3779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3283 pid=3779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:33.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737316235366530616461613336626564623661643634373863393130 Feb 9 19:18:34.076349 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Feb 9 19:18:34.076566 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Feb 9 19:18:34.184917 kubelet[2857]: I0209 19:18:34.181990 2857 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-qdhxc" podStartSLOduration=1.128564919 podCreationTimestamp="2024-02-09 19:18:11 +0000 UTC" firstStartedPulling="2024-02-09 19:18:11.627396029 +0000 UTC m=+22.232599971" lastFinishedPulling="2024-02-09 19:18:33.680728137 +0000 UTC m=+44.285932091" observedRunningTime="2024-02-09 19:18:34.174115536 +0000 UTC m=+44.779319514" watchObservedRunningTime="2024-02-09 19:18:34.181897039 +0000 UTC m=+44.787100981" Feb 9 19:18:35.173541 systemd[1]: run-containerd-runc-k8s.io-771b56e0adaa36bedb6ad6478c9106d7a95f55277d01aba82eb5a646f12ec278-runc.UnaYSS.mount: Deactivated successfully. Feb 9 19:18:35.791454 env[1657]: time="2024-02-09T19:18:35.791389303Z" level=info msg="StopPodSandbox for \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\"" Feb 9 19:18:35.919000 audit[3932]: AVC avc: denied { write } for pid=3932 comm="tee" name="fd" dev="proc" ino=20237 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 19:18:35.919000 audit[3932]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd55b8985 a2=241 a3=1b6 items=1 ppid=3908 pid=3932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:35.919000 audit: CWD cwd="/etc/service/enabled/confd/log" Feb 9 19:18:35.919000 audit: PATH item=0 name="/dev/fd/63" inode=20234 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 19:18:35.919000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 19:18:35.989970 env[1657]: 2024-02-09 19:18:35.893 [INFO][3893] k8s.go 578: Cleaning up netns ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Feb 9 19:18:35.989970 env[1657]: 2024-02-09 19:18:35.893 [INFO][3893] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" iface="eth0" netns="/var/run/netns/cni-44faa092-749c-7ad9-1ea3-008bf025a360" Feb 9 19:18:35.989970 env[1657]: 2024-02-09 19:18:35.894 [INFO][3893] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" iface="eth0" netns="/var/run/netns/cni-44faa092-749c-7ad9-1ea3-008bf025a360" Feb 9 19:18:35.989970 env[1657]: 2024-02-09 19:18:35.895 [INFO][3893] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" iface="eth0" netns="/var/run/netns/cni-44faa092-749c-7ad9-1ea3-008bf025a360" Feb 9 19:18:35.989970 env[1657]: 2024-02-09 19:18:35.895 [INFO][3893] k8s.go 585: Releasing IP address(es) ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Feb 9 19:18:35.989970 env[1657]: 2024-02-09 19:18:35.895 [INFO][3893] utils.go 188: Calico CNI releasing IP address ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Feb 9 19:18:35.989970 env[1657]: 2024-02-09 19:18:35.966 [INFO][3923] ipam_plugin.go 415: Releasing address using handleID ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" HandleID="k8s-pod-network.98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" Feb 9 19:18:35.989970 env[1657]: 2024-02-09 19:18:35.967 [INFO][3923] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 19:18:35.989970 env[1657]: 2024-02-09 19:18:35.967 [INFO][3923] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 19:18:35.989970 env[1657]: 2024-02-09 19:18:35.982 [WARNING][3923] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" HandleID="k8s-pod-network.98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" Feb 9 19:18:35.989970 env[1657]: 2024-02-09 19:18:35.982 [INFO][3923] ipam_plugin.go 443: Releasing address using workloadID ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" HandleID="k8s-pod-network.98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" Feb 9 19:18:35.989970 env[1657]: 2024-02-09 19:18:35.985 [INFO][3923] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 19:18:35.989970 env[1657]: 2024-02-09 19:18:35.987 [INFO][3893] k8s.go 591: Teardown processing complete. ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Feb 9 19:18:35.994773 systemd[1]: run-netns-cni\x2d44faa092\x2d749c\x2d7ad9\x2d1ea3\x2d008bf025a360.mount: Deactivated successfully. Feb 9 19:18:35.995505 env[1657]: time="2024-02-09T19:18:35.995444475Z" level=info msg="TearDown network for sandbox \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\" successfully" Feb 9 19:18:35.995726 env[1657]: time="2024-02-09T19:18:35.995630140Z" level=info msg="StopPodSandbox for \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\" returns successfully" Feb 9 19:18:35.997188 env[1657]: time="2024-02-09T19:18:35.997132726Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-mjt4d,Uid:856efc3e-393c-43c0-ad49-acab9a81d056,Namespace:kube-system,Attempt:1,}" Feb 9 19:18:35.996000 audit[3961]: AVC avc: denied { write } for pid=3961 comm="tee" name="fd" dev="proc" ino=21112 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 19:18:35.996000 audit[3961]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd0f91976 a2=241 a3=1b6 items=1 ppid=3944 pid=3961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:35.996000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Feb 9 19:18:35.996000 audit: PATH item=0 name="/dev/fd/63" inode=21109 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 19:18:35.996000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 19:18:36.084000 audit[3970]: AVC avc: denied { write } for pid=3970 comm="tee" name="fd" dev="proc" ino=21135 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 19:18:36.110000 audit[3964]: AVC avc: denied { write } for pid=3964 comm="tee" name="fd" dev="proc" ino=21147 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 19:18:36.110000 audit[3964]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffce65985 a2=241 a3=1b6 items=1 ppid=3919 pid=3964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:36.110000 audit: CWD cwd="/etc/service/enabled/bird6/log" Feb 9 19:18:36.110000 audit: PATH item=0 name="/dev/fd/63" inode=20261 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 19:18:36.110000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 19:18:36.084000 audit[3970]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcb5e5986 a2=241 a3=1b6 items=1 ppid=3907 pid=3970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:36.084000 audit: CWD cwd="/etc/service/enabled/bird/log" Feb 9 19:18:36.084000 audit: PATH item=0 name="/dev/fd/63" inode=21124 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 19:18:36.084000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 19:18:36.108000 audit[3981]: AVC avc: denied { write } for pid=3981 comm="tee" name="fd" dev="proc" ino=21146 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 19:18:36.108000 audit[3981]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd4a99985 a2=241 a3=1b6 items=1 ppid=3911 pid=3981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:36.108000 audit: CWD cwd="/etc/service/enabled/felix/log" Feb 9 19:18:36.108000 audit: PATH item=0 name="/dev/fd/63" inode=21131 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 19:18:36.108000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 19:18:36.126000 audit[3985]: AVC avc: denied { write } for pid=3985 comm="tee" name="fd" dev="proc" ino=21153 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 19:18:36.126000 audit[3985]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdf540975 a2=241 a3=1b6 items=1 ppid=3924 pid=3985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:36.126000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Feb 9 19:18:36.126000 audit: PATH item=0 name="/dev/fd/63" inode=21132 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 19:18:36.126000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 19:18:36.156000 audit[3983]: AVC avc: denied { write } for pid=3983 comm="tee" name="fd" dev="proc" ino=21157 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 19:18:36.156000 audit[3983]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc0a0e987 a2=241 a3=1b6 items=1 ppid=3917 pid=3983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:36.156000 audit: CWD cwd="/etc/service/enabled/cni/log" Feb 9 19:18:36.156000 audit: PATH item=0 name="/dev/fd/63" inode=20305 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 19:18:36.156000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 19:18:36.382792 (udev-worker)[3810]: Network interface NamePolicy= disabled on kernel command line. Feb 9 19:18:36.396476 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 19:18:36.396648 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali95fe637b96f: link becomes ready Feb 9 19:18:36.389458 systemd-networkd[1477]: cali95fe637b96f: Link UP Feb 9 19:18:36.396631 systemd-networkd[1477]: cali95fe637b96f: Gained carrier Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.106 [INFO][3972] utils.go 100: File /var/lib/calico/mtu does not exist Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.148 [INFO][3972] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0 coredns-5d78c9869d- kube-system 856efc3e-393c-43c0-ad49-acab9a81d056 712 0 2024-02-09 19:18:03 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5d78c9869d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-25-191 coredns-5d78c9869d-mjt4d eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali95fe637b96f [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" Namespace="kube-system" Pod="coredns-5d78c9869d-mjt4d" WorkloadEndpoint="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-" Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.148 [INFO][3972] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" Namespace="kube-system" Pod="coredns-5d78c9869d-mjt4d" WorkloadEndpoint="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.271 [INFO][3996] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" HandleID="k8s-pod-network.03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.296 [INFO][3996] ipam_plugin.go 268: Auto assigning IP ContainerID="03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" HandleID="k8s-pod-network.03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002bc7c0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-25-191", "pod":"coredns-5d78c9869d-mjt4d", "timestamp":"2024-02-09 19:18:36.266149464 +0000 UTC"}, Hostname:"ip-172-31-25-191", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.296 [INFO][3996] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.297 [INFO][3996] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.297 [INFO][3996] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-191' Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.302 [INFO][3996] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" host="ip-172-31-25-191" Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.314 [INFO][3996] ipam.go 372: Looking up existing affinities for host host="ip-172-31-25-191" Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.325 [INFO][3996] ipam.go 489: Trying affinity for 192.168.119.0/26 host="ip-172-31-25-191" Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.331 [INFO][3996] ipam.go 155: Attempting to load block cidr=192.168.119.0/26 host="ip-172-31-25-191" Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.335 [INFO][3996] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.119.0/26 host="ip-172-31-25-191" Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.335 [INFO][3996] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.119.0/26 handle="k8s-pod-network.03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" host="ip-172-31-25-191" Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.341 [INFO][3996] ipam.go 1682: Creating new handle: k8s-pod-network.03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.349 [INFO][3996] ipam.go 1203: Writing block in order to claim IPs block=192.168.119.0/26 handle="k8s-pod-network.03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" host="ip-172-31-25-191" Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.358 [INFO][3996] ipam.go 1216: Successfully claimed IPs: [192.168.119.1/26] block=192.168.119.0/26 handle="k8s-pod-network.03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" host="ip-172-31-25-191" Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.358 [INFO][3996] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.119.1/26] handle="k8s-pod-network.03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" host="ip-172-31-25-191" Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.358 [INFO][3996] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 19:18:36.446835 env[1657]: 2024-02-09 19:18:36.359 [INFO][3996] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.119.1/26] IPv6=[] ContainerID="03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" HandleID="k8s-pod-network.03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" Feb 9 19:18:36.448280 env[1657]: 2024-02-09 19:18:36.364 [INFO][3972] k8s.go 385: Populated endpoint ContainerID="03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" Namespace="kube-system" Pod="coredns-5d78c9869d-mjt4d" WorkloadEndpoint="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"856efc3e-393c-43c0-ad49-acab9a81d056", ResourceVersion:"712", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 19, 18, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-191", ContainerID:"", Pod:"coredns-5d78c9869d-mjt4d", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.119.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali95fe637b96f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 19:18:36.448280 env[1657]: 2024-02-09 19:18:36.364 [INFO][3972] k8s.go 386: Calico CNI using IPs: [192.168.119.1/32] ContainerID="03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" Namespace="kube-system" Pod="coredns-5d78c9869d-mjt4d" WorkloadEndpoint="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" Feb 9 19:18:36.448280 env[1657]: 2024-02-09 19:18:36.365 [INFO][3972] dataplane_linux.go 68: Setting the host side veth name to cali95fe637b96f ContainerID="03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" Namespace="kube-system" Pod="coredns-5d78c9869d-mjt4d" WorkloadEndpoint="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" Feb 9 19:18:36.448280 env[1657]: 2024-02-09 19:18:36.400 [INFO][3972] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" Namespace="kube-system" Pod="coredns-5d78c9869d-mjt4d" WorkloadEndpoint="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" Feb 9 19:18:36.448280 env[1657]: 2024-02-09 19:18:36.408 [INFO][3972] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" Namespace="kube-system" Pod="coredns-5d78c9869d-mjt4d" WorkloadEndpoint="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"856efc3e-393c-43c0-ad49-acab9a81d056", ResourceVersion:"712", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 19, 18, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-191", ContainerID:"03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda", Pod:"coredns-5d78c9869d-mjt4d", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.119.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali95fe637b96f", MAC:"b2:70:14:14:4b:52", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 19:18:36.448280 env[1657]: 2024-02-09 19:18:36.443 [INFO][3972] k8s.go 491: Wrote updated endpoint to datastore ContainerID="03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda" Namespace="kube-system" Pod="coredns-5d78c9869d-mjt4d" WorkloadEndpoint="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" Feb 9 19:18:36.477268 env[1657]: time="2024-02-09T19:18:36.476918752Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 19:18:36.477268 env[1657]: time="2024-02-09T19:18:36.476999567Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 19:18:36.477268 env[1657]: time="2024-02-09T19:18:36.477026386Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 19:18:36.479353 env[1657]: time="2024-02-09T19:18:36.478479875Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda pid=4022 runtime=io.containerd.runc.v2 Feb 9 19:18:36.556532 systemd[1]: Started cri-containerd-03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda.scope. Feb 9 19:18:36.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.643000 audit: BPF prog-id=151 op=LOAD Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=4022 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:36.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033633137323264656530313431343662663365633861316138356265 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=4022 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:36.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033633137323264656530313431343662663365633861316138356265 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit: BPF prog-id=152 op=LOAD Feb 9 19:18:36.644000 audit[4034]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=4022 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:36.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033633137323264656530313431343662663365633861316138356265 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit: BPF prog-id=153 op=LOAD Feb 9 19:18:36.644000 audit[4034]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=4022 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:36.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033633137323264656530313431343662663365633861316138356265 Feb 9 19:18:36.644000 audit: BPF prog-id=153 op=UNLOAD Feb 9 19:18:36.644000 audit: BPF prog-id=152 op=UNLOAD Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.644000 audit: BPF prog-id=154 op=LOAD Feb 9 19:18:36.644000 audit[4034]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=4022 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:36.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033633137323264656530313431343662663365633861316138356265 Feb 9 19:18:36.697453 env[1657]: time="2024-02-09T19:18:36.697392280Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-mjt4d,Uid:856efc3e-393c-43c0-ad49-acab9a81d056,Namespace:kube-system,Attempt:1,} returns sandbox id \"03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda\"" Feb 9 19:18:36.703146 env[1657]: time="2024-02-09T19:18:36.703091258Z" level=info msg="CreateContainer within sandbox \"03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 9 19:18:36.730033 env[1657]: time="2024-02-09T19:18:36.729968315Z" level=info msg="CreateContainer within sandbox \"03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"e22f880ce0b2978f84be3e39a9b090efd9f97274e191344ae0351017510b954f\"" Feb 9 19:18:36.731180 env[1657]: time="2024-02-09T19:18:36.731135104Z" level=info msg="StartContainer for \"e22f880ce0b2978f84be3e39a9b090efd9f97274e191344ae0351017510b954f\"" Feb 9 19:18:36.770856 systemd[1]: Started cri-containerd-e22f880ce0b2978f84be3e39a9b090efd9f97274e191344ae0351017510b954f.scope. Feb 9 19:18:36.787654 env[1657]: time="2024-02-09T19:18:36.787590276Z" level=info msg="StopPodSandbox for \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\"" Feb 9 19:18:36.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.850000 audit: BPF prog-id=155 op=LOAD Feb 9 19:18:36.854000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.854000 audit[4073]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4022 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:36.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532326638383063653062323937386638346265336533396139623039 Feb 9 19:18:36.854000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.854000 audit[4073]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4022 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:36.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532326638383063653062323937386638346265336533396139623039 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit: BPF prog-id=156 op=LOAD Feb 9 19:18:36.855000 audit[4073]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4022 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:36.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532326638383063653062323937386638346265336533396139623039 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.855000 audit: BPF prog-id=157 op=LOAD Feb 9 19:18:36.855000 audit[4073]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4022 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:36.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532326638383063653062323937386638346265336533396139623039 Feb 9 19:18:36.855000 audit: BPF prog-id=157 op=UNLOAD Feb 9 19:18:36.855000 audit: BPF prog-id=156 op=UNLOAD Feb 9 19:18:36.862000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.862000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.862000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.862000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.862000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.862000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.862000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.862000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.862000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.862000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:36.862000 audit: BPF prog-id=158 op=LOAD Feb 9 19:18:36.862000 audit[4073]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4022 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:36.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532326638383063653062323937386638346265336533396139623039 Feb 9 19:18:36.930626 env[1657]: time="2024-02-09T19:18:36.930475742Z" level=info msg="StartContainer for \"e22f880ce0b2978f84be3e39a9b090efd9f97274e191344ae0351017510b954f\" returns successfully" Feb 9 19:18:36.996611 systemd[1]: run-containerd-runc-k8s.io-03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda-runc.6eZ2K3.mount: Deactivated successfully. Feb 9 19:18:37.073282 env[1657]: 2024-02-09 19:18:36.965 [INFO][4107] k8s.go 578: Cleaning up netns ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Feb 9 19:18:37.073282 env[1657]: 2024-02-09 19:18:36.965 [INFO][4107] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" iface="eth0" netns="/var/run/netns/cni-a4c5fcc8-c083-51f6-df84-83bb206170b2" Feb 9 19:18:37.073282 env[1657]: 2024-02-09 19:18:36.966 [INFO][4107] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" iface="eth0" netns="/var/run/netns/cni-a4c5fcc8-c083-51f6-df84-83bb206170b2" Feb 9 19:18:37.073282 env[1657]: 2024-02-09 19:18:36.966 [INFO][4107] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" iface="eth0" netns="/var/run/netns/cni-a4c5fcc8-c083-51f6-df84-83bb206170b2" Feb 9 19:18:37.073282 env[1657]: 2024-02-09 19:18:36.966 [INFO][4107] k8s.go 585: Releasing IP address(es) ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Feb 9 19:18:37.073282 env[1657]: 2024-02-09 19:18:36.966 [INFO][4107] utils.go 188: Calico CNI releasing IP address ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Feb 9 19:18:37.073282 env[1657]: 2024-02-09 19:18:37.038 [INFO][4127] ipam_plugin.go 415: Releasing address using handleID ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" HandleID="k8s-pod-network.623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" Feb 9 19:18:37.073282 env[1657]: 2024-02-09 19:18:37.039 [INFO][4127] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 19:18:37.073282 env[1657]: 2024-02-09 19:18:37.039 [INFO][4127] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 19:18:37.073282 env[1657]: 2024-02-09 19:18:37.060 [WARNING][4127] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" HandleID="k8s-pod-network.623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" Feb 9 19:18:37.073282 env[1657]: 2024-02-09 19:18:37.061 [INFO][4127] ipam_plugin.go 443: Releasing address using workloadID ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" HandleID="k8s-pod-network.623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" Feb 9 19:18:37.073282 env[1657]: 2024-02-09 19:18:37.065 [INFO][4127] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 19:18:37.073282 env[1657]: 2024-02-09 19:18:37.068 [INFO][4107] k8s.go 591: Teardown processing complete. ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Feb 9 19:18:37.078786 systemd[1]: run-netns-cni\x2da4c5fcc8\x2dc083\x2d51f6\x2ddf84\x2d83bb206170b2.mount: Deactivated successfully. Feb 9 19:18:37.080167 env[1657]: time="2024-02-09T19:18:37.080107403Z" level=info msg="TearDown network for sandbox \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\" successfully" Feb 9 19:18:37.080399 env[1657]: time="2024-02-09T19:18:37.080363541Z" level=info msg="StopPodSandbox for \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\" returns successfully" Feb 9 19:18:37.084798 env[1657]: time="2024-02-09T19:18:37.084603748Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-s4ckl,Uid:636b8ad3-442b-47df-a6ee-c31121f98b5d,Namespace:kube-system,Attempt:1,}" Feb 9 19:18:37.270000 audit[4162]: NETFILTER_CFG table=filter:97 family=2 entries=14 op=nft_register_rule pid=4162 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:37.270000 audit[4162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffe210ab80 a2=0 a3=ffff9c3b86c0 items=0 ppid=2989 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:37.270000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:37.286000 audit[4162]: NETFILTER_CFG table=nat:98 family=2 entries=14 op=nft_register_rule pid=4162 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:37.286000 audit[4162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3300 a0=3 a1=ffffe210ab80 a2=0 a3=ffff9c3b86c0 items=0 ppid=2989 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:37.286000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:37.417152 systemd-networkd[1477]: cali3c366aee51b: Link UP Feb 9 19:18:37.425095 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 19:18:37.425233 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3c366aee51b: link becomes ready Feb 9 19:18:37.424772 systemd-networkd[1477]: cali3c366aee51b: Gained carrier Feb 9 19:18:37.458122 kubelet[2857]: I0209 19:18:37.457392 2857 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5d78c9869d-mjt4d" podStartSLOduration=34.45733389 podCreationTimestamp="2024-02-09 19:18:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 19:18:37.206789378 +0000 UTC m=+47.811993464" watchObservedRunningTime="2024-02-09 19:18:37.45733389 +0000 UTC m=+48.062537856" Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.190 [INFO][4141] utils.go 100: File /var/lib/calico/mtu does not exist Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.233 [INFO][4141] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0 coredns-5d78c9869d- kube-system 636b8ad3-442b-47df-a6ee-c31121f98b5d 723 0 2024-02-09 19:18:03 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5d78c9869d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-25-191 coredns-5d78c9869d-s4ckl eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali3c366aee51b [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" Namespace="kube-system" Pod="coredns-5d78c9869d-s4ckl" WorkloadEndpoint="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-" Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.233 [INFO][4141] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" Namespace="kube-system" Pod="coredns-5d78c9869d-s4ckl" WorkloadEndpoint="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.303 [INFO][4157] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" HandleID="k8s-pod-network.a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.324 [INFO][4157] ipam_plugin.go 268: Auto assigning IP ContainerID="a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" HandleID="k8s-pod-network.a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000507380), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-25-191", "pod":"coredns-5d78c9869d-s4ckl", "timestamp":"2024-02-09 19:18:37.303375226 +0000 UTC"}, Hostname:"ip-172-31-25-191", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.325 [INFO][4157] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.325 [INFO][4157] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.325 [INFO][4157] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-191' Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.338 [INFO][4157] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" host="ip-172-31-25-191" Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.354 [INFO][4157] ipam.go 372: Looking up existing affinities for host host="ip-172-31-25-191" Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.369 [INFO][4157] ipam.go 489: Trying affinity for 192.168.119.0/26 host="ip-172-31-25-191" Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.374 [INFO][4157] ipam.go 155: Attempting to load block cidr=192.168.119.0/26 host="ip-172-31-25-191" Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.384 [INFO][4157] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.119.0/26 host="ip-172-31-25-191" Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.384 [INFO][4157] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.119.0/26 handle="k8s-pod-network.a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" host="ip-172-31-25-191" Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.388 [INFO][4157] ipam.go 1682: Creating new handle: k8s-pod-network.a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4 Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.394 [INFO][4157] ipam.go 1203: Writing block in order to claim IPs block=192.168.119.0/26 handle="k8s-pod-network.a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" host="ip-172-31-25-191" Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.408 [INFO][4157] ipam.go 1216: Successfully claimed IPs: [192.168.119.2/26] block=192.168.119.0/26 handle="k8s-pod-network.a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" host="ip-172-31-25-191" Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.409 [INFO][4157] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.119.2/26] handle="k8s-pod-network.a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" host="ip-172-31-25-191" Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.409 [INFO][4157] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 19:18:37.463342 env[1657]: 2024-02-09 19:18:37.409 [INFO][4157] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.119.2/26] IPv6=[] ContainerID="a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" HandleID="k8s-pod-network.a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" Feb 9 19:18:37.464780 env[1657]: 2024-02-09 19:18:37.412 [INFO][4141] k8s.go 385: Populated endpoint ContainerID="a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" Namespace="kube-system" Pod="coredns-5d78c9869d-s4ckl" WorkloadEndpoint="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"636b8ad3-442b-47df-a6ee-c31121f98b5d", ResourceVersion:"723", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 19, 18, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-191", ContainerID:"", Pod:"coredns-5d78c9869d-s4ckl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.119.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3c366aee51b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 19:18:37.464780 env[1657]: 2024-02-09 19:18:37.412 [INFO][4141] k8s.go 386: Calico CNI using IPs: [192.168.119.2/32] ContainerID="a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" Namespace="kube-system" Pod="coredns-5d78c9869d-s4ckl" WorkloadEndpoint="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" Feb 9 19:18:37.464780 env[1657]: 2024-02-09 19:18:37.413 [INFO][4141] dataplane_linux.go 68: Setting the host side veth name to cali3c366aee51b ContainerID="a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" Namespace="kube-system" Pod="coredns-5d78c9869d-s4ckl" WorkloadEndpoint="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" Feb 9 19:18:37.464780 env[1657]: 2024-02-09 19:18:37.426 [INFO][4141] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" Namespace="kube-system" Pod="coredns-5d78c9869d-s4ckl" WorkloadEndpoint="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" Feb 9 19:18:37.464780 env[1657]: 2024-02-09 19:18:37.427 [INFO][4141] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" Namespace="kube-system" Pod="coredns-5d78c9869d-s4ckl" WorkloadEndpoint="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"636b8ad3-442b-47df-a6ee-c31121f98b5d", ResourceVersion:"723", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 19, 18, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-191", ContainerID:"a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4", Pod:"coredns-5d78c9869d-s4ckl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.119.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3c366aee51b", MAC:"36:cc:3a:96:9a:d9", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 19:18:37.464780 env[1657]: 2024-02-09 19:18:37.458 [INFO][4141] k8s.go 491: Wrote updated endpoint to datastore ContainerID="a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4" Namespace="kube-system" Pod="coredns-5d78c9869d-s4ckl" WorkloadEndpoint="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" Feb 9 19:18:37.488399 env[1657]: time="2024-02-09T19:18:37.488209265Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 19:18:37.488749 env[1657]: time="2024-02-09T19:18:37.488656517Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 19:18:37.488749 env[1657]: time="2024-02-09T19:18:37.488706962Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 19:18:37.489352 env[1657]: time="2024-02-09T19:18:37.489190511Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4 pid=4205 runtime=io.containerd.runc.v2 Feb 9 19:18:37.535725 systemd[1]: Started cri-containerd-a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4.scope. Feb 9 19:18:37.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.570000 audit: BPF prog-id=159 op=LOAD Feb 9 19:18:37.571000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.571000 audit[4218]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4205 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:37.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133336564306338343435666366333533373861313634356438303439 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4205 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:37.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133336564306338343435666366333533373861313634356438303439 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit: BPF prog-id=160 op=LOAD Feb 9 19:18:37.572000 audit[4218]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4205 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:37.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133336564306338343435666366333533373861313634356438303439 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit: BPF prog-id=161 op=LOAD Feb 9 19:18:37.572000 audit[4218]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4205 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:37.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133336564306338343435666366333533373861313634356438303439 Feb 9 19:18:37.572000 audit: BPF prog-id=161 op=UNLOAD Feb 9 19:18:37.572000 audit: BPF prog-id=160 op=UNLOAD Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.572000 audit: BPF prog-id=162 op=LOAD Feb 9 19:18:37.572000 audit[4218]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4205 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:37.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133336564306338343435666366333533373861313634356438303439 Feb 9 19:18:37.619323 env[1657]: time="2024-02-09T19:18:37.619251765Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-s4ckl,Uid:636b8ad3-442b-47df-a6ee-c31121f98b5d,Namespace:kube-system,Attempt:1,} returns sandbox id \"a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4\"" Feb 9 19:18:37.624962 env[1657]: time="2024-02-09T19:18:37.624377572Z" level=info msg="CreateContainer within sandbox \"a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 9 19:18:37.647957 env[1657]: time="2024-02-09T19:18:37.647884751Z" level=info msg="CreateContainer within sandbox \"a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"70c07d658a7c57efdf0688465248947db8e3089ac4b4eee979981e4a2b724347\"" Feb 9 19:18:37.652683 env[1657]: time="2024-02-09T19:18:37.652629207Z" level=info msg="StartContainer for \"70c07d658a7c57efdf0688465248947db8e3089ac4b4eee979981e4a2b724347\"" Feb 9 19:18:37.706388 systemd-networkd[1477]: cali95fe637b96f: Gained IPv6LL Feb 9 19:18:37.709916 systemd[1]: Started cri-containerd-70c07d658a7c57efdf0688465248947db8e3089ac4b4eee979981e4a2b724347.scope. Feb 9 19:18:37.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.749000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.749000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.749000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.749000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.749000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.749000 audit: BPF prog-id=163 op=LOAD Feb 9 19:18:37.750000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.750000 audit[4260]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000125b38 a2=10 a3=0 items=0 ppid=4205 pid=4260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:37.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730633037643635386137633537656664663036383834363532343839 Feb 9 19:18:37.750000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.750000 audit[4260]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001255a0 a2=3c a3=0 items=0 ppid=4205 pid=4260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:37.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730633037643635386137633537656664663036383834363532343839 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit: BPF prog-id=164 op=LOAD Feb 9 19:18:37.751000 audit[4260]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001258e0 a2=78 a3=0 items=0 ppid=4205 pid=4260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:37.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730633037643635386137633537656664663036383834363532343839 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit: BPF prog-id=165 op=LOAD Feb 9 19:18:37.751000 audit[4260]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000125670 a2=78 a3=0 items=0 ppid=4205 pid=4260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:37.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730633037643635386137633537656664663036383834363532343839 Feb 9 19:18:37.751000 audit: BPF prog-id=165 op=UNLOAD Feb 9 19:18:37.751000 audit: BPF prog-id=164 op=UNLOAD Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.751000 audit: BPF prog-id=166 op=LOAD Feb 9 19:18:37.751000 audit[4260]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000125b40 a2=78 a3=0 items=0 ppid=4205 pid=4260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:37.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730633037643635386137633537656664663036383834363532343839 Feb 9 19:18:37.791448 env[1657]: time="2024-02-09T19:18:37.791053066Z" level=info msg="StopPodSandbox for \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\"" Feb 9 19:18:37.792279 env[1657]: time="2024-02-09T19:18:37.792183860Z" level=info msg="StartContainer for \"70c07d658a7c57efdf0688465248947db8e3089ac4b4eee979981e4a2b724347\" returns successfully" Feb 9 19:18:37.930817 (udev-worker)[4005]: Network interface NamePolicy= disabled on kernel command line. Feb 9 19:18:37.932000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.932000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.932000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.932000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.932000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.932000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.932000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.932000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.932000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.932000 audit: BPF prog-id=167 op=LOAD Feb 9 19:18:37.932000 audit[4330]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd3e98178 a2=70 a3=0 items=0 ppid=3914 pid=4330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:37.932000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 19:18:37.932000 audit: BPF prog-id=167 op=UNLOAD Feb 9 19:18:37.932000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.932000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.932000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.932000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.932000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.932000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.932000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.932000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.932000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.932000 audit: BPF prog-id=168 op=LOAD Feb 9 19:18:37.932000 audit[4330]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd3e98178 a2=70 a3=4a174c items=0 ppid=3914 pid=4330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:37.932000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 19:18:37.935000 audit: BPF prog-id=168 op=UNLOAD Feb 9 19:18:37.935000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.935000 audit[4330]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffd3e981a8 a2=70 a3=372f873f items=0 ppid=3914 pid=4330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:37.935000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 19:18:37.935000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.935000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.935000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.935000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.935000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.935000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.935000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.935000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.935000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.935000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.935000 audit: BPF prog-id=169 op=LOAD Feb 9 19:18:37.935000 audit[4330]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffd3e980f8 a2=70 a3=372f8759 items=0 ppid=3914 pid=4330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:37.935000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 19:18:37.953000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.953000 audit[4335]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffdb1b90b8 a2=70 a3=0 items=0 ppid=3914 pid=4335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:37.953000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 9 19:18:37.953000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:37.953000 audit[4335]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffdb1b8f98 a2=70 a3=2 items=0 ppid=3914 pid=4335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:37.953000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 9 19:18:37.966000 audit: BPF prog-id=169 op=UNLOAD Feb 9 19:18:38.044958 env[1657]: 2024-02-09 19:18:37.916 [INFO][4303] k8s.go 578: Cleaning up netns ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Feb 9 19:18:38.044958 env[1657]: 2024-02-09 19:18:37.917 [INFO][4303] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" iface="eth0" netns="/var/run/netns/cni-5fb0a87b-8abc-d224-4e2c-989418bdae42" Feb 9 19:18:38.044958 env[1657]: 2024-02-09 19:18:37.917 [INFO][4303] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" iface="eth0" netns="/var/run/netns/cni-5fb0a87b-8abc-d224-4e2c-989418bdae42" Feb 9 19:18:38.044958 env[1657]: 2024-02-09 19:18:37.919 [INFO][4303] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" iface="eth0" netns="/var/run/netns/cni-5fb0a87b-8abc-d224-4e2c-989418bdae42" Feb 9 19:18:38.044958 env[1657]: 2024-02-09 19:18:37.919 [INFO][4303] k8s.go 585: Releasing IP address(es) ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Feb 9 19:18:38.044958 env[1657]: 2024-02-09 19:18:37.921 [INFO][4303] utils.go 188: Calico CNI releasing IP address ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Feb 9 19:18:38.044958 env[1657]: 2024-02-09 19:18:38.015 [INFO][4323] ipam_plugin.go 415: Releasing address using handleID ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" HandleID="k8s-pod-network.95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Workload="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" Feb 9 19:18:38.044958 env[1657]: 2024-02-09 19:18:38.016 [INFO][4323] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 19:18:38.044958 env[1657]: 2024-02-09 19:18:38.016 [INFO][4323] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 19:18:38.044958 env[1657]: 2024-02-09 19:18:38.035 [WARNING][4323] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" HandleID="k8s-pod-network.95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Workload="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" Feb 9 19:18:38.044958 env[1657]: 2024-02-09 19:18:38.036 [INFO][4323] ipam_plugin.go 443: Releasing address using workloadID ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" HandleID="k8s-pod-network.95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Workload="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" Feb 9 19:18:38.044958 env[1657]: 2024-02-09 19:18:38.039 [INFO][4323] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 19:18:38.044958 env[1657]: 2024-02-09 19:18:38.042 [INFO][4303] k8s.go 591: Teardown processing complete. ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Feb 9 19:18:38.050912 systemd[1]: run-netns-cni\x2d5fb0a87b\x2d8abc\x2dd224\x2d4e2c\x2d989418bdae42.mount: Deactivated successfully. Feb 9 19:18:38.051735 env[1657]: time="2024-02-09T19:18:38.051679209Z" level=info msg="TearDown network for sandbox \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\" successfully" Feb 9 19:18:38.051882 env[1657]: time="2024-02-09T19:18:38.051848016Z" level=info msg="StopPodSandbox for \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\" returns successfully" Feb 9 19:18:38.053018 env[1657]: time="2024-02-09T19:18:38.052963214Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-g4vzb,Uid:3c8095c3-e7b4-4e87-97f5-d754ac025e71,Namespace:calico-system,Attempt:1,}" Feb 9 19:18:38.246995 kubelet[2857]: I0209 19:18:38.246941 2857 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5d78c9869d-s4ckl" podStartSLOduration=35.246863561 podCreationTimestamp="2024-02-09 19:18:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 19:18:38.205646083 +0000 UTC m=+48.810850049" watchObservedRunningTime="2024-02-09 19:18:38.246863561 +0000 UTC m=+48.852067527" Feb 9 19:18:38.299000 audit[4373]: NETFILTER_CFG table=filter:99 family=2 entries=14 op=nft_register_rule pid=4373 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:38.299000 audit[4373]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffc22cc300 a2=0 a3=ffff930c66c0 items=0 ppid=2989 pid=4373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:38.299000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:38.306000 audit[4373]: NETFILTER_CFG table=nat:100 family=2 entries=14 op=nft_register_rule pid=4373 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:38.306000 audit[4373]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3300 a0=3 a1=ffffc22cc300 a2=0 a3=ffff930c66c0 items=0 ppid=2989 pid=4373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:38.306000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:38.345000 audit[4379]: NETFILTER_CFG table=filter:101 family=2 entries=11 op=nft_register_rule pid=4379 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:38.345000 audit[4379]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffe7d36860 a2=0 a3=ffff9093b6c0 items=0 ppid=2989 pid=4379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:38.345000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:38.359000 audit[4379]: NETFILTER_CFG table=nat:102 family=2 entries=35 op=nft_register_chain pid=4379 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:38.359000 audit[4379]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=13788 a0=3 a1=ffffe7d36860 a2=0 a3=ffff9093b6c0 items=0 ppid=2989 pid=4379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:38.359000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:38.373855 (udev-worker)[4332]: Network interface NamePolicy= disabled on kernel command line. Feb 9 19:18:38.375401 systemd-networkd[1477]: cali7827b56b7f3: Link UP Feb 9 19:18:38.380592 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7827b56b7f3: link becomes ready Feb 9 19:18:38.380237 systemd-networkd[1477]: cali7827b56b7f3: Gained carrier Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.180 [INFO][4348] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0 csi-node-driver- calico-system 3c8095c3-e7b4-4e87-97f5-d754ac025e71 737 0 2024-02-09 19:18:11 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:86b88cf7c9 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ip-172-31-25-191 csi-node-driver-g4vzb eth0 default [] [] [kns.calico-system ksa.calico-system.default] cali7827b56b7f3 [] []}} ContainerID="72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" Namespace="calico-system" Pod="csi-node-driver-g4vzb" WorkloadEndpoint="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-" Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.180 [INFO][4348] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" Namespace="calico-system" Pod="csi-node-driver-g4vzb" WorkloadEndpoint="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.265 [INFO][4366] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" HandleID="k8s-pod-network.72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" Workload="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.305 [INFO][4366] ipam_plugin.go 268: Auto assigning IP ContainerID="72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" HandleID="k8s-pod-network.72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" Workload="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002ba7c0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-25-191", "pod":"csi-node-driver-g4vzb", "timestamp":"2024-02-09 19:18:38.265035287 +0000 UTC"}, Hostname:"ip-172-31-25-191", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.305 [INFO][4366] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.306 [INFO][4366] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.306 [INFO][4366] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-191' Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.312 [INFO][4366] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" host="ip-172-31-25-191" Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.322 [INFO][4366] ipam.go 372: Looking up existing affinities for host host="ip-172-31-25-191" Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.331 [INFO][4366] ipam.go 489: Trying affinity for 192.168.119.0/26 host="ip-172-31-25-191" Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.335 [INFO][4366] ipam.go 155: Attempting to load block cidr=192.168.119.0/26 host="ip-172-31-25-191" Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.341 [INFO][4366] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.119.0/26 host="ip-172-31-25-191" Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.343 [INFO][4366] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.119.0/26 handle="k8s-pod-network.72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" host="ip-172-31-25-191" Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.348 [INFO][4366] ipam.go 1682: Creating new handle: k8s-pod-network.72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.356 [INFO][4366] ipam.go 1203: Writing block in order to claim IPs block=192.168.119.0/26 handle="k8s-pod-network.72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" host="ip-172-31-25-191" Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.367 [INFO][4366] ipam.go 1216: Successfully claimed IPs: [192.168.119.3/26] block=192.168.119.0/26 handle="k8s-pod-network.72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" host="ip-172-31-25-191" Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.367 [INFO][4366] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.119.3/26] handle="k8s-pod-network.72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" host="ip-172-31-25-191" Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.367 [INFO][4366] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 19:18:38.422892 env[1657]: 2024-02-09 19:18:38.367 [INFO][4366] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.119.3/26] IPv6=[] ContainerID="72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" HandleID="k8s-pod-network.72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" Workload="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" Feb 9 19:18:38.424202 env[1657]: 2024-02-09 19:18:38.370 [INFO][4348] k8s.go 385: Populated endpoint ContainerID="72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" Namespace="calico-system" Pod="csi-node-driver-g4vzb" WorkloadEndpoint="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"3c8095c3-e7b4-4e87-97f5-d754ac025e71", ResourceVersion:"737", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 19, 18, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-191", ContainerID:"", Pod:"csi-node-driver-g4vzb", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.119.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali7827b56b7f3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 19:18:38.424202 env[1657]: 2024-02-09 19:18:38.371 [INFO][4348] k8s.go 386: Calico CNI using IPs: [192.168.119.3/32] ContainerID="72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" Namespace="calico-system" Pod="csi-node-driver-g4vzb" WorkloadEndpoint="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" Feb 9 19:18:38.424202 env[1657]: 2024-02-09 19:18:38.371 [INFO][4348] dataplane_linux.go 68: Setting the host side veth name to cali7827b56b7f3 ContainerID="72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" Namespace="calico-system" Pod="csi-node-driver-g4vzb" WorkloadEndpoint="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" Feb 9 19:18:38.424202 env[1657]: 2024-02-09 19:18:38.382 [INFO][4348] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" Namespace="calico-system" Pod="csi-node-driver-g4vzb" WorkloadEndpoint="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" Feb 9 19:18:38.424202 env[1657]: 2024-02-09 19:18:38.382 [INFO][4348] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" Namespace="calico-system" Pod="csi-node-driver-g4vzb" WorkloadEndpoint="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"3c8095c3-e7b4-4e87-97f5-d754ac025e71", ResourceVersion:"737", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 19, 18, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-191", ContainerID:"72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d", Pod:"csi-node-driver-g4vzb", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.119.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali7827b56b7f3", MAC:"9e:b1:14:5f:19:c7", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 19:18:38.424202 env[1657]: 2024-02-09 19:18:38.413 [INFO][4348] k8s.go 491: Wrote updated endpoint to datastore ContainerID="72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d" Namespace="calico-system" Pod="csi-node-driver-g4vzb" WorkloadEndpoint="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" Feb 9 19:18:38.423000 audit[4380]: NETFILTER_CFG table=raw:103 family=2 entries=19 op=nft_register_chain pid=4380 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 19:18:38.423000 audit[4380]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6132 a0=3 a1=ffffec2bbd70 a2=0 a3=ffffaeeb0fa8 items=0 ppid=3914 pid=4380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:38.423000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 19:18:38.427000 audit[4384]: NETFILTER_CFG table=mangle:104 family=2 entries=19 op=nft_register_chain pid=4384 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 19:18:38.427000 audit[4384]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6800 a0=3 a1=ffffee891850 a2=0 a3=ffff8e7eafa8 items=0 ppid=3914 pid=4384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:38.427000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 19:18:38.446000 audit[4382]: NETFILTER_CFG table=nat:105 family=2 entries=16 op=nft_register_chain pid=4382 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 19:18:38.446000 audit[4382]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5188 a0=3 a1=ffffeb6925b0 a2=0 a3=ffff919c6fa8 items=0 ppid=3914 pid=4382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:38.446000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 19:18:38.462099 env[1657]: time="2024-02-09T19:18:38.460982631Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 19:18:38.462099 env[1657]: time="2024-02-09T19:18:38.461104653Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 19:18:38.462099 env[1657]: time="2024-02-09T19:18:38.461133127Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 19:18:38.462099 env[1657]: time="2024-02-09T19:18:38.461764186Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d pid=4410 runtime=io.containerd.runc.v2 Feb 9 19:18:38.465000 audit[4396]: NETFILTER_CFG table=filter:106 family=2 entries=93 op=nft_register_chain pid=4396 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 19:18:38.465000 audit[4396]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50416 a0=3 a1=fffff1809280 a2=0 a3=ffff98172fa8 items=0 ppid=3914 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:38.465000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 19:18:38.496490 systemd-networkd[1477]: vxlan.calico: Link UP Feb 9 19:18:38.496505 systemd-networkd[1477]: vxlan.calico: Gained carrier Feb 9 19:18:38.537402 systemd[1]: Started cri-containerd-72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d.scope. Feb 9 19:18:38.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.566000 audit: BPF prog-id=170 op=LOAD Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4410 pid=4421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:38.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732323830633335303833393561363438646139303732316138316265 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4410 pid=4421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:38.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732323830633335303833393561363438646139303732316138316265 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit: BPF prog-id=171 op=LOAD Feb 9 19:18:38.567000 audit[4421]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4410 pid=4421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:38.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732323830633335303833393561363438646139303732316138316265 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit: BPF prog-id=172 op=LOAD Feb 9 19:18:38.567000 audit[4421]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4410 pid=4421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:38.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732323830633335303833393561363438646139303732316138316265 Feb 9 19:18:38.567000 audit: BPF prog-id=172 op=UNLOAD Feb 9 19:18:38.567000 audit: BPF prog-id=171 op=UNLOAD Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { perfmon } for pid=4421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit[4421]: AVC avc: denied { bpf } for pid=4421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:38.567000 audit: BPF prog-id=173 op=LOAD Feb 9 19:18:38.567000 audit[4421]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4410 pid=4421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:38.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732323830633335303833393561363438646139303732316138316265 Feb 9 19:18:38.604000 audit[4443]: NETFILTER_CFG table=filter:107 family=2 entries=44 op=nft_register_chain pid=4443 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 19:18:38.604000 audit[4443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=22284 a0=3 a1=fffff1a7bf30 a2=0 a3=ffffb00b6fa8 items=0 ppid=3914 pid=4443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:38.604000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 19:18:38.616730 env[1657]: time="2024-02-09T19:18:38.616674775Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-g4vzb,Uid:3c8095c3-e7b4-4e87-97f5-d754ac025e71,Namespace:calico-system,Attempt:1,} returns sandbox id \"72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d\"" Feb 9 19:18:38.620117 env[1657]: time="2024-02-09T19:18:38.620062701Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\"" Feb 9 19:18:38.787549 env[1657]: time="2024-02-09T19:18:38.787145619Z" level=info msg="StopPodSandbox for \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\"" Feb 9 19:18:38.932628 env[1657]: 2024-02-09 19:18:38.868 [INFO][4464] k8s.go 578: Cleaning up netns ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Feb 9 19:18:38.932628 env[1657]: 2024-02-09 19:18:38.868 [INFO][4464] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" iface="eth0" netns="/var/run/netns/cni-ecad415d-eac5-e6c6-22a6-d192450627bc" Feb 9 19:18:38.932628 env[1657]: 2024-02-09 19:18:38.868 [INFO][4464] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" iface="eth0" netns="/var/run/netns/cni-ecad415d-eac5-e6c6-22a6-d192450627bc" Feb 9 19:18:38.932628 env[1657]: 2024-02-09 19:18:38.869 [INFO][4464] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" iface="eth0" netns="/var/run/netns/cni-ecad415d-eac5-e6c6-22a6-d192450627bc" Feb 9 19:18:38.932628 env[1657]: 2024-02-09 19:18:38.869 [INFO][4464] k8s.go 585: Releasing IP address(es) ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Feb 9 19:18:38.932628 env[1657]: 2024-02-09 19:18:38.869 [INFO][4464] utils.go 188: Calico CNI releasing IP address ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Feb 9 19:18:38.932628 env[1657]: 2024-02-09 19:18:38.906 [INFO][4470] ipam_plugin.go 415: Releasing address using handleID ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" HandleID="k8s-pod-network.9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Workload="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" Feb 9 19:18:38.932628 env[1657]: 2024-02-09 19:18:38.906 [INFO][4470] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 19:18:38.932628 env[1657]: 2024-02-09 19:18:38.906 [INFO][4470] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 19:18:38.932628 env[1657]: 2024-02-09 19:18:38.924 [WARNING][4470] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" HandleID="k8s-pod-network.9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Workload="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" Feb 9 19:18:38.932628 env[1657]: 2024-02-09 19:18:38.924 [INFO][4470] ipam_plugin.go 443: Releasing address using workloadID ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" HandleID="k8s-pod-network.9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Workload="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" Feb 9 19:18:38.932628 env[1657]: 2024-02-09 19:18:38.928 [INFO][4470] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 19:18:38.932628 env[1657]: 2024-02-09 19:18:38.930 [INFO][4464] k8s.go 591: Teardown processing complete. ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Feb 9 19:18:38.934648 env[1657]: time="2024-02-09T19:18:38.934497408Z" level=info msg="TearDown network for sandbox \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\" successfully" Feb 9 19:18:38.934849 env[1657]: time="2024-02-09T19:18:38.934814660Z" level=info msg="StopPodSandbox for \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\" returns successfully" Feb 9 19:18:38.936123 env[1657]: time="2024-02-09T19:18:38.936058730Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-865956f94-mwj8g,Uid:955fa3c8-c5dc-4f6b-80bf-2d701f924585,Namespace:calico-system,Attempt:1,}" Feb 9 19:18:38.997810 systemd[1]: run-netns-cni\x2decad415d\x2deac5\x2de6c6\x2d22a6\x2dd192450627bc.mount: Deactivated successfully. Feb 9 19:18:39.166744 systemd-networkd[1477]: cali7913b7dcde8: Link UP Feb 9 19:18:39.172442 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 19:18:39.172594 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7913b7dcde8: link becomes ready Feb 9 19:18:39.172858 systemd-networkd[1477]: cali7913b7dcde8: Gained carrier Feb 9 19:18:39.180952 systemd-networkd[1477]: cali3c366aee51b: Gained IPv6LL Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.028 [INFO][4477] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0 calico-kube-controllers-865956f94- calico-system 955fa3c8-c5dc-4f6b-80bf-2d701f924585 754 0 2024-02-09 19:18:11 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:865956f94 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-25-191 calico-kube-controllers-865956f94-mwj8g eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali7913b7dcde8 [] []}} ContainerID="65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" Namespace="calico-system" Pod="calico-kube-controllers-865956f94-mwj8g" WorkloadEndpoint="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-" Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.028 [INFO][4477] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" Namespace="calico-system" Pod="calico-kube-controllers-865956f94-mwj8g" WorkloadEndpoint="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.087 [INFO][4491] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" HandleID="k8s-pod-network.65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" Workload="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.115 [INFO][4491] ipam_plugin.go 268: Auto assigning IP ContainerID="65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" HandleID="k8s-pod-network.65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" Workload="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002b4f70), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-25-191", "pod":"calico-kube-controllers-865956f94-mwj8g", "timestamp":"2024-02-09 19:18:39.087470284 +0000 UTC"}, Hostname:"ip-172-31-25-191", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.115 [INFO][4491] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.115 [INFO][4491] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.115 [INFO][4491] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-191' Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.119 [INFO][4491] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" host="ip-172-31-25-191" Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.125 [INFO][4491] ipam.go 372: Looking up existing affinities for host host="ip-172-31-25-191" Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.132 [INFO][4491] ipam.go 489: Trying affinity for 192.168.119.0/26 host="ip-172-31-25-191" Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.135 [INFO][4491] ipam.go 155: Attempting to load block cidr=192.168.119.0/26 host="ip-172-31-25-191" Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.139 [INFO][4491] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.119.0/26 host="ip-172-31-25-191" Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.139 [INFO][4491] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.119.0/26 handle="k8s-pod-network.65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" host="ip-172-31-25-191" Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.142 [INFO][4491] ipam.go 1682: Creating new handle: k8s-pod-network.65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.148 [INFO][4491] ipam.go 1203: Writing block in order to claim IPs block=192.168.119.0/26 handle="k8s-pod-network.65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" host="ip-172-31-25-191" Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.157 [INFO][4491] ipam.go 1216: Successfully claimed IPs: [192.168.119.4/26] block=192.168.119.0/26 handle="k8s-pod-network.65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" host="ip-172-31-25-191" Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.158 [INFO][4491] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.119.4/26] handle="k8s-pod-network.65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" host="ip-172-31-25-191" Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.158 [INFO][4491] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 19:18:39.204567 env[1657]: 2024-02-09 19:18:39.158 [INFO][4491] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.119.4/26] IPv6=[] ContainerID="65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" HandleID="k8s-pod-network.65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" Workload="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" Feb 9 19:18:39.206587 env[1657]: 2024-02-09 19:18:39.160 [INFO][4477] k8s.go 385: Populated endpoint ContainerID="65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" Namespace="calico-system" Pod="calico-kube-controllers-865956f94-mwj8g" WorkloadEndpoint="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0", GenerateName:"calico-kube-controllers-865956f94-", Namespace:"calico-system", SelfLink:"", UID:"955fa3c8-c5dc-4f6b-80bf-2d701f924585", ResourceVersion:"754", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 19, 18, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"865956f94", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-191", ContainerID:"", Pod:"calico-kube-controllers-865956f94-mwj8g", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.119.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali7913b7dcde8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 19:18:39.206587 env[1657]: 2024-02-09 19:18:39.161 [INFO][4477] k8s.go 386: Calico CNI using IPs: [192.168.119.4/32] ContainerID="65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" Namespace="calico-system" Pod="calico-kube-controllers-865956f94-mwj8g" WorkloadEndpoint="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" Feb 9 19:18:39.206587 env[1657]: 2024-02-09 19:18:39.161 [INFO][4477] dataplane_linux.go 68: Setting the host side veth name to cali7913b7dcde8 ContainerID="65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" Namespace="calico-system" Pod="calico-kube-controllers-865956f94-mwj8g" WorkloadEndpoint="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" Feb 9 19:18:39.206587 env[1657]: 2024-02-09 19:18:39.173 [INFO][4477] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" Namespace="calico-system" Pod="calico-kube-controllers-865956f94-mwj8g" WorkloadEndpoint="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" Feb 9 19:18:39.206587 env[1657]: 2024-02-09 19:18:39.173 [INFO][4477] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" Namespace="calico-system" Pod="calico-kube-controllers-865956f94-mwj8g" WorkloadEndpoint="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0", GenerateName:"calico-kube-controllers-865956f94-", Namespace:"calico-system", SelfLink:"", UID:"955fa3c8-c5dc-4f6b-80bf-2d701f924585", ResourceVersion:"754", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 19, 18, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"865956f94", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-191", ContainerID:"65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d", Pod:"calico-kube-controllers-865956f94-mwj8g", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.119.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali7913b7dcde8", MAC:"92:05:23:b4:13:51", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 19:18:39.206587 env[1657]: 2024-02-09 19:18:39.195 [INFO][4477] k8s.go 491: Wrote updated endpoint to datastore ContainerID="65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d" Namespace="calico-system" Pod="calico-kube-controllers-865956f94-mwj8g" WorkloadEndpoint="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" Feb 9 19:18:39.244683 env[1657]: time="2024-02-09T19:18:39.244525363Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 19:18:39.244865 env[1657]: time="2024-02-09T19:18:39.244621898Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 19:18:39.244865 env[1657]: time="2024-02-09T19:18:39.244694914Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 19:18:39.245160 env[1657]: time="2024-02-09T19:18:39.245082147Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d pid=4518 runtime=io.containerd.runc.v2 Feb 9 19:18:39.286000 audit[4535]: NETFILTER_CFG table=filter:108 family=2 entries=8 op=nft_register_rule pid=4535 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:39.290399 kernel: kauditd_printk_skb: 435 callbacks suppressed Feb 9 19:18:39.290525 kernel: audit: type=1325 audit(1707506319.286:1295): table=filter:108 family=2 entries=8 op=nft_register_rule pid=4535 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:39.311896 systemd[1]: run-containerd-runc-k8s.io-65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d-runc.m63llv.mount: Deactivated successfully. Feb 9 19:18:39.286000 audit[4535]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffe88867d0 a2=0 a3=ffffad0916c0 items=0 ppid=2989 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:39.336545 kernel: audit: type=1300 audit(1707506319.286:1295): arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffe88867d0 a2=0 a3=ffffad0916c0 items=0 ppid=2989 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:39.336703 kernel: audit: type=1327 audit(1707506319.286:1295): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:39.286000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:39.337153 systemd[1]: Started cri-containerd-65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d.scope. Feb 9 19:18:39.341000 audit[4535]: NETFILTER_CFG table=nat:109 family=2 entries=56 op=nft_register_chain pid=4535 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:39.367745 kernel: audit: type=1325 audit(1707506319.341:1296): table=nat:109 family=2 entries=56 op=nft_register_chain pid=4535 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:18:39.367964 kernel: audit: type=1300 audit(1707506319.341:1296): arch=c00000b7 syscall=211 success=yes exit=19452 a0=3 a1=ffffe88867d0 a2=0 a3=ffffad0916c0 items=0 ppid=2989 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:39.341000 audit[4535]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19452 a0=3 a1=ffffe88867d0 a2=0 a3=ffffad0916c0 items=0 ppid=2989 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:39.341000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:39.387378 kernel: audit: type=1327 audit(1707506319.341:1296): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:18:39.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.407417 kernel: audit: type=1400 audit(1707506319.393:1297): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.422488 kernel: audit: type=1400 audit(1707506319.393:1298): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.438404 kernel: audit: type=1400 audit(1707506319.393:1299): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.438577 kernel: audit: type=1400 audit(1707506319.393:1300): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.435976 systemd-networkd[1477]: cali7827b56b7f3: Gained IPv6LL Feb 9 19:18:39.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.401000 audit: BPF prog-id=174 op=LOAD Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4518 pid=4527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:39.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635343031633363613930333361376533356530343131346533383061 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4518 pid=4527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:39.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635343031633363613930333361376533356530343131346533383061 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit: BPF prog-id=175 op=LOAD Feb 9 19:18:39.402000 audit[4527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4518 pid=4527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:39.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635343031633363613930333361376533356530343131346533383061 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit: BPF prog-id=176 op=LOAD Feb 9 19:18:39.402000 audit[4527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4518 pid=4527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:39.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635343031633363613930333361376533356530343131346533383061 Feb 9 19:18:39.402000 audit: BPF prog-id=176 op=UNLOAD Feb 9 19:18:39.402000 audit: BPF prog-id=175 op=UNLOAD Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:39.402000 audit: BPF prog-id=177 op=LOAD Feb 9 19:18:39.402000 audit[4527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4518 pid=4527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:39.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635343031633363613930333361376533356530343131346533383061 Feb 9 19:18:39.414000 audit[4553]: NETFILTER_CFG table=filter:110 family=2 entries=48 op=nft_register_chain pid=4553 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 19:18:39.414000 audit[4553]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23548 a0=3 a1=ffffd575e750 a2=0 a3=ffffa00c4fa8 items=0 ppid=3914 pid=4553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:39.414000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 19:18:39.471345 env[1657]: time="2024-02-09T19:18:39.466989784Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-865956f94-mwj8g,Uid:955fa3c8-c5dc-4f6b-80bf-2d701f924585,Namespace:calico-system,Attempt:1,} returns sandbox id \"65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d\"" Feb 9 19:18:40.015848 systemd-networkd[1477]: vxlan.calico: Gained IPv6LL Feb 9 19:18:40.356107 env[1657]: time="2024-02-09T19:18:40.356044568Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:40.359232 env[1657]: time="2024-02-09T19:18:40.359146624Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4b71e7439e0eba34a97844591560a009f37e8e6c17a386a34d416c1cc872dee8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:40.361970 env[1657]: time="2024-02-09T19:18:40.361925438Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:40.365790 env[1657]: time="2024-02-09T19:18:40.365743883Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:2b9021393c17e87ba8a3c89f5b3719941812f4e4751caa0b71eb2233bff48738,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:40.367104 env[1657]: time="2024-02-09T19:18:40.367049240Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\" returns image reference \"sha256:4b71e7439e0eba34a97844591560a009f37e8e6c17a386a34d416c1cc872dee8\"" Feb 9 19:18:40.370916 env[1657]: time="2024-02-09T19:18:40.370252235Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\"" Feb 9 19:18:40.373950 env[1657]: time="2024-02-09T19:18:40.373894480Z" level=info msg="CreateContainer within sandbox \"72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Feb 9 19:18:40.410432 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1067419206.mount: Deactivated successfully. Feb 9 19:18:40.417509 env[1657]: time="2024-02-09T19:18:40.417448383Z" level=info msg="CreateContainer within sandbox \"72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"b500577a04eec3297f4207698e989149e2a57113c891bbd8ef963ce766f0d132\"" Feb 9 19:18:40.422243 env[1657]: time="2024-02-09T19:18:40.421976570Z" level=info msg="StartContainer for \"b500577a04eec3297f4207698e989149e2a57113c891bbd8ef963ce766f0d132\"" Feb 9 19:18:40.467767 systemd[1]: Started cri-containerd-b500577a04eec3297f4207698e989149e2a57113c891bbd8ef963ce766f0d132.scope. Feb 9 19:18:40.525000 audit[4568]: AVC avc: denied { perfmon } for pid=4568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.525000 audit[4568]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=4410 pid=4568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:40.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235303035373761303465656333323937663432303736393865393839 Feb 9 19:18:40.525000 audit[4568]: AVC avc: denied { bpf } for pid=4568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.525000 audit[4568]: AVC avc: denied { bpf } for pid=4568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.525000 audit[4568]: AVC avc: denied { bpf } for pid=4568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.525000 audit[4568]: AVC avc: denied { perfmon } for pid=4568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.525000 audit[4568]: AVC avc: denied { perfmon } for pid=4568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.525000 audit[4568]: AVC avc: denied { perfmon } for pid=4568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.525000 audit[4568]: AVC avc: denied { perfmon } for pid=4568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.525000 audit[4568]: AVC avc: denied { perfmon } for pid=4568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.525000 audit[4568]: AVC avc: denied { bpf } for pid=4568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.525000 audit[4568]: AVC avc: denied { bpf } for pid=4568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.525000 audit: BPF prog-id=178 op=LOAD Feb 9 19:18:40.525000 audit[4568]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=4410 pid=4568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:40.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235303035373761303465656333323937663432303736393865393839 Feb 9 19:18:40.527000 audit[4568]: AVC avc: denied { bpf } for pid=4568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.527000 audit[4568]: AVC avc: denied { bpf } for pid=4568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.527000 audit[4568]: AVC avc: denied { perfmon } for pid=4568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.527000 audit[4568]: AVC avc: denied { perfmon } for pid=4568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.527000 audit[4568]: AVC avc: denied { perfmon } for pid=4568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.527000 audit[4568]: AVC avc: denied { perfmon } for pid=4568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.527000 audit[4568]: AVC avc: denied { perfmon } for pid=4568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.527000 audit[4568]: AVC avc: denied { bpf } for pid=4568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.527000 audit[4568]: AVC avc: denied { bpf } for pid=4568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.527000 audit: BPF prog-id=179 op=LOAD Feb 9 19:18:40.527000 audit[4568]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=4410 pid=4568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:40.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235303035373761303465656333323937663432303736393865393839 Feb 9 19:18:40.528000 audit: BPF prog-id=179 op=UNLOAD Feb 9 19:18:40.528000 audit: BPF prog-id=178 op=UNLOAD Feb 9 19:18:40.529000 audit[4568]: AVC avc: denied { bpf } for pid=4568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.529000 audit[4568]: AVC avc: denied { bpf } for pid=4568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.529000 audit[4568]: AVC avc: denied { bpf } for pid=4568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.529000 audit[4568]: AVC avc: denied { perfmon } for pid=4568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.529000 audit[4568]: AVC avc: denied { perfmon } for pid=4568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.529000 audit[4568]: AVC avc: denied { perfmon } for pid=4568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.529000 audit[4568]: AVC avc: denied { perfmon } for pid=4568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.529000 audit[4568]: AVC avc: denied { perfmon } for pid=4568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.529000 audit[4568]: AVC avc: denied { bpf } for pid=4568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.529000 audit[4568]: AVC avc: denied { bpf } for pid=4568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:40.529000 audit: BPF prog-id=180 op=LOAD Feb 9 19:18:40.529000 audit[4568]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=4410 pid=4568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:40.529000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235303035373761303465656333323937663432303736393865393839 Feb 9 19:18:40.562785 env[1657]: time="2024-02-09T19:18:40.562716031Z" level=info msg="StartContainer for \"b500577a04eec3297f4207698e989149e2a57113c891bbd8ef963ce766f0d132\" returns successfully" Feb 9 19:18:41.097067 systemd-networkd[1477]: cali7913b7dcde8: Gained IPv6LL Feb 9 19:18:41.747693 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount278884839.mount: Deactivated successfully. Feb 9 19:18:43.180527 env[1657]: time="2024-02-09T19:18:43.180467542Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:43.186204 env[1657]: time="2024-02-09T19:18:43.186151536Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:094645649618376e48b5ec13a94a164d53dbdf819b7ab644f080b751f24560c8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:43.190477 env[1657]: time="2024-02-09T19:18:43.190425422Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:43.194823 env[1657]: time="2024-02-09T19:18:43.194767465Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:e264ab1fb2f1ae90dd1d84e226d11d2eb4350e74ac27de4c65f29f5aadba5bb1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:43.202618 env[1657]: time="2024-02-09T19:18:43.202555968Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\" returns image reference \"sha256:094645649618376e48b5ec13a94a164d53dbdf819b7ab644f080b751f24560c8\"" Feb 9 19:18:43.237159 env[1657]: time="2024-02-09T19:18:43.237093358Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\"" Feb 9 19:18:43.246243 env[1657]: time="2024-02-09T19:18:43.246135173Z" level=info msg="CreateContainer within sandbox \"65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Feb 9 19:18:43.271428 env[1657]: time="2024-02-09T19:18:43.271342017Z" level=info msg="CreateContainer within sandbox \"65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"970c8c0a97167464a90c8dbdcbe46219ef3bd2a006d8b4d0c1201467ba2fcddf\"" Feb 9 19:18:43.273201 env[1657]: time="2024-02-09T19:18:43.273129295Z" level=info msg="StartContainer for \"970c8c0a97167464a90c8dbdcbe46219ef3bd2a006d8b4d0c1201467ba2fcddf\"" Feb 9 19:18:43.343164 systemd[1]: Started cri-containerd-970c8c0a97167464a90c8dbdcbe46219ef3bd2a006d8b4d0c1201467ba2fcddf.scope. Feb 9 19:18:43.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.396000 audit: BPF prog-id=181 op=LOAD Feb 9 19:18:43.401000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.401000 audit[4605]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4518 pid=4605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:43.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937306338633061393731363734363461393063386462646362653436 Feb 9 19:18:43.402000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.402000 audit[4605]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4518 pid=4605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:43.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937306338633061393731363734363461393063386462646362653436 Feb 9 19:18:43.404000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.404000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.404000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.404000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.404000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.404000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.404000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.404000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.404000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.404000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.404000 audit: BPF prog-id=182 op=LOAD Feb 9 19:18:43.404000 audit[4605]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4518 pid=4605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:43.404000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937306338633061393731363734363461393063386462646362653436 Feb 9 19:18:43.405000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.405000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.405000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.405000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.405000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.405000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.405000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.405000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.405000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.405000 audit: BPF prog-id=183 op=LOAD Feb 9 19:18:43.405000 audit[4605]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4518 pid=4605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:43.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937306338633061393731363734363461393063386462646362653436 Feb 9 19:18:43.407000 audit: BPF prog-id=183 op=UNLOAD Feb 9 19:18:43.407000 audit: BPF prog-id=182 op=UNLOAD Feb 9 19:18:43.407000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.407000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.407000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.407000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.407000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.407000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.407000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.407000 audit[4605]: AVC avc: denied { perfmon } for pid=4605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.407000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.407000 audit[4605]: AVC avc: denied { bpf } for pid=4605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:43.407000 audit: BPF prog-id=184 op=LOAD Feb 9 19:18:43.407000 audit[4605]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4518 pid=4605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:43.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937306338633061393731363734363461393063386462646362653436 Feb 9 19:18:43.492084 env[1657]: time="2024-02-09T19:18:43.491913332Z" level=info msg="StartContainer for \"970c8c0a97167464a90c8dbdcbe46219ef3bd2a006d8b4d0c1201467ba2fcddf\" returns successfully" Feb 9 19:18:43.751621 systemd[1]: Started sshd@7-172.31.25.191:22-147.75.109.163:52688.service. Feb 9 19:18:43.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.191:22-147.75.109.163:52688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:18:43.943543 sshd[4642]: Accepted publickey for core from 147.75.109.163 port 52688 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:18:43.942000 audit[4642]: USER_ACCT pid=4642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:43.944000 audit[4642]: CRED_ACQ pid=4642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:43.944000 audit[4642]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe2b6fbb0 a2=3 a3=1 items=0 ppid=1 pid=4642 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:43.944000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:18:43.947151 sshd[4642]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:18:43.956551 systemd[1]: Started session-8.scope. Feb 9 19:18:43.957340 systemd-logind[1646]: New session 8 of user core. Feb 9 19:18:43.968000 audit[4642]: USER_START pid=4642 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:43.971000 audit[4645]: CRED_ACQ pid=4645 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:44.223017 systemd[1]: run-containerd-runc-k8s.io-970c8c0a97167464a90c8dbdcbe46219ef3bd2a006d8b4d0c1201467ba2fcddf-runc.Gooegz.mount: Deactivated successfully. Feb 9 19:18:44.287158 kubelet[2857]: I0209 19:18:44.286981 2857 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-865956f94-mwj8g" podStartSLOduration=29.548777874 podCreationTimestamp="2024-02-09 19:18:11 +0000 UTC" firstStartedPulling="2024-02-09 19:18:39.473721134 +0000 UTC m=+50.078925088" lastFinishedPulling="2024-02-09 19:18:43.211869643 +0000 UTC m=+53.817073645" observedRunningTime="2024-02-09 19:18:44.286837347 +0000 UTC m=+54.892041313" watchObservedRunningTime="2024-02-09 19:18:44.286926431 +0000 UTC m=+54.892130397" Feb 9 19:18:44.333465 sshd[4642]: pam_unix(sshd:session): session closed for user core Feb 9 19:18:44.352033 kernel: kauditd_printk_skb: 164 callbacks suppressed Feb 9 19:18:44.352214 kernel: audit: type=1106 audit(1707506324.335:1346): pid=4642 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:44.335000 audit[4642]: USER_END pid=4642 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:44.352883 systemd-logind[1646]: Session 8 logged out. Waiting for processes to exit. Feb 9 19:18:44.352971 systemd[1]: session-8.scope: Deactivated successfully. Feb 9 19:18:44.355140 systemd[1]: sshd@7-172.31.25.191:22-147.75.109.163:52688.service: Deactivated successfully. Feb 9 19:18:44.356789 systemd-logind[1646]: Removed session 8. Feb 9 19:18:44.335000 audit[4642]: CRED_DISP pid=4642 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:44.359319 kernel: audit: type=1104 audit(1707506324.335:1347): pid=4642 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:44.354000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.191:22-147.75.109.163:52688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:18:44.377327 kernel: audit: type=1131 audit(1707506324.354:1348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.191:22-147.75.109.163:52688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:18:44.542000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:18:44.542000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001220780 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:18:44.568080 kernel: audit: type=1400 audit(1707506324.542:1349): avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:18:44.568220 kernel: audit: type=1300 audit(1707506324.542:1349): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001220780 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:18:44.542000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:18:44.578751 kernel: audit: type=1327 audit(1707506324.542:1349): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:18:44.542000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:18:44.590437 kernel: audit: type=1400 audit(1707506324.542:1350): avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:18:44.542000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001cf90b0 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:18:44.604910 kernel: audit: type=1300 audit(1707506324.542:1350): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001cf90b0 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:18:44.542000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:18:44.616371 kernel: audit: type=1327 audit(1707506324.542:1350): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:18:45.156811 env[1657]: time="2024-02-09T19:18:45.156754553Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:45.161769 env[1657]: time="2024-02-09T19:18:45.161716173Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9dbda087e98c46610fb8629cf530f1fe49eee4b17d2afe455664ca446ec39d43,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:45.165525 env[1657]: time="2024-02-09T19:18:45.165466954Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:45.169625 env[1657]: time="2024-02-09T19:18:45.169566719Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:45a7aba6020a7cf7b866cb8a8d481b30c97e9b3407e1459aaa65a5b4cc06633a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:18:45.172061 env[1657]: time="2024-02-09T19:18:45.171033831Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\" returns image reference \"sha256:9dbda087e98c46610fb8629cf530f1fe49eee4b17d2afe455664ca446ec39d43\"" Feb 9 19:18:45.176981 env[1657]: time="2024-02-09T19:18:45.176924048Z" level=info msg="CreateContainer within sandbox \"72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Feb 9 19:18:45.206809 env[1657]: time="2024-02-09T19:18:45.206742870Z" level=info msg="CreateContainer within sandbox \"72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"f0b2ee9c6f617d0476ece434c0ff3ca9740c74be7a876fd0e7b02c9aaead42e7\"" Feb 9 19:18:45.207878 env[1657]: time="2024-02-09T19:18:45.207811502Z" level=info msg="StartContainer for \"f0b2ee9c6f617d0476ece434c0ff3ca9740c74be7a876fd0e7b02c9aaead42e7\"" Feb 9 19:18:45.255316 systemd[1]: Started cri-containerd-f0b2ee9c6f617d0476ece434c0ff3ca9740c74be7a876fd0e7b02c9aaead42e7.scope. Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4410 pid=4683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:45.337326 kernel: audit: type=1400 audit(1707506325.327:1351): avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630623265653963366636313764303437366563653433346330666633 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit: BPF prog-id=185 op=LOAD Feb 9 19:18:45.327000 audit[4683]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4410 pid=4683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:45.327000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630623265653963366636313764303437366563653433346330666633 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit: BPF prog-id=186 op=LOAD Feb 9 19:18:45.327000 audit[4683]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4410 pid=4683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:45.327000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630623265653963366636313764303437366563653433346330666633 Feb 9 19:18:45.327000 audit: BPF prog-id=186 op=UNLOAD Feb 9 19:18:45.327000 audit: BPF prog-id=185 op=UNLOAD Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:18:45.327000 audit: BPF prog-id=187 op=LOAD Feb 9 19:18:45.327000 audit[4683]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4410 pid=4683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:45.327000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630623265653963366636313764303437366563653433346330666633 Feb 9 19:18:45.371715 env[1657]: time="2024-02-09T19:18:45.371631214Z" level=info msg="StartContainer for \"f0b2ee9c6f617d0476ece434c0ff3ca9740c74be7a876fd0e7b02c9aaead42e7\" returns successfully" Feb 9 19:18:45.381000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:18:45.381000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=65 a1=40079dbb00 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:18:45.381000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:18:45.382000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:18:45.382000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=65 a1=400908d6e0 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:18:45.382000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:18:45.382000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520992 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:18:45.382000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=65 a1=4008f403c0 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:18:45.382000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:18:45.386000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520998 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:18:45.386000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=65 a1=4008f40420 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:18:45.386000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:18:45.387000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:18:45.387000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=65 a1=4008a5d580 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:18:45.387000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:18:45.387000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:18:45.387000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=65 a1=4008f40540 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:18:45.387000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:18:46.032649 kubelet[2857]: I0209 19:18:46.032601 2857 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Feb 9 19:18:46.033279 kubelet[2857]: I0209 19:18:46.032685 2857 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Feb 9 19:18:49.362987 systemd[1]: Started sshd@8-172.31.25.191:22-147.75.109.163:41248.service. Feb 9 19:18:49.374395 kernel: kauditd_printk_skb: 60 callbacks suppressed Feb 9 19:18:49.374501 kernel: audit: type=1130 audit(1707506329.362:1363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.25.191:22-147.75.109.163:41248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:18:49.362000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.25.191:22-147.75.109.163:41248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:18:49.541000 audit[4721]: USER_ACCT pid=4721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:49.546488 sshd[4721]: Accepted publickey for core from 147.75.109.163 port 41248 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:18:49.549677 sshd[4721]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:18:49.547000 audit[4721]: CRED_ACQ pid=4721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:49.565924 kernel: audit: type=1101 audit(1707506329.541:1364): pid=4721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:49.566006 kernel: audit: type=1103 audit(1707506329.547:1365): pid=4721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:49.572142 kernel: audit: type=1006 audit(1707506329.547:1366): pid=4721 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Feb 9 19:18:49.547000 audit[4721]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc22f430 a2=3 a3=1 items=0 ppid=1 pid=4721 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:49.583196 kernel: audit: type=1300 audit(1707506329.547:1366): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc22f430 a2=3 a3=1 items=0 ppid=1 pid=4721 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:49.547000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:18:49.586919 kernel: audit: type=1327 audit(1707506329.547:1366): proctitle=737368643A20636F7265205B707269765D Feb 9 19:18:49.589389 systemd-logind[1646]: New session 9 of user core. Feb 9 19:18:49.592483 systemd[1]: Started session-9.scope. Feb 9 19:18:49.601000 audit[4721]: USER_START pid=4721 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:49.616226 kernel: audit: type=1105 audit(1707506329.601:1367): pid=4721 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:49.616488 kernel: audit: type=1103 audit(1707506329.614:1368): pid=4725 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:49.614000 audit[4725]: CRED_ACQ pid=4725 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:49.722890 env[1657]: time="2024-02-09T19:18:49.722175409Z" level=info msg="StopPodSandbox for \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\"" Feb 9 19:18:49.913987 env[1657]: 2024-02-09 19:18:49.822 [WARNING][4745] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0", GenerateName:"calico-kube-controllers-865956f94-", Namespace:"calico-system", SelfLink:"", UID:"955fa3c8-c5dc-4f6b-80bf-2d701f924585", ResourceVersion:"808", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 19, 18, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"865956f94", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-191", ContainerID:"65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d", Pod:"calico-kube-controllers-865956f94-mwj8g", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.119.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali7913b7dcde8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 19:18:49.913987 env[1657]: 2024-02-09 19:18:49.823 [INFO][4745] k8s.go 578: Cleaning up netns ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Feb 9 19:18:49.913987 env[1657]: 2024-02-09 19:18:49.823 [INFO][4745] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" iface="eth0" netns="" Feb 9 19:18:49.913987 env[1657]: 2024-02-09 19:18:49.823 [INFO][4745] k8s.go 585: Releasing IP address(es) ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Feb 9 19:18:49.913987 env[1657]: 2024-02-09 19:18:49.823 [INFO][4745] utils.go 188: Calico CNI releasing IP address ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Feb 9 19:18:49.913987 env[1657]: 2024-02-09 19:18:49.873 [INFO][4751] ipam_plugin.go 415: Releasing address using handleID ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" HandleID="k8s-pod-network.9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Workload="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" Feb 9 19:18:49.913987 env[1657]: 2024-02-09 19:18:49.873 [INFO][4751] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 19:18:49.913987 env[1657]: 2024-02-09 19:18:49.873 [INFO][4751] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 19:18:49.913987 env[1657]: 2024-02-09 19:18:49.898 [WARNING][4751] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" HandleID="k8s-pod-network.9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Workload="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" Feb 9 19:18:49.913987 env[1657]: 2024-02-09 19:18:49.898 [INFO][4751] ipam_plugin.go 443: Releasing address using workloadID ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" HandleID="k8s-pod-network.9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Workload="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" Feb 9 19:18:49.913987 env[1657]: 2024-02-09 19:18:49.901 [INFO][4751] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 19:18:49.913987 env[1657]: 2024-02-09 19:18:49.908 [INFO][4745] k8s.go 591: Teardown processing complete. ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Feb 9 19:18:49.913987 env[1657]: time="2024-02-09T19:18:49.912538004Z" level=info msg="TearDown network for sandbox \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\" successfully" Feb 9 19:18:49.913987 env[1657]: time="2024-02-09T19:18:49.912581659Z" level=info msg="StopPodSandbox for \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\" returns successfully" Feb 9 19:18:49.915246 env[1657]: time="2024-02-09T19:18:49.914669222Z" level=info msg="RemovePodSandbox for \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\"" Feb 9 19:18:49.915246 env[1657]: time="2024-02-09T19:18:49.914722992Z" level=info msg="Forcibly stopping sandbox \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\"" Feb 9 19:18:49.943374 sshd[4721]: pam_unix(sshd:session): session closed for user core Feb 9 19:18:49.945000 audit[4721]: USER_END pid=4721 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:49.958728 systemd[1]: sshd@8-172.31.25.191:22-147.75.109.163:41248.service: Deactivated successfully. Feb 9 19:18:49.960134 systemd[1]: session-9.scope: Deactivated successfully. Feb 9 19:18:49.945000 audit[4721]: CRED_DISP pid=4721 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:49.962780 systemd-logind[1646]: Session 9 logged out. Waiting for processes to exit. Feb 9 19:18:49.971191 kernel: audit: type=1106 audit(1707506329.945:1369): pid=4721 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:49.971376 kernel: audit: type=1104 audit(1707506329.945:1370): pid=4721 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:49.957000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.25.191:22-147.75.109.163:41248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:18:49.974830 systemd-logind[1646]: Removed session 9. Feb 9 19:18:50.082658 env[1657]: 2024-02-09 19:18:50.018 [WARNING][4771] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0", GenerateName:"calico-kube-controllers-865956f94-", Namespace:"calico-system", SelfLink:"", UID:"955fa3c8-c5dc-4f6b-80bf-2d701f924585", ResourceVersion:"808", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 19, 18, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"865956f94", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-191", ContainerID:"65401c3ca9033a7e35e04114e380ab3dda44ac15211e7a8868e5084454abc22d", Pod:"calico-kube-controllers-865956f94-mwj8g", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.119.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali7913b7dcde8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 19:18:50.082658 env[1657]: 2024-02-09 19:18:50.018 [INFO][4771] k8s.go 578: Cleaning up netns ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Feb 9 19:18:50.082658 env[1657]: 2024-02-09 19:18:50.018 [INFO][4771] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" iface="eth0" netns="" Feb 9 19:18:50.082658 env[1657]: 2024-02-09 19:18:50.018 [INFO][4771] k8s.go 585: Releasing IP address(es) ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Feb 9 19:18:50.082658 env[1657]: 2024-02-09 19:18:50.018 [INFO][4771] utils.go 188: Calico CNI releasing IP address ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Feb 9 19:18:50.082658 env[1657]: 2024-02-09 19:18:50.061 [INFO][4779] ipam_plugin.go 415: Releasing address using handleID ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" HandleID="k8s-pod-network.9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Workload="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" Feb 9 19:18:50.082658 env[1657]: 2024-02-09 19:18:50.061 [INFO][4779] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 19:18:50.082658 env[1657]: 2024-02-09 19:18:50.062 [INFO][4779] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 19:18:50.082658 env[1657]: 2024-02-09 19:18:50.075 [WARNING][4779] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" HandleID="k8s-pod-network.9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Workload="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" Feb 9 19:18:50.082658 env[1657]: 2024-02-09 19:18:50.075 [INFO][4779] ipam_plugin.go 443: Releasing address using workloadID ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" HandleID="k8s-pod-network.9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Workload="ip--172--31--25--191-k8s-calico--kube--controllers--865956f94--mwj8g-eth0" Feb 9 19:18:50.082658 env[1657]: 2024-02-09 19:18:50.078 [INFO][4779] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 19:18:50.082658 env[1657]: 2024-02-09 19:18:50.080 [INFO][4771] k8s.go 591: Teardown processing complete. ContainerID="9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4" Feb 9 19:18:50.083684 env[1657]: time="2024-02-09T19:18:50.082700735Z" level=info msg="TearDown network for sandbox \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\" successfully" Feb 9 19:18:50.087983 env[1657]: time="2024-02-09T19:18:50.087919970Z" level=info msg="RemovePodSandbox \"9501d454f0f8f0fca8cca25d610e4dcdfadf2c5d68c015cd70d7b464bf4bd0c4\" returns successfully" Feb 9 19:18:50.096327 env[1657]: time="2024-02-09T19:18:50.092394087Z" level=info msg="StopPodSandbox for \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\"" Feb 9 19:18:50.190000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:18:50.190000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40028984a0 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:18:50.190000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:18:50.198000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:18:50.198000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026bf8a0 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:18:50.198000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:18:50.205000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:18:50.205000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40028985c0 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:18:50.205000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:18:50.209000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:18:50.209000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40028986e0 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:18:50.209000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:18:50.232097 env[1657]: 2024-02-09 19:18:50.160 [WARNING][4798] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"3c8095c3-e7b4-4e87-97f5-d754ac025e71", ResourceVersion:"828", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 19, 18, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-191", ContainerID:"72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d", Pod:"csi-node-driver-g4vzb", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.119.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali7827b56b7f3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 19:18:50.232097 env[1657]: 2024-02-09 19:18:50.160 [INFO][4798] k8s.go 578: Cleaning up netns ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Feb 9 19:18:50.232097 env[1657]: 2024-02-09 19:18:50.160 [INFO][4798] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" iface="eth0" netns="" Feb 9 19:18:50.232097 env[1657]: 2024-02-09 19:18:50.160 [INFO][4798] k8s.go 585: Releasing IP address(es) ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Feb 9 19:18:50.232097 env[1657]: 2024-02-09 19:18:50.161 [INFO][4798] utils.go 188: Calico CNI releasing IP address ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Feb 9 19:18:50.232097 env[1657]: 2024-02-09 19:18:50.202 [INFO][4804] ipam_plugin.go 415: Releasing address using handleID ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" HandleID="k8s-pod-network.95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Workload="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" Feb 9 19:18:50.232097 env[1657]: 2024-02-09 19:18:50.202 [INFO][4804] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 19:18:50.232097 env[1657]: 2024-02-09 19:18:50.202 [INFO][4804] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 19:18:50.232097 env[1657]: 2024-02-09 19:18:50.224 [WARNING][4804] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" HandleID="k8s-pod-network.95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Workload="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" Feb 9 19:18:50.232097 env[1657]: 2024-02-09 19:18:50.224 [INFO][4804] ipam_plugin.go 443: Releasing address using workloadID ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" HandleID="k8s-pod-network.95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Workload="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" Feb 9 19:18:50.232097 env[1657]: 2024-02-09 19:18:50.227 [INFO][4804] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 19:18:50.232097 env[1657]: 2024-02-09 19:18:50.229 [INFO][4798] k8s.go 591: Teardown processing complete. ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Feb 9 19:18:50.233209 env[1657]: time="2024-02-09T19:18:50.233145919Z" level=info msg="TearDown network for sandbox \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\" successfully" Feb 9 19:18:50.233414 env[1657]: time="2024-02-09T19:18:50.233381292Z" level=info msg="StopPodSandbox for \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\" returns successfully" Feb 9 19:18:50.234349 env[1657]: time="2024-02-09T19:18:50.234262450Z" level=info msg="RemovePodSandbox for \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\"" Feb 9 19:18:50.234713 env[1657]: time="2024-02-09T19:18:50.234639779Z" level=info msg="Forcibly stopping sandbox \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\"" Feb 9 19:18:50.418870 env[1657]: 2024-02-09 19:18:50.344 [WARNING][4822] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"3c8095c3-e7b4-4e87-97f5-d754ac025e71", ResourceVersion:"828", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 19, 18, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-191", ContainerID:"72280c3508395a648da90721a81bee3cb01f23a45712f32bbad6f10bb8957b1d", Pod:"csi-node-driver-g4vzb", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.119.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali7827b56b7f3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 19:18:50.418870 env[1657]: 2024-02-09 19:18:50.345 [INFO][4822] k8s.go 578: Cleaning up netns ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Feb 9 19:18:50.418870 env[1657]: 2024-02-09 19:18:50.345 [INFO][4822] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" iface="eth0" netns="" Feb 9 19:18:50.418870 env[1657]: 2024-02-09 19:18:50.345 [INFO][4822] k8s.go 585: Releasing IP address(es) ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Feb 9 19:18:50.418870 env[1657]: 2024-02-09 19:18:50.345 [INFO][4822] utils.go 188: Calico CNI releasing IP address ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Feb 9 19:18:50.418870 env[1657]: 2024-02-09 19:18:50.396 [INFO][4830] ipam_plugin.go 415: Releasing address using handleID ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" HandleID="k8s-pod-network.95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Workload="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" Feb 9 19:18:50.418870 env[1657]: 2024-02-09 19:18:50.397 [INFO][4830] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 19:18:50.418870 env[1657]: 2024-02-09 19:18:50.398 [INFO][4830] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 19:18:50.418870 env[1657]: 2024-02-09 19:18:50.412 [WARNING][4830] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" HandleID="k8s-pod-network.95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Workload="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" Feb 9 19:18:50.418870 env[1657]: 2024-02-09 19:18:50.412 [INFO][4830] ipam_plugin.go 443: Releasing address using workloadID ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" HandleID="k8s-pod-network.95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Workload="ip--172--31--25--191-k8s-csi--node--driver--g4vzb-eth0" Feb 9 19:18:50.418870 env[1657]: 2024-02-09 19:18:50.414 [INFO][4830] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 19:18:50.418870 env[1657]: 2024-02-09 19:18:50.416 [INFO][4822] k8s.go 591: Teardown processing complete. ContainerID="95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62" Feb 9 19:18:50.419927 env[1657]: time="2024-02-09T19:18:50.419875423Z" level=info msg="TearDown network for sandbox \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\" successfully" Feb 9 19:18:50.425375 env[1657]: time="2024-02-09T19:18:50.425267945Z" level=info msg="RemovePodSandbox \"95af5e285260cfee8fb489412f2b7e6aa91cc92d6cc8785f5cfa71497fb35f62\" returns successfully" Feb 9 19:18:50.426425 env[1657]: time="2024-02-09T19:18:50.426351190Z" level=info msg="StopPodSandbox for \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\"" Feb 9 19:18:50.552137 env[1657]: 2024-02-09 19:18:50.493 [WARNING][4848] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"636b8ad3-442b-47df-a6ee-c31121f98b5d", ResourceVersion:"758", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 19, 18, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-191", ContainerID:"a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4", Pod:"coredns-5d78c9869d-s4ckl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.119.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3c366aee51b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 19:18:50.552137 env[1657]: 2024-02-09 19:18:50.493 [INFO][4848] k8s.go 578: Cleaning up netns ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Feb 9 19:18:50.552137 env[1657]: 2024-02-09 19:18:50.493 [INFO][4848] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" iface="eth0" netns="" Feb 9 19:18:50.552137 env[1657]: 2024-02-09 19:18:50.493 [INFO][4848] k8s.go 585: Releasing IP address(es) ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Feb 9 19:18:50.552137 env[1657]: 2024-02-09 19:18:50.493 [INFO][4848] utils.go 188: Calico CNI releasing IP address ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Feb 9 19:18:50.552137 env[1657]: 2024-02-09 19:18:50.528 [INFO][4854] ipam_plugin.go 415: Releasing address using handleID ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" HandleID="k8s-pod-network.623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" Feb 9 19:18:50.552137 env[1657]: 2024-02-09 19:18:50.528 [INFO][4854] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 19:18:50.552137 env[1657]: 2024-02-09 19:18:50.528 [INFO][4854] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 19:18:50.552137 env[1657]: 2024-02-09 19:18:50.545 [WARNING][4854] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" HandleID="k8s-pod-network.623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" Feb 9 19:18:50.552137 env[1657]: 2024-02-09 19:18:50.545 [INFO][4854] ipam_plugin.go 443: Releasing address using workloadID ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" HandleID="k8s-pod-network.623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" Feb 9 19:18:50.552137 env[1657]: 2024-02-09 19:18:50.548 [INFO][4854] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 19:18:50.552137 env[1657]: 2024-02-09 19:18:50.549 [INFO][4848] k8s.go 591: Teardown processing complete. ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Feb 9 19:18:50.553768 env[1657]: time="2024-02-09T19:18:50.552137360Z" level=info msg="TearDown network for sandbox \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\" successfully" Feb 9 19:18:50.553768 env[1657]: time="2024-02-09T19:18:50.552182095Z" level=info msg="StopPodSandbox for \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\" returns successfully" Feb 9 19:18:50.553768 env[1657]: time="2024-02-09T19:18:50.553063193Z" level=info msg="RemovePodSandbox for \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\"" Feb 9 19:18:50.553768 env[1657]: time="2024-02-09T19:18:50.553114743Z" level=info msg="Forcibly stopping sandbox \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\"" Feb 9 19:18:50.682427 env[1657]: 2024-02-09 19:18:50.617 [WARNING][4873] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"636b8ad3-442b-47df-a6ee-c31121f98b5d", ResourceVersion:"758", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 19, 18, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-191", ContainerID:"a33ed0c8445fcf35378a1645d80494b7881041f7f72f32788e349eb9d17835e4", Pod:"coredns-5d78c9869d-s4ckl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.119.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3c366aee51b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 19:18:50.682427 env[1657]: 2024-02-09 19:18:50.617 [INFO][4873] k8s.go 578: Cleaning up netns ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Feb 9 19:18:50.682427 env[1657]: 2024-02-09 19:18:50.617 [INFO][4873] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" iface="eth0" netns="" Feb 9 19:18:50.682427 env[1657]: 2024-02-09 19:18:50.617 [INFO][4873] k8s.go 585: Releasing IP address(es) ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Feb 9 19:18:50.682427 env[1657]: 2024-02-09 19:18:50.617 [INFO][4873] utils.go 188: Calico CNI releasing IP address ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Feb 9 19:18:50.682427 env[1657]: 2024-02-09 19:18:50.658 [INFO][4879] ipam_plugin.go 415: Releasing address using handleID ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" HandleID="k8s-pod-network.623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" Feb 9 19:18:50.682427 env[1657]: 2024-02-09 19:18:50.659 [INFO][4879] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 19:18:50.682427 env[1657]: 2024-02-09 19:18:50.659 [INFO][4879] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 19:18:50.682427 env[1657]: 2024-02-09 19:18:50.675 [WARNING][4879] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" HandleID="k8s-pod-network.623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" Feb 9 19:18:50.682427 env[1657]: 2024-02-09 19:18:50.675 [INFO][4879] ipam_plugin.go 443: Releasing address using workloadID ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" HandleID="k8s-pod-network.623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--s4ckl-eth0" Feb 9 19:18:50.682427 env[1657]: 2024-02-09 19:18:50.678 [INFO][4879] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 19:18:50.682427 env[1657]: 2024-02-09 19:18:50.680 [INFO][4873] k8s.go 591: Teardown processing complete. ContainerID="623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2" Feb 9 19:18:50.683362 env[1657]: time="2024-02-09T19:18:50.682471277Z" level=info msg="TearDown network for sandbox \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\" successfully" Feb 9 19:18:50.687490 env[1657]: time="2024-02-09T19:18:50.687427252Z" level=info msg="RemovePodSandbox \"623ad66c5c7c5af7950fc53179ff55f36a6f835a62cf5be794a80b2b3f1d9db2\" returns successfully" Feb 9 19:18:50.688351 env[1657]: time="2024-02-09T19:18:50.688259631Z" level=info msg="StopPodSandbox for \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\"" Feb 9 19:18:50.819622 env[1657]: 2024-02-09 19:18:50.759 [WARNING][4899] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"856efc3e-393c-43c0-ad49-acab9a81d056", ResourceVersion:"742", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 19, 18, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-191", ContainerID:"03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda", Pod:"coredns-5d78c9869d-mjt4d", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.119.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali95fe637b96f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 19:18:50.819622 env[1657]: 2024-02-09 19:18:50.759 [INFO][4899] k8s.go 578: Cleaning up netns ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Feb 9 19:18:50.819622 env[1657]: 2024-02-09 19:18:50.759 [INFO][4899] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" iface="eth0" netns="" Feb 9 19:18:50.819622 env[1657]: 2024-02-09 19:18:50.760 [INFO][4899] k8s.go 585: Releasing IP address(es) ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Feb 9 19:18:50.819622 env[1657]: 2024-02-09 19:18:50.760 [INFO][4899] utils.go 188: Calico CNI releasing IP address ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Feb 9 19:18:50.819622 env[1657]: 2024-02-09 19:18:50.795 [INFO][4905] ipam_plugin.go 415: Releasing address using handleID ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" HandleID="k8s-pod-network.98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" Feb 9 19:18:50.819622 env[1657]: 2024-02-09 19:18:50.796 [INFO][4905] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 19:18:50.819622 env[1657]: 2024-02-09 19:18:50.796 [INFO][4905] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 19:18:50.819622 env[1657]: 2024-02-09 19:18:50.811 [WARNING][4905] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" HandleID="k8s-pod-network.98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" Feb 9 19:18:50.819622 env[1657]: 2024-02-09 19:18:50.811 [INFO][4905] ipam_plugin.go 443: Releasing address using workloadID ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" HandleID="k8s-pod-network.98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" Feb 9 19:18:50.819622 env[1657]: 2024-02-09 19:18:50.814 [INFO][4905] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 19:18:50.819622 env[1657]: 2024-02-09 19:18:50.816 [INFO][4899] k8s.go 591: Teardown processing complete. ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Feb 9 19:18:50.819622 env[1657]: time="2024-02-09T19:18:50.819539421Z" level=info msg="TearDown network for sandbox \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\" successfully" Feb 9 19:18:50.819622 env[1657]: time="2024-02-09T19:18:50.819607735Z" level=info msg="StopPodSandbox for \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\" returns successfully" Feb 9 19:18:50.823021 env[1657]: time="2024-02-09T19:18:50.822951029Z" level=info msg="RemovePodSandbox for \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\"" Feb 9 19:18:50.823162 env[1657]: time="2024-02-09T19:18:50.823013019Z" level=info msg="Forcibly stopping sandbox \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\"" Feb 9 19:18:50.969876 env[1657]: 2024-02-09 19:18:50.905 [WARNING][4923] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"856efc3e-393c-43c0-ad49-acab9a81d056", ResourceVersion:"742", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 19, 18, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-191", ContainerID:"03c1722dee014146bf3ec8a1a85be8d3a359694e482f719e909a6e61e359acda", Pod:"coredns-5d78c9869d-mjt4d", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.119.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali95fe637b96f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 19:18:50.969876 env[1657]: 2024-02-09 19:18:50.905 [INFO][4923] k8s.go 578: Cleaning up netns ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Feb 9 19:18:50.969876 env[1657]: 2024-02-09 19:18:50.905 [INFO][4923] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" iface="eth0" netns="" Feb 9 19:18:50.969876 env[1657]: 2024-02-09 19:18:50.905 [INFO][4923] k8s.go 585: Releasing IP address(es) ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Feb 9 19:18:50.969876 env[1657]: 2024-02-09 19:18:50.905 [INFO][4923] utils.go 188: Calico CNI releasing IP address ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Feb 9 19:18:50.969876 env[1657]: 2024-02-09 19:18:50.948 [INFO][4929] ipam_plugin.go 415: Releasing address using handleID ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" HandleID="k8s-pod-network.98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" Feb 9 19:18:50.969876 env[1657]: 2024-02-09 19:18:50.949 [INFO][4929] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 19:18:50.969876 env[1657]: 2024-02-09 19:18:50.949 [INFO][4929] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 19:18:50.969876 env[1657]: 2024-02-09 19:18:50.963 [WARNING][4929] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" HandleID="k8s-pod-network.98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" Feb 9 19:18:50.969876 env[1657]: 2024-02-09 19:18:50.963 [INFO][4929] ipam_plugin.go 443: Releasing address using workloadID ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" HandleID="k8s-pod-network.98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Workload="ip--172--31--25--191-k8s-coredns--5d78c9869d--mjt4d-eth0" Feb 9 19:18:50.969876 env[1657]: 2024-02-09 19:18:50.965 [INFO][4929] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 19:18:50.969876 env[1657]: 2024-02-09 19:18:50.967 [INFO][4923] k8s.go 591: Teardown processing complete. ContainerID="98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a" Feb 9 19:18:50.970780 env[1657]: time="2024-02-09T19:18:50.969913147Z" level=info msg="TearDown network for sandbox \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\" successfully" Feb 9 19:18:50.975139 env[1657]: time="2024-02-09T19:18:50.975034440Z" level=info msg="RemovePodSandbox \"98c05683af5d34dbcbd28ea48cc05e81a626ec19bfe3d0950a6f9b56564fbe4a\" returns successfully" Feb 9 19:18:54.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.191:22-147.75.109.163:40934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:18:54.970719 systemd[1]: Started sshd@9-172.31.25.191:22-147.75.109.163:40934.service. Feb 9 19:18:54.973021 kernel: kauditd_printk_skb: 13 callbacks suppressed Feb 9 19:18:54.973123 kernel: audit: type=1130 audit(1707506334.970:1376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.191:22-147.75.109.163:40934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:18:55.156000 audit[4955]: USER_ACCT pid=4955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:55.157442 sshd[4955]: Accepted publickey for core from 147.75.109.163 port 40934 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:18:55.168340 kernel: audit: type=1101 audit(1707506335.156:1377): pid=4955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:55.168000 audit[4955]: CRED_ACQ pid=4955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:55.169434 sshd[4955]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:18:55.183911 kernel: audit: type=1103 audit(1707506335.168:1378): pid=4955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:55.184053 kernel: audit: type=1006 audit(1707506335.168:1379): pid=4955 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Feb 9 19:18:55.168000 audit[4955]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9906ce0 a2=3 a3=1 items=0 ppid=1 pid=4955 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:55.194605 kernel: audit: type=1300 audit(1707506335.168:1379): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9906ce0 a2=3 a3=1 items=0 ppid=1 pid=4955 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:18:55.168000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:18:55.198583 kernel: audit: type=1327 audit(1707506335.168:1379): proctitle=737368643A20636F7265205B707269765D Feb 9 19:18:55.204652 systemd-logind[1646]: New session 10 of user core. Feb 9 19:18:55.207424 systemd[1]: Started session-10.scope. Feb 9 19:18:55.217000 audit[4955]: USER_START pid=4955 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:55.230270 kernel: audit: type=1105 audit(1707506335.217:1380): pid=4955 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:55.230494 kernel: audit: type=1103 audit(1707506335.229:1381): pid=4957 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:55.229000 audit[4957]: CRED_ACQ pid=4957 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:55.461660 sshd[4955]: pam_unix(sshd:session): session closed for user core Feb 9 19:18:55.463000 audit[4955]: USER_END pid=4955 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:55.476097 systemd[1]: sshd@9-172.31.25.191:22-147.75.109.163:40934.service: Deactivated successfully. Feb 9 19:18:55.463000 audit[4955]: CRED_DISP pid=4955 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:55.485580 kernel: audit: type=1106 audit(1707506335.463:1382): pid=4955 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:55.485690 kernel: audit: type=1104 audit(1707506335.463:1383): pid=4955 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:18:55.477684 systemd[1]: session-10.scope: Deactivated successfully. Feb 9 19:18:55.488040 systemd-logind[1646]: Session 10 logged out. Waiting for processes to exit. Feb 9 19:18:55.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.191:22-147.75.109.163:40934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:18:55.490477 systemd-logind[1646]: Removed session 10. Feb 9 19:18:55.545766 systemd[1]: run-containerd-runc-k8s.io-771b56e0adaa36bedb6ad6478c9106d7a95f55277d01aba82eb5a646f12ec278-runc.ZlXEKu.mount: Deactivated successfully. Feb 9 19:18:55.667320 kubelet[2857]: I0209 19:18:55.664955 2857 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-g4vzb" podStartSLOduration=38.111284233 podCreationTimestamp="2024-02-09 19:18:11 +0000 UTC" firstStartedPulling="2024-02-09 19:18:38.619280966 +0000 UTC m=+49.224484896" lastFinishedPulling="2024-02-09 19:18:45.172893605 +0000 UTC m=+55.778097559" observedRunningTime="2024-02-09 19:18:46.255424204 +0000 UTC m=+56.860628170" watchObservedRunningTime="2024-02-09 19:18:55.664896896 +0000 UTC m=+66.270100862" Feb 9 19:19:00.492774 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 19:19:00.492938 kernel: audit: type=1130 audit(1707506340.489:1385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.191:22-147.75.109.163:40950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:00.489000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.191:22-147.75.109.163:40950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:00.489598 systemd[1]: Started sshd@10-172.31.25.191:22-147.75.109.163:40950.service. Feb 9 19:19:00.670000 audit[5000]: USER_ACCT pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:00.671107 sshd[5000]: Accepted publickey for core from 147.75.109.163 port 40950 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:19:00.683364 kernel: audit: type=1101 audit(1707506340.670:1386): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:00.684409 sshd[5000]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:19:00.683000 audit[5000]: CRED_ACQ pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:00.700604 kernel: audit: type=1103 audit(1707506340.683:1387): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:00.700795 kernel: audit: type=1006 audit(1707506340.683:1388): pid=5000 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Feb 9 19:19:00.683000 audit[5000]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd953e2b0 a2=3 a3=1 items=0 ppid=1 pid=5000 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:00.711160 kernel: audit: type=1300 audit(1707506340.683:1388): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd953e2b0 a2=3 a3=1 items=0 ppid=1 pid=5000 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:00.683000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:00.715053 kernel: audit: type=1327 audit(1707506340.683:1388): proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:00.722190 systemd-logind[1646]: New session 11 of user core. Feb 9 19:19:00.723478 systemd[1]: Started session-11.scope. Feb 9 19:19:00.735000 audit[5000]: USER_START pid=5000 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:00.746000 audit[5002]: CRED_ACQ pid=5002 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:00.756160 kernel: audit: type=1105 audit(1707506340.735:1389): pid=5000 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:00.756278 kernel: audit: type=1103 audit(1707506340.746:1390): pid=5002 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:00.984348 sshd[5000]: pam_unix(sshd:session): session closed for user core Feb 9 19:19:00.986000 audit[5000]: USER_END pid=5000 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:00.998682 systemd[1]: sshd@10-172.31.25.191:22-147.75.109.163:40950.service: Deactivated successfully. Feb 9 19:19:00.987000 audit[5000]: CRED_DISP pid=5000 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:01.008119 kernel: audit: type=1106 audit(1707506340.986:1391): pid=5000 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:01.008270 kernel: audit: type=1104 audit(1707506340.987:1392): pid=5000 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:00.999983 systemd[1]: session-11.scope: Deactivated successfully. Feb 9 19:19:00.998000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.191:22-147.75.109.163:40950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:01.009272 systemd-logind[1646]: Session 11 logged out. Waiting for processes to exit. Feb 9 19:19:01.011092 systemd-logind[1646]: Removed session 11. Feb 9 19:19:06.017323 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 19:19:06.017457 kernel: audit: type=1130 audit(1707506346.013:1394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.191:22-147.75.109.163:56078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:06.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.191:22-147.75.109.163:56078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:06.014795 systemd[1]: Started sshd@11-172.31.25.191:22-147.75.109.163:56078.service. Feb 9 19:19:06.194000 audit[5016]: USER_ACCT pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:06.195898 sshd[5016]: Accepted publickey for core from 147.75.109.163 port 56078 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:19:06.206339 kernel: audit: type=1101 audit(1707506346.194:1395): pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:06.208183 sshd[5016]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:19:06.206000 audit[5016]: CRED_ACQ pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:06.224260 kernel: audit: type=1103 audit(1707506346.206:1396): pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:06.224376 kernel: audit: type=1006 audit(1707506346.206:1397): pid=5016 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Feb 9 19:19:06.206000 audit[5016]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea018780 a2=3 a3=1 items=0 ppid=1 pid=5016 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:06.234543 kernel: audit: type=1300 audit(1707506346.206:1397): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea018780 a2=3 a3=1 items=0 ppid=1 pid=5016 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:06.206000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:06.239116 kernel: audit: type=1327 audit(1707506346.206:1397): proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:06.244399 systemd-logind[1646]: New session 12 of user core. Feb 9 19:19:06.246156 systemd[1]: Started session-12.scope. Feb 9 19:19:06.255000 audit[5016]: USER_START pid=5016 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:06.270106 kernel: audit: type=1105 audit(1707506346.255:1398): pid=5016 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:06.270269 kernel: audit: type=1103 audit(1707506346.268:1399): pid=5018 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:06.268000 audit[5018]: CRED_ACQ pid=5018 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:06.511698 sshd[5016]: pam_unix(sshd:session): session closed for user core Feb 9 19:19:06.512000 audit[5016]: USER_END pid=5016 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:06.512000 audit[5016]: CRED_DISP pid=5016 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:06.526050 systemd[1]: sshd@11-172.31.25.191:22-147.75.109.163:56078.service: Deactivated successfully. Feb 9 19:19:06.527766 systemd[1]: session-12.scope: Deactivated successfully. Feb 9 19:19:06.534819 kernel: audit: type=1106 audit(1707506346.512:1400): pid=5016 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:06.534923 kernel: audit: type=1104 audit(1707506346.512:1401): pid=5016 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:06.536459 systemd-logind[1646]: Session 12 logged out. Waiting for processes to exit. Feb 9 19:19:06.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.191:22-147.75.109.163:56078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:06.547870 systemd[1]: Started sshd@12-172.31.25.191:22-147.75.109.163:56086.service. Feb 9 19:19:06.546000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.191:22-147.75.109.163:56086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:06.551132 systemd-logind[1646]: Removed session 12. Feb 9 19:19:06.727407 sshd[5029]: Accepted publickey for core from 147.75.109.163 port 56086 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:19:06.726000 audit[5029]: USER_ACCT pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:06.728000 audit[5029]: CRED_ACQ pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:06.728000 audit[5029]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd76b3ec0 a2=3 a3=1 items=0 ppid=1 pid=5029 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:06.728000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:06.730780 sshd[5029]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:19:06.740332 systemd[1]: Started session-13.scope. Feb 9 19:19:06.740402 systemd-logind[1646]: New session 13 of user core. Feb 9 19:19:06.754000 audit[5029]: USER_START pid=5029 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:06.758000 audit[5031]: CRED_ACQ pid=5031 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:08.532199 sshd[5029]: pam_unix(sshd:session): session closed for user core Feb 9 19:19:08.533000 audit[5029]: USER_END pid=5029 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:08.533000 audit[5029]: CRED_DISP pid=5029 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:08.537453 systemd[1]: session-13.scope: Deactivated successfully. Feb 9 19:19:08.538000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.191:22-147.75.109.163:56086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:08.539606 systemd[1]: sshd@12-172.31.25.191:22-147.75.109.163:56086.service: Deactivated successfully. Feb 9 19:19:08.541187 systemd-logind[1646]: Session 13 logged out. Waiting for processes to exit. Feb 9 19:19:08.544483 systemd-logind[1646]: Removed session 13. Feb 9 19:19:08.561245 systemd[1]: Started sshd@13-172.31.25.191:22-147.75.109.163:56102.service. Feb 9 19:19:08.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.191:22-147.75.109.163:56102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:08.742000 audit[5038]: USER_ACCT pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:08.744407 sshd[5038]: Accepted publickey for core from 147.75.109.163 port 56102 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:19:08.744000 audit[5038]: CRED_ACQ pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:08.745000 audit[5038]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeceb8da0 a2=3 a3=1 items=0 ppid=1 pid=5038 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:08.745000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:08.747518 sshd[5038]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:19:08.757032 systemd[1]: Started session-14.scope. Feb 9 19:19:08.757819 systemd-logind[1646]: New session 14 of user core. Feb 9 19:19:08.772000 audit[5038]: USER_START pid=5038 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:08.775000 audit[5040]: CRED_ACQ pid=5040 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:09.021620 sshd[5038]: pam_unix(sshd:session): session closed for user core Feb 9 19:19:09.023000 audit[5038]: USER_END pid=5038 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:09.023000 audit[5038]: CRED_DISP pid=5038 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:09.026688 systemd[1]: session-14.scope: Deactivated successfully. Feb 9 19:19:09.027850 systemd[1]: sshd@13-172.31.25.191:22-147.75.109.163:56102.service: Deactivated successfully. Feb 9 19:19:09.027000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.191:22-147.75.109.163:56102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:09.030433 systemd-logind[1646]: Session 14 logged out. Waiting for processes to exit. Feb 9 19:19:09.032130 systemd-logind[1646]: Removed session 14. Feb 9 19:19:14.053823 systemd[1]: Started sshd@14-172.31.25.191:22-147.75.109.163:56114.service. Feb 9 19:19:14.065674 kernel: kauditd_printk_skb: 23 callbacks suppressed Feb 9 19:19:14.065824 kernel: audit: type=1130 audit(1707506354.053:1421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.191:22-147.75.109.163:56114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:14.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.191:22-147.75.109.163:56114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:14.233434 sshd[5052]: Accepted publickey for core from 147.75.109.163 port 56114 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:19:14.231000 audit[5052]: USER_ACCT pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:14.247772 sshd[5052]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:19:14.244000 audit[5052]: CRED_ACQ pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:14.260871 kernel: audit: type=1101 audit(1707506354.231:1422): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:14.261020 kernel: audit: type=1103 audit(1707506354.244:1423): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:14.261676 kernel: audit: type=1006 audit(1707506354.244:1424): pid=5052 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Feb 9 19:19:14.272446 systemd-logind[1646]: New session 15 of user core. Feb 9 19:19:14.276693 systemd[1]: Started session-15.scope. Feb 9 19:19:14.279347 kernel: audit: type=1300 audit(1707506354.244:1424): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff2157c60 a2=3 a3=1 items=0 ppid=1 pid=5052 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:14.244000 audit[5052]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff2157c60 a2=3 a3=1 items=0 ppid=1 pid=5052 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:14.244000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:14.302564 kernel: audit: type=1327 audit(1707506354.244:1424): proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:14.303000 audit[5052]: USER_START pid=5052 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:14.318053 kernel: audit: type=1105 audit(1707506354.303:1425): pid=5052 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:14.305000 audit[5054]: CRED_ACQ pid=5054 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:14.327884 kernel: audit: type=1103 audit(1707506354.305:1426): pid=5054 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:14.541920 sshd[5052]: pam_unix(sshd:session): session closed for user core Feb 9 19:19:14.542000 audit[5052]: USER_END pid=5052 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:14.546470 systemd[1]: session-15.scope: Deactivated successfully. Feb 9 19:19:14.548057 systemd[1]: sshd@14-172.31.25.191:22-147.75.109.163:56114.service: Deactivated successfully. Feb 9 19:19:14.542000 audit[5052]: CRED_DISP pid=5052 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:14.564910 kernel: audit: type=1106 audit(1707506354.542:1427): pid=5052 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:14.565058 kernel: audit: type=1104 audit(1707506354.542:1428): pid=5052 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:14.564975 systemd-logind[1646]: Session 15 logged out. Waiting for processes to exit. Feb 9 19:19:14.542000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.191:22-147.75.109.163:56114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:14.567584 systemd-logind[1646]: Removed session 15. Feb 9 19:19:19.575101 systemd[1]: Started sshd@15-172.31.25.191:22-147.75.109.163:51238.service. Feb 9 19:19:19.575000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.191:22-147.75.109.163:51238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:19.582423 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 19:19:19.582570 kernel: audit: type=1130 audit(1707506359.575:1430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.191:22-147.75.109.163:51238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:19.752000 audit[5072]: USER_ACCT pid=5072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:19.757241 sshd[5072]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:19:19.760166 sshd[5072]: Accepted publickey for core from 147.75.109.163 port 51238 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:19:19.753000 audit[5072]: CRED_ACQ pid=5072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:19.773605 kernel: audit: type=1101 audit(1707506359.752:1431): pid=5072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:19.773728 kernel: audit: type=1103 audit(1707506359.753:1432): pid=5072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:19.779625 kernel: audit: type=1006 audit(1707506359.753:1433): pid=5072 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Feb 9 19:19:19.780368 kernel: audit: type=1300 audit(1707506359.753:1433): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec7db1f0 a2=3 a3=1 items=0 ppid=1 pid=5072 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:19.753000 audit[5072]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec7db1f0 a2=3 a3=1 items=0 ppid=1 pid=5072 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:19.753000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:19.796451 kernel: audit: type=1327 audit(1707506359.753:1433): proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:19.799859 systemd-logind[1646]: New session 16 of user core. Feb 9 19:19:19.801236 systemd[1]: Started session-16.scope. Feb 9 19:19:19.810000 audit[5072]: USER_START pid=5072 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:19.813000 audit[5074]: CRED_ACQ pid=5074 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:19.832340 kernel: audit: type=1105 audit(1707506359.810:1434): pid=5072 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:19.832478 kernel: audit: type=1103 audit(1707506359.813:1435): pid=5074 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:20.096708 sshd[5072]: pam_unix(sshd:session): session closed for user core Feb 9 19:19:20.101000 audit[5072]: USER_END pid=5072 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:20.107224 systemd-logind[1646]: Session 16 logged out. Waiting for processes to exit. Feb 9 19:19:20.109470 systemd[1]: sshd@15-172.31.25.191:22-147.75.109.163:51238.service: Deactivated successfully. Feb 9 19:19:20.110751 systemd[1]: session-16.scope: Deactivated successfully. Feb 9 19:19:20.112649 systemd-logind[1646]: Removed session 16. Feb 9 19:19:20.103000 audit[5072]: CRED_DISP pid=5072 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:20.123769 kernel: audit: type=1106 audit(1707506360.101:1436): pid=5072 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:20.123923 kernel: audit: type=1104 audit(1707506360.103:1437): pid=5072 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:20.108000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.191:22-147.75.109.163:51238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:23.532213 systemd[1]: run-containerd-runc-k8s.io-970c8c0a97167464a90c8dbdcbe46219ef3bd2a006d8b4d0c1201467ba2fcddf-runc.wwzBpD.mount: Deactivated successfully. Feb 9 19:19:25.132358 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 19:19:25.132563 kernel: audit: type=1130 audit(1707506365.128:1439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.191:22-147.75.109.163:46250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:25.128000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.191:22-147.75.109.163:46250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:25.129414 systemd[1]: Started sshd@16-172.31.25.191:22-147.75.109.163:46250.service. Feb 9 19:19:25.303000 audit[5107]: USER_ACCT pid=5107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:25.305489 sshd[5107]: Accepted publickey for core from 147.75.109.163 port 46250 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:19:25.315000 audit[5107]: CRED_ACQ pid=5107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:25.318035 sshd[5107]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:19:25.326344 kernel: audit: type=1101 audit(1707506365.303:1440): pid=5107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:25.326471 kernel: audit: type=1103 audit(1707506365.315:1441): pid=5107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:25.332501 kernel: audit: type=1006 audit(1707506365.316:1442): pid=5107 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Feb 9 19:19:25.316000 audit[5107]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcce30f80 a2=3 a3=1 items=0 ppid=1 pid=5107 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:25.342753 kernel: audit: type=1300 audit(1707506365.316:1442): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcce30f80 a2=3 a3=1 items=0 ppid=1 pid=5107 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:25.316000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:25.346502 kernel: audit: type=1327 audit(1707506365.316:1442): proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:25.349884 systemd-logind[1646]: New session 17 of user core. Feb 9 19:19:25.352409 systemd[1]: Started session-17.scope. Feb 9 19:19:25.362000 audit[5107]: USER_START pid=5107 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:25.376225 kernel: audit: type=1105 audit(1707506365.362:1443): pid=5107 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:25.376403 kernel: audit: type=1103 audit(1707506365.374:1444): pid=5109 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:25.374000 audit[5109]: CRED_ACQ pid=5109 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:25.555723 systemd[1]: run-containerd-runc-k8s.io-771b56e0adaa36bedb6ad6478c9106d7a95f55277d01aba82eb5a646f12ec278-runc.6ce7J8.mount: Deactivated successfully. Feb 9 19:19:25.668436 sshd[5107]: pam_unix(sshd:session): session closed for user core Feb 9 19:19:25.669000 audit[5107]: USER_END pid=5107 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:25.672838 systemd[1]: session-17.scope: Deactivated successfully. Feb 9 19:19:25.673973 systemd[1]: sshd@16-172.31.25.191:22-147.75.109.163:46250.service: Deactivated successfully. Feb 9 19:19:25.677595 systemd-logind[1646]: Session 17 logged out. Waiting for processes to exit. Feb 9 19:19:25.679277 systemd-logind[1646]: Removed session 17. Feb 9 19:19:25.693329 kernel: audit: type=1106 audit(1707506365.669:1445): pid=5107 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:25.693495 kernel: audit: type=1104 audit(1707506365.669:1446): pid=5107 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:25.669000 audit[5107]: CRED_DISP pid=5107 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:25.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.191:22-147.75.109.163:46250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:30.694464 systemd[1]: Started sshd@17-172.31.25.191:22-147.75.109.163:46264.service. Feb 9 19:19:30.707019 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 19:19:30.707084 kernel: audit: type=1130 audit(1707506370.694:1448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.25.191:22-147.75.109.163:46264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:30.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.25.191:22-147.75.109.163:46264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:30.870000 audit[5143]: USER_ACCT pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:30.874536 sshd[5143]: Accepted publickey for core from 147.75.109.163 port 46264 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:19:30.884378 kernel: audit: type=1101 audit(1707506370.870:1449): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:30.884531 kernel: audit: type=1103 audit(1707506370.882:1450): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:30.882000 audit[5143]: CRED_ACQ pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:30.885263 sshd[5143]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:19:30.899661 kernel: audit: type=1006 audit(1707506370.882:1451): pid=5143 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Feb 9 19:19:30.882000 audit[5143]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5bca770 a2=3 a3=1 items=0 ppid=1 pid=5143 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:30.910304 kernel: audit: type=1300 audit(1707506370.882:1451): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5bca770 a2=3 a3=1 items=0 ppid=1 pid=5143 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:30.882000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:30.914111 kernel: audit: type=1327 audit(1707506370.882:1451): proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:30.919364 systemd-logind[1646]: New session 18 of user core. Feb 9 19:19:30.921092 systemd[1]: Started session-18.scope. Feb 9 19:19:30.929000 audit[5143]: USER_START pid=5143 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:30.942402 kernel: audit: type=1105 audit(1707506370.929:1452): pid=5143 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:30.941000 audit[5145]: CRED_ACQ pid=5145 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:30.952326 kernel: audit: type=1103 audit(1707506370.941:1453): pid=5145 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:31.192686 sshd[5143]: pam_unix(sshd:session): session closed for user core Feb 9 19:19:31.194000 audit[5143]: USER_END pid=5143 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:31.195000 audit[5143]: CRED_DISP pid=5143 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:31.207391 systemd[1]: sshd@17-172.31.25.191:22-147.75.109.163:46264.service: Deactivated successfully. Feb 9 19:19:31.208719 systemd[1]: session-18.scope: Deactivated successfully. Feb 9 19:19:31.216156 kernel: audit: type=1106 audit(1707506371.194:1454): pid=5143 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:31.216274 kernel: audit: type=1104 audit(1707506371.195:1455): pid=5143 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:31.217618 systemd-logind[1646]: Session 18 logged out. Waiting for processes to exit. Feb 9 19:19:31.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.25.191:22-147.75.109.163:46264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:31.228497 systemd[1]: Started sshd@18-172.31.25.191:22-147.75.109.163:46278.service. Feb 9 19:19:31.227000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.25.191:22-147.75.109.163:46278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:31.230985 systemd-logind[1646]: Removed session 18. Feb 9 19:19:31.397000 audit[5156]: USER_ACCT pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:31.399254 sshd[5156]: Accepted publickey for core from 147.75.109.163 port 46278 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:19:31.399000 audit[5156]: CRED_ACQ pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:31.400000 audit[5156]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec121b80 a2=3 a3=1 items=0 ppid=1 pid=5156 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:31.400000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:31.402334 sshd[5156]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:19:31.410739 systemd-logind[1646]: New session 19 of user core. Feb 9 19:19:31.411710 systemd[1]: Started session-19.scope. Feb 9 19:19:31.420000 audit[5156]: USER_START pid=5156 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:31.423000 audit[5158]: CRED_ACQ pid=5158 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:31.847640 sshd[5156]: pam_unix(sshd:session): session closed for user core Feb 9 19:19:31.849000 audit[5156]: USER_END pid=5156 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:31.849000 audit[5156]: CRED_DISP pid=5156 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:31.852686 systemd[1]: session-19.scope: Deactivated successfully. Feb 9 19:19:31.854100 systemd[1]: sshd@18-172.31.25.191:22-147.75.109.163:46278.service: Deactivated successfully. Feb 9 19:19:31.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.25.191:22-147.75.109.163:46278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:31.855860 systemd-logind[1646]: Session 19 logged out. Waiting for processes to exit. Feb 9 19:19:31.858142 systemd-logind[1646]: Removed session 19. Feb 9 19:19:31.880010 systemd[1]: Started sshd@19-172.31.25.191:22-147.75.109.163:46288.service. Feb 9 19:19:31.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.191:22-147.75.109.163:46288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:32.058000 audit[5166]: USER_ACCT pid=5166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:32.060280 sshd[5166]: Accepted publickey for core from 147.75.109.163 port 46288 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:19:32.060000 audit[5166]: CRED_ACQ pid=5166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:32.061000 audit[5166]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdaac7180 a2=3 a3=1 items=0 ppid=1 pid=5166 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:32.061000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:32.063268 sshd[5166]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:19:32.072219 systemd[1]: Started session-20.scope. Feb 9 19:19:32.073440 systemd-logind[1646]: New session 20 of user core. Feb 9 19:19:32.084000 audit[5166]: USER_START pid=5166 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:32.087000 audit[5168]: CRED_ACQ pid=5168 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:33.683554 sshd[5166]: pam_unix(sshd:session): session closed for user core Feb 9 19:19:33.684000 audit[5166]: USER_END pid=5166 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:33.684000 audit[5166]: CRED_DISP pid=5166 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:33.689103 systemd[1]: sshd@19-172.31.25.191:22-147.75.109.163:46288.service: Deactivated successfully. Feb 9 19:19:33.690377 systemd-logind[1646]: Session 20 logged out. Waiting for processes to exit. Feb 9 19:19:33.688000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.191:22-147.75.109.163:46288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:33.692729 systemd[1]: session-20.scope: Deactivated successfully. Feb 9 19:19:33.693774 systemd[1]: session-20.scope: Consumed 1.014s CPU time. Feb 9 19:19:33.695724 systemd-logind[1646]: Removed session 20. Feb 9 19:19:33.716686 systemd[1]: Started sshd@20-172.31.25.191:22-147.75.109.163:46294.service. Feb 9 19:19:33.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.191:22-147.75.109.163:46294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:33.760000 audit[5182]: NETFILTER_CFG table=filter:111 family=2 entries=20 op=nft_register_rule pid=5182 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:19:33.760000 audit[5182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11292 a0=3 a1=ffffc5d62570 a2=0 a3=ffff888f26c0 items=0 ppid=2989 pid=5182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:33.760000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:19:33.762000 audit[5182]: NETFILTER_CFG table=nat:112 family=2 entries=20 op=nft_register_rule pid=5182 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:19:33.762000 audit[5182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffc5d62570 a2=0 a3=ffff888f26c0 items=0 ppid=2989 pid=5182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:33.762000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:19:33.783000 audit[5184]: NETFILTER_CFG table=filter:113 family=2 entries=32 op=nft_register_rule pid=5184 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:19:33.783000 audit[5184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11292 a0=3 a1=fffffa5dd640 a2=0 a3=ffffa1e5f6c0 items=0 ppid=2989 pid=5184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:33.783000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:19:33.784000 audit[5184]: NETFILTER_CFG table=nat:114 family=2 entries=20 op=nft_register_rule pid=5184 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:19:33.784000 audit[5184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=fffffa5dd640 a2=0 a3=ffffa1e5f6c0 items=0 ppid=2989 pid=5184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:33.784000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:19:33.912000 audit[5180]: USER_ACCT pid=5180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:33.913667 sshd[5180]: Accepted publickey for core from 147.75.109.163 port 46294 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:19:33.914000 audit[5180]: CRED_ACQ pid=5180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:33.914000 audit[5180]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3bbc9f0 a2=3 a3=1 items=0 ppid=1 pid=5180 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:33.914000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:33.916811 sshd[5180]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:19:33.926353 systemd[1]: Started session-21.scope. Feb 9 19:19:33.927381 systemd-logind[1646]: New session 21 of user core. Feb 9 19:19:33.941000 audit[5180]: USER_START pid=5180 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:33.944000 audit[5185]: CRED_ACQ pid=5185 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:34.712712 sshd[5180]: pam_unix(sshd:session): session closed for user core Feb 9 19:19:34.713000 audit[5180]: USER_END pid=5180 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:34.713000 audit[5180]: CRED_DISP pid=5180 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:34.718976 systemd[1]: sshd@20-172.31.25.191:22-147.75.109.163:46294.service: Deactivated successfully. Feb 9 19:19:34.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.191:22-147.75.109.163:46294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:34.720419 systemd-logind[1646]: Session 21 logged out. Waiting for processes to exit. Feb 9 19:19:34.720488 systemd[1]: session-21.scope: Deactivated successfully. Feb 9 19:19:34.724244 systemd-logind[1646]: Removed session 21. Feb 9 19:19:34.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.191:22-147.75.109.163:51360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:34.739650 systemd[1]: Started sshd@21-172.31.25.191:22-147.75.109.163:51360.service. Feb 9 19:19:34.917000 audit[5195]: USER_ACCT pid=5195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:34.920122 sshd[5195]: Accepted publickey for core from 147.75.109.163 port 51360 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:19:34.919000 audit[5195]: CRED_ACQ pid=5195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:34.919000 audit[5195]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc655a890 a2=3 a3=1 items=0 ppid=1 pid=5195 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:34.919000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:34.921280 sshd[5195]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:19:34.928390 systemd-logind[1646]: New session 22 of user core. Feb 9 19:19:34.931085 systemd[1]: Started session-22.scope. Feb 9 19:19:34.939000 audit[5195]: USER_START pid=5195 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:34.942000 audit[5197]: CRED_ACQ pid=5197 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:35.194593 sshd[5195]: pam_unix(sshd:session): session closed for user core Feb 9 19:19:35.195000 audit[5195]: USER_END pid=5195 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:35.195000 audit[5195]: CRED_DISP pid=5195 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:35.200904 systemd-logind[1646]: Session 22 logged out. Waiting for processes to exit. Feb 9 19:19:35.200946 systemd[1]: sshd@21-172.31.25.191:22-147.75.109.163:51360.service: Deactivated successfully. Feb 9 19:19:35.200000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.191:22-147.75.109.163:51360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:35.202413 systemd[1]: session-22.scope: Deactivated successfully. Feb 9 19:19:35.204629 systemd-logind[1646]: Removed session 22. Feb 9 19:19:36.831526 systemd[1]: run-containerd-runc-k8s.io-970c8c0a97167464a90c8dbdcbe46219ef3bd2a006d8b4d0c1201467ba2fcddf-runc.Cs0OUU.mount: Deactivated successfully. Feb 9 19:19:39.299548 kubelet[2857]: I0209 19:19:39.299494 2857 topology_manager.go:212] "Topology Admit Handler" Feb 9 19:19:39.312338 systemd[1]: Created slice kubepods-besteffort-pod458dfd3d_32ca_4468_996e_0a945914e15f.slice. Feb 9 19:19:39.323654 kubelet[2857]: W0209 19:19:39.323592 2857 reflector.go:533] object-"calico-apiserver"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-25-191" cannot list resource "configmaps" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-25-191' and this object Feb 9 19:19:39.323969 kubelet[2857]: E0209 19:19:39.323927 2857 reflector.go:148] object-"calico-apiserver"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-25-191" cannot list resource "configmaps" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-25-191' and this object Feb 9 19:19:39.324684 kubelet[2857]: W0209 19:19:39.324641 2857 reflector.go:533] object-"calico-apiserver"/"calico-apiserver-certs": failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:ip-172-31-25-191" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-25-191' and this object Feb 9 19:19:39.324874 kubelet[2857]: E0209 19:19:39.324690 2857 reflector.go:148] object-"calico-apiserver"/"calico-apiserver-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:ip-172-31-25-191" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-25-191' and this object Feb 9 19:19:39.394000 audit[5226]: NETFILTER_CFG table=filter:115 family=2 entries=33 op=nft_register_rule pid=5226 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:19:39.398207 kernel: kauditd_printk_skb: 57 callbacks suppressed Feb 9 19:19:39.398398 kernel: audit: type=1325 audit(1707506379.394:1497): table=filter:115 family=2 entries=33 op=nft_register_rule pid=5226 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:19:39.394000 audit[5226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11996 a0=3 a1=fffffa0668a0 a2=0 a3=ffffb39ad6c0 items=0 ppid=2989 pid=5226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:39.394000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:19:39.424403 kernel: audit: type=1300 audit(1707506379.394:1497): arch=c00000b7 syscall=211 success=yes exit=11996 a0=3 a1=fffffa0668a0 a2=0 a3=ffffb39ad6c0 items=0 ppid=2989 pid=5226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:39.424587 kernel: audit: type=1327 audit(1707506379.394:1497): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:19:39.405000 audit[5226]: NETFILTER_CFG table=nat:116 family=2 entries=20 op=nft_register_rule pid=5226 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:19:39.405000 audit[5226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=fffffa0668a0 a2=0 a3=ffffb39ad6c0 items=0 ppid=2989 pid=5226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:39.443751 kernel: audit: type=1325 audit(1707506379.405:1498): table=nat:116 family=2 entries=20 op=nft_register_rule pid=5226 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:19:39.443914 kernel: audit: type=1300 audit(1707506379.405:1498): arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=fffffa0668a0 a2=0 a3=ffffb39ad6c0 items=0 ppid=2989 pid=5226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:39.444342 kernel: audit: type=1327 audit(1707506379.405:1498): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:19:39.405000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:19:39.476833 kubelet[2857]: I0209 19:19:39.476776 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/458dfd3d-32ca-4468-996e-0a945914e15f-calico-apiserver-certs\") pod \"calico-apiserver-774dc986c8-xxppt\" (UID: \"458dfd3d-32ca-4468-996e-0a945914e15f\") " pod="calico-apiserver/calico-apiserver-774dc986c8-xxppt" Feb 9 19:19:39.477039 kubelet[2857]: I0209 19:19:39.476856 2857 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-t9s6f\" (UniqueName: \"kubernetes.io/projected/458dfd3d-32ca-4468-996e-0a945914e15f-kube-api-access-t9s6f\") pod \"calico-apiserver-774dc986c8-xxppt\" (UID: \"458dfd3d-32ca-4468-996e-0a945914e15f\") " pod="calico-apiserver/calico-apiserver-774dc986c8-xxppt" Feb 9 19:19:39.477000 audit[5228]: NETFILTER_CFG table=filter:117 family=2 entries=34 op=nft_register_rule pid=5228 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:19:39.477000 audit[5228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11996 a0=3 a1=ffffef794c10 a2=0 a3=ffffad67f6c0 items=0 ppid=2989 pid=5228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:39.496971 kernel: audit: type=1325 audit(1707506379.477:1499): table=filter:117 family=2 entries=34 op=nft_register_rule pid=5228 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:19:39.497113 kernel: audit: type=1300 audit(1707506379.477:1499): arch=c00000b7 syscall=211 success=yes exit=11996 a0=3 a1=ffffef794c10 a2=0 a3=ffffad67f6c0 items=0 ppid=2989 pid=5228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:39.477000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:19:39.502912 kernel: audit: type=1327 audit(1707506379.477:1499): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:19:39.483000 audit[5228]: NETFILTER_CFG table=nat:118 family=2 entries=20 op=nft_register_rule pid=5228 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:19:39.483000 audit[5228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffef794c10 a2=0 a3=ffffad67f6c0 items=0 ppid=2989 pid=5228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:39.514435 kernel: audit: type=1325 audit(1707506379.483:1500): table=nat:118 family=2 entries=20 op=nft_register_rule pid=5228 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:19:39.483000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:19:40.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.191:22-147.75.109.163:51376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:40.225934 systemd[1]: Started sshd@22-172.31.25.191:22-147.75.109.163:51376.service. Feb 9 19:19:40.403000 audit[5230]: USER_ACCT pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:40.405019 sshd[5230]: Accepted publickey for core from 147.75.109.163 port 51376 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:19:40.405000 audit[5230]: CRED_ACQ pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:40.405000 audit[5230]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff69d0020 a2=3 a3=1 items=0 ppid=1 pid=5230 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:40.405000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:40.408007 sshd[5230]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:19:40.416367 systemd-logind[1646]: New session 23 of user core. Feb 9 19:19:40.418454 systemd[1]: Started session-23.scope. Feb 9 19:19:40.428000 audit[5230]: USER_START pid=5230 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:40.431000 audit[5233]: CRED_ACQ pid=5233 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:40.518940 env[1657]: time="2024-02-09T19:19:40.517278271Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-774dc986c8-xxppt,Uid:458dfd3d-32ca-4468-996e-0a945914e15f,Namespace:calico-apiserver,Attempt:0,}" Feb 9 19:19:40.790039 sshd[5230]: pam_unix(sshd:session): session closed for user core Feb 9 19:19:40.792000 audit[5230]: USER_END pid=5230 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:40.792000 audit[5230]: CRED_DISP pid=5230 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:40.796092 systemd[1]: session-23.scope: Deactivated successfully. Feb 9 19:19:40.797915 systemd-logind[1646]: Session 23 logged out. Waiting for processes to exit. Feb 9 19:19:40.798222 systemd[1]: sshd@22-172.31.25.191:22-147.75.109.163:51376.service: Deactivated successfully. Feb 9 19:19:40.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.191:22-147.75.109.163:51376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:40.801208 systemd-logind[1646]: Removed session 23. Feb 9 19:19:40.912608 (udev-worker)[5260]: Network interface NamePolicy= disabled on kernel command line. Feb 9 19:19:40.914090 systemd-networkd[1477]: califae1f80f898: Link UP Feb 9 19:19:40.927924 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 19:19:40.928027 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): califae1f80f898: link becomes ready Feb 9 19:19:40.922708 systemd-networkd[1477]: califae1f80f898: Gained carrier Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.711 [INFO][5241] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--191-k8s-calico--apiserver--774dc986c8--xxppt-eth0 calico-apiserver-774dc986c8- calico-apiserver 458dfd3d-32ca-4468-996e-0a945914e15f 1110 0 2024-02-09 19:19:39 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:774dc986c8 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-25-191 calico-apiserver-774dc986c8-xxppt eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] califae1f80f898 [] []}} ContainerID="301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" Namespace="calico-apiserver" Pod="calico-apiserver-774dc986c8-xxppt" WorkloadEndpoint="ip--172--31--25--191-k8s-calico--apiserver--774dc986c8--xxppt-" Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.711 [INFO][5241] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" Namespace="calico-apiserver" Pod="calico-apiserver-774dc986c8-xxppt" WorkloadEndpoint="ip--172--31--25--191-k8s-calico--apiserver--774dc986c8--xxppt-eth0" Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.816 [INFO][5252] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" HandleID="k8s-pod-network.301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" Workload="ip--172--31--25--191-k8s-calico--apiserver--774dc986c8--xxppt-eth0" Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.836 [INFO][5252] ipam_plugin.go 268: Auto assigning IP ContainerID="301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" HandleID="k8s-pod-network.301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" Workload="ip--172--31--25--191-k8s-calico--apiserver--774dc986c8--xxppt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40004f1c30), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-25-191", "pod":"calico-apiserver-774dc986c8-xxppt", "timestamp":"2024-02-09 19:19:40.816046049 +0000 UTC"}, Hostname:"ip-172-31-25-191", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.837 [INFO][5252] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.837 [INFO][5252] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.837 [INFO][5252] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-191' Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.840 [INFO][5252] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" host="ip-172-31-25-191" Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.848 [INFO][5252] ipam.go 372: Looking up existing affinities for host host="ip-172-31-25-191" Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.855 [INFO][5252] ipam.go 489: Trying affinity for 192.168.119.0/26 host="ip-172-31-25-191" Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.860 [INFO][5252] ipam.go 155: Attempting to load block cidr=192.168.119.0/26 host="ip-172-31-25-191" Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.865 [INFO][5252] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.119.0/26 host="ip-172-31-25-191" Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.865 [INFO][5252] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.119.0/26 handle="k8s-pod-network.301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" host="ip-172-31-25-191" Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.868 [INFO][5252] ipam.go 1682: Creating new handle: k8s-pod-network.301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240 Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.875 [INFO][5252] ipam.go 1203: Writing block in order to claim IPs block=192.168.119.0/26 handle="k8s-pod-network.301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" host="ip-172-31-25-191" Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.897 [INFO][5252] ipam.go 1216: Successfully claimed IPs: [192.168.119.5/26] block=192.168.119.0/26 handle="k8s-pod-network.301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" host="ip-172-31-25-191" Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.897 [INFO][5252] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.119.5/26] handle="k8s-pod-network.301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" host="ip-172-31-25-191" Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.897 [INFO][5252] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 19:19:40.947539 env[1657]: 2024-02-09 19:19:40.897 [INFO][5252] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.119.5/26] IPv6=[] ContainerID="301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" HandleID="k8s-pod-network.301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" Workload="ip--172--31--25--191-k8s-calico--apiserver--774dc986c8--xxppt-eth0" Feb 9 19:19:40.948922 env[1657]: 2024-02-09 19:19:40.900 [INFO][5241] k8s.go 385: Populated endpoint ContainerID="301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" Namespace="calico-apiserver" Pod="calico-apiserver-774dc986c8-xxppt" WorkloadEndpoint="ip--172--31--25--191-k8s-calico--apiserver--774dc986c8--xxppt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--191-k8s-calico--apiserver--774dc986c8--xxppt-eth0", GenerateName:"calico-apiserver-774dc986c8-", Namespace:"calico-apiserver", SelfLink:"", UID:"458dfd3d-32ca-4468-996e-0a945914e15f", ResourceVersion:"1110", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 19, 19, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"774dc986c8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-191", ContainerID:"", Pod:"calico-apiserver-774dc986c8-xxppt", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.119.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"califae1f80f898", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 19:19:40.948922 env[1657]: 2024-02-09 19:19:40.901 [INFO][5241] k8s.go 386: Calico CNI using IPs: [192.168.119.5/32] ContainerID="301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" Namespace="calico-apiserver" Pod="calico-apiserver-774dc986c8-xxppt" WorkloadEndpoint="ip--172--31--25--191-k8s-calico--apiserver--774dc986c8--xxppt-eth0" Feb 9 19:19:40.948922 env[1657]: 2024-02-09 19:19:40.901 [INFO][5241] dataplane_linux.go 68: Setting the host side veth name to califae1f80f898 ContainerID="301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" Namespace="calico-apiserver" Pod="calico-apiserver-774dc986c8-xxppt" WorkloadEndpoint="ip--172--31--25--191-k8s-calico--apiserver--774dc986c8--xxppt-eth0" Feb 9 19:19:40.948922 env[1657]: 2024-02-09 19:19:40.915 [INFO][5241] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" Namespace="calico-apiserver" Pod="calico-apiserver-774dc986c8-xxppt" WorkloadEndpoint="ip--172--31--25--191-k8s-calico--apiserver--774dc986c8--xxppt-eth0" Feb 9 19:19:40.948922 env[1657]: 2024-02-09 19:19:40.916 [INFO][5241] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" Namespace="calico-apiserver" Pod="calico-apiserver-774dc986c8-xxppt" WorkloadEndpoint="ip--172--31--25--191-k8s-calico--apiserver--774dc986c8--xxppt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--191-k8s-calico--apiserver--774dc986c8--xxppt-eth0", GenerateName:"calico-apiserver-774dc986c8-", Namespace:"calico-apiserver", SelfLink:"", UID:"458dfd3d-32ca-4468-996e-0a945914e15f", ResourceVersion:"1110", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 19, 19, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"774dc986c8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-191", ContainerID:"301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240", Pod:"calico-apiserver-774dc986c8-xxppt", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.119.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"califae1f80f898", MAC:"76:6d:82:3d:8b:1f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 19:19:40.948922 env[1657]: 2024-02-09 19:19:40.944 [INFO][5241] k8s.go 491: Wrote updated endpoint to datastore ContainerID="301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240" Namespace="calico-apiserver" Pod="calico-apiserver-774dc986c8-xxppt" WorkloadEndpoint="ip--172--31--25--191-k8s-calico--apiserver--774dc986c8--xxppt-eth0" Feb 9 19:19:40.983195 env[1657]: time="2024-02-09T19:19:40.983021743Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 19:19:40.983195 env[1657]: time="2024-02-09T19:19:40.983110460Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 19:19:40.983601 env[1657]: time="2024-02-09T19:19:40.983138216Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 19:19:40.984185 env[1657]: time="2024-02-09T19:19:40.984063618Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240 pid=5285 runtime=io.containerd.runc.v2 Feb 9 19:19:41.028477 systemd[1]: Started cri-containerd-301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240.scope. Feb 9 19:19:41.056000 audit[5305]: NETFILTER_CFG table=filter:119 family=2 entries=55 op=nft_register_chain pid=5305 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 19:19:41.056000 audit[5305]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28088 a0=3 a1=ffffcdf79930 a2=0 a3=ffffa9d36fa8 items=0 ppid=3914 pid=5305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:41.056000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 19:19:41.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.071000 audit: BPF prog-id=188 op=LOAD Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=5285 pid=5294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:41.072000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330316264353665386333323933303635313030636636326238663231 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=5285 pid=5294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:41.072000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330316264353665386333323933303635313030636636326238663231 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit: BPF prog-id=189 op=LOAD Feb 9 19:19:41.072000 audit[5294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=5285 pid=5294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:41.072000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330316264353665386333323933303635313030636636326238663231 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.072000 audit: BPF prog-id=190 op=LOAD Feb 9 19:19:41.072000 audit[5294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=5285 pid=5294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:41.072000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330316264353665386333323933303635313030636636326238663231 Feb 9 19:19:41.073000 audit: BPF prog-id=190 op=UNLOAD Feb 9 19:19:41.073000 audit: BPF prog-id=189 op=UNLOAD Feb 9 19:19:41.073000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.073000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.073000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.073000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.073000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.073000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.073000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.073000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.073000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.073000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:41.073000 audit: BPF prog-id=191 op=LOAD Feb 9 19:19:41.073000 audit[5294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=5285 pid=5294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:41.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330316264353665386333323933303635313030636636326238663231 Feb 9 19:19:41.117911 env[1657]: time="2024-02-09T19:19:41.117843139Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-774dc986c8-xxppt,Uid:458dfd3d-32ca-4468-996e-0a945914e15f,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240\"" Feb 9 19:19:41.123989 env[1657]: time="2024-02-09T19:19:41.123930864Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\"" Feb 9 19:19:42.318112 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2469742454.mount: Deactivated successfully. Feb 9 19:19:42.410126 systemd-networkd[1477]: califae1f80f898: Gained IPv6LL Feb 9 19:19:42.521000 audit[5323]: NETFILTER_CFG table=filter:120 family=2 entries=22 op=nft_register_rule pid=5323 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:19:42.521000 audit[5323]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffda2cc760 a2=0 a3=ffff8944a6c0 items=0 ppid=2989 pid=5323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:42.521000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:19:42.552000 audit[5323]: NETFILTER_CFG table=nat:121 family=2 entries=104 op=nft_register_chain pid=5323 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:19:42.552000 audit[5323]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=47436 a0=3 a1=ffffda2cc760 a2=0 a3=ffff8944a6c0 items=0 ppid=2989 pid=5323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:42.552000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:19:44.235680 env[1657]: time="2024-02-09T19:19:44.235611570Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:19:44.238499 env[1657]: time="2024-02-09T19:19:44.238427319Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24494ef6c7de0e2dcf21ad9fb6c94801c53f120443e256a5e1b54eccd57058a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:19:44.241581 env[1657]: time="2024-02-09T19:19:44.241521603Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:19:44.244695 env[1657]: time="2024-02-09T19:19:44.244627263Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:5ff0bdc8d0b2e9d7819703b18867f60f9153ed01da81e2bbfa22002abec9dc26,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 19:19:44.248354 env[1657]: time="2024-02-09T19:19:44.248277837Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\" returns image reference \"sha256:24494ef6c7de0e2dcf21ad9fb6c94801c53f120443e256a5e1b54eccd57058a9\"" Feb 9 19:19:44.253229 env[1657]: time="2024-02-09T19:19:44.253171914Z" level=info msg="CreateContainer within sandbox \"301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Feb 9 19:19:44.279111 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3190488683.mount: Deactivated successfully. Feb 9 19:19:44.286367 env[1657]: time="2024-02-09T19:19:44.286300076Z" level=info msg="CreateContainer within sandbox \"301bd56e8c3293065100cf62b8f215dd8833da413751e43835f4b3561cf05240\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"f4a6865938d7bbdedebce9f60e653b231960a0fc44919631c9a237c449d8041d\"" Feb 9 19:19:44.287718 env[1657]: time="2024-02-09T19:19:44.287636472Z" level=info msg="StartContainer for \"f4a6865938d7bbdedebce9f60e653b231960a0fc44919631c9a237c449d8041d\"" Feb 9 19:19:44.346441 systemd[1]: run-containerd-runc-k8s.io-f4a6865938d7bbdedebce9f60e653b231960a0fc44919631c9a237c449d8041d-runc.3hUpBH.mount: Deactivated successfully. Feb 9 19:19:44.357313 systemd[1]: Started cri-containerd-f4a6865938d7bbdedebce9f60e653b231960a0fc44919631c9a237c449d8041d.scope. Feb 9 19:19:44.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.391000 audit: BPF prog-id=192 op=LOAD Feb 9 19:19:44.393000 audit[5333]: AVC avc: denied { bpf } for pid=5333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.393000 audit[5333]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=5285 pid=5333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:44.393000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634613638363539333864376262646564656263653966363065363533 Feb 9 19:19:44.393000 audit[5333]: AVC avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.393000 audit[5333]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=5285 pid=5333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:44.393000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634613638363539333864376262646564656263653966363065363533 Feb 9 19:19:44.394000 audit[5333]: AVC avc: denied { bpf } for pid=5333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.394000 audit[5333]: AVC avc: denied { bpf } for pid=5333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.394000 audit[5333]: AVC avc: denied { bpf } for pid=5333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.398847 kernel: kauditd_printk_skb: 98 callbacks suppressed Feb 9 19:19:44.398979 kernel: audit: type=1400 audit(1707506384.394:1544): avc: denied { bpf } for pid=5333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.414823 kernel: audit: type=1400 audit(1707506384.394:1544): avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.394000 audit[5333]: AVC avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.394000 audit[5333]: AVC avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.423401 kernel: audit: type=1400 audit(1707506384.394:1544): avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.394000 audit[5333]: AVC avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.431766 kernel: audit: type=1400 audit(1707506384.394:1544): avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.442452 kernel: audit: type=1400 audit(1707506384.394:1544): avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.394000 audit[5333]: AVC avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.394000 audit[5333]: AVC avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.450905 kernel: audit: type=1400 audit(1707506384.394:1544): avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.394000 audit[5333]: AVC avc: denied { bpf } for pid=5333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.458448 kernel: audit: type=1400 audit(1707506384.394:1544): avc: denied { bpf } for pid=5333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.394000 audit[5333]: AVC avc: denied { bpf } for pid=5333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.466128 kernel: audit: type=1400 audit(1707506384.394:1544): avc: denied { bpf } for pid=5333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.394000 audit: BPF prog-id=193 op=LOAD Feb 9 19:19:44.469050 kernel: audit: type=1334 audit(1707506384.394:1544): prog-id=193 op=LOAD Feb 9 19:19:44.394000 audit[5333]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=5285 pid=5333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:44.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634613638363539333864376262646564656263653966363065363533 Feb 9 19:19:44.398000 audit[5333]: AVC avc: denied { bpf } for pid=5333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.398000 audit[5333]: AVC avc: denied { bpf } for pid=5333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.398000 audit[5333]: AVC avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.398000 audit[5333]: AVC avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.482324 kernel: audit: type=1300 audit(1707506384.394:1544): arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=5285 pid=5333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:44.398000 audit[5333]: AVC avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.398000 audit[5333]: AVC avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.398000 audit[5333]: AVC avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.398000 audit[5333]: AVC avc: denied { bpf } for pid=5333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.398000 audit[5333]: AVC avc: denied { bpf } for pid=5333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.398000 audit: BPF prog-id=194 op=LOAD Feb 9 19:19:44.398000 audit[5333]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=5285 pid=5333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:44.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634613638363539333864376262646564656263653966363065363533 Feb 9 19:19:44.404000 audit: BPF prog-id=194 op=UNLOAD Feb 9 19:19:44.404000 audit: BPF prog-id=193 op=UNLOAD Feb 9 19:19:44.404000 audit[5333]: AVC avc: denied { bpf } for pid=5333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.404000 audit[5333]: AVC avc: denied { bpf } for pid=5333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.404000 audit[5333]: AVC avc: denied { bpf } for pid=5333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.404000 audit[5333]: AVC avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.404000 audit[5333]: AVC avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.404000 audit[5333]: AVC avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.404000 audit[5333]: AVC avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.404000 audit[5333]: AVC avc: denied { perfmon } for pid=5333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.404000 audit[5333]: AVC avc: denied { bpf } for pid=5333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.404000 audit[5333]: AVC avc: denied { bpf } for pid=5333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:19:44.404000 audit: BPF prog-id=195 op=LOAD Feb 9 19:19:44.404000 audit[5333]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=5285 pid=5333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:44.404000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634613638363539333864376262646564656263653966363065363533 Feb 9 19:19:44.541269 env[1657]: time="2024-02-09T19:19:44.541205751Z" level=info msg="StartContainer for \"f4a6865938d7bbdedebce9f60e653b231960a0fc44919631c9a237c449d8041d\" returns successfully" Feb 9 19:19:44.542000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:19:44.542000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400239aee0 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:19:44.542000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:19:44.542000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:19:44.542000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001cf9ad0 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:19:44.542000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:19:45.382000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:19:45.382000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:19:45.382000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=40146a8d80 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:19:45.382000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:19:45.382000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=40119f55a0 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:19:45.382000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:19:45.384000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520992 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:19:45.384000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=40146a8e40 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:19:45.384000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:19:45.386000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520998 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:19:45.386000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=40144241e0 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:19:45.386000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:19:45.388000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:19:45.388000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=40146a90b0 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:19:45.388000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:19:45.389000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:19:45.389000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=40119f5880 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:19:45.389000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:19:45.469024 kubelet[2857]: I0209 19:19:45.468955 2857 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-774dc986c8-xxppt" podStartSLOduration=3.340473866 podCreationTimestamp="2024-02-09 19:19:39 +0000 UTC" firstStartedPulling="2024-02-09 19:19:41.120453299 +0000 UTC m=+111.725657253" lastFinishedPulling="2024-02-09 19:19:44.248849872 +0000 UTC m=+114.854053814" observedRunningTime="2024-02-09 19:19:45.468280692 +0000 UTC m=+116.073484646" watchObservedRunningTime="2024-02-09 19:19:45.468870427 +0000 UTC m=+116.074074393" Feb 9 19:19:45.535000 audit[5362]: NETFILTER_CFG table=filter:122 family=2 entries=10 op=nft_register_rule pid=5362 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:19:45.535000 audit[5362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=fffffa336f60 a2=0 a3=ffffa302f6c0 items=0 ppid=2989 pid=5362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:45.535000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:19:45.544000 audit[5362]: NETFILTER_CFG table=nat:123 family=2 entries=44 op=nft_register_rule pid=5362 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:19:45.544000 audit[5362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14220 a0=3 a1=fffffa336f60 a2=0 a3=ffffa302f6c0 items=0 ppid=2989 pid=5362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:45.544000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:19:45.824995 systemd[1]: Started sshd@23-172.31.25.191:22-147.75.109.163:42626.service. Feb 9 19:19:45.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.191:22-147.75.109.163:42626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:45.985000 audit[5343]: AVC avc: denied { watch } for pid=5343 comm="apiserver" path="/calico-apiserver-certs/..2024_02_09_19_19_40.2909506058/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c75,c135 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c75,c135 tclass=file permissive=0 Feb 9 19:19:45.985000 audit[5343]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000c4d820 a2=fc6 a3=0 items=0 ppid=5285 pid=5343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c75,c135 key=(null) Feb 9 19:19:45.985000 audit: PROCTITLE proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C Feb 9 19:19:46.009918 sshd[5364]: Accepted publickey for core from 147.75.109.163 port 42626 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:19:46.008000 audit[5364]: USER_ACCT pid=5364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:46.011000 audit[5364]: CRED_ACQ pid=5364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:46.011000 audit[5364]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd7d8c030 a2=3 a3=1 items=0 ppid=1 pid=5364 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:46.011000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:46.014132 sshd[5364]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:19:46.024835 systemd[1]: Started session-24.scope. Feb 9 19:19:46.028727 systemd-logind[1646]: New session 24 of user core. Feb 9 19:19:46.040000 audit[5364]: USER_START pid=5364 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:46.042000 audit[5366]: CRED_ACQ pid=5366 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:46.307073 sshd[5364]: pam_unix(sshd:session): session closed for user core Feb 9 19:19:46.309000 audit[5364]: USER_END pid=5364 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:46.310000 audit[5364]: CRED_DISP pid=5364 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:46.313000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.191:22-147.75.109.163:42626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:46.314143 systemd-logind[1646]: Session 24 logged out. Waiting for processes to exit. Feb 9 19:19:46.314739 systemd[1]: sshd@23-172.31.25.191:22-147.75.109.163:42626.service: Deactivated successfully. Feb 9 19:19:46.316177 systemd[1]: session-24.scope: Deactivated successfully. Feb 9 19:19:46.318929 systemd-logind[1646]: Removed session 24. Feb 9 19:19:46.507000 audit[5378]: NETFILTER_CFG table=filter:124 family=2 entries=10 op=nft_register_rule pid=5378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:19:46.507000 audit[5378]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffe9c9d140 a2=0 a3=ffffb695b6c0 items=0 ppid=2989 pid=5378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:46.507000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:19:46.511000 audit[5378]: NETFILTER_CFG table=nat:125 family=2 entries=44 op=nft_register_rule pid=5378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:19:46.511000 audit[5378]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14220 a0=3 a1=ffffe9c9d140 a2=0 a3=ffffb695b6c0 items=0 ppid=2989 pid=5378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:46.511000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:19:50.191000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:19:50.194578 kernel: kauditd_printk_skb: 78 callbacks suppressed Feb 9 19:19:50.194708 kernel: audit: type=1400 audit(1707506390.191:1571): avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:19:50.191000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026be6e0 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:19:50.216343 kernel: audit: type=1300 audit(1707506390.191:1571): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026be6e0 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:19:50.191000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:19:50.230742 kernel: audit: type=1327 audit(1707506390.191:1571): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:19:50.198000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:19:50.240611 kernel: audit: type=1400 audit(1707506390.198:1572): avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:19:50.240760 kernel: audit: type=1300 audit(1707506390.198:1572): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026be700 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:19:50.198000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026be700 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:19:50.198000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:19:50.263399 kernel: audit: type=1327 audit(1707506390.198:1572): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:19:50.263561 kernel: audit: type=1400 audit(1707506390.204:1573): avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:19:50.204000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:19:50.204000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026be720 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:19:50.285258 kernel: audit: type=1300 audit(1707506390.204:1573): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026be720 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:19:50.204000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:19:50.295728 kernel: audit: type=1327 audit(1707506390.204:1573): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:19:50.295911 kernel: audit: type=1400 audit(1707506390.209:1574): avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:19:50.209000 audit[2549]: AVC avc: denied { watch } for pid=2549 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:19:50.209000 audit[2549]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026be840 a2=fc6 a3=0 items=0 ppid=2375 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:19:50.209000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:19:51.336081 systemd[1]: Started sshd@24-172.31.25.191:22-147.75.109.163:42634.service. Feb 9 19:19:51.335000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.191:22-147.75.109.163:42634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:51.512000 audit[5385]: USER_ACCT pid=5385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:51.514370 sshd[5385]: Accepted publickey for core from 147.75.109.163 port 42634 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:19:51.514000 audit[5385]: CRED_ACQ pid=5385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:51.515000 audit[5385]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe2c49fb0 a2=3 a3=1 items=0 ppid=1 pid=5385 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:51.515000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:51.517457 sshd[5385]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:19:51.525858 systemd-logind[1646]: New session 25 of user core. Feb 9 19:19:51.526863 systemd[1]: Started session-25.scope. Feb 9 19:19:51.539000 audit[5385]: USER_START pid=5385 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:51.542000 audit[5387]: CRED_ACQ pid=5387 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:51.797741 sshd[5385]: pam_unix(sshd:session): session closed for user core Feb 9 19:19:51.798000 audit[5385]: USER_END pid=5385 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:51.799000 audit[5385]: CRED_DISP pid=5385 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:51.803256 systemd[1]: session-25.scope: Deactivated successfully. Feb 9 19:19:51.804659 systemd-logind[1646]: Session 25 logged out. Waiting for processes to exit. Feb 9 19:19:51.805053 systemd[1]: sshd@24-172.31.25.191:22-147.75.109.163:42634.service: Deactivated successfully. Feb 9 19:19:51.804000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.191:22-147.75.109.163:42634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:51.808216 systemd-logind[1646]: Removed session 25. Feb 9 19:19:53.534592 systemd[1]: run-containerd-runc-k8s.io-970c8c0a97167464a90c8dbdcbe46219ef3bd2a006d8b4d0c1201467ba2fcddf-runc.eB2E8D.mount: Deactivated successfully. Feb 9 19:19:55.544736 systemd[1]: run-containerd-runc-k8s.io-771b56e0adaa36bedb6ad6478c9106d7a95f55277d01aba82eb5a646f12ec278-runc.VEmfVb.mount: Deactivated successfully. Feb 9 19:19:56.828432 systemd[1]: Started sshd@25-172.31.25.191:22-147.75.109.163:60348.service. Feb 9 19:19:56.832051 kernel: kauditd_printk_skb: 13 callbacks suppressed Feb 9 19:19:56.832126 kernel: audit: type=1130 audit(1707506396.828:1584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.191:22-147.75.109.163:60348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:56.828000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.191:22-147.75.109.163:60348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:57.015000 audit[5438]: USER_ACCT pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:57.023995 sshd[5438]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:19:57.025994 sshd[5438]: Accepted publickey for core from 147.75.109.163 port 60348 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:19:57.021000 audit[5438]: CRED_ACQ pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:57.037124 kernel: audit: type=1101 audit(1707506397.015:1585): pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:57.037226 kernel: audit: type=1103 audit(1707506397.021:1586): pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:57.043105 kernel: audit: type=1006 audit(1707506397.021:1587): pid=5438 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Feb 9 19:19:57.043871 kernel: audit: type=1300 audit(1707506397.021:1587): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0a98840 a2=3 a3=1 items=0 ppid=1 pid=5438 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:57.021000 audit[5438]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0a98840 a2=3 a3=1 items=0 ppid=1 pid=5438 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:19:57.021000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:57.056643 kernel: audit: type=1327 audit(1707506397.021:1587): proctitle=737368643A20636F7265205B707269765D Feb 9 19:19:57.061156 systemd-logind[1646]: New session 26 of user core. Feb 9 19:19:57.061438 systemd[1]: Started session-26.scope. Feb 9 19:19:57.073000 audit[5438]: USER_START pid=5438 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:57.076000 audit[5440]: CRED_ACQ pid=5440 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:57.094851 kernel: audit: type=1105 audit(1707506397.073:1588): pid=5438 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:57.095007 kernel: audit: type=1103 audit(1707506397.076:1589): pid=5440 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:57.315608 sshd[5438]: pam_unix(sshd:session): session closed for user core Feb 9 19:19:57.317000 audit[5438]: USER_END pid=5438 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:57.320642 systemd[1]: session-26.scope: Deactivated successfully. Feb 9 19:19:57.321963 systemd[1]: sshd@25-172.31.25.191:22-147.75.109.163:60348.service: Deactivated successfully. Feb 9 19:19:57.317000 audit[5438]: CRED_DISP pid=5438 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:57.330920 systemd-logind[1646]: Session 26 logged out. Waiting for processes to exit. Feb 9 19:19:57.331586 kernel: audit: type=1106 audit(1707506397.317:1590): pid=5438 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:57.317000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.191:22-147.75.109.163:60348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:19:57.341450 kernel: audit: type=1104 audit(1707506397.317:1591): pid=5438 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:19:57.341797 systemd-logind[1646]: Removed session 26. Feb 9 19:20:02.346329 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 19:20:02.346499 kernel: audit: type=1130 audit(1707506402.343:1593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.191:22-147.75.109.163:60356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:20:02.343000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.191:22-147.75.109.163:60356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:20:02.343891 systemd[1]: Started sshd@26-172.31.25.191:22-147.75.109.163:60356.service. Feb 9 19:20:02.521000 audit[5458]: USER_ACCT pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:02.521761 sshd[5458]: Accepted publickey for core from 147.75.109.163 port 60356 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:20:02.524946 sshd[5458]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:20:02.523000 audit[5458]: CRED_ACQ pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:02.540674 kernel: audit: type=1101 audit(1707506402.521:1594): pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:02.540860 kernel: audit: type=1103 audit(1707506402.523:1595): pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:02.546704 kernel: audit: type=1006 audit(1707506402.523:1596): pid=5458 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Feb 9 19:20:02.523000 audit[5458]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb0cf290 a2=3 a3=1 items=0 ppid=1 pid=5458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:02.557032 kernel: audit: type=1300 audit(1707506402.523:1596): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb0cf290 a2=3 a3=1 items=0 ppid=1 pid=5458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:02.523000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:20:02.561444 kernel: audit: type=1327 audit(1707506402.523:1596): proctitle=737368643A20636F7265205B707269765D Feb 9 19:20:02.565613 systemd-logind[1646]: New session 27 of user core. Feb 9 19:20:02.566561 systemd[1]: Started session-27.scope. Feb 9 19:20:02.576000 audit[5458]: USER_START pid=5458 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:02.588000 audit[5461]: CRED_ACQ pid=5461 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:02.597786 kernel: audit: type=1105 audit(1707506402.576:1597): pid=5458 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:02.597962 kernel: audit: type=1103 audit(1707506402.588:1598): pid=5461 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:02.823658 sshd[5458]: pam_unix(sshd:session): session closed for user core Feb 9 19:20:02.825000 audit[5458]: USER_END pid=5458 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:02.827666 systemd[1]: session-27.scope: Deactivated successfully. Feb 9 19:20:02.828785 systemd[1]: sshd@26-172.31.25.191:22-147.75.109.163:60356.service: Deactivated successfully. Feb 9 19:20:02.831885 systemd-logind[1646]: Session 27 logged out. Waiting for processes to exit. Feb 9 19:20:02.833254 systemd-logind[1646]: Removed session 27. Feb 9 19:20:02.825000 audit[5458]: CRED_DISP pid=5458 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:02.848435 kernel: audit: type=1106 audit(1707506402.825:1599): pid=5458 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:02.848553 kernel: audit: type=1104 audit(1707506402.825:1600): pid=5458 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:02.825000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.191:22-147.75.109.163:60356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:20:07.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.25.191:22-147.75.109.163:43866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:20:07.853972 systemd[1]: Started sshd@27-172.31.25.191:22-147.75.109.163:43866.service. Feb 9 19:20:07.857170 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 19:20:07.857272 kernel: audit: type=1130 audit(1707506407.854:1602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.25.191:22-147.75.109.163:43866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:20:08.036000 audit[5475]: USER_ACCT pid=5475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:08.036960 sshd[5475]: Accepted publickey for core from 147.75.109.163 port 43866 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:20:08.040094 sshd[5475]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:20:08.039000 audit[5475]: CRED_ACQ pid=5475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:08.056141 kernel: audit: type=1101 audit(1707506408.036:1603): pid=5475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:08.056278 kernel: audit: type=1103 audit(1707506408.039:1604): pid=5475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:08.062783 kernel: audit: type=1006 audit(1707506408.039:1605): pid=5475 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Feb 9 19:20:08.039000 audit[5475]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd236100 a2=3 a3=1 items=0 ppid=1 pid=5475 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:08.073547 kernel: audit: type=1300 audit(1707506408.039:1605): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd236100 a2=3 a3=1 items=0 ppid=1 pid=5475 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:08.039000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:20:08.077443 kernel: audit: type=1327 audit(1707506408.039:1605): proctitle=737368643A20636F7265205B707269765D Feb 9 19:20:08.083181 systemd-logind[1646]: New session 28 of user core. Feb 9 19:20:08.085951 systemd[1]: Started session-28.scope. Feb 9 19:20:08.107000 audit[5475]: USER_START pid=5475 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:08.119000 audit[5477]: CRED_ACQ pid=5477 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:08.132122 kernel: audit: type=1105 audit(1707506408.107:1606): pid=5475 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:08.132218 kernel: audit: type=1103 audit(1707506408.119:1607): pid=5477 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:08.375009 sshd[5475]: pam_unix(sshd:session): session closed for user core Feb 9 19:20:08.376000 audit[5475]: USER_END pid=5475 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:08.389617 systemd[1]: sshd@27-172.31.25.191:22-147.75.109.163:43866.service: Deactivated successfully. Feb 9 19:20:08.390980 systemd[1]: session-28.scope: Deactivated successfully. Feb 9 19:20:08.376000 audit[5475]: CRED_DISP pid=5475 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:08.402913 kernel: audit: type=1106 audit(1707506408.376:1608): pid=5475 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:08.403083 kernel: audit: type=1104 audit(1707506408.376:1609): pid=5475 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:08.393212 systemd-logind[1646]: Session 28 logged out. Waiting for processes to exit. Feb 9 19:20:08.395074 systemd-logind[1646]: Removed session 28. Feb 9 19:20:08.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.25.191:22-147.75.109.163:43866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:20:10.265000 audit[5487]: NETFILTER_CFG table=filter:126 family=2 entries=9 op=nft_register_rule pid=5487 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:20:10.265000 audit[5487]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffe65b1d60 a2=0 a3=ffff82df36c0 items=0 ppid=2989 pid=5487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:10.265000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:20:10.270000 audit[5487]: NETFILTER_CFG table=nat:127 family=2 entries=51 op=nft_register_chain pid=5487 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:20:10.270000 audit[5487]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=17716 a0=3 a1=ffffe65b1d60 a2=0 a3=ffff82df36c0 items=0 ppid=2989 pid=5487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:10.270000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:20:10.575858 systemd[1]: run-containerd-runc-k8s.io-f4a6865938d7bbdedebce9f60e653b231960a0fc44919631c9a237c449d8041d-runc.LO0A40.mount: Deactivated successfully. Feb 9 19:20:10.678000 audit[5508]: NETFILTER_CFG table=filter:128 family=2 entries=8 op=nft_register_rule pid=5508 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:20:10.678000 audit[5508]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=fffff02928c0 a2=0 a3=ffff97bc96c0 items=0 ppid=2989 pid=5508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:10.678000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:20:10.684000 audit[5508]: NETFILTER_CFG table=nat:129 family=2 entries=58 op=nft_register_chain pid=5508 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 19:20:10.684000 audit[5508]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19604 a0=3 a1=fffff02928c0 a2=0 a3=ffff97bc96c0 items=0 ppid=2989 pid=5508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:10.684000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 19:20:13.414614 kernel: kauditd_printk_skb: 13 callbacks suppressed Feb 9 19:20:13.414773 kernel: audit: type=1130 audit(1707506413.403:1615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.25.191:22-147.75.109.163:43874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:20:13.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.25.191:22-147.75.109.163:43874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:20:13.403095 systemd[1]: Started sshd@28-172.31.25.191:22-147.75.109.163:43874.service. Feb 9 19:20:13.588000 audit[5513]: USER_ACCT pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:13.591318 sshd[5513]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 19:20:13.597978 sshd[5513]: Accepted publickey for core from 147.75.109.163 port 43874 ssh2: RSA SHA256:vbbYXSA+vx4OxGE8RCTI42TSNHgOaZKYEuMHy2EWP78 Feb 9 19:20:13.590000 audit[5513]: CRED_ACQ pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:13.609208 kernel: audit: type=1101 audit(1707506413.588:1616): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:13.609380 kernel: audit: type=1103 audit(1707506413.590:1617): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:13.616473 kernel: audit: type=1006 audit(1707506413.590:1618): pid=5513 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Feb 9 19:20:13.590000 audit[5513]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd604ca90 a2=3 a3=1 items=0 ppid=1 pid=5513 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:13.627666 kernel: audit: type=1300 audit(1707506413.590:1618): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd604ca90 a2=3 a3=1 items=0 ppid=1 pid=5513 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:13.629204 systemd-logind[1646]: New session 29 of user core. Feb 9 19:20:13.630885 systemd[1]: Started session-29.scope. Feb 9 19:20:13.590000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 19:20:13.638802 kernel: audit: type=1327 audit(1707506413.590:1618): proctitle=737368643A20636F7265205B707269765D Feb 9 19:20:13.645000 audit[5513]: USER_START pid=5513 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:13.648000 audit[5516]: CRED_ACQ pid=5516 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:13.668143 kernel: audit: type=1105 audit(1707506413.645:1619): pid=5513 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:13.668363 kernel: audit: type=1103 audit(1707506413.648:1620): pid=5516 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:13.903658 sshd[5513]: pam_unix(sshd:session): session closed for user core Feb 9 19:20:13.905000 audit[5513]: USER_END pid=5513 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:13.917942 systemd[1]: sshd@28-172.31.25.191:22-147.75.109.163:43874.service: Deactivated successfully. Feb 9 19:20:13.919995 systemd[1]: session-29.scope: Deactivated successfully. Feb 9 19:20:13.905000 audit[5513]: CRED_DISP pid=5513 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:13.930003 kernel: audit: type=1106 audit(1707506413.905:1621): pid=5513 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:13.930111 kernel: audit: type=1104 audit(1707506413.905:1622): pid=5513 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 19:20:13.930670 systemd-logind[1646]: Session 29 logged out. Waiting for processes to exit. Feb 9 19:20:13.918000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.25.191:22-147.75.109.163:43874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 19:20:13.932977 systemd-logind[1646]: Removed session 29. Feb 9 19:20:25.547154 systemd[1]: run-containerd-runc-k8s.io-771b56e0adaa36bedb6ad6478c9106d7a95f55277d01aba82eb5a646f12ec278-runc.MbuLsm.mount: Deactivated successfully. Feb 9 19:20:28.699638 systemd[1]: cri-containerd-c825b98bfddad1c9190fc83cc76af6aa531256a2451271a92aaacf797dfaef99.scope: Deactivated successfully. Feb 9 19:20:28.700200 systemd[1]: cri-containerd-c825b98bfddad1c9190fc83cc76af6aa531256a2451271a92aaacf797dfaef99.scope: Consumed 5.332s CPU time. Feb 9 19:20:28.703000 audit: BPF prog-id=89 op=UNLOAD Feb 9 19:20:28.706618 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 19:20:28.706856 kernel: audit: type=1334 audit(1707506428.703:1624): prog-id=89 op=UNLOAD Feb 9 19:20:28.703000 audit: BPF prog-id=102 op=UNLOAD Feb 9 19:20:28.712083 kernel: audit: type=1334 audit(1707506428.703:1625): prog-id=102 op=UNLOAD Feb 9 19:20:28.746735 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c825b98bfddad1c9190fc83cc76af6aa531256a2451271a92aaacf797dfaef99-rootfs.mount: Deactivated successfully. Feb 9 19:20:28.750075 env[1657]: time="2024-02-09T19:20:28.750007434Z" level=info msg="shim disconnected" id=c825b98bfddad1c9190fc83cc76af6aa531256a2451271a92aaacf797dfaef99 Feb 9 19:20:28.750821 env[1657]: time="2024-02-09T19:20:28.750076231Z" level=warning msg="cleaning up after shim disconnected" id=c825b98bfddad1c9190fc83cc76af6aa531256a2451271a92aaacf797dfaef99 namespace=k8s.io Feb 9 19:20:28.750821 env[1657]: time="2024-02-09T19:20:28.750101072Z" level=info msg="cleaning up dead shim" Feb 9 19:20:28.766042 env[1657]: time="2024-02-09T19:20:28.765964884Z" level=warning msg="cleanup warnings time=\"2024-02-09T19:20:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5591 runtime=io.containerd.runc.v2\n" Feb 9 19:20:29.174000 audit: BPF prog-id=126 op=UNLOAD Feb 9 19:20:29.174991 systemd[1]: cri-containerd-811f9e0eb34618fc70c994820e15c4eb7a10e030d594d08715b84d332367f673.scope: Deactivated successfully. Feb 9 19:20:29.175594 systemd[1]: cri-containerd-811f9e0eb34618fc70c994820e15c4eb7a10e030d594d08715b84d332367f673.scope: Consumed 10.419s CPU time. Feb 9 19:20:29.178417 kernel: audit: type=1334 audit(1707506429.174:1626): prog-id=126 op=UNLOAD Feb 9 19:20:29.179000 audit: BPF prog-id=129 op=UNLOAD Feb 9 19:20:29.183454 kernel: audit: type=1334 audit(1707506429.179:1627): prog-id=129 op=UNLOAD Feb 9 19:20:29.218038 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-811f9e0eb34618fc70c994820e15c4eb7a10e030d594d08715b84d332367f673-rootfs.mount: Deactivated successfully. Feb 9 19:20:29.220568 env[1657]: time="2024-02-09T19:20:29.220499960Z" level=info msg="shim disconnected" id=811f9e0eb34618fc70c994820e15c4eb7a10e030d594d08715b84d332367f673 Feb 9 19:20:29.220800 env[1657]: time="2024-02-09T19:20:29.220569537Z" level=warning msg="cleaning up after shim disconnected" id=811f9e0eb34618fc70c994820e15c4eb7a10e030d594d08715b84d332367f673 namespace=k8s.io Feb 9 19:20:29.220800 env[1657]: time="2024-02-09T19:20:29.220592530Z" level=info msg="cleaning up dead shim" Feb 9 19:20:29.234817 env[1657]: time="2024-02-09T19:20:29.234730039Z" level=warning msg="cleanup warnings time=\"2024-02-09T19:20:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5617 runtime=io.containerd.runc.v2\n" Feb 9 19:20:29.569173 kubelet[2857]: I0209 19:20:29.569120 2857 scope.go:115] "RemoveContainer" containerID="c825b98bfddad1c9190fc83cc76af6aa531256a2451271a92aaacf797dfaef99" Feb 9 19:20:29.575892 env[1657]: time="2024-02-09T19:20:29.575831354Z" level=info msg="CreateContainer within sandbox \"00bd928c4063b6acdd3be8d34245bafea5ed4200fc8db0ce3bbc280764e7256f\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Feb 9 19:20:29.577258 kubelet[2857]: I0209 19:20:29.577212 2857 scope.go:115] "RemoveContainer" containerID="811f9e0eb34618fc70c994820e15c4eb7a10e030d594d08715b84d332367f673" Feb 9 19:20:29.582128 env[1657]: time="2024-02-09T19:20:29.582068938Z" level=info msg="CreateContainer within sandbox \"b142c6b4926bb6a46b7dca0c117d73929147310251e9e54c4f9f328d68804c3c\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Feb 9 19:20:29.609316 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1332023632.mount: Deactivated successfully. Feb 9 19:20:29.619123 env[1657]: time="2024-02-09T19:20:29.618822725Z" level=info msg="CreateContainer within sandbox \"b142c6b4926bb6a46b7dca0c117d73929147310251e9e54c4f9f328d68804c3c\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"0d3c00b546d3d1caf17fe9df9a70a869353c2c4888dd87723f84c6ab95f0da11\"" Feb 9 19:20:29.620426 env[1657]: time="2024-02-09T19:20:29.620380630Z" level=info msg="StartContainer for \"0d3c00b546d3d1caf17fe9df9a70a869353c2c4888dd87723f84c6ab95f0da11\"" Feb 9 19:20:29.625801 env[1657]: time="2024-02-09T19:20:29.625720405Z" level=info msg="CreateContainer within sandbox \"00bd928c4063b6acdd3be8d34245bafea5ed4200fc8db0ce3bbc280764e7256f\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"aef92247f45822056dbd01fe0b8f0cb30cefae83181b1203133ce1f5db941ddf\"" Feb 9 19:20:29.626923 env[1657]: time="2024-02-09T19:20:29.626863786Z" level=info msg="StartContainer for \"aef92247f45822056dbd01fe0b8f0cb30cefae83181b1203133ce1f5db941ddf\"" Feb 9 19:20:29.664144 systemd[1]: Started cri-containerd-aef92247f45822056dbd01fe0b8f0cb30cefae83181b1203133ce1f5db941ddf.scope. Feb 9 19:20:29.686034 systemd[1]: Started cri-containerd-0d3c00b546d3d1caf17fe9df9a70a869353c2c4888dd87723f84c6ab95f0da11.scope. Feb 9 19:20:29.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.727919 kernel: audit: type=1400 audit(1707506429.709:1628): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.728075 kernel: audit: type=1400 audit(1707506429.710:1629): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.735948 kernel: audit: type=1400 audit(1707506429.710:1630): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.762397 kernel: audit: type=1400 audit(1707506429.710:1631): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.762528 kernel: audit: type=1400 audit(1707506429.710:1632): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.770316 kernel: audit: type=1400 audit(1707506429.710:1633): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.717000 audit: BPF prog-id=196 op=LOAD Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { bpf } for pid=5651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2375 pid=5651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:29.718000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165663932323437663435383232303536646264303166653062386630 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { perfmon } for pid=5651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2375 pid=5651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:29.718000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165663932323437663435383232303536646264303166653062386630 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { bpf } for pid=5651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { bpf } for pid=5651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { bpf } for pid=5651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { perfmon } for pid=5651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { perfmon } for pid=5651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { perfmon } for pid=5651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { perfmon } for pid=5651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { perfmon } for pid=5651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { bpf } for pid=5651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { bpf } for pid=5651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit: BPF prog-id=197 op=LOAD Feb 9 19:20:29.718000 audit[5651]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2375 pid=5651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:29.718000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165663932323437663435383232303536646264303166653062386630 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { bpf } for pid=5651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { bpf } for pid=5651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { perfmon } for pid=5651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { perfmon } for pid=5651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { perfmon } for pid=5651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { perfmon } for pid=5651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { perfmon } for pid=5651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { bpf } for pid=5651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { bpf } for pid=5651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit: BPF prog-id=198 op=LOAD Feb 9 19:20:29.718000 audit[5651]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2375 pid=5651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:29.718000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165663932323437663435383232303536646264303166653062386630 Feb 9 19:20:29.718000 audit: BPF prog-id=198 op=UNLOAD Feb 9 19:20:29.718000 audit: BPF prog-id=197 op=UNLOAD Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { bpf } for pid=5651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { bpf } for pid=5651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { bpf } for pid=5651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { perfmon } for pid=5651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { perfmon } for pid=5651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { perfmon } for pid=5651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { perfmon } for pid=5651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { perfmon } for pid=5651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { bpf } for pid=5651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit[5651]: AVC avc: denied { bpf } for pid=5651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.718000 audit: BPF prog-id=199 op=LOAD Feb 9 19:20:29.718000 audit[5651]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2375 pid=5651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:29.718000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165663932323437663435383232303536646264303166653062386630 Feb 9 19:20:29.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.811000 audit: BPF prog-id=200 op=LOAD Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { bpf } for pid=5650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3043 pid=5650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:29.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064336330306235343664336431636166313766653964663961373061 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { perfmon } for pid=5650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3043 pid=5650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:29.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064336330306235343664336431636166313766653964663961373061 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { bpf } for pid=5650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { bpf } for pid=5650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { bpf } for pid=5650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { perfmon } for pid=5650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { perfmon } for pid=5650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { perfmon } for pid=5650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { perfmon } for pid=5650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { perfmon } for pid=5650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { bpf } for pid=5650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { bpf } for pid=5650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit: BPF prog-id=201 op=LOAD Feb 9 19:20:29.812000 audit[5650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3043 pid=5650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:29.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064336330306235343664336431636166313766653964663961373061 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { bpf } for pid=5650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { bpf } for pid=5650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { perfmon } for pid=5650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { perfmon } for pid=5650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { perfmon } for pid=5650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { perfmon } for pid=5650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { perfmon } for pid=5650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { bpf } for pid=5650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit[5650]: AVC avc: denied { bpf } for pid=5650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.812000 audit: BPF prog-id=202 op=LOAD Feb 9 19:20:29.812000 audit[5650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3043 pid=5650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:29.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064336330306235343664336431636166313766653964663961373061 Feb 9 19:20:29.812000 audit: BPF prog-id=202 op=UNLOAD Feb 9 19:20:29.813000 audit: BPF prog-id=201 op=UNLOAD Feb 9 19:20:29.813000 audit[5650]: AVC avc: denied { bpf } for pid=5650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.813000 audit[5650]: AVC avc: denied { bpf } for pid=5650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.813000 audit[5650]: AVC avc: denied { bpf } for pid=5650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.813000 audit[5650]: AVC avc: denied { perfmon } for pid=5650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.813000 audit[5650]: AVC avc: denied { perfmon } for pid=5650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.813000 audit[5650]: AVC avc: denied { perfmon } for pid=5650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.813000 audit[5650]: AVC avc: denied { perfmon } for pid=5650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.813000 audit[5650]: AVC avc: denied { perfmon } for pid=5650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.813000 audit[5650]: AVC avc: denied { bpf } for pid=5650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.813000 audit[5650]: AVC avc: denied { bpf } for pid=5650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:29.813000 audit: BPF prog-id=203 op=LOAD Feb 9 19:20:29.813000 audit[5650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3043 pid=5650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:29.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064336330306235343664336431636166313766653964663961373061 Feb 9 19:20:29.843104 env[1657]: time="2024-02-09T19:20:29.843015659Z" level=info msg="StartContainer for \"aef92247f45822056dbd01fe0b8f0cb30cefae83181b1203133ce1f5db941ddf\" returns successfully" Feb 9 19:20:29.857270 env[1657]: time="2024-02-09T19:20:29.857193261Z" level=info msg="StartContainer for \"0d3c00b546d3d1caf17fe9df9a70a869353c2c4888dd87723f84c6ab95f0da11\" returns successfully" Feb 9 19:20:31.881372 kubelet[2857]: E0209 19:20:31.881330 2857 controller.go:193] "Failed to update lease" err="Put \"https://172.31.25.191:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-191?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Feb 9 19:20:32.612000 audit[5670]: AVC avc: denied { watch } for pid=5670 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:20:32.612000 audit[5670]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000ffe000 a2=fc6 a3=0 items=0 ppid=2375 pid=5670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:20:32.612000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:20:32.613000 audit[5670]: AVC avc: denied { watch } for pid=5670 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:20:32.613000 audit[5670]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000051920 a2=fc6 a3=0 items=0 ppid=2375 pid=5670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c84,c928 key=(null) Feb 9 19:20:32.613000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 19:20:34.202548 systemd[1]: cri-containerd-728453a0ca2c392ed49207008653eb9d9b559be9444266f8184a6e2a02549de5.scope: Deactivated successfully. Feb 9 19:20:34.203087 systemd[1]: cri-containerd-728453a0ca2c392ed49207008653eb9d9b559be9444266f8184a6e2a02549de5.scope: Consumed 3.493s CPU time. Feb 9 19:20:34.210323 kernel: kauditd_printk_skb: 114 callbacks suppressed Feb 9 19:20:34.210474 kernel: audit: type=1334 audit(1707506434.206:1666): prog-id=85 op=UNLOAD Feb 9 19:20:34.206000 audit: BPF prog-id=85 op=UNLOAD Feb 9 19:20:34.206000 audit: BPF prog-id=110 op=UNLOAD Feb 9 19:20:34.214839 kernel: audit: type=1334 audit(1707506434.206:1667): prog-id=110 op=UNLOAD Feb 9 19:20:34.250577 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-728453a0ca2c392ed49207008653eb9d9b559be9444266f8184a6e2a02549de5-rootfs.mount: Deactivated successfully. Feb 9 19:20:34.252963 env[1657]: time="2024-02-09T19:20:34.252902140Z" level=info msg="shim disconnected" id=728453a0ca2c392ed49207008653eb9d9b559be9444266f8184a6e2a02549de5 Feb 9 19:20:34.253703 env[1657]: time="2024-02-09T19:20:34.253665246Z" level=warning msg="cleaning up after shim disconnected" id=728453a0ca2c392ed49207008653eb9d9b559be9444266f8184a6e2a02549de5 namespace=k8s.io Feb 9 19:20:34.253830 env[1657]: time="2024-02-09T19:20:34.253802313Z" level=info msg="cleaning up dead shim" Feb 9 19:20:34.269790 env[1657]: time="2024-02-09T19:20:34.269733032Z" level=warning msg="cleanup warnings time=\"2024-02-09T19:20:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5721 runtime=io.containerd.runc.v2\n" Feb 9 19:20:34.601084 kubelet[2857]: I0209 19:20:34.601022 2857 scope.go:115] "RemoveContainer" containerID="728453a0ca2c392ed49207008653eb9d9b559be9444266f8184a6e2a02549de5" Feb 9 19:20:34.605003 env[1657]: time="2024-02-09T19:20:34.604949413Z" level=info msg="CreateContainer within sandbox \"2219212f6a758124cb2cf11ba595df2e5048ce98612d43afcf9e134a42263fea\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Feb 9 19:20:34.629022 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1582077005.mount: Deactivated successfully. Feb 9 19:20:34.639700 env[1657]: time="2024-02-09T19:20:34.639633365Z" level=info msg="CreateContainer within sandbox \"2219212f6a758124cb2cf11ba595df2e5048ce98612d43afcf9e134a42263fea\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"6ac822911fb435197d24d0a988dba529ca9e361fc6607d13820904f10676abb9\"" Feb 9 19:20:34.641200 env[1657]: time="2024-02-09T19:20:34.641124909Z" level=info msg="StartContainer for \"6ac822911fb435197d24d0a988dba529ca9e361fc6607d13820904f10676abb9\"" Feb 9 19:20:34.681508 systemd[1]: Started cri-containerd-6ac822911fb435197d24d0a988dba529ca9e361fc6607d13820904f10676abb9.scope. Feb 9 19:20:34.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.725972 kernel: audit: type=1400 audit(1707506434.709:1668): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.726071 kernel: audit: type=1400 audit(1707506434.709:1669): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.733392 kernel: audit: type=1400 audit(1707506434.709:1670): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.733898 kernel: audit: type=1400 audit(1707506434.709:1671): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.748842 kernel: audit: type=1400 audit(1707506434.709:1672): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.764640 kernel: audit: type=1400 audit(1707506434.709:1673): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.764795 kernel: audit: type=1400 audit(1707506434.709:1674): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.772801 kernel: audit: type=1400 audit(1707506434.709:1675): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.709000 audit: BPF prog-id=204 op=LOAD Feb 9 19:20:34.712000 audit[5741]: AVC avc: denied { bpf } for pid=5741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.712000 audit[5741]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2382 pid=5741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:34.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661633832323931316662343335313937643234643061393838646261 Feb 9 19:20:34.712000 audit[5741]: AVC avc: denied { perfmon } for pid=5741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.712000 audit[5741]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2382 pid=5741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:34.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661633832323931316662343335313937643234643061393838646261 Feb 9 19:20:34.712000 audit[5741]: AVC avc: denied { bpf } for pid=5741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.712000 audit[5741]: AVC avc: denied { bpf } for pid=5741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.712000 audit[5741]: AVC avc: denied { bpf } for pid=5741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.712000 audit[5741]: AVC avc: denied { perfmon } for pid=5741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.712000 audit[5741]: AVC avc: denied { perfmon } for pid=5741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.712000 audit[5741]: AVC avc: denied { perfmon } for pid=5741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.712000 audit[5741]: AVC avc: denied { perfmon } for pid=5741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.712000 audit[5741]: AVC avc: denied { perfmon } for pid=5741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.712000 audit[5741]: AVC avc: denied { bpf } for pid=5741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.712000 audit[5741]: AVC avc: denied { bpf } for pid=5741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.712000 audit: BPF prog-id=205 op=LOAD Feb 9 19:20:34.712000 audit[5741]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2382 pid=5741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:34.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661633832323931316662343335313937643234643061393838646261 Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { bpf } for pid=5741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { bpf } for pid=5741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { perfmon } for pid=5741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { perfmon } for pid=5741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { perfmon } for pid=5741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { perfmon } for pid=5741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { perfmon } for pid=5741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { bpf } for pid=5741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { bpf } for pid=5741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit: BPF prog-id=206 op=LOAD Feb 9 19:20:34.717000 audit[5741]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2382 pid=5741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:34.717000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661633832323931316662343335313937643234643061393838646261 Feb 9 19:20:34.717000 audit: BPF prog-id=206 op=UNLOAD Feb 9 19:20:34.717000 audit: BPF prog-id=205 op=UNLOAD Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { bpf } for pid=5741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { bpf } for pid=5741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { bpf } for pid=5741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { perfmon } for pid=5741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { perfmon } for pid=5741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { perfmon } for pid=5741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { perfmon } for pid=5741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { perfmon } for pid=5741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { bpf } for pid=5741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit[5741]: AVC avc: denied { bpf } for pid=5741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 19:20:34.717000 audit: BPF prog-id=207 op=LOAD Feb 9 19:20:34.717000 audit[5741]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2382 pid=5741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 19:20:34.717000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661633832323931316662343335313937643234643061393838646261 Feb 9 19:20:34.799126 env[1657]: time="2024-02-09T19:20:34.799063923Z" level=info msg="StartContainer for \"6ac822911fb435197d24d0a988dba529ca9e361fc6607d13820904f10676abb9\" returns successfully" Feb 9 19:20:36.844015 systemd[1]: run-containerd-runc-k8s.io-970c8c0a97167464a90c8dbdcbe46219ef3bd2a006d8b4d0c1201467ba2fcddf-runc.3lsp58.mount: Deactivated successfully. Feb 9 19:20:40.554056 systemd[1]: run-containerd-runc-k8s.io-f4a6865938d7bbdedebce9f60e653b231960a0fc44919631c9a237c449d8041d-runc.Jq9J5R.mount: Deactivated successfully. Feb 9 19:20:41.883107 kubelet[2857]: E0209 19:20:41.883045 2857 controller.go:193] "Failed to update lease" err="Put \"https://172.31.25.191:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-191?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Feb 9 19:20:45.384000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:20:45.387583 kernel: kauditd_printk_skb: 49 callbacks suppressed Feb 9 19:20:45.387686 kernel: audit: type=1400 audit(1707506445.384:1686): avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:20:45.384000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4014736ba0 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:20:45.408803 kernel: audit: type=1300 audit(1707506445.384:1686): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4014736ba0 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:20:45.384000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:20:45.418902 kernel: audit: type=1327 audit(1707506445.384:1686): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:20:45.418987 kernel: audit: type=1400 audit(1707506445.387:1687): avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:20:45.387000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:20:45.387000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=401440fd00 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:20:45.439986 kernel: audit: type=1300 audit(1707506445.387:1687): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=401440fd00 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:20:45.387000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:20:45.450108 kernel: audit: type=1327 audit(1707506445.387:1687): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:20:45.450214 kernel: audit: type=1400 audit(1707506445.387:1688): avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520992 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:20:45.387000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520992 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:20:45.387000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4014736c30 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:20:45.471073 kernel: audit: type=1300 audit(1707506445.387:1688): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4014736c30 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:20:45.471191 kernel: audit: type=1327 audit(1707506445.387:1688): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:20:45.387000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:20:45.388000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520998 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:20:45.490869 kernel: audit: type=1400 audit(1707506445.388:1689): avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520998 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:20:45.388000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4014d4c5a0 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:20:45.388000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:20:45.390000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:20:45.390000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4014736d50 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:20:45.390000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:20:45.390000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 19:20:45.390000 audit[2555]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40146e45e0 a2=fc6 a3=0 items=0 ppid=2390 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c948 key=(null) Feb 9 19:20:45.390000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313931002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Feb 9 19:20:45.986000 audit[5343]: AVC avc: denied { watch } for pid=5343 comm="apiserver" path="/calico-apiserver-certs/..2024_02_09_19_19_40.2909506058/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c75,c135 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c75,c135 tclass=file permissive=0 Feb 9 19:20:45.986000 audit[5343]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40021d56a0 a2=fc6 a3=0 items=0 ppid=5285 pid=5343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c75,c135 key=(null) Feb 9 19:20:45.986000 audit: PROCTITLE proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C